last executing test programs: 3m48.057988811s ago: executing program 1 (id=832): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd5000fadbdf2555000000080001004f001e0208000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x48) splice(r2, 0x0, r4, 0x0, 0x3000, 0x100000000000000d) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400350067656e6576653000000000800000000018003480140035006d03"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x5, 0x8000, 0x1, 0x4dc, 0x81, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x5, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x7, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x403, 0x4, 0x1, 0x50200523, 0xfffffffb, 0x1, 0x4, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x0, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x8, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf1, 0x2, 0x9, 0x8, 0x40fff, 0x1ff, 0x8000, 0x18e8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x65, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xa, 0x196, 0x91, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0xa, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x3, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x7fffffff, 0x7ff, 0x2ace, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x0, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x403, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0x1ba5, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0xe6e, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000002, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x5, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0x4, 0xd, 0x805, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0xc, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x5, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) gettid() socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8800) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3m46.807093896s ago: executing program 1 (id=843): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0xc, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0xc, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) (async) 3m46.675614882s ago: executing program 1 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac1414001000331bc413b294d800000000000fff080005000a010102060015000600000008000b000c"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @remote}, 0x14) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x1, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) 3m46.142726719s ago: executing program 1 (id=851): socket$inet6(0xa, 0x80802, 0x0) pipe(&(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x80}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048041}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r2], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3m45.612217242s ago: executing program 1 (id=856): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000001050500000000000000000a000005440002802c00018088e50700ffeff00000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000006df0a158829392c"], 0x58}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRESHEX=r5], &(0x7f00000000c0)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x20008075) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40840) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6, r7}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00000009c0)={@rand_addr, @local, 0x0}, &(0x7f0000000a00)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r6, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @exit, @ldst={0x0, 0x1, 0x6, 0xa, 0x0, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x100}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x5, 0x32, &(0x7f0000000980)=""/50, 0x41000, 0x0, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x3, 0x3, 0x126}, 0x10, r10, 0x0, 0x4, &(0x7f0000000e00)=[r7, r4, r7, r7, r4, r4, r7, r7, r4], &(0x7f0000000e40)=[{0x0, 0x4, 0x2, 0x8}, {0x2, 0x5, 0xd, 0xa}, {0x5, 0x2, 0x6, 0x4}, {0x0, 0x1, 0x5, 0x9}], 0x10, 0xfffffff9}, 0x94) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x1c, 0x2, {0x2, 0x4e24, @rand_addr=0x64010100}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r11, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r11, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r11, 0x400454cb, 0x8004) 3m45.176986065s ago: executing program 1 (id=862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xf0, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18401080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x8014) r2 = socket(0x4, 0x3, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x800) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000004b40)={&(0x7f0000000100)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="ba", 0x1}], 0x1}, 0x2d1c6cdf0da4d3a8) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xf0, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18401080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x8014) (async) socket(0x4, 0x3, 0x4) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x800) (async) socket$inet(0x2, 0x4000000000000001, 0x100) (async) socket(0x1d, 0x2, 0x6) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000004b40)={&(0x7f0000000100)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="ba", 0x1}], 0x1}, 0x2d1c6cdf0da4d3a8) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) (async) 3m30.069492582s ago: executing program 32 (id=862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xf0, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18401080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x8014) r2 = socket(0x4, 0x3, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x800) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000004b40)={&(0x7f0000000100)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="ba", 0x1}], 0x1}, 0x2d1c6cdf0da4d3a8) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xf0, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18401080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x8014) (async) socket(0x4, 0x3, 0x4) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x800) (async) socket$inet(0x2, 0x4000000000000001, 0x100) (async) socket(0x1d, 0x2, 0x6) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000004b40)={&(0x7f0000000100)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="ba", 0x1}], 0x1}, 0x2d1c6cdf0da4d3a8) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) (async) 2m31.20310139s ago: executing program 3 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2a}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r8, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) bind$alg(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) close(r9) socket$netlink(0x10, 0x3, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') socket(0x9, 0x5, 0x9) socket$netlink(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 2m30.141844965s ago: executing program 3 (id=1441): r0 = socket(0x15, 0x80005, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xf, @loopback, 0xffffff7f}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m29.881407065s ago: executing program 3 (id=1445): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}], 0x1}}], 0x1, 0x2, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {0x448eade7}, {0x0, 0x0, 0x80000000, 0x0, 0x40000}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x10}, {0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x6, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x18}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {0x0, 0x0, 0xfffffffd, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x1, 0x2, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) unshare(0x6020400) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={0x0, r11}, 0x18) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9463, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 2m26.818895441s ago: executing program 3 (id=1448): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) 2m26.666207225s ago: executing program 3 (id=1450): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x28, 0x2, 0x3, 0x5ae9}, {0x20, 0x1, 0x4, 0x10001}, {0x6, 0x0, 0x7, 0xfffffffe}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r2 = socket$kcm(0x21, 0x2, 0x2) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) socket$inet(0x2, 0x3, 0x2) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="030e44720d2dff40", 0x8, 0x0, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10) clock_gettime(0x3, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={r4, r5/1000+60000}, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8cfd, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x1, 0x0, 0x2}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414bb00000000001571a3f946c085e70100000000000a010102000000000000200000000000fc0200000000000000000000000000003c040000fdffffff08000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r9], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x101}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r13, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) (async) connect$inet(r13, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r13, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) sendmmsg(r13, &(0x7f0000007fc0), 0x800001d, 0x1c) socket(0x10, 0x803, 0x0) recvmsg$kcm(r2, 0x0, 0x202) (async) recvmsg$kcm(r2, 0x0, 0x202) 2m26.254518701s ago: executing program 3 (id=1455): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) 2m11.235000996s ago: executing program 33 (id=1455): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) 1m54.130728533s ago: executing program 6 (id=1747): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f00000003c0)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9, 0xcd8e}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto$inet6(r2, &(0x7f0000000300)="00ff50ed1960d2bc", 0x8, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000edea00000000000000000000bbfe8000000000000000f2ffffffffffa94e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="50c2100190780000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa, 0x1000}, 0x10, 0x0, r0}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r3, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @private1, 0x80000}, 0x74) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x80007f}], 0x5d, 0x3, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m52.375429278s ago: executing program 6 (id=1766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x103) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x177f}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xa055}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f0000000500)="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", 0x114}, {&(0x7f00000002c0)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd673fe1f69c96a174bf988200009c7c4e4727f8d8979ce9bb883f9236faf51834514ced4dab7386dd62890bfc521236439a9e127fdb471c239215fcfc4dd80b3e5366c513b6fb841bd4606bd04c53282bf072fa11ae3245bcd62070e2854ebd6f31a74ed301936385ea8c4ab231aed2774d7faec824c6b7ba9ea95eaa72068c3863d32c1a4ae6568dffb4a347084e4b66b5a9124896c62a121a40f8d88f06045c1d561e7abd1a80bdbd0565e3703dc764", 0xd2}, {&(0x7f0000002c40)="9478c03da986c8917ac188d57dfe2d81772faa04b076834e076131c31c48decbb84f4ae61fbdad0adfeebf690cd98e00dc4e09c31e1acd29123eda33867ac2db2b06749b5348c785985c17947b08349d385f1b31c0edce31faf4adc2f1d39ab252210c6b35f7ea67d525044c20326e328fdd28f3d3a04dd3a7e4ad6ec9db6b78cb28dcecadc27f7765ebfcf3214fdef0dd672e4942d2d51365fd1bd724428c2453a82dc24b9b5ea2650267dc772aeed140331e388393821011521cf33cec66130398a2143ee088f0099a460d383c2dfd842e7e5b05fe2fb08f2746aa4183e7d94c7998fa198c30b1d5a156e191be8d194e645c6e1add171913b7e1e9af5d65d618c0da6878cce85538b78cc30b53befbc9c3b746f3b6f1990a512de078a8729cd2916cbede4b48cbdc31d6c4eb0fc384533a4b27b54d1a242bb4b3b0e9ab668915e46a4aedf19c363e6365c935d8a3b3f1d8c4ee8686ad954b62e9a083f9b0cb391d44f6e638b2c3688897fef4a2cceabe2c24540c0816ce7ad05cf3d22822f275c8c5960ccad8a044d6297c810869da85fdfff0a77154e9a69ddd5ef53f2970ba1e21e423484832075e75e16422833aa303cce85323675a5b01b1036c406f8177153bdc69b1046356b7749ed7e6952956da0e452c3a7a3fb75badf5aaa77b22f34f0a2bb7fe41a800a207fd160086aa90805bee1dfac9321487bcd82e454b43ba95dd3926acf2dc60c8ac547646cabeb71fc0035578750483a075f483a3d6948e6640058e1baeca30a63ae869b83a8696c7a9a0105a3996d6d884e8fb2ea96297d3159244d9e02f2128028cbb27fe5b541632ed729798515361e2cc9e059d382cb1156e754f182757d437679fb17a27fbe422f46c6986b925994bb346d26e843909134412ba12f5bd393a69cc6028ff417e8ce3b1d9f4eade1f09aff744e495e1fa9852396ff6ec45bd3159672add62cfd54f0c0309675236df90b8b5ffd5d65caf6f02e03e8b3d7f604dd136db73fe5e9f090e7cb784ab4803253d79425e615233c7bc07abb2df2bb44ecf458997588a21984dfe8c11a6a61c792c3fa325da53be42a7897c9c2e357c6334031d168c77d9cd61cda8bc032f7cbce841dc59cd575a33fee4dd687e9ecaadad30b1a15ac20dc14603becb3ef177507c6c519187002ec2c32d400b0e372db915a68848399ef7c7f3422f705bf2f4e70211b1ea21fe161b2f7faab95becd008e025ed1f5d0167fce3f8092567e9227984b5b00f124d4cb967a30040b53562ebfb5e37c20a56c2be8430c9922cde3daa70e9231433e93ee4abc879d44d10324d44e83f889bf8d66da6e81fd9e605424f2f5eb55317f6177f14cb3644b5cdcfdacddd845b81e9930281037b0af70d050edc5320fa58cde8c6233615d95457c9827180a746e21de45e51246f2d5c94587c0913440f6efa5276d537d28255ce43746dfede4ec2dec8de20a796cbf0d6f82fe780d074729e8da1adb53713d10c13bba41b93cfd706b0a8669f5f395e1d20da4bbf5854abd494a9cd3979444567cce0f874677df3fb22085b1ddfbdf7732095f406e85af1cc028ca52c68dc633853bc935688f7b4e0b535dc32d4222e5f70707dd5a891f5f18fcd3ce88725d43119c9b46d1e684999e4146208b35a794b0c3b6fe359666c6ced95d41775a2725c0065acfda54b138e3e5416983b116d9e64943010874526d3248883155e6ff10e5c178796fd67cd3ff2fca109389fcb6ff26926812457c906229d16c516351cedca3e48451f8122580e665306e7efcd3f36e88b2178eb2b77fedef7a35dde2449da16ad637a6fecd1ca27c6e13adceaa805220525b3dd24993b774d2288d4562e56597db9b6abe771fc2dabc132ee977d5516e1e295d52e3858e47022a70beb3d48d5291b04e1ec045eb6411a370555ec0de85924b40ba2cd4fe14a03a65b5a25a89cf9280905707d43dc5a06f911996668cf787b98655182381069db16b28badfe3b1e2b055a324fb39d8f83ec46f01223911a30da6ffad19912d62536f465878339f5848ae1ae6433e1d80487d095664302775ee7c64929aa6dd4c15297fe3da745b91d30e4468dcf07818d3ac5581488e1cd38a510b41af85a9fa249edd52e5beec75d442ead8bc5a7cedf5743145a973b286c5a526b613dba2fccdb3500ff8c7ad1cbaa13e302e5a5c7177c44e467980a7463b692650450def3fd26efa9ba82d2008a8034c6b79cbc7bc82c7fe15c3c32ad9db30f79d0381f63c09b866661ffc797882978f31296a908df5004a044b952e86d2a73dc3e7b34ed139d8dd499607ae6377377ea6bab7088e0ce973253558f1dca9d7ba3fe1ff591911acb1eac220ceb0c4b6f6b022a9eafc81474cfac874afb7680b12ec7f881d608c731adbdf31c0681adcd6b1dd9f430b6e32e67861d773fdddf7badb1f1d80e40e1eb09e822d75900569ca7ff5f869fa8e480f66fae241a62ae25d6d65b0bf009b20ff672dd3c4feba1efa9992f5b6353fcc338e16acbd221c3b09b9b219abf4382ca9f14c04438ceb76de1a9b653526ade48d46494bc8a5911d0e6088a68ba25866e52407f20a172ca84d25800f2e72c9cf25e9c24a85324e14a3ae955b28191fe496cab9b8478cc1ed66888368b264bb068c57c498be90f7454f0f1f18d4d65bd754d7a5b67b562dc1744a666421627ef8735d9bb66a09915971025e2f99210b524c588acf448d47585eca02ccab7c380b24973c303ee80e179a7c3e69ac157d400b11881b06500586cb68c7d3a9b0e0e1d1dbba54c41ba8d509bbbfe23f7d6123e530f2216a048e34ff9f08d4bdf08517a5171b89b53f165a71edf0fc961b65a702ef5aacc4f1fbce1758973eb8edc4fa3221904f76d295b9cc042ac05819a47624bbb1a604f5c027215cf7cf99e47141830e31738a2209501978b168a14a401dc867baa4ddaba3e575eb5100bf5f5eadf83db214c5846837f9ecab29f94311a7121ba8aec0697538fd5ff912392d9d412a304e6c3f1d31f8937a54265580180b06852f61b5793235756d597b8a5caaaa1dde685cfcb6cf5421b95845a3f3c179942b8acbbf121cddb4fade15ec1bf90968002bb5970fbe3ef5525c0908b524ac613483a5b8c17f8d58c3d6dee79125b74456b6a691e907434ab31c16b4e389be2b67e368b84b53177bb472b8704c66e4491a99f40e13dc4874e18e61fddf9d36f27747da4a79e61d0aa497dbf91762b2a1cb53fa542cfd1eba86e0b4af4560efd6015350a791bf7c7b99937dcbb65c8aee868335a3d2fd8b02306a88a3980321d0053ba7138f8bd3c01f711b633f925f84b359fc4b089e0142dbac10015a704e15160177138f9362c18cd2615f290f453538b855d0dca48ee2af699506714a4742764481f92a9410033edf895d0364a5515fc0f807468640a60e13d51de2b38fde25c06264295f0c79a1b876c87dc2f76356661ffe0d26b08c5a55f63f0c009fc421b8734268fd24b778cb0e6dc3bbb10425cd4236a006ce8c67dcbba543787a9efa0d320ccfba7b9db1273d7923ec0d0bc72e5d7259a4c429c9e40be98b9eb34cd3e7ce81456c3b1277ae39ee35dab1ce3eb786c248917089490e33f176576dd429e66a4a69b3c877725a9a65802742cb9056277c5076b9282b8bd2fb2cea31cbe0b7fd3a2217ed1a1b05287928bfb848fb9ef0d639da0db1c10c0736d8d6953edf502efe46d6a559ea1a650dd654a26fb5558859a9395f66fc4d3a7af3af3400f6debd5b9103c5ebda7f038977b2cd4583f9ceb4027aad88c4a780d3ad112d1d0bf4aea3ab2bfc2bf70ed3347c80bbcd804a95f6dc5158e914dbb1b9da14e5030c05367973362400856c8f23dc5d3ac0028df7807461909f1baf208e85cec236238772bb78e58c3be5e357184fed9658f74709e8cc13dc24e606db313aad70388682ed6f8f2769cef7efd027e28506b368898ede3f84619d6e80b6ef12d24be651d4605841d5ea346027f5d5172dabc48ad0785341acfe8b83891f7dff4e52babef91e72cf67e27daae3fc2f5211235c55d4b601166a8cdea87cf308166fb22f80d5d97acc46e4b259ad052ea98b785092c9b44bfb55812c4a9eb9aa7ec62ab3c3160d2a0925a4f90a6a08f0c77e9dba942c7290492c05f6565322ab8c9992d2812b0d4e4fd64abcf9d00ab065fca5d067084fb731ac6ec7d817002da4baa5c1cf075e158a3f22d5cb862aeac92f4a1dcb51d6032e0228d37a1a73007e139fa114948722148474df7ea50c23f32b1022072b9ec941b98b9a4fbaf149cbdfbbbc1969ab2347d89d8ded6ccf48f43200c6aea670ea963fb3b414fe1edc287259287bdbdbf7db544bea587cfe7aaac3d661b3941b105f006252112bcd395d91bc95c1ccdd480dcd3aafb2c102335a0c5a19d90c6b68178391bc51a6cd87ce055df7342455fb7d518d048cd26b38d2d83de0d70798221c3cc03db09d9e7b86175fa2370d141e0fc3cd0386d4f449c1b181bb09ea825d90b25dd074ed6535db094a7e728166a4b82636110b7edc5b5b44e29e61820137184d980bcfc446e3970b3b753085f6868dd70648e23d24e672572a5b275751074ee9a61f22f5f12e89fd2030fc88ad7706e3ee03428da3fac34b69239ad34889acc21d3976ff78a94510382c26a5cf49e53de5829912ef7dca879d4c06bf50878490b1b2599f26a96de9350cdbd51ff420ba403920a411eb2953426bbe735c40597bf35799790b74497d0a09f9365f83f5eb3c484578341d26f3eab3dccba5a96bd0400000000000000a34d09cb66bea9f715289ac21ceb00cc4c8c680c302957feeeeeb8533c17e0b1ebe8fc5475fda0806712055a662a5a921dbea72bf5065bafe5f509c9642f388246c30b4285d41c5833ff8b4710cb746fe55905328927d1f3504ee9e0e76e2bb1d6463644afccd7e0cffe1b8de2fb06f1f5bde4ee4d1f1dc1f0350e79bd7a3acad0afd6124815a3cf3d2a0892bf6c8ad17b7b46d6f18e6930cea346665293094661dea4ea811986fe77f071971bfeea5eaf0af24666cf0e65405bda9a930943870596c4354c4dac6a7768d388479efc8b7f7005ea1d83df6498dca5393b4800ec90456f03d9570d4de4b71fc95acfeaf699f112597ff913d71757c0346b20fece2b0041d87fefd71f967df7d75e6267ee190d3771da1022a53257787bb0de72265fd44a25cbaedf9bbc9375883be7c41e1807223d057beea6a58925c12efc03765b79da750076622e5ae02219ed9acffd23e454d1f9074d5574f819f81f8cacca4f599c4b9241fce9c4981b0f93759cae8fe4b7b0c6d090a4e3ab07f4759a5c7ceb192db5302d1b5a9229a35ebe5a9653e5814d7e382221c8ac4579dee61c1c1e7962a45c413d11cd92de5b332c0847576f48f6c5fdf39d5f7f34808205546e9e16021252aecead7fcace7face8fb2eb52cb70c3946c03c46cb6998339a303ecf8e8e3890c28ef21e45cd047f78e77db67ecaf2a48c73232e207b271753ee20ee785b5b6e4d1e4cf23041e9ef2b48c877a2eb6b36e0f738e33abb17e941f44efb3ee6cb89711c1bc6a8c562b99a6374a64c1a3c7fead1459fd1352b063f7f7e94bfb89b873644daa26b29e0a802016b4121984695d096348150654a023dbba6734b2db0bb90a2fe627e0ebb36e32059f956b865cd75ea40ebd87dec5827742788978b382dae6650f8b7e8066e1fcf2c793a934523bb8cdd00509bf2088df7dddd17f0c3d352547a54c8378c89aa5a8b02787e952e841230610900be43a27e0c45645bfaf16071cc909db5d8483d2723c5ff6403ca544ee98f7a71d3", 0x1020}, {&(0x7f0000000880)="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", 0x1be}, {&(0x7f00000001c0)="97e4ebd0fc67d0053f3eabbd48698e01a4b9b836f0418305253810610fc7b36d1b01b4964e523bc1fc60bca484528f2fc66ef6ff3c858e7f18b1c4", 0x3b}, {&(0x7f0000000140)="d3ef0fe03608277aa58e906178ed1e", 0xf}], 0x6, 0xa) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) recvmsg$unix(r1, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x103) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x177f}], 0x1, 0x20, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xa055}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) pipe(&(0x7f0000000080)) (async) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f0000000500)="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", 0x114}, {&(0x7f00000002c0)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd673fe1f69c96a174bf988200009c7c4e4727f8d8979ce9bb883f9236faf51834514ced4dab7386dd62890bfc521236439a9e127fdb471c239215fcfc4dd80b3e5366c513b6fb841bd4606bd04c53282bf072fa11ae3245bcd62070e2854ebd6f31a74ed301936385ea8c4ab231aed2774d7faec824c6b7ba9ea95eaa72068c3863d32c1a4ae6568dffb4a347084e4b66b5a9124896c62a121a40f8d88f06045c1d561e7abd1a80bdbd0565e3703dc764", 0xd2}, {&(0x7f0000002c40)="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", 0x1020}, {&(0x7f0000000880)="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", 0x1be}, {&(0x7f00000001c0)="97e4ebd0fc67d0053f3eabbd48698e01a4b9b836f0418305253810610fc7b36d1b01b4964e523bc1fc60bca484528f2fc66ef6ff3c858e7f18b1c4", 0x3b}, {&(0x7f0000000140)="d3ef0fe03608277aa58e906178ed1e", 0xf}], 0x6, 0xa) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) (async) 1m51.914926202s ago: executing program 6 (id=1773): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0x4, @empty, 0x7}}, 0xffffc39b, 0x0, 0x7, 0x80000000, 0x80, 0xe35, 0x80}, &(0x7f00000002c0)=0x9c) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0x4932, 0x9, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000300), 0x0}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) close(r3) 1m51.642513696s ago: executing program 6 (id=1776): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@iv={0x18}], 0x18, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='reno', 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dba", 0xaa}], 0x1}], 0x1, 0x40800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc000000000000000000000000000000000000000000000007001900"], 0xd8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x5) r4 = socket(0x10, 0x803, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x84, "5c3ea1ce5e56f545ce0fbee42200486aff887fa9353e08cdb6d6e6436021b7f9ee507392ab02ec9e4c9cf6fb6b5bb16e32cf88c259823a01d3d327f668e64908cb5b043f5515cd45ba0e762539fc5bac9a3b5da973c8999b779938423fd3031be0f4b4861c4339f2bfd25b831fe41d7fa3a77bfe9a6fbb91b48ec8cc4b192f52268c2723"}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r9, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0xfffffff8, 0x4) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m51.406991423s ago: executing program 6 (id=1781): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1m51.125723247s ago: executing program 6 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffef, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000270001002bbd7000fcdbdf250700000012a1ce23ce8de3b8141dc1804c9b38c8f233590c5a9506001ddd4d6e1d77025ec0a0682fba99b84eebdc7418553d48137d505b13e3ad9ed55b3983a56f1b9a72e1d08cb89a6b76493133b503631c40f35e625577d7a6de28fb1f349672343f7dcd1a4bb365c97924f791a2959842492d364ba74b9ebfa2f20064af5a5b1ef24fdfbec19ea41a4b2c1b1b5421acbd0008fa7eef881f19dc25fed381e60297a991fb93e7313f94057af548737f53f18a6f6d179673a547bd710efda68b583630c2e42da4932f584972c34a638a4ec519"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x8000}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000005c0)={{r5, &(0x7f0000000180)=',%\x00', 0x80, &(0x7f00000001c0)={@align=0x9, {0x2, 0x5, 0x4, 0x10}}, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x7}, {[0x1, 0x1, 0x5, 0xa]}, 0x6, 0x37, &(0x7f0000000580)=""/55}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000640)) listen(r5, 0x5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000300)={r8, @in={{0x2, 0x4e23, @private=0xa010101}}, [0x8000000000000000, 0xff, 0xfffffffffffff000, 0x8, 0x5, 0x6, 0xfffffffffffffffe, 0x1, 0x0, 0x7, 0x5, 0xe, 0x7fffffff, 0x200, 0x1]}, &(0x7f0000000400)=0x100) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005"], 0x4a) 1m36.112894111s ago: executing program 34 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffef, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000270001002bbd7000fcdbdf250700000012a1ce23ce8de3b8141dc1804c9b38c8f233590c5a9506001ddd4d6e1d77025ec0a0682fba99b84eebdc7418553d48137d505b13e3ad9ed55b3983a56f1b9a72e1d08cb89a6b76493133b503631c40f35e625577d7a6de28fb1f349672343f7dcd1a4bb365c97924f791a2959842492d364ba74b9ebfa2f20064af5a5b1ef24fdfbec19ea41a4b2c1b1b5421acbd0008fa7eef881f19dc25fed381e60297a991fb93e7313f94057af548737f53f18a6f6d179673a547bd710efda68b583630c2e42da4932f584972c34a638a4ec519"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x8000}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000005c0)={{r5, &(0x7f0000000180)=',%\x00', 0x80, &(0x7f00000001c0)={@align=0x9, {0x2, 0x5, 0x4, 0x10}}, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x7}, {[0x1, 0x1, 0x5, 0xa]}, 0x6, 0x37, &(0x7f0000000580)=""/55}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000640)) listen(r5, 0x5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000300)={r8, @in={{0x2, 0x4e23, @private=0xa010101}}, [0x8000000000000000, 0xff, 0xfffffffffffff000, 0x8, 0x5, 0x6, 0xfffffffffffffffe, 0x1, 0x0, 0x7, 0x5, 0xe, 0x7fffffff, 0x200, 0x1]}, &(0x7f0000000400)=0x100) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005"], 0x4a) 14.402122179s ago: executing program 2 (id=2678): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x2a, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x40480c0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x5}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="a705020059020005000000002fb96dbcf706e10500070081000000", 0x1b}, {&(0x7f00000002c0)="88a8", 0x2}, {0x0}], 0x3}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce8") socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000001000000000000000000010000000000020000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 14.202041626s ago: executing program 2 (id=2681): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) accept(r0, &(0x7f0000000580)=@nfc_llcp, &(0x7f00000006c0)=0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x404c894) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20044903}, 0x9090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000000c0)={0x8, 0xb646, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000100)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f0000000300)=""/22, 0x16}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 13.214593644s ago: executing program 2 (id=2691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x70bd25, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10, 0xf}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x412fa6e879b1e1cf}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000000000000c00034000000000000000020900010073797a3000000000090002007379060000000000140000001100010000000000000000000000000a251de83745e496498634faa9"], 0x60}}, 0x0) 12.978890983s ago: executing program 2 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r13, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x0, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'vxcan1\x00', 0x1}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x88) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) 12.80179422s ago: executing program 2 (id=2697): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000040, 0x0, 0x0, 0x200000000070, 0x2000000000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000006800010000000000fddbdf25020052bfc069ef47fd09f6ca1a5a0000040000000600070004000000", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000180)={0x8, 'geneve1\x00', {'veth0_vlan\x00'}, 0xa}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 12.55412986s ago: executing program 2 (id=2701): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000006400000000000000afffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x40f00, 0xc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f00000005c0)=""/197, 0xc5, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f00000007c0)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f00000007c0)}, 0x20) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 3.293563516s ago: executing program 0 (id=2787): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x288, 0xa, 0x148, 0x288, 0x10, 0x380, 0x2a8, 0x2a8, 0x380, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x7, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20}, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xafc, 0xf8, 0x10001, '\x00', 'syz0\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@time={{0x38}, {0x4, 0xdf, 0x7b72, 0x30e7, 0x393, 0x4, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x478) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) pipe(&(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) pipe(&(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x288, 0xa, 0x148, 0x288, 0x10, 0x380, 0x2a8, 0x2a8, 0x380, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x7, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20}, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xafc, 0xf8, 0x10001, '\x00', 'syz0\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@time={{0x38}, {0x4, 0xdf, 0x7b72, 0x30e7, 0x393, 0x4, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x478) (async) 2.99972051s ago: executing program 0 (id=2790): r0 = socket(0x18, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x0, 0x805, 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 2.99888575s ago: executing program 4 (id=2792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000001c0)='\x00', 0x0, &(0x7f0000000240)={@align=0x4, {0x3, 0x1, 0x9, 0x9}}, 0x8, &(0x7f0000000300), &(0x7f0000000380)=0xf39}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1001}, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) socket$packet(0x11, 0xa, 0x300) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) listen(r5, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f"], 0x6a) 2.598390629s ago: executing program 0 (id=2794): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000006c0)="b9ff0304060000000000000086dddd49c619b60f5b4d55662f395199c6b45a2b5662a06dbe1f20302901bc8e59968dcfcb159d9c757b", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="c17b0881", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250f00000008000300", @ANYRES32=r3, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20080080}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xe30, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000141963b13e786133babc5bd4aa0c37577230795a01d1619819d9b2773eae42a665e3ff49c0b5b7375cda6424f6d09c76fe10ec196b846329170dbfdfd2161b7e2001e8721d1d095855e143bde2b967673b6e4b4bc98ffcf96a938dffd8e5619872ee735786799b88cd86b15c422c8a3e7694717479e0a23fd1b73512b64136fe0c899d56fbb6afcaa40ea903928d1637489de17776b0016b369ad88ed2d6b841e3b4c1b3ad62702e89305be07eb24f4fd78d65a6cad3a9dd35a6800fc35a57d85b80ec"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000040000000000000000010000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080400000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000009501000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x2) 2.595473672s ago: executing program 7 (id=2795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000240)={0x77359400}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'cpuacct'}]}, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.538665395s ago: executing program 4 (id=2796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="011a02003537a940140012800b00010065727370616e0000040002800a000100fd"], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800100005705000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc45128d0057b561f3ad803a65375aaf95ba14038986a85172c50503d3de", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf2519000000200001801400020069705f767469300000000000000000000800030007000000"], 0x34}, 0x1, 0x0, 0x0, 0x22004801}, 0x20000000) (async) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250400000005002f000000000005002f000100000008000600", @ANYRES32=r6, @ANYBLOB="05002f00010004000000000000003a170ce50000080034007f000000"], 0x48}}, 0x851) (async, rerun: 64) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r7, r1}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0xc0, 0xe8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@ttl={{0x28}, {0x1, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x9, 0x6}}]}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0xffffff00, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x7, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r10 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) (async) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x80}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="05000d0000010000000000ffffffffff0000000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r12}, 0x0, &(0x7f0000000100)='%pK \x00'}, 0x20) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)=ANY=[@ANYRESOCT=r14, @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4004081}, 0x400c080) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r14], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) 2.330486359s ago: executing program 4 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x26, [0x6, 0x5, 0x1, 0x10, 0x7, 0x8, 0x9, 0xa, 0x1, 0x8, 0xa, 0x7, 0xb, 0xe, 0xf, 0xa], 0x0, [0x6, 0x7, 0x6, 0xe, 0x3, 0x0, 0x0, 0x2, 0x7, 0x132, 0x7ffc, 0x9, 0x5, 0x7, 0x1, 0x9], [0x40d3, 0x6, 0x4, 0x56, 0x9, 0xec6e, 0x1bea, 0x9, 0x1, 0x2, 0x401, 0x7f, 0x3, 0xff, 0x1, 0x167]}}]}}]}, 0x8c}}, 0x24040084) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r2, 0x5c2a7000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r7, 0xac9d4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 2.317394844s ago: executing program 5 (id=2799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.0548361s ago: executing program 5 (id=2800): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x5, [{0x3f1, 0x6}, {0x10007, 0x30000080}, {0xffff, 0x2}, {0xe635, 0x80}, {0x1, 0x3}]}}) 1.815180562s ago: executing program 5 (id=2801): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c043}, 0x2000400c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) 1.658254796s ago: executing program 0 (id=2802): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16125782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14}, 0x94) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305839, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r2, 0x5cb, 0xff}, &(0x7f00000005c0)=0xc) 1.327398393s ago: executing program 5 (id=2803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xe}, @tail_call], &(0x7f0000000040)='syzkaller\x00', 0x10001, 0x41, &(0x7f0000000080)=""/65, 0x41100, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x6, 0xc, 0xab}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x0, 0x4, 0x5, 0xa}, {0x5, 0x3, 0x72, 0xc}, {0x5, 0x3, 0x2, 0x3}, {0x1, 0x2, 0xa, 0x8}, {0x3, 0x4, 0xd}, {0x0, 0x2, 0x9, 0x5}], 0x10, 0xc}, 0x94) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000300)={{}, 0x0, 0x8, 0x544a1c13}) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/net\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x3ff, 0x0, 0x7, 0x0, 0x0, [{{r0}, 0xfffffffffffffffe}, {{r0}, 0x59}, {{r0}, 0x9}, {{r0}}, {{r0}, 0x4}, {{r1}, 0x2}, {{r2}, 0x1}]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={r3, 0x8, 0x7ff, 0x3}) close(r4) r5 = socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000540)=0x7f, 0x4) r6 = accept(r3, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r4, 0x0, 0x37, 0x1000, &(0x7f0000000680)="6bbe46860f6567d4bf6d6541c2a71b575382745ccc24c5a1dcc272d2a042173755b3947c18a1c17d5798faf44fc6d5caf3d2c1e162cbfe", &(0x7f00000006c0)=""/4096, 0x6, 0x0, 0x1b, 0xd1, &(0x7f00000016c0)="b8eaac1e1e41ad7a42eeded9b94fe16a14145208ed5d70dab21464", &(0x7f0000001700)="79c8deff009a46270460c98125b8cb574853d7837986b3b3ab4671b6bb2b057ddc1bec86f63b10be8a7b8b51171bd606d97520af0dfd82519fe1842810e69957fb6f1b7bb15e0311bd88cd5de043372d9a48f3c3978c6ab1030c3b02eabb3488bcdd5e8162a9e11ef0b1da7b47799f8509b2c1837bd01db31b218e265fb5e5073bab96e3a673c0d0360fa0c20de92a542c8ffe942c819301063510279a4a6edf3e4d81f07fc9239b24df58fd1d35a3f712572bea89a205e17fe2e3fff1ae016f37268f170498ed6d632015d64dd75a264c", 0x5, 0x0, 0x3}, 0x50) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = accept4$alg(r6, 0x0, 0x0, 0x800) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r6) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x8c, r9, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000001a40)=""/108, &(0x7f0000001ac0)=0x6c) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b40), r5) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xa8, r10, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x540000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x20000050) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xe, 0x13, &(0x7f0000001cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @alu={0x4, 0x0, 0x2, 0x2, 0xb, 0x1, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @ringbuf_query, @map_fd={0x18, 0x2, 0x1, 0x0, r4}]}, &(0x7f0000001d80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1e, r4, 0x8, &(0x7f0000001dc0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001e00)={0x5, 0x0, 0x8, 0x8}, 0x10, 0x0, r0, 0x8, 0x0, &(0x7f0000001e40)=[{0x4, 0x2, 0x0, 0x2}, {0x5, 0x1, 0x3, 0xa}, {0x4, 0x5, 0x4, 0x6}, {0x0, 0x4, 0x0, 0xc}, {0x2, 0x1, 0xc, 0x2}, {0x1, 0x2, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0x5, 0x8}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r11, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001fc0)={0x0, "7caba96d81f4887622a236a7b1d84735"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000002fc0)={0x0, 0xe, 0x600000000000, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000033c0)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000037c0)={0x20, 0x1, {0x9, @struct={0x1, 0x2}, r12, 0x7, 0x1, 0x10, 0x5, 0x5, 0x80, @struct={0x9, 0x1}, 0x10, 0xafb, [0x8, 0xffffffffffffffff, 0x10001, 0x1, 0x4, 0x4]}, {0x3, @usage=0x74113c16, r13, 0x9, 0x4, 0xf6b0, 0x1, 0xf8, 0x400, @usage=0x4, 0x6, 0xb, [0x6, 0x0, 0x4c, 0x5, 0xd281]}, {0x9, @struct={0x0, 0x401}, r14, 0xffffffffffffffff, 0xfffffffffffff051, 0x2, 0x222800, 0x7f, 0x10, @struct={0x9, 0x7fffffff}, 0x9, 0x4, [0x59b8, 0xfffffffffffffff8, 0x5af1a1ff, 0x4, 0x2, 0x4]}, {0x33, 0x1, 0xa06c}}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003d80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003c00)={0x118, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0xac, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0x89, 0x3, "af06fb87f30ad903aca7e992b0271b0ea5ecdf1e28ba466d6fa8519c7869ede45b63ddc7f360546aaf93e00c0981a370b2d0dc600cef059324d5d5a0843335c6a117b5544b9294f9f1c7d7e855b65fe1f5787e9cad507dd7e93bb769c5347e8d01035b8dbb882458535fc59c62d332a15977d01846c5445382d0fc392976e6540d15d3974b"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb81}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x118}, 0x1, 0x0, 0x0, 0x20004010}, 0x64) r15 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$EXT4_IOC_GET_ES_CACHE(r15, 0xc020662a, &(0x7f0000003dc0)={0x2, 0x8, 0x5, 0x50000000, 0x6, 0x0, [{0x6, 0xf2a, 0x7ff, '\x00', 0x2402}, {0x100, 0x0, 0x4f45, '\x00', 0x261f}, {0x7, 0x100, 0x3, '\x00', 0x100}, {0xef5, 0x8, 0x1, '\x00', 0x4}, {0x443, 0xb220, 0x4, '\x00', 0x248d}, {0xca16, 0x6, 0x401, '\x00', 0x8}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000004240)={"f91b4cd901d1e307b277c97e5c12b456", 0x0, 0x0, {0x3, 0x203}, {0x9, 0x82}, 0xffffffffffffba28, [0xffff, 0x5, 0x6, 0x81, 0x3, 0x8, 0xe, 0x5, 0x9, 0x9, 0x2, 0x9, 0x6b0, 0x2, 0x3, 0xb]}) 1.22637881s ago: executing program 0 (id=2804): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) unshare(0x6a040200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@cgroup, r4, 0x2f, 0x2024, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 1.162342299s ago: executing program 7 (id=2805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000300)={'vlan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x11, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x6}, @ldst={0x1, 0x3, 0x4, 0x9, 0x2, 0x10, 0xffffffffffffffef}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @generic={0x10, 0x8, 0x4, 0x0, 0x8001}, @call={0x85, 0x0, 0x0, 0xc5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000008516d4f18e4e00000000000200000018d600"/37, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, 0x0, &(0x7f0000000240)=r2}, 0x20) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@rand_addr, 0x0}, &(0x7f00000002c0)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', r9, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r4, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000029c0)={{r10}, 0x0, 0x4, @unused=[0x1, 0x1, 0xf, 0xfff], @subvolid=0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r11 = socket$inet(0x2, 0x1, 0x6) connect(r11, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x11, 0x1, '@:(\',&(--:@!\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_mptcp(0x2, 0x1, 0x106) r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000500)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r13, 0x5000943a, &(0x7f0000000940)={{r3}, r14, 0x8, @unused=[0x7, 0x0, 0x8, 0xc15], @subvolid=0x9}) 955.206471ms ago: executing program 5 (id=2806): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x70, 0x29, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xd, 0x7}, {0xffe0, 0xa0b2119b13360d09}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}, @TCA_RATE={0x6, 0x5, {0xc7, 0xe4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @tclass_kind_options=@c_red={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c881}, 0x44080) 754.240353ms ago: executing program 4 (id=2807): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) accept4$inet6(r1, 0x0, 0x0, 0x80000) (async) shutdown(r1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x12c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x322a6ce7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ef209d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74946556}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22ab7e9a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x314fc630}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x432170d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb36b689}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db9590b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46b6f9f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x773e66d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ddf9f77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x291c5ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cd8e191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x127276ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca16e6d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xd, 0x0, &(0x7f0000000600)="c9f7b986000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], 0x0, 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r8}, 0x38) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xfc, 0x2, 0x0, 0x2, 0x75ac, 0x2}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x65dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffa}}]}, 0x38}}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000980)="0503022ed3c6c32b6d8c8dbc128b", 0xe, 0x41, &(0x7f0000000340)={0x11, 0x86dd, r7, 0x1, 0x82, 0x6, @broadcast}, 0x14) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448e4, &(0x7f00000009c0)={0x0, 0x0, "0db43f"}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @loopback}, 0x10) 753.129975ms ago: executing program 7 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf25010000000000000007410000004c0018000000086962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb20d5417c48d187b80e2f5df5ec63f6dff89fcddd732b9bf53100980524b53224ea2da9a9c593b457c48701f03308be02757ab83911e804ee16ab752d5074c635313e7543f072e440695325a84aec1f6cd9d0bc5757fd62a8ad0c6eed3cc87e5f83f2b724f8027b333a89dfbe2a87e069871c8e9a06e5a9f1a13f0ea0f326"], 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x20004040) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480100001000010028bd70000000000020000000000000000000ffffac1e0001ac14140a0000000000000000000000000000ecdf000000060a00000000000000a44f4b85269ca02e0295375ce665cacb5cbb72e09fa00ab901391099357f57cf77813a8fd36ee4bb2b2d17c7cecb059dfd40752618fe357ad1e8f113c3363d8324d5cc81854ae98e4a2c1895452c50cfcaf7331008d44ec5cfe31836385757f7dcd560a76e2b303e4c51f6a98dde8e57a604cddf758aef8b5fae2bbed933c9214cad91d43232ae636cbc38f1e7b154d3e9dceb1978b3399b318717a8b02f7bfdc1caa2ebf9f40e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000fe800000000000000000000000000036fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000002000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000000000000000000000a0004002c00000000000000580002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000007bfffb02000000400000007c8c90d7f9"], 0x148}}, 0x44050) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_getroute={0x24, 0x1a, 0x20, 0x0, 0x0, {0x1c, 0x20, 0x80}, [@RTA_DST={0x8, 0x1, {0x7f, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f00000008c0)={&(0x7f0000000780), 0x10, &(0x7f0000000880)={&(0x7f0000000dc0)=ANY=[@ANYRESHEX=r11, @ANYRES64=r10, @ANYRES64=r11/1000+10000, @ANYBLOB="e8a164dfaeaa4a917135541b40182fa0d605a528c5bbf118ce9cc0d3ca4ecfe0eae94b8a8ab3bcc961b28e91b4cf0ac44d56dd6addeb5205b9796bad05dc3a420e7ccc7c", @ANYRES32, @ANYBLOB="02000000010000000100004010030000988622f568f5b52d5bb4f9c554e5cdd66b8a7ea9be774c6ef929c8d18884ebced5476ffc4989a18e5d5745de76906a202bef8eaf692e7a624e41a97243be3d1efb9ca087183a2b2c80eee2575d57979d2eb1117cb72414933bc5a31261aff457cd04a9c43337c933fb3f0436c8ce5d2db03b1993914908a1c07367a6870f76af9fab77180ad8a75cda6048d3043fac29dade6a0ac9437a48d2ba4fc50285eba2fe82a0dbc3a08a565343e5d493345b837bc1503bf86e386ada6e2801bac1c2da666b6e72a165f2895a0489a1c178"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x2, 0x35, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_channels={0x3c, 0x6, 0x1, 0x6, 0xfffffff7, 0x11e, 0x3, 0x3, 0x27}}) (rerun: 64) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1200000005000000040000000200000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000002000000000000000000000000000000043ce107e5178a0bc91272e7381b1cf643271006cdc4772590e0f8b77dd4eb6f649a7a6f6843dcade44d55e3c4bd4deebc656554bd1da7a0f6adbddacbad79b82c249c63a561ff5e39b1cd9d044ef18dad29350af4c8dbd6d157833c9247f06af809bbab44e3393bebbc0238f33b8606fbc333cb6a5683f8d332be2c495a43b113224d0d5f472b5e7dc53e4c20354624cc1d1fa3a30d55f6933b3de510691fd3b94ad39fa3c7e47a2e79b20f850c235cd821b3570a7fe8a59c6ee612ac65ef5048e3f138080a2eebb0f2bfb042a7006d484e440000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000340)=@buf="deaab765b39d2b2a864d1ea9b1b7660b5073e596dc5c9e5a3efa3b180b0a95ec0c0f8abde004f7dc6c6780ba15e47922b81c90c0ce7d5f61e21741bab1a77d1a6950ebf1a3c1798455e221d45a4daeac6a96a6266de86693ffb84cc66fc90fd7016a1e0d758710c83bc8d5fe60f7d393fe89d6", 0x2}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000140)=r12}, 0x20) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9124073377779240eedb5c64be629f687e30fdec5848c84949983888888d94620f2ed19b85cf3d8049851dcef40e58160c7c7337a71648db20a65ce16e394ccd0e26728213155690f49b2f0791078b73425e80bf1ed9dd25a4e6fd4996fe45cb6bb1f8ffbd2725da3b91804402f5e5d56c250d403eb8a9be8a395bcda371c1564563048fe0c0e0c226fbb13763e6b5c1444374f3300ca2d85016bed8763507afe25af5c41784d809b1", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x806}, 0x0) 631.688724ms ago: executing program 4 (id=2809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x3, 0x0, 0x0, 0x0, 0x200000001303, 0x200000001330], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000001000000000000000000000000e07f00feffffff00000000000000000000000000000000000000000000f9ff0000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48c7}, 0x0) 555.326706ms ago: executing program 0 (id=2810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000440)="1c", 0x1, 0x24008095, &(0x7f0000000240)={0xa, 0x2, 0x41, @loopback, 0x9}, 0x1c) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000100000080003"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0x1}], 0x1}}], 0x1, 0x0) 490.359606ms ago: executing program 7 (id=2811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004940)=ANY=[@ANYRESOCT, @ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) (async) socket$inet6(0xa, 0x5, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmmsg$sock(r1, &(0x7f0000003600)=[{{&(0x7f0000001140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000011c0)="0760125fe1d29e6318d853f16c2344b235a4469ca7bcc5915714a2c179cf6de4da9c9026bf0ef52ae7b5d3e8bcd65e29c41c43ff24f436157679b9dd97bccc5181593e157f265b08b7a653ac0d64d76ab2497f9ed134243cfac4ccb9ed6a5a0ea738590ffbb6432e9b5bce1b83e49c3fb205c8d4dd764ec50c4dc63ed8716f0bb32af0c2f0711fe7344711e6da26b64389b96daad12517b90a9843e974f8dc35e8cf9a73f1c334cbd62ab98d5b960fd280b811d090ebad7ba08efd457cdfc8b51eef8c076109f18f736f4b4d287e396ebdff625b2c76110db193", 0xda}, {&(0x7f00000012c0)="1c9dfaf9a4a631fe81ff823d054101084d6123b2a0b9b8313fd6d736b77aaa522cd05d3db91fbee93be6c45396a363bef3affc8ae438e2894f88ea3893899ad6e93d9c36ec65b8b3c7bd2a4cc721fabb306426ba8aba89a84a1cf8d05fac738ceace86bc4ced29757582d030372aef5a6e46d9929896fc1c75c214740e12701f6a04b8d994a9dd1963a4b4b54a03e9e28bd423bca3dea14d90aab75ce879", 0x9e}, {&(0x7f0000001380)="1b9d730b33b334330faf1c0d3c49d2d5ea68a34d2e62eac584ae93a4f00bfb2082a89961cae26fa3331c957434569b92ac1f9a5852cf39065f275753cb3a756932de1e07b58d8ceeb8b3c1ed26079eed380a1369e0f0a34611646c0b12399790647ea6722625752d319a707f3c085a9fc77d9c02ee98d77b202da800b975f2d9587c03bfaa340080f565f2a94557f7e1db753ebe5d55", 0x96}, {&(0x7f0000001440)="7f82e1076d9a3afb2b718b4efb8287ce2bbffea06010eef53bc5bfa1f554b13f7d15d13f4172babc44ddeecd0dcb30c9985b877cfb04973d2d185c6a91ab22b51c01bfab704b49494e39a5f778cfbad8dbedc7ff7f93631d3a5d20305099dff4fbc8570c7cb95070aebf4dc99eaf43bb926d30d1352cbcbfdfbab70b57a76a488529d6ead3069f266cc2e262ad8845cd3b54e650fd70d28b35f118009b", 0x9d}, {&(0x7f0000001500)="2de0622d21c0f6a05458f3684e857d34fb83266e4e1e12a9e4e3e7dc9304db0cb700872cff780df9ec35042bd061c22d45ac7ef1ed5f4dd3ee37141df84a8ce63b32b468b0002ad5b04d3775df5c0c46f657c531140b01acd934fa64cbc4bf5ea10b10eecd2e2febd4a9b82bd4e67a72939580befdde3f7daee8efe06cf09f7754347d8356d3488ed4dd6fe496a6ff4ca2080050d531cf27d4f57be7381a53cc92e609b3a4236963fb46d332718780c757a5106f7762d569d1005326c3d9e318560a40c3e952c7ad1e772b3979d672e8cc3b00"/224, 0xe0}, {&(0x7f0000001600)="a35d1ffb427c2ca7e081cc2a3b79bc53c545424d78b90458df7e", 0x1a}, {&(0x7f00000024c0)="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", 0x1000}], 0x7, &(0x7f0000003540)=[@mark={{0x14, 0x1, 0x24, 0x204000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x123}}], 0xa8}}], 0x1, 0x4080) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x41) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004880)=@bpf_ext={0x1c, 0x1d, &(0x7f0000003640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@exit, @jmp={0x5, 0x0, 0x2, 0x8, 0x1, 0x10, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff7}, @call={0x85, 0x0, 0x0, 0xa1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003740)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000003780)=""/4096, 0x41100, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004780)={0x3, 0xe, 0xfffffffc, 0x4}, 0x10, 0x29905, r5, 0x6, &(0x7f00000047c0)=[0x1, r0, r5], &(0x7f0000004800)=[{0x1, 0x2, 0x8}, {0x2, 0x1, 0x1, 0x15}, {0x3, 0x4, 0xa, 0xc}, {0x3, 0x1, 0x6, 0x5}, {0x3, 0x2, 0x4, 0x6}, {0x5, 0x1, 0x4, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x78, 0x0, &(0x7f0000001640)="b9ff0b0775e259ff5af46961043d56b059268cb89e096c3713c67e2d2a5214f0886c11e0ffff200000000067000aac14576333f8d08584a491fa11a3eb1601000000e000000d49e832f8a71d8b7f7830e19934d8fc9879bd2753e3808ad92e49724fa04990131f318aba4b8edd4ec1f866f9621ff1dc8d21", 0x0, 0x28e, 0x60000000, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x6}, 0x50) (async) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$llc(r4, &(0x7f00000002c0)={0x1a, 0x30e, 0x3, 0x24, 0xf, 0x7, @local}, 0x10) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280082001407f00000106ba979ddc966c43a2a8f49424318e44c04db1d642c8a4d31a55286bca2d9df1067b2b8f9fb009ebd8d5d01a38d13cfb1e588ccf0ab8f2aca1ecf25a9d7bb7bf476b8b7371ce235d580d0078825dd5d06da35970e504869472a058fadc"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x40008c0) 383.290547ms ago: executing program 7 (id=2812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b7040000010000008500000015000000850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xffffffffffffff5a) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 374.081252ms ago: executing program 5 (id=2813): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) close(0x3) socket$inet6(0xa, 0xa, 0xffff62e8) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x2}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 240.328551ms ago: executing program 4 (id=2814): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff0200000000000021389f95f8be8184d6d30000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b000008036008fab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100ba1c00000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0", 0xc4}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x198}, 0x4000c010) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x43, 0x22, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c00)={&(0x7f0000000a80)={0x1174, 0x15, 0x8, 0x70bd27, 0x25dfdbfb, {0x18, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x79, 0x1, "f8de0bc600cd8112c9d35678dd320c51f0017c9521b0957b4fd9bccbd25715404e1fa263e42f64166464c4efbf7e699ab2e884be7cdcd299a9c5f92f934518a5dee67017e1d26a250c93434b270573eb581e4bdfd368e2c5d75b5871b8897f5592258c5109a123dc1e8b6798e6ec6ba3ec11e01142"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "fee23d23d39fd4e249b53ec12d41e76b208db1f971239182d5652feeeea0780cc33e77302cfe669ac0f62988660474a2daba33f3504caf64ecb601dd0de766feeb069923da582d8bc44dbd8599ccb6d3b1344327d21936492f66671f3128992a5c85e6ece194a2a9c5c6ba448f832ee85308e9e9428c8047046f379072c31690c03a2063b6c9eb2366498c0a632eff32b3113ac85552343de47a12e9ef08f0571b85b956d5604354b461bf1f6b62669a32dc161cf1220b896165063960da1fcedf1c3fad69a33fe94ca929aa8c69364647f210e40ed18dc85b7b865bc8a7a8c5d46cbe6a71b48edc892ce4fd4a38b5768ae02f6a83bb2343bf6ee179b9127035217fa74cab61d17cb1e58647f794b3bd9e57e74d66198c8721c51a7d545d0069228c86831f053ad6f2252c7baed35db09b8f8f091ad12c8362cbcf563322d8b00a4a1713aa95315d6c8b142371297bd705c187183ab3697c6cb0162bccbdf2e8aa6e5851e7a172df0314190b2e24532f4ba9d533d523b225d178bab6f1ccaac012de10eca0013cee073729a7c6d4ea4cab43bc096b96ada35f650ed0e722ea90a8ee1e970b59b66529d764f194c8c056abfab7a2113a1a074c39278cf5cf7c237efb58a9e3c68371e4f3b92548500480efa0c1eced9f63b7eae578975b4751b561763c85dceddd54c928fd98259cfe21a30778105b733124fd39c25f4c24f48149e2f66fb9a25e8727efd3f7dd1dd65ff5a0e841fe94e68ff98eb820f1bd8de350e3708d2b4c89a368f430408ae7a14c9028ff71db3d5019aa5a08f253092cce69250ee59b3f5d7e8c04eeab74bf897096f7b6ba00bb76439f3512c16ac00a7ab943e55ab80f96b331ab71446db32913765b68ca7578244844320207aca731166dc3da02323bbe721bfb0021ba666e857a46d161384f6628a50915368e2dd2d65344669762982172f11deba89d9df69cc5ec16f0b041a3e5cb91f795192df21cdb91e69937b3e3e0ce067db71023b7cf2c68e59a36640d87e11c832ce85ee0c4bb0f0378b5d9c2ca0177f0dbc55b7905c69b3f92d7112ac1cfdc12eca116f31aa75d5e4d719ec8e585bc592dc2b2bf275d60fee791c42bbfec2d2933d2fcecb67c344d52e53d7e3239233945892703d5d561c87e5fb915e51fee50f8e732ad76b84f937126691ad9468e58522a0980b7af988f91a1be831ced6d7da8bde5f4abf03d43611cd1382728267c0a551e7ea9d1a1904b744597b7794c28c5a16e1c4c9ffcdf87cfaf4e176e70aeb0db0958cda5fdccf4d35fbe203deb513443931679cf925a7cf669acd2b4ba2c875f0a04d797da5da14bcb158e220749b7658f86a10a1e3dfd922320a7f9e59c25ba6c5d3ec6b1c5bcbce9d9b45889bd6f83bae4caae3c54859c725315bf0ac34a00d3aa8b0777186f0e637d212f1048d7feb0ec22f3e5334aec8e76549933cda7b4616c9f145fff6f888ca6141fac494ffd3ed63d22b609e2ae143610b2a5537183d67ddb563e213bf149f56918b1ba958cdbdd654b12e6a46b3c0ddf0d1c877594e654507d315feee4588e171308eda5771e8ac999a5084833ff45aa0cc0655bc69445ea4bd97f42f6026032b6e0466ec8e301ce8c412ebc98fee900aba98cb2ac42baad749f6ebbc520c9f971766202ba08d7c1f2b4e2683430dd4b252c96c5f3cc04ad71864c5a386cad4c07c67c97476a84bd1b7d3515b0e17e4739944bb76a8fa3fcfd72e8b375b66b65dafced49cdeb83ca01a1b3f8f77a5bf5b059aa78d6f1405f11809d8dd4029bf81fd4415277d2aafdd06d0e7a0730d66e3e1ab8e575f44cb10e09d5e38c907442e590c9e6d4a77e4830fbf837236b6c751a9d635973b50e03a607514047bc9c182d36d13cd0639a38ea5ab6d715b313f7e0088d80f005e0a4008ba5beb695fedcbb2009298b8800fcaddc7ed08dac3d13d46d36af583646e729988d9a0d5fbf32d835f43858b24ac11f982b658074359955ef25cf95cbb8d73054c08d75ade308effba273e55ab873fc07109525e0f90f87cac88d0b3ac0875a82468427b74dcbb9a2d554abe877f5eab4e8692b7194d57284d1d2b5c513555facc8a95b4798f7936159ed2586dc42f9dcfab862c4cdd9d688acc85225b829c8cd958657b69b99e0018eed0bed6b10f16bfc94f781d44fb34c5ca15c7caa41d82d0e5a461dbef87688d11e74fb9557cf4c066806ad376e2782b6835331e545f9f6b7b520fd20c5fed70de6145780bc40fb8cedb39ad15b23f081d2107befa2b003c9c53b93d5430728e08b30dd27d48933d5924d2dea971088c7bd8bf827145bad4b065c34c05dbf1ebd34ee2f74689d337a3bae447071d82ca7780ed58ea1ff40d41dae75de4e4b1085b2ab733004ea16f92bca838cf1257671365a3aaa36a45bf6f5edb3f80d18756f3fac95045a2d62cb7a836d625a8c1efd9be8f0d2c3ce6af6de6c8ca34ab6b9f299b5b694a0978e6860a8444744a11f130630e03350e16897c0d82bbd3f4f398a66d129e6aaddab36c9b73501c0c676c782ba0f9adc963ec53400a4cedc162fe3a30be039c5bf0d43bf3bc564f88dc23f3bad18f892c9b8ff7c1e7113116a14cb836ed7fce6e6aceeaf2f7cf2d01fa950e3d855b6913cde8861ef4f93f1306443f9a4ba79bf10bf7ed1f51101135ebf0d56807d8e36dd5f176222c16fcf28d96f9c650940581054e56f72c8a9dbfa237831e9fc321a6fef74c1f74a5c9da8aa6877dca90e79fbb618e9d0c26cbe57d99075b78b17318f8fd4afc1c85f47122e9ffdbf5a365812232c83a12bc6cc7b4f25c876f27d2df2bafdd9d9429f3b908056554e33b2f15cfacf7653a126f93adb8988656e8dc4f4571bdd0d8b4d36404393f960e9543058f2fdbca0d23b450918c696a191b0412d232f5d800501bb639bca726a320484917ea7f0a694794161e70198691f36997187b79e07d4bcf859e7af65c2895af26fc4706140ec4be99a17dd1da82600c5b47b334665cb16d3d1ad975bd04365a8fc397280e2c49e463d8c059f754ffc51ed1f19c4eeb40a789c30dd825116d45e82e4c71d0f5a309751de5cc3ce4b4f394ec709056c938ea8b307098d8969b97316fcdc275bc9a6808e297c79f2cb4cbe7dc57b537ca50574e73765c153df60a065652222dcab6070cfd9ec2af5e66f92065e2a88b7628886eb388313f7ea5a1b616cf5ab1d49b4776737f9652bdcd4b23230177eec31ef7109bf8d34fc967378dbee83e6619a7d72adb17aed330b1ff88b4ee7eb6f98df54bb7958722ba5ecdda4f89db3cae35f8dda6136b3633df5d3ef885d137d49de2ffa5481b74ffdbfcd27dae75fe34f185e176deddf46f6da3c5a0784488dfe2c9a22257daf478fd1de70ea45eb7c678bdc49982f516b6a20fce6c16e7224b0a1b576212f1180af15bb5e30de548a52ad973adb6c8b9a4aa99e168160e68f226c9aab1c61cb9acb3136e63d7639825f64ad5103ebe2e340faf6519e5dcc77efbad6e4d12321336b8b5c7efb9671657eb96433f48de53ee1153d007dc844e34c7a88493f765134353e7fe6ebce9c51613d83a964696d102a05ca0ad52dedf67ae75d21d0aed50f3956d0684b1ae74059ef464a993545c013c80307b09d44afc0e18fa14dae39486964321bb8d1891636655aa3e041ce64a8d2de98a1d177f66a1eef0e30b684e6152f51cdbeffb0b5a342190b83dde625ddc2b42443b8f5eb318559a1ab664ec89a26332e58c3241ac94436b3e8bb1e41f7d1fe02a048c6f07d22ef77140b9a8470efb17b8db214079ef2029d77ba9930b648864315cfe529464a067ee9402e15f53c186386e3a1d3da0c06b1893909f29a90e6b21a84dc049832365ae85fbb2649e8f72fc31e3f911636f862ea71987030bd787b97c085266ff755941177dffb133f9722c89ad89f14e3cc66a602449c846f8d47f0f13a30e009f18bb3f1f2d7c99d1bc6e7fd89b79cfa75879e49a1a05bf8d396e39f978d46cdd77eb05b882520b42e6929d27af00f30b1698d78a420b8fc6b91464189eb9fbc509327f439b8bfc4334a8e4deec1abe285260796e261bbc76182e53cebe2a5144bd899b8d97c99559da2a829199068a3330b1b999a5ae893b281164333bdfa1d00af0b5be6c42dd575f6a05313a94f0afc50aec86ed77943de39d8a02f5de5ceec561e2e0996f0846f612a75b23442a562746cc98724ef31971fe7ce71a0ff752e2b2f388099c37801d1f705004490747ccf8a3aca264645ceb89e3543f032cbac1992fcf14785ec1ca85aec4ad8d3073131009d122aa4b2551982ae29fb0baf8fe8c8719c0fceba56cbbd2a739a958d5bf47695d432d2c0eeb923b474797272df47aabf7d0d2cb876ce2d55041647aa01cb0c95996a3a5eb4ab316eb6c66a987af1dfdfacd95f38e2575fe393ea292265b4fc940463be89ce09787c4369a8080355d5dca61cb78c30ad9ccc7d45d2ec5fe50dde78ec459c5d4d40ecd8da72f84580b955e103bf1aaf6a539f5a692254c1e0f1dac08f960b6e16c8174a7dc73e182d0733af8306cb119d388956d2a0ffd970330554e759a4a9b2192060e3ba9b460ddbbb92214a2260f0e30ce93ae5352817e74e7a786ac27aa119bdf57d667feb91da24be3b16f7c05b6ab23ce1e2346923d32b2ca8900c2f317740159123d9861b722eb20767bd15dbfc2481040712611822d26337a0b56c70509a2e0bcccbe8445332bb1d1bc9efb2d863458aaf6ad5c9b8422fadcaa4330e8fb27b740d9c3e1343ec91ada9d2807c45090ecaaa37ff20f3237c3049ec7fd3489a1373f41aae19a6ef6bce01d94fb5060233e0631e8fa19f777d01148a23144c345ac312a96a0f40960399a17305871fbadce80b2361d2f95d759aff2bacf5abdc8bf92672e7e9d42b927f53ca56fc64b6d9f55f4d651fc4e9946b4b684ef6da246bfbe7ebd772280d82ed3cf64751db32b0c887eea662a775167ab4fca4763317c9e358e5e53473ce12a74edfb91af52c66448863d09a5949fc387ff43199fc991022afcf8b8752ddc21d2cff6d59a62a755736854ef2e5f953a238fedcfcaa6ec4817a363e9051a36b27b0a186637650debf80499b727f1e580263e9818de81b5377565b8367c5aa8ab599e64d8efbd98a4e7b3ece3eb055163660ffec032b6f041979391fc89290334beba0b83dfdbc34a801500f24af7a223d8ef09372697b7ba55342653a611c85a9b98b595069504aa16d147577a5da003ef7551e37f6d5814781851540b2a537d4d2e2820bd83ec7b41c8c27e47dd88f510822d4cf78a82082fd63a33bfb6a054cf77c15ebc357693de746d1e551a1f9c7899a44873db40c22c0cc6f60b88978d6956366f7168e81eb371ac5d70e335da9b3bcf681323faa2e83a191d7cd09cd030490926a22526cb022883fbf8da6c41bc1d5b2877a070e2ff37d9329ae771a9dc498efc00993a8a9b6a24e25dfcb1cd6ea2a43a0216bce453f6cda76973e5a6ffa2345ec4025fc36acbf7f5792f2521ac1c818c5ce106aad28015a406d625c7ef375dbe827ac730c2cda52429af6c7d400571108d72cc80174e99462576a983d067ea26bd5af052a0f280c1e7d91c94f4eed9ae803e4c5573eac27b8633687a91178d2634004a02b7e80a608642ed681c151b6cba6ecb1bccfcaa5cdd4e9a7912a57d8dad1ab8883a08d0542b2796c1ad71a90621f1e1b7ce65256117b553a9a3a8f2164421a9c1846229f68be2e237801415812d4a187a75e1f039a03a1b2b17409b9"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "e9c056c06174186b52876c8e8d4e539cf9fb68cc0f93011208278eb92bd0961e9adf3a9ec5f1cf9a690f23d7d276018e9cd7c1f3f2736ab6a34538cc87b057a80f0634bf9376d9632bbc41865048ac063847d134550f7f1a2f22bfef4368a13376f43f39c004957dd0728656ec2ded426a6ba3e6061e777587bb87"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "5c1481b06dfb27880c8a8729265c86"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "62369b7b95c28d3340960dead80d7a6de7a9fd7bfdd3451e19659e483898987ac1217a8eb388da94b30cdeee5448f7273581bdc941564d51dbc606c7665e372225a5306bfab2"}]}, 0x1174}, 0x1, 0x0, 0x0, 0x2000c048}, 0x802) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000008}) shutdown(0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) socket(0x40000000015, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@gettaction={0x11c, 0x32, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x392}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8001}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xffff, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 0s ago: executing program 7 (id=2815): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x2, 0x3, 0xa, 0x1, 0xfffffffffffffff2}, @exit], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) kernel console output (not intermixed with test programs): 005] tipc: Failed to remove unknown binding: 66,0,0/2063287273:1544764419/1544764420 [ 196.847782][T10005] tipc: Failed to remove unknown binding: 66,0,0/2063287273:1544764419/1544764421 [ 196.910907][T10005] tipc: Failed to remove unknown binding: 66,0,0/2063287273:1544764419/1544764420 [ 197.277410][T10023] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 197.416125][T10025] gretap3: entered allmulticast mode [ 197.461062][T10031] Bluetooth: hci0: unsupported parameter 5135 [ 197.475782][T10035] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 197.494641][T10031] Bluetooth: hci0: unsupported parameter 8192 [ 197.527156][T10031] Bluetooth: hci0: unsupported parameter 5135 [ 197.566972][T10031] Bluetooth: hci0: unsupported parameter 8192 [ 197.580231][T10033] __nla_validate_parse: 7 callbacks suppressed [ 197.580250][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 197.605716][T10038] batadv_slave_0: entered allmulticast mode [ 197.621393][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 197.643985][T10038] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 197.807273][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 197.863159][T10046] unsupported nla_type 216 [ 198.128046][ T4930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.142716][ T4930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.153252][ T4930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.162713][ T4930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.171268][ T4930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.189606][T10055] lo speed is unknown, defaulting to 1000 [ 198.660740][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1020'. [ 198.924960][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 199.125390][T10093] No such timeout policy "syz0" [ 199.347752][T10060] lo speed is unknown, defaulting to 1000 [ 199.562942][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 199.626632][T10113] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 199.976216][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1032'. [ 200.057315][T10127] bond0: entered promiscuous mode [ 200.080632][T10127] bond_slave_0: entered promiscuous mode [ 200.096844][T10127] bond_slave_1: entered promiscuous mode [ 200.154137][T10127] bond0: left promiscuous mode [ 200.179657][T10127] bond_slave_0: left promiscuous mode [ 200.207744][T10127] bond_slave_1: left promiscuous mode [ 200.232307][ T5618] Bluetooth: hci5: command tx timeout [ 200.588486][T10060] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.596626][T10060] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.604169][T10060] bridge_slave_0: entered allmulticast mode [ 200.611886][T10060] bridge_slave_0: entered promiscuous mode [ 200.620046][T10060] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.627457][T10060] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.635084][T10060] bridge_slave_1: entered allmulticast mode [ 200.643487][T10060] bridge_slave_1: entered promiscuous mode [ 200.673652][T10060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.686459][T10060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.717205][T10060] team0: Port device team_slave_0 added [ 200.725717][T10060] team0: Port device team_slave_1 added [ 200.753910][T10060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.761406][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.787490][T10060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.803590][T10060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.810731][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.836822][T10060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.889058][T10060] hsr_slave_0: entered promiscuous mode [ 200.896103][T10060] hsr_slave_1: entered promiscuous mode [ 200.902661][T10060] debugfs: 'hsr0' already exists in 'hsr' [ 200.908536][T10060] Cannot create hsr debugfs directory [ 201.084834][T10060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.095314][T10060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.104826][T10060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.116495][T10060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.125213][T10060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.137413][T10060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.145969][T10060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.156299][T10060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.237821][T10060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.263967][T10060] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.277391][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.284609][ T9874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.303269][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.310554][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.676430][T10060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.888589][T10060] veth0_vlan: entered promiscuous mode [ 201.907903][T10060] veth1_vlan: entered promiscuous mode [ 201.942417][T10060] veth0_macvtap: entered promiscuous mode [ 201.953554][T10060] veth1_macvtap: entered promiscuous mode [ 201.976449][T10060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.989785][T10060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.076406][ T9865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.099122][ T9865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.125101][ T8529] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.140744][ T8529] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.174224][ T9865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.190314][ T9865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.226232][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.236716][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.312757][ T5618] Bluetooth: hci5: command tx timeout [ 202.320219][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 202.330463][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 204.391483][ T5618] Bluetooth: hci5: command tx timeout [ 206.471082][ T5618] Bluetooth: hci5: command tx timeout [ 211.914254][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 211.926213][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 211.936561][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 214.956884][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.153586][T10184] netlink: 'syz.2.1039': attribute type 11 has an invalid length. [ 220.191118][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1038'. [ 220.224677][T10201] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1039'. [ 220.314505][T10203] netlink: Invalid conntrack helper [ 220.335698][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.676030][ T2217] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.751600][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.904925][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 221.273178][T10251] x_tables: duplicate underflow at hook 1 [ 221.753474][T10270] 0: reclassify loop, rule prio 0, protocol 03 [ 222.170206][T10304] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 222.446109][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1071'. [ 222.700952][T10333] netlink: 'syz.5.1072': attribute type 3 has an invalid length. [ 222.758224][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 222.765360][T10314] sock: sock_timestamping_bind_phc: sock not bind to device [ 222.815529][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 223.027105][T10344] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 223.556824][T10371] netlink: 'syz.5.1085': attribute type 1 has an invalid length. [ 223.612011][T10371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.018870][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 224.219953][T10413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'. [ 224.491211][T10414] tipc: Enabling of bearer rejected, failed to enable media [ 224.597058][T10384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.621769][T10384] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 224.657611][T10384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.664100][T10384] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 224.692832][T10384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.704196][T10384] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 224.733755][T10384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.739768][T10384] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 224.776289][T10384] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 224.782952][T10384] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 225.048179][T10447] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1101'. [ 225.083361][T10447] netlink: 'syz.3.1101': attribute type 2 has an invalid length. [ 225.129559][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 225.240984][T10454] bond1: option primary_reselect: invalid value (6) [ 225.251839][T10456] netlink: 'syz.4.1104': attribute type 61 has an invalid length. [ 225.274336][T10454] bond1 (unregistering): Released all slaves [ 225.319519][T10464] __nla_validate_parse: 1 callbacks suppressed [ 225.319555][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 225.377053][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 225.624462][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'. [ 225.663295][T10476] syzkaller0: entered promiscuous mode [ 225.669036][T10476] syzkaller0: entered allmulticast mode [ 225.735976][T10477] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 226.104926][T10488] bridge0: port 1(batadv1) entered blocking state [ 226.120770][T10488] bridge0: port 1(batadv1) entered disabled state [ 226.140654][T10488] batadv1: entered allmulticast mode [ 226.178970][T10488] batadv1: entered promiscuous mode [ 226.495796][T10506] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 226.592266][ T8045] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 226.602158][ T8045] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 226.641080][T10506] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.711236][T10514] macvlan2: entered promiscuous mode [ 226.725925][T10514] macvlan2: entered allmulticast mode [ 226.752839][T10514] bond6: entered promiscuous mode [ 226.766947][T10514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.790263][T10514] bond6: left promiscuous mode [ 226.880233][T10528] tipc: Enabling of bearer rejected, already enabled [ 226.896940][T10518] syzkaller0: entered promiscuous mode [ 226.924675][T10518] syzkaller0: entered allmulticast mode [ 227.435613][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 227.892908][T10561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.533964][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 229.544064][T10626] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 229.688246][T10631] netlink: 'syz.4.1153': attribute type 9 has an invalid length. [ 230.048721][T10635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1153'. [ 230.062851][T10631] lo speed is unknown, defaulting to 1000 [ 230.085507][T10646] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 230.103111][T10646] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 230.133815][T10646] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 230.150521][T10646] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 230.349914][T10661] netlink: 'syz.5.1160': attribute type 4 has an invalid length. [ 230.387270][T10660] netlink: 'syz.5.1160': attribute type 4 has an invalid length. [ 230.456979][T10660] netlink: 'syz.5.1160': attribute type 4 has an invalid length. [ 230.542356][T10667] lo speed is unknown, defaulting to 1000 [ 230.542690][T10660] netlink: 'syz.5.1160': attribute type 4 has an invalid length. [ 230.658757][T10674] openvswitch: netlink: Unknown key attributes 1 [ 230.777289][T10676] netlink: 'syz.0.1167': attribute type 55 has an invalid length. [ 230.846954][T10660] netlink: 'syz.5.1160': attribute type 4 has an invalid length. [ 230.922999][T10660] netlink: 'syz.5.1160': attribute type 4 has an invalid length. [ 230.994287][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1168'. [ 231.004768][T10684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1168'. [ 231.373291][T10706] netlink: 'syz.2.1172': attribute type 11 has an invalid length. [ 231.497715][T10689] netlink: 3228 bytes leftover after parsing attributes in process `syz.0.1169'. [ 231.549464][T10703] syzkaller0: entered promiscuous mode [ 231.571260][T10703] syzkaller0: entered allmulticast mode [ 231.911754][T10718] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1175'. [ 231.951845][ T30] audit: type=1800 audit(1787526989.296:3): pid=10720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1174" name=680B20 dev="tmpfs" ino=172 res=0 errno=0 [ 232.161112][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 232.229902][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 232.257079][ T9873] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.282246][ T9873] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.297847][T10730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1178'. [ 232.310780][ T8045] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.323380][ T8045] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.014539][T10760] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.040089][T10765] netlink: 'syz.2.1188': attribute type 4 has an invalid length. [ 233.052424][T10760] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.063830][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'. [ 233.158950][T10756] bridge0: port 2(batadv2) entered blocking state [ 233.168171][T10756] bridge0: port 2(batadv2) entered disabled state [ 233.179231][T10756] batadv2: entered allmulticast mode [ 233.203309][T10756] batadv2: entered promiscuous mode [ 233.361186][T10760] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.382733][T10760] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.417269][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 233.491852][T10777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 233.633660][T10765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.662773][ T9865] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 233.672318][ T9865] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 233.754817][T10765] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.829722][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.253804][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.275914][T10765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.287288][T10765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.332850][T10765] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 234.395035][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.402306][ T9873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.462142][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.469393][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.732798][T10760] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.765550][T10760] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.034354][T10760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.126090][T10760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.427119][T10815] vlan2: entered allmulticast mode [ 235.474350][T10815] bridge2: entered allmulticast mode [ 235.831581][ T9866] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.844588][ T9866] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.926453][ T9866] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.963578][ T9866] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.006420][T10830] tc_dump_action: action bad kind [ 236.080173][T10830] sctp: [Deprecated]: syz.5.1203 (pid 10830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.080173][T10830] Use struct sctp_sack_info instead [ 236.163447][ T8045] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.189947][ T8045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.221346][ T8045] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.266803][ T8045] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.048344][T10876] netlink: 'syz.2.1216': attribute type 7 has an invalid length. [ 237.080722][T10876] netlink: 'syz.2.1216': attribute type 8 has an invalid length. [ 237.359238][T10887] xt_CT: No such helper "netbios-ns" [ 237.817152][T10916] lo speed is unknown, defaulting to 1000 [ 238.236432][T10946] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 238.763396][T10971] __nla_validate_parse: 5 callbacks suppressed [ 238.763417][T10971] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1240'. [ 238.811276][T10973] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 238.858796][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 238.870098][T10978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1239'. [ 238.925476][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 238.947138][T10976] netlink: 'syz.2.1241': attribute type 15 has an invalid length. [ 239.187281][T10973] bond6: entered promiscuous mode [ 239.273102][T10973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.401875][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 239.412185][ T83] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 239.427269][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 239.439981][T10976] netlink: 'syz.2.1241': attribute type 15 has an invalid length. [ 239.641200][T11007] bond7: option arp_validate: invalid value (8192) [ 239.698126][T11007] bond7 (unregistering): Released all slaves [ 239.788810][T10999] syzkaller1: entered promiscuous mode [ 239.807094][T10999] syzkaller1: entered allmulticast mode [ 239.994827][ T8529] netdevsim netdevsim2 netdevsim3: set [0, 2] type 1 family 0 port 60387 - 0 [ 240.013435][ T8529] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 240.034054][ T8529] netdevsim netdevsim2 netdevsim0: set [0, 2] type 1 family 0 port 60387 - 0 [ 240.058944][ T8529] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 240.092310][ T8529] netdevsim netdevsim2 netdevsim1: set [0, 2] type 1 family 0 port 60387 - 0 [ 240.128178][ T8529] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 240.166134][ T8529] netdevsim netdevsim2 netdevsim2: set [0, 2] type 1 family 0 port 60387 - 0 [ 240.172333][T11023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1246'. [ 240.354215][T11024] netlink: 'syz.0.1247': attribute type 1 has an invalid length. [ 240.381437][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.417534][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.572775][T11047] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0 [ 240.935560][T11068] syzkaller0: entered promiscuous mode [ 240.957710][T11068] syzkaller0: entered allmulticast mode [ 241.072341][T11075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1259'. [ 241.368896][T11086] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 241.433445][T11086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1260'. [ 241.433816][T11090] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1262'. [ 241.478437][ T8044] IPVS: starting estimator thread 0... [ 241.483383][T11086] dummy0: entered promiscuous mode [ 241.531941][T11086] bond3: (slave dummy0): Removing an active aggregator [ 241.541901][ T8529] bond3: Warning: Found an uninitialized port [ 241.579279][ T8529] bond3: (slave dummy0): link status up again after 0 ms [ 241.653841][T11094] IPVS: using max 26 ests per chain, 62400 per kthread [ 241.665885][T11086] bond3: (slave dummy0): Releasing backup interface [ 242.266853][T11116] can: request_module (can-proto-0) failed. [ 242.342374][T11132] netlink: 'syz.4.1269': attribute type 12 has an invalid length. [ 242.573913][T11132] netlink: 'syz.4.1269': attribute type 12 has an invalid length. [ 242.839812][T11152] tipc: Enabling of bearer rejected, already enabled [ 242.909349][T11152] syzkaller0: mtu less than device minimum [ 242.951984][T11152] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 243.236727][T11161] netlink: 'syz.3.1277': attribute type 4 has an invalid length. [ 243.450647][T11170] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.486808][T11170] bond2: (slave lo): making interface the new active one [ 243.502192][T11170] bond2: (slave lo): Enslaving as an active interface with an up link [ 243.516168][T11170] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 243.552708][ T5745] lo speed is unknown, defaulting to 1000 [ 243.565928][ T24] lo speed is unknown, defaulting to 1000 [ 243.574321][ T29] lo speed is unknown, defaulting to 1000 [ 243.580168][ T5802] lo speed is unknown, defaulting to 1000 [ 243.589699][ T5347] lo speed is unknown, defaulting to 1000 [ 243.827682][T11184] __nla_validate_parse: 5 callbacks suppressed [ 243.827701][T11184] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1281'. [ 243.864030][T11183] syzkaller0: entered promiscuous mode [ 243.873977][T11183] syzkaller0: entered allmulticast mode [ 243.926142][T11183] netlink: 'syz.0.1282': attribute type 3 has an invalid length. [ 243.956613][T11183] netlink: 660 bytes leftover after parsing attributes in process `syz.0.1282'. [ 243.979367][T11183] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1282'. [ 244.014267][T11183] nbd: socks must be embedded in a SOCK_ITEM attr [ 244.229244][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 244.258625][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 244.380011][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 244.471327][T11221] netlink: 170676 bytes leftover after parsing attributes in process `syz.4.1290'. [ 244.504097][T11217] Cannot find add_set index 3840 as target [ 244.515720][T11221] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 244.544211][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1290'. [ 244.545484][T11221] openvswitch: netlink: Message has 512 unknown bytes. [ 244.567553][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 244.579994][T11224] ip_tables: iptables: counters copy to user failed while replacing table [ 245.210892][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 245.253014][T11259] batadv_slave_0: entered promiscuous mode [ 245.481144][T11266] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 245.535615][T11270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.583551][T11270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.619658][T11270] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 245.651543][T11270] bond0 (unregistering): Released all slaves [ 245.686790][T11266] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 246.358200][T11301] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 246.648351][T11307] netlink: 'syz.0.1314': attribute type 28 has an invalid length. [ 246.659491][T11307] netlink: 'syz.0.1314': attribute type 3 has an invalid length. [ 246.990303][T11312] netlink: 'syz.2.1315': attribute type 39 has an invalid length. [ 247.400151][T11331] netlink: 'syz.5.1321': attribute type 16 has an invalid length. [ 247.599048][T11345] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 247.599048][T11345] Please contact the netfilter-devel mailing list or update your nftables rules. [ 247.893003][T11353] wg1: entered promiscuous mode [ 247.910022][T11353] wg1: entered allmulticast mode [ 247.977468][T11359] syzkaller1: entered promiscuous mode [ 247.993460][T11359] syzkaller1: entered allmulticast mode [ 248.166263][T11367] netlink: 'syz.4.1331': attribute type 9 has an invalid length. [ 248.234561][T11370] Bluetooth: hci0: unsupported parameter 5134 [ 248.279506][T11370] Bluetooth: hci0: unsupported parameter 8192 [ 248.313003][T11370] Bluetooth: hci0: unsupported parameter 5134 [ 248.342418][T11370] Bluetooth: hci0: unsupported parameter 8192 [ 248.426086][T11373] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 248.599636][T11392] netlink: 'syz.0.1338': attribute type 6 has an invalid length. [ 249.440892][T11421] __nla_validate_parse: 11 callbacks suppressed [ 249.440914][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 249.517902][T11413] RDS: rds_bind could not find a transport for ::a:2800:0, load rds_tcp or rds_rdma? [ 249.548897][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1343'. [ 249.683248][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.692901][T11418] batadv_slave_0: left allmulticast mode [ 249.707628][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.811202][T11418] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 249.832281][T11418] tipc: Resetting bearer [ 249.838991][T11418] syzkaller0: left promiscuous mode [ 249.844849][T11418] syzkaller0: left allmulticast mode [ 249.857890][T11418] veth3: left allmulticast mode [ 249.948597][T11418] bond1: left promiscuous mode [ 249.953562][T11418] ipip0: left promiscuous mode [ 249.964534][T11418] ip6tnl1: left allmulticast mode [ 249.972973][T11418] bond2: left promiscuous mode [ 249.977825][T11418] erspan2: left promiscuous mode [ 249.989927][T11418] bond2: left allmulticast mode [ 250.003695][T11418] erspan2: left allmulticast mode [ 250.014567][T11418] bridge3: left promiscuous mode [ 250.022074][T11418] gretap1: left allmulticast mode [ 250.028064][T11418] gretap2: left allmulticast mode [ 250.070994][ T9874] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.096188][ T9874] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.112253][ T9874] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.133228][ T9874] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.272760][T11448] x_tables: duplicate underflow at hook 3 [ 250.356382][T11456] syz_tun: entered allmulticast mode [ 250.499873][T11459] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 250.558853][T11463] tipc: Enabled bearer , priority 0 [ 250.592466][T11463] tipc: Disabling bearer [ 250.603407][T11468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1354'. [ 250.625290][T11470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1354'. [ 251.297499][T11500] syzkaller0: entered promiscuous mode [ 251.313725][T11500] syzkaller0: entered allmulticast mode [ 251.334533][T11500] tipc: Started in network mode [ 251.350518][T11500] tipc: Node identity d299cc3d16ec, cluster identity 4711 [ 251.391964][T11500] tipc: Enabled bearer , priority 0 [ 251.425763][T11499] tipc: Resetting bearer [ 251.490052][T11509] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 251.512309][T11499] tipc: Disabling bearer [ 251.544481][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1361'. [ 251.582745][T11505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.162303][T11525] ip_tables: iptables: counters copy to user failed while replacing table [ 252.258418][T11539] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1368'. [ 252.329965][T11544] tipc: Enabled bearer , priority 10 [ 252.530072][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1373'. [ 252.563812][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1374'. [ 253.320257][T11598] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 253.529338][T11608] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 253.558331][T11608] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1390'. [ 253.594226][T11612] Bluetooth: MGMT ver 1.23 [ 253.865633][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1395'. [ 255.015717][T11673] batman_adv: batadv0: Adding interface: gretap1 [ 255.035617][T11673] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.101159][T11673] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 255.168680][T11677] bridge_slave_0: left allmulticast mode [ 255.191297][T11677] bridge_slave_0: left promiscuous mode [ 255.208532][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.239607][T11677] bridge_slave_1: left promiscuous mode [ 255.255265][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.299700][T11677] bond0: (slave 17ÿ): Releasing backup interface [ 255.317940][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 255.354079][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 255.367375][T11677] bond0: (slave bond_slave_1): Releasing backup interface [ 255.427005][T11677] team0: Port device team_slave_0 removed [ 255.458187][T11677] team0: Port device team_slave_1 removed [ 255.472071][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.486446][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.496039][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.504290][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.515485][T11677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.548430][T11685] team0: Device xfrm0 is of different type [ 255.566553][T11689] tipc: Enabled bearer , priority 0 [ 255.587585][ T8044] tipc: Resetting bearer [ 255.627652][T11714] syzkaller0: entered promiscuous mode [ 255.641178][T11714] syzkaller0: entered allmulticast mode [ 255.761784][T11686] lo speed is unknown, defaulting to 1000 [ 255.902222][T11726] tipc: Resetting bearer [ 255.934575][T11729] netlink: 'syz.3.1419': attribute type 21 has an invalid length. [ 255.952147][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 255.979460][T11726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.049771][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 256.494979][T11758] SET target dimension over the limit! [ 256.507591][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 256.530916][T11754] xt_CT: No such helper "syz1" [ 256.632347][ T5744] tipc: Node number set to 3296054333 [ 256.695140][T11764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1429'. [ 256.711246][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1429'. [ 256.752232][T11766] xt_hashlimit: size too large, truncated to 1048576 [ 256.906740][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1430'. [ 256.947492][T11770] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.999947][T11770] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.109626][T11783] netlink: 'syz.4.1433': attribute type 11 has an invalid length. [ 257.267045][T11793] netlink: 'syz.4.1436': attribute type 39 has an invalid length. [ 257.513569][T11801] netlink: 'syz.2.1439': attribute type 33 has an invalid length. [ 257.536543][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.552668][T11799] syzkaller0: entered promiscuous mode [ 257.581916][T11799] syzkaller0: entered allmulticast mode [ 257.595565][T11801] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 257.787236][T11810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.125087][T11827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1444'. [ 260.612910][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.620756][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.684390][T11820] wg1: left promiscuous mode [ 260.692277][T11820] wg1: left allmulticast mode [ 260.737985][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.746563][T11820] batadv_slave_0: left promiscuous mode [ 260.760678][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.863924][T11826] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 260.877881][T11826] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 260.900546][ T8044] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.055519][T11814] lo speed is unknown, defaulting to 1000 [ 261.072168][ T8044] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.105164][ T8044] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.300816][ T9865] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.691210][T11912] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.789055][T11916] netlink: 'syz.5.1463': attribute type 2 has an invalid length. [ 262.807573][T11916] netlink: 'syz.5.1463': attribute type 2 has an invalid length. [ 262.850448][T11921] __nla_validate_parse: 1 callbacks suppressed [ 262.850468][T11921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1461'. [ 262.888867][T11923] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 262.896777][T11923] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 262.914353][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.923422][T11923] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 263.099597][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 263.171408][T11926] bond4: entered promiscuous mode [ 263.181156][T11926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.384507][T11934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1468'. [ 263.398560][T11933] netlink: 'syz.2.1469': attribute type 8 has an invalid length. [ 264.180154][T11962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1476'. [ 264.412847][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1481'. [ 264.435951][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1481'. [ 265.089237][T12016] netlink: 'syz.2.1488': attribute type 1 has an invalid length. [ 265.164410][T12019] gretap2: entered allmulticast mode [ 265.616875][T12048] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1496'. [ 265.628403][T12046] netlink: 'syz.5.1496': attribute type 2 has an invalid length. [ 265.709074][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1497'. [ 266.191432][T12077] veth1_to_bond: entered allmulticast mode [ 266.220857][T12077] veth1_to_bond: entered promiscuous mode [ 266.239253][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 266.282354][T12077] veth1_to_bond (unregistering): left allmulticast mode [ 266.293540][T12077] veth1_to_bond (unregistering): left promiscuous mode [ 266.476880][T12086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1507'. [ 266.487915][T12086] netlink: 'syz.0.1507': attribute type 23 has an invalid length. [ 266.497165][T12086] netlink: 'syz.0.1507': attribute type 21 has an invalid length. [ 266.506425][T12086] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.518970][T12086] netlink: 'syz.0.1507': attribute type 23 has an invalid length. [ 266.529114][T12086] netlink: 'syz.0.1507': attribute type 21 has an invalid length. [ 266.977799][T12106] netlink: 'syz.5.1513': attribute type 4 has an invalid length. [ 267.717342][T12136] xt_hashlimit: max too large, truncated to 1048576 [ 267.741590][T12136] xt_hashlimit: overflow, try lower: 0/0 [ 267.767286][T12136] ip_tables: iptables: counters copy to user failed while replacing table [ 268.033720][T12151] __nla_validate_parse: 1 callbacks suppressed [ 268.033740][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 268.149215][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 268.346163][T12172] x_tables: unsorted underflow at hook 4 [ 268.369623][T12174] validate_nla: 1 callbacks suppressed [ 268.369647][T12174] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 268.423061][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 268.583918][T12193] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1530'. [ 268.682953][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 268.812133][T12183] bridge3: entered promiscuous mode [ 268.841395][T12183] bond7: (slave bridge3): making interface the new active one [ 268.876411][T12183] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 268.908172][T12195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1531'. [ 268.930851][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1533'. [ 268.994092][T12198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1531'. [ 269.167888][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1536'. [ 269.398984][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'. [ 269.797527][T12251] syzkaller1: entered promiscuous mode [ 269.815013][T12251] syzkaller1: entered allmulticast mode [ 269.817849][T12250] netlink: 'syz.5.1548': attribute type 1 has an invalid length. [ 270.072846][T12254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.114673][T12254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 270.135177][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.142510][ T8047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.540162][T12277] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 270.552724][T12277] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 270.653363][T12283] netlink: 'syz.2.1559': attribute type 4 has an invalid length. [ 270.687595][T12283] netlink: 'syz.2.1559': attribute type 3 has an invalid length. [ 270.898278][T12296] netlink: 'syz.0.1561': attribute type 61 has an invalid length. [ 271.135077][T12290] tipc: Resetting bearer [ 271.170300][T12290] dummy0: left promiscuous mode [ 271.246441][T12290] bridge_slave_1: left allmulticast mode [ 271.423161][ T30] audit: type=1800 audit(1787527028.766:4): pid=12299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1561" name="memory.events" dev="tmpfs" ino=1644 res=0 errno=0 [ 272.138216][T12290] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 272.339579][T12290] vlan2: left allmulticast mode [ 272.367856][T12290] bridge2: left allmulticast mode [ 272.397912][T12290] bond6: left promiscuous mode [ 272.426993][T12290] bridge3: left promiscuous mode [ 272.455437][T12315] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 272.462427][T12315] syzkaller1: linktype set to 823 [ 272.506062][T12320] bridge0: port 3(batadv3) entered blocking state [ 272.531888][T12320] bridge0: port 3(batadv3) entered disabled state [ 272.548912][T12320] batadv3: entered allmulticast mode [ 272.572640][T12320] batadv3: entered promiscuous mode [ 272.599406][ T8047] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.631667][ T8047] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.652989][ T8047] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.682168][ T8047] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.923396][T12357] can: request_module (can-proto-0) failed. [ 272.990637][ T33] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 273.001602][ T33] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 273.429322][T12376] netlink: NAT attribute has 1 unknown bytes [ 273.439428][T12376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.978924][T12385] __nla_validate_parse: 12 callbacks suppressed [ 273.978947][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1580'. [ 274.000443][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 274.117289][T12392] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1582'. [ 274.127691][T12392] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1582'. [ 274.147610][T12390] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1583'. [ 274.159077][T12392] bond0 (unregistering): Released all slaves [ 274.191965][T12390] syzkaller1: entered promiscuous mode [ 274.198408][T12390] syzkaller1: entered allmulticast mode [ 274.578801][T12410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1587'. [ 275.279091][T12442] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1595'. [ 275.622449][T12454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1599'. [ 275.653657][T12451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'. [ 275.768169][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1602'. [ 276.206312][T12489] ip_tables: iptables: counters copy to user failed while replacing table [ 276.754203][T12520] netlink: 'syz.2.1615': attribute type 34 has an invalid length. [ 276.826731][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.843350][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.853158][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.860676][T12520] bond7: option lacp_strict: invalid value (192) [ 276.878601][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.891436][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.929760][T12520] bond7 (unregistering): Released all slaves [ 276.938178][ T4930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.962306][ T4930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.969888][ T4930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.980482][ T4930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.989863][ T4930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.719530][T12523] lo speed is unknown, defaulting to 1000 [ 278.236436][T12576] lo speed is unknown, defaulting to 1000 [ 278.873307][T12607] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 279.035634][ T4930] Bluetooth: hci6: command tx timeout [ 279.105783][ T5276] veth1_vlan: left promiscuous mode [ 279.182793][T12622] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 279.329756][T12523] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.361888][T12523] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.384239][T12523] bridge_slave_0: entered allmulticast mode [ 279.405066][T12523] bridge_slave_0: entered promiscuous mode [ 279.492806][T12523] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.509223][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.525933][T12523] bridge_slave_1: entered allmulticast mode [ 279.535528][T12523] bridge_slave_1: entered promiscuous mode [ 279.549992][T12631] netlink: 'syz.5.1640': attribute type 1 has an invalid length. [ 279.735369][T12523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.851566][T12523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.942674][T12523] team0: Port device team_slave_0 added [ 279.993357][T12523] team0: Port device team_slave_1 added [ 280.009385][T12645] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 280.176937][T12523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.201113][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.248991][T12523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.303350][T12523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.336290][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.379979][T12523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.627971][T12675] __nla_validate_parse: 5 callbacks suppressed [ 280.627997][T12675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1648'. [ 280.658476][T12523] hsr_slave_0: entered promiscuous mode [ 280.683481][T12523] hsr_slave_1: entered promiscuous mode [ 280.702774][T12523] debugfs: 'hsr0' already exists in 'hsr' [ 280.713202][T12523] Cannot create hsr debugfs directory [ 280.917943][T12675] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 280.978413][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1648'. [ 281.080048][T12693] netlink: 'syz.5.1650': attribute type 4 has an invalid length. [ 281.112307][ T4930] Bluetooth: hci6: command tx timeout [ 281.130227][T12693] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1650'. [ 281.732983][T12715] syzkaller0: entered promiscuous mode [ 281.758294][T12715] syzkaller0: entered allmulticast mode [ 281.917866][T12727] syzkaller0: entered promiscuous mode [ 281.923974][T12727] syzkaller0: entered allmulticast mode [ 281.949496][T12731] tipc: Started in network mode [ 281.954802][T12731] tipc: Node identity d2fda5ea10db, cluster identity 4711 [ 281.965267][T12731] tipc: Enabled bearer , priority 0 [ 281.979771][T12727] tipc: Resetting bearer [ 281.989451][T12725] tipc: Resetting bearer [ 282.034139][T12725] tipc: Disabling bearer [ 282.073283][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 282.395531][T12523] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.447989][T12755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1661'. [ 282.470188][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1659'. [ 282.679919][T12523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.702328][T12523] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.725326][T12523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.734456][T12523] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.756950][T12523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.766411][T12523] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.784950][T12523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.190530][ T4930] Bluetooth: hci6: command tx timeout [ 283.546484][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 284.117621][T12796] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1671'. [ 284.283500][T12797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 284.732110][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 284.971640][T12815] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1675'. [ 285.164935][T12739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.271503][ T4930] Bluetooth: hci6: command tx timeout [ 285.754598][T12523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.826188][T12523] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.853989][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.861361][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.898918][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.906170][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.165199][T12864] netlink: del zone limit has 4 unknown bytes [ 286.217013][T12867] __nla_validate_parse: 1 callbacks suppressed [ 286.217034][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 286.252963][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 286.396719][T12867] bond0: (slave bond_slave_1): Releasing backup interface [ 286.556467][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1688'. [ 286.584692][T12880] veth1_virt_wifi: entered promiscuous mode [ 286.592098][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1688'. [ 286.786572][T12899] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 287.646821][T12523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.745856][T12929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1696'. [ 288.339440][T12954] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 288.486638][T12523] veth0_vlan: entered promiscuous mode [ 288.577938][T12523] veth1_vlan: entered promiscuous mode [ 288.739688][T12523] veth0_macvtap: entered promiscuous mode [ 288.773430][T12968] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1704'. [ 288.807693][T12523] veth1_macvtap: entered promiscuous mode [ 288.823782][T12968] netlink: zone id is out of range [ 288.866118][T12968] netlink: zone id is out of range [ 288.903247][T12523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.914934][T12968] netlink: zone id is out of range [ 288.958315][T12523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.976775][T12968] netlink: zone id is out of range [ 289.009028][T12968] netlink: zone id is out of range [ 289.027978][T12968] netlink: zone id is out of range [ 289.050448][ T9874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.059336][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1705'. [ 289.059762][ T9874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.090942][T12968] netlink: zone id is out of range [ 289.107445][T12968] netlink: zone id is out of range [ 289.140497][ T33] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.167622][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 289.177684][ T33] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.194458][T12968] netlink: zone id is out of range [ 289.273294][T12976] bridge0: port 1(veth0) entered blocking state [ 289.289904][T12976] bridge0: port 1(veth0) entered disabled state [ 289.304108][T12976] veth0: entered allmulticast mode [ 289.319786][T12976] veth0: entered promiscuous mode [ 289.438344][ T8047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.465677][ T8047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.579747][T12989] pimreg: entered allmulticast mode [ 289.603547][ T8047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.612851][ T8047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.824410][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 289.914027][T13012] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 290.810276][T13048] lo speed is unknown, defaulting to 1000 [ 290.911097][T13049] lo speed is unknown, defaulting to 1000 [ 290.973736][T13067] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1726'. [ 291.456126][T13094] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1729'. [ 291.853586][T13105] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 292.069823][T13113] net_ratelimit: 5 callbacks suppressed [ 292.069842][T13113] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 292.558426][T13140] netlink: 'syz.2.1737': attribute type 1 has an invalid length. [ 292.597694][T13140] netlink: 'syz.2.1737': attribute type 2 has an invalid length. [ 292.694776][T13149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.926012][T13153] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 293.073772][T13153] bond7 (unregistering): Released all slaves [ 293.554759][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 293.580445][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 293.663297][T13191] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 293.990806][T13217] netlink: 'syz.5.1749': attribute type 1 has an invalid length. [ 294.138057][T13217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.169410][T13224] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 294.234766][T13220] bond1: (slave gretap1): making interface the new active one [ 294.274272][T13220] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 294.668333][T13246] vxcan2: entered promiscuous mode [ 294.857146][T13258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1757'. [ 294.880027][T13246] netlink: 'syz.4.1754': attribute type 362 has an invalid length. [ 295.460203][T13284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1765'. [ 295.536938][T13287] syzkaller1: entered promiscuous mode [ 295.562092][T13287] syzkaller1: entered allmulticast mode [ 295.659276][T13299] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1770'. [ 295.676086][T13293] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 295.688892][T13299] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1770'. [ 295.741768][T13293] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.793322][ T9869] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 296.022748][T13312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 296.068303][T13317] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1774'. [ 296.116959][T13318] bridge0: port 3(veth0) entered blocking state [ 296.163027][T13318] bridge0: port 3(veth0) entered disabled state [ 296.180696][T13318] veth0: entered allmulticast mode [ 296.207662][T13318] veth0: entered promiscuous mode [ 296.244811][T13330] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1776'. [ 296.480214][T13336] syzkaller0: entered promiscuous mode [ 296.501701][T13336] syzkaller0: entered allmulticast mode [ 296.855803][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.972063][T13359] netlink: 'syz.0.1786': attribute type 4 has an invalid length. [ 297.344581][T13366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1790'. [ 298.078880][T13409] netlink: Conntrack attr has 4 unknown bytes [ 298.087131][T13409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.538410][T13437] openvswitch: netlink: IP tunnel dst address not specified [ 298.566819][T13437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.592159][T13437] netlink: 'syz.0.1805': attribute type 3 has an invalid length. [ 298.668032][T13440] netlink: 'syz.5.1806': attribute type 12 has an invalid length. [ 298.693524][T13440] netlink: 'syz.5.1806': attribute type 29 has an invalid length. [ 298.713157][T13440] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1806'. [ 298.725491][T13440] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1806'. [ 298.821879][T13447] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.859764][T13447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.867169][T13447] IPv6: NLM_F_CREATE should be set when creating new route [ 298.874710][T13447] IPv6: NLM_F_CREATE should be set when creating new route [ 298.882024][T13447] IPv6: NLM_F_CREATE should be set when creating new route [ 298.913441][T13451] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1808'. [ 298.943192][T13453] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1810'. [ 298.962597][T13453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1810'. [ 298.985797][T13453] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1810'. [ 299.025957][T13456] netlink: 550 bytes leftover after parsing attributes in process `syz.2.1811'. [ 299.405683][T13478] syzkaller0: entered promiscuous mode [ 299.411495][T13478] syzkaller0: entered allmulticast mode [ 299.433596][T13478] tipc: Enabled bearer , priority 0 [ 299.451255][T13478] tipc: Resetting bearer [ 299.461833][T13477] tipc: Resetting bearer [ 299.495734][T13477] tipc: Disabling bearer [ 299.904919][T13483] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.916289][T13483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.923645][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 299.930975][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 299.938240][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 299.948694][T13483] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1820'. [ 300.449981][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1824'. [ 301.274528][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 302.174103][T13562] netlink: 'syz.2.1838': attribute type 8 has an invalid length. [ 302.221213][T13562] netlink: 'syz.2.1838': attribute type 9 has an invalid length. [ 302.515076][T13575] can: request_module (can-proto-0) failed. [ 302.702667][T13585] __nla_validate_parse: 1 callbacks suppressed [ 302.702690][T13585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1846'. [ 302.748756][T13585] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 302.778821][T13587] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1847'. [ 302.789823][T13587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.000969][T13600] ip6gre1: entered promiscuous mode [ 303.006501][T13600] ip6gre1: entered allmulticast mode [ 303.014158][ T1167] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.023671][T13599] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.034087][ T1167] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.042919][T12308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.284739][T13609] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 303.323076][T13609] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 303.367619][T13609] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 303.371454][T12308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.469393][T13617] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1856'. [ 303.501255][T12308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.574782][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 303.599399][T13617] netlink: 'syz.4.1856': attribute type 3 has an invalid length. [ 303.608910][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 303.643427][T13617] geneve3: entered promiscuous mode [ 303.661571][T13617] geneve3: entered allmulticast mode [ 303.921275][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1862'. [ 303.946040][T13639] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 304.019552][T13639] bond7: entered promiscuous mode [ 304.037656][T13639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 304.068890][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1862'. [ 304.197944][T13648] lo speed is unknown, defaulting to 1000 [ 304.337419][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 304.340631][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 304.420264][T13654] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 304.452323][T13654] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 304.518671][T13653] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 304.544271][T13653] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 304.625280][T13667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.626302][T13702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'. [ 305.650232][T13702] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 306.040749][T12308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.597215][T13738] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 307.030684][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.068107][T13751] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 307.190946][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.389301][T13775] netlink: 'syz.2.1898': attribute type 1 has an invalid length. [ 307.508459][T13781] netlink: 'syz.4.1900': attribute type 2 has an invalid length. [ 307.629929][T13783] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.695786][T13787] netlink: 'syz.0.1902': attribute type 10 has an invalid length. [ 308.034165][T13803] __nla_validate_parse: 14 callbacks suppressed [ 308.034189][T13803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1906'. [ 308.074030][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 308.091755][T13803] siw: device registration error -23 [ 308.358444][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 308.374071][T13818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'. [ 308.397851][T13817] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 308.414574][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1912'. [ 308.424136][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'. [ 308.455668][T13819] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 308.496373][T13817] geneve4: entered promiscuous mode [ 308.517995][T13817] geneve4: entered allmulticast mode [ 308.600135][T13822] netlink: zone id is out of range [ 308.614904][T13822] netlink: zone id is out of range [ 308.627279][T13822] netlink: zone id is out of range [ 308.637830][T13822] netlink: zone id is out of range [ 308.650488][T13822] netlink: zone id is out of range [ 308.669671][T13822] netlink: zone id is out of range [ 308.925483][T13838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1918'. [ 309.187040][T13851] IPv6: NLM_F_REPLACE set, but no existing node found! [ 309.306872][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 309.319052][T13858] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.824603][T13887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 309.867845][T13884] lo speed is unknown, defaulting to 1000 [ 310.006854][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1933'. [ 310.049989][T13894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.077798][T13894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.492513][T13916] syzkaller0: entered promiscuous mode [ 310.498187][T13916] syzkaller0: entered allmulticast mode [ 310.511188][T13916] tipc: Enabled bearer , priority 0 [ 310.524739][T13916] tipc: Resetting bearer [ 310.590397][T13915] tipc: Resetting bearer [ 310.609449][T13921] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.653480][T13915] tipc: Disabling bearer [ 311.224764][T13940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.813839][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.828310][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.845155][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.866151][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.879968][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.182685][T13966] lo speed is unknown, defaulting to 1000 [ 312.430488][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.438074][T13966] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.445840][T13966] bridge_slave_0: entered allmulticast mode [ 312.453388][T13966] bridge_slave_0: entered promiscuous mode [ 312.462192][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.469427][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.478372][T13966] bridge_slave_1: entered allmulticast mode [ 312.486331][T13966] bridge_slave_1: entered promiscuous mode [ 312.520281][T13966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.536680][T13966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.571191][T13966] team0: Port device team_slave_0 added [ 312.581153][T13966] team0: Port device team_slave_1 added [ 312.610560][T13966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.617589][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.645443][T13966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.658503][T13966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.666085][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.692246][T13966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.740201][T13966] hsr_slave_0: entered promiscuous mode [ 312.746828][T13966] hsr_slave_1: entered promiscuous mode [ 312.753540][T13966] debugfs: 'hsr0' already exists in 'hsr' [ 312.759335][T13966] Cannot create hsr debugfs directory [ 313.990991][ T4930] Bluetooth: hci7: command tx timeout [ 314.082004][T13940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.115084][T13966] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 314.233819][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.267676][T13966] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 314.329552][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.374652][T13966] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 314.394950][T14001] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 314.409031][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.423062][T13966] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 314.436804][T13997] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 314.451911][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.485058][T14001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.522926][T14001] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 314.662080][T14019] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 314.678088][T13997] netlink: 'syz.5.1955': attribute type 15 has an invalid length. [ 314.692872][T13997] __nla_validate_parse: 3 callbacks suppressed [ 314.692891][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1955'. [ 314.729153][T14007] Bluetooth: hci1: too big key_count value 29096 [ 314.734327][T14019] 8021q: adding VLAN 0 to HW filter on device bond10 [ 314.774179][T14019] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 314.847082][T14021] bond10: (slave veth5): Enslaving as an active interface with a down link [ 314.905813][T14025] vlan4: entered allmulticast mode [ 314.916227][T14025] bond10: entered allmulticast mode [ 314.976083][T14029] netlink: 'syz.5.1959': attribute type 6 has an invalid length. [ 314.984559][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1958'. [ 315.071611][T13966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.089292][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1959'. [ 315.106057][T14033] x_tables: duplicate entry at hook 1 [ 315.256962][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 315.269105][T13966] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.344489][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.346054][T14041] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1962'. [ 315.351905][ T8044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.374943][T14042] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 315.411510][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.418942][ T8044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.547396][T14045] tipc: Enabled bearer , priority 10 [ 315.614961][T14043] tipc: Resetting bearer [ 315.726704][T14043] tipc: Disabling bearer [ 316.073630][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.076507][ T4930] Bluetooth: hci7: command tx timeout [ 317.012612][T14095] netlink: 'syz.2.1971': attribute type 4 has an invalid length. [ 317.077159][T14097] netlink: 'syz.2.1971': attribute type 4 has an invalid length. [ 317.128823][T14095] netlink: 'syz.2.1971': attribute type 4 has an invalid length. [ 317.140857][T14097] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1971'. [ 317.215356][T13966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.347378][T14106] netlink: 'syz.0.1974': attribute type 8 has an invalid length. [ 317.437515][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 317.459212][T14112] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 317.481677][T14112] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 317.609467][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1976'. [ 317.630485][T14116] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1280) ! [ 317.804820][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1978'. [ 317.954726][T13966] veth0_vlan: entered promiscuous mode [ 318.028269][T13966] veth1_vlan: entered promiscuous mode [ 318.099638][T13966] veth0_macvtap: entered promiscuous mode [ 318.123719][T13966] veth1_macvtap: entered promiscuous mode [ 318.150565][ T50] Bluetooth: hci7: command tx timeout [ 318.184636][T13966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.218327][T13966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.311176][ T8529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.344385][ T8529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.400632][ T8044] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.415998][ T8044] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.452557][T14135] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1981'. [ 318.494941][ T8529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.517526][ T8529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.617760][ T9867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.654113][ T9867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.235872][T14161] openvswitch: netlink: IPv6 tunnel dst address is zero [ 319.331994][T14165] block nbd2: Unsupported socket: should be TCP or UNIX. [ 319.371609][T14165] nbd: must specify a size in bytes for the device [ 319.386283][T14158] ip_tables: iptables: counters copy to user failed while replacing table [ 320.231443][ T50] Bluetooth: hci7: command tx timeout [ 320.332780][T14202] syzkaller0: entered promiscuous mode [ 320.356940][T14202] syzkaller0: entered allmulticast mode [ 320.457933][T14209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.493722][T14210] xt_socket: unknown flags 0x4 [ 320.584743][T14212] __nla_validate_parse: 4 callbacks suppressed [ 320.584767][T14212] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2004'. [ 321.264921][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2009'. [ 321.477696][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2014'. [ 321.495766][T14251] bridge0: port 4(wlan1) entered blocking state [ 321.530611][T14251] bridge0: port 4(wlan1) entered disabled state [ 321.546145][T14251] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 321.569716][T14251] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 321.609672][T14249] syzkaller0: entered promiscuous mode [ 321.649264][T14249] syzkaller0: entered allmulticast mode [ 321.711985][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 321.828195][T14253] syzkaller1: entered promiscuous mode [ 321.843282][T14253] syzkaller1: entered allmulticast mode [ 321.942109][T14268] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2019'. [ 321.993542][ T8047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.076409][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2023'. [ 322.090217][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2021'. [ 322.141372][ T9868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.151556][ T9868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.174885][ T9868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.312495][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'. [ 322.501093][T14301] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2025'. [ 325.044179][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2033'. [ 325.395669][T14331] xt_CT: No such helper "snmp_trap" [ 325.632551][T14351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 325.768998][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2045'. [ 325.835742][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2043'. [ 325.911630][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 326.167136][T14381] syzkaller0: entered promiscuous mode [ 326.196677][T14381] syzkaller0: entered allmulticast mode [ 326.547319][T14401] openvswitch: netlink: Missing valid actions attribute. [ 326.588490][T14401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.608520][T14401] netlink: 'syz.2.2055': attribute type 11 has an invalid length. [ 326.828634][T14421] netlink: 'syz.5.2059': attribute type 11 has an invalid length. [ 327.445421][ T8044] IPVS: starting estimator thread 0... [ 327.540495][T14451] IPVS: using max 24 ests per chain, 57600 per kthread [ 327.945785][T14466] syzkaller1: entered promiscuous mode [ 327.997266][T14466] syzkaller1: entered allmulticast mode [ 328.287288][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'. [ 328.308948][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2076'. [ 328.331490][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'. [ 328.342936][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2076'. [ 328.555723][T14489] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:1024 [ 328.648155][T14493] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2081'. [ 328.800716][T14498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2082'. [ 329.007712][T14509] netlink: 'syz.5.2085': attribute type 15 has an invalid length. [ 329.385087][T14531] netlink: 'syz.7.2090': attribute type 61 has an invalid length. [ 329.418189][T14531] netlink: 'syz.7.2090': attribute type 5 has an invalid length. [ 329.607968][ T30] audit: type=1107 audit(1787527086.926:5): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 329.632476][T14541] netlink: 'syz.7.2093': attribute type 7 has an invalid length. [ 329.826352][T14541] netlink: 'syz.7.2093': attribute type 8 has an invalid length. [ 329.985968][T14557] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 330.131746][T14557] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.168536][T14562] macvlan3: entered promiscuous mode [ 330.200606][T14562] macvlan3: entered allmulticast mode [ 330.248900][T14562] bond9: entered promiscuous mode [ 330.266503][T14562] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 330.365788][T14562] bond9: left promiscuous mode [ 330.437872][T14564] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 330.467411][T14561] netlink: 'syz.7.2100': attribute type 11 has an invalid length. [ 330.765883][T14603] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 331.037797][T14613] debugfs: 'netdev:syzkaller0' already exists in 'phy12' [ 331.102150][T14614] __nla_validate_parse: 9 callbacks suppressed [ 331.102170][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 331.123606][T14614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.176704][T14621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2116'. [ 331.187304][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 331.224048][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2116'. [ 331.272253][T14628] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2117'. [ 331.322533][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2115'. [ 331.359974][T14613] bond8: option ad_actor_sys_prio: invalid value (0) [ 331.367809][T14613] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 331.378563][T14613] bond8 (unregistering): Released all slaves [ 331.437557][T14626] batadv0: entered promiscuous mode [ 331.504207][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 331.581672][T14613] bond8: option ad_actor_sys_prio: invalid value (0) [ 331.588411][T14613] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 331.602995][T14613] bond8 (unregistering): Released all slaves [ 331.848473][T14649] syzkaller1: entered promiscuous mode [ 331.855618][T14649] syzkaller1: entered allmulticast mode [ 331.997615][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2124'. [ 332.283314][T14666] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2128'. [ 332.356932][T14666] xt_hashlimit: max too large, truncated to 1048576 [ 332.392817][T14667] lo speed is unknown, defaulting to 1000 [ 332.406164][T14670] lo speed is unknown, defaulting to 1000 [ 332.834017][T14690] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2135'. [ 333.113343][ T9867] wlan0: Trigger new scan to find an IBSS to join [ 333.145929][T14698] netlink: 'syz.5.2137': attribute type 2 has an invalid length. [ 333.291493][T14687] bond10: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 333.343919][T14687] bond10 (unregistering): Released all slaves [ 333.905879][T14714] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 333.990551][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.428875][T14744] netlink: 'syz.5.2151': attribute type 2 has an invalid length. [ 334.438267][T14745] netlink: 'syz.7.2150': attribute type 1 has an invalid length. [ 334.478819][T14745] bond1: entered promiscuous mode [ 334.484701][T14745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.529060][T14745] syzkaller0: entered promiscuous mode [ 334.535357][T14745] syzkaller0: entered allmulticast mode [ 334.562645][T14745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.570021][T14745] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 334.580750][T14745] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 334.595853][T14745] bond1: (slave ip6gre1): making interface the new active one [ 334.603823][T14745] ip6gre1: entered promiscuous mode [ 334.611323][T14745] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 334.756328][T14751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 334.769555][T14751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 335.164590][T14776] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 336.055194][T14813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.082143][ T8044] wlan0: Trigger new scan to find an IBSS to join [ 336.104897][T14825] tipc: Invalid UDP bearer configuration [ 336.104955][T14825] tipc: Enabling of bearer rejected, failed to enable media [ 336.147469][T14813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.383352][T14825] __nla_validate_parse: 16 callbacks suppressed [ 336.383376][T14825] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2172'. [ 336.739834][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 336.837130][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 336.846495][T14854] tc action pedit offset must be on 32 bit boundaries [ 336.994004][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2183'. [ 337.012003][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2183'. [ 337.244401][T14875] team0: entered promiscuous mode [ 337.267095][T14884] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2186'. [ 337.284332][T14875] bond1: entered promiscuous mode [ 337.322237][T14875] team0: entered allmulticast mode [ 337.344258][T14875] bond1: entered allmulticast mode [ 337.376173][T14875] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.424051][T14875] tipc: Resetting bearer [ 337.480221][T14891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2189'. [ 337.499008][T14891] netlink: 'syz.5.2189': attribute type 2 has an invalid length. [ 337.507775][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 337.556240][T14882] syzkaller1: entered promiscuous mode [ 337.573640][T14882] syzkaller1: entered allmulticast mode [ 337.925956][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 337.939597][T14913] netlink: 'syz.5.2193': attribute type 1 has an invalid length. [ 338.139679][T14922] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 338.405516][T14939] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2198'. [ 339.116415][ T8047] wlan0: Trigger new scan to find an IBSS to join [ 340.103529][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.286479][T15009] IPVS: set_ctl: invalid protocol: 44894 10.1.1.0:20000 [ 343.317617][T15013] __nla_validate_parse: 2 callbacks suppressed [ 343.317637][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 343.370605][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 343.901344][T15044] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 343.949888][T15044] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2232'. [ 344.003011][T15046] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2233'. [ 344.063596][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2233'. [ 344.125419][T15046] netlink: 'syz.7.2233': attribute type 7 has an invalid length. [ 344.148813][T15046] netlink: 'syz.7.2233': attribute type 8 has an invalid length. [ 344.221925][T15054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2234'. [ 344.235840][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2233'. [ 344.290664][T15062] x_tables: duplicate entry at hook 1 [ 344.458217][T15044] tipc: Enabling of bearer rejected, failed to enable media [ 344.526535][T15062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 344.544522][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 345.184751][T15090] syzkaller0: entered promiscuous mode [ 345.206362][T15090] syzkaller0: entered allmulticast mode [ 345.457440][T15076] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 345.477465][T15076] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 345.606067][T15110] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 345.649390][T15076] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 345.669830][T15076] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 346.144128][T15141] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2256'. [ 346.162300][T15143] No such timeout policy "syz1" [ 346.173575][T15143] No such timeout policy "syz1" [ 346.189614][T15143] No such timeout policy "syz1" [ 346.202204][T15143] No such timeout policy "syz1" [ 346.228129][T15143] No such timeout policy "syz1" [ 346.265092][T15143] No such timeout policy "syz1" [ 346.283281][T15143] No such timeout policy "syz1" [ 346.298260][T15143] No such timeout policy "syz1" [ 346.311273][T15143] No such timeout policy "syz1" [ 346.318131][T15143] No such timeout policy "syz1" [ 346.664714][T15154] syzkaller0: entered promiscuous mode [ 346.681389][T15154] syzkaller0: entered allmulticast mode [ 346.698674][T15154] tipc: Started in network mode [ 346.713169][T15154] tipc: Node identity 262a58b755a3, cluster identity 4711 [ 346.735443][T15154] tipc: Enabled bearer , priority 0 [ 346.773128][T15162] team_slave_1: entered promiscuous mode [ 346.789970][T15162] team_slave_1: left promiscuous mode [ 346.826598][T15158] tipc: Resetting bearer [ 346.834658][T15153] tipc: Resetting bearer [ 346.862782][T15153] tipc: Disabling bearer [ 348.643378][T15218] netlink: 'syz.5.2280': attribute type 9 has an invalid length. [ 349.728111][T15269] netlink: 'syz.2.2296': attribute type 10 has an invalid length. [ 349.782875][T15276] __nla_validate_parse: 4 callbacks suppressed [ 349.782976][T15276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2296'. [ 349.828616][ T9867] IPVS: starting estimator thread 0... [ 349.921683][T15280] IPVS: using max 27 ests per chain, 64800 per kthread [ 349.934055][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'. [ 349.975932][T15287] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2295'. [ 349.986516][T15287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.003210][T15286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2298'. [ 350.100859][T15269] team0 (unregistering): Port device team_slave_0 removed [ 350.152925][T15269] team0 (unregistering): Port device team_slave_1 removed [ 350.721594][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.784319][T15319] xt_cgroup: invalid path, errno=-2 [ 350.794299][T15306] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2303'. [ 350.819445][T15318] nbd: must specify at least one socket [ 350.825288][T15306] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2303'. [ 350.825333][T15306] netlink: 'syz.7.2303': attribute type 6 has an invalid length. [ 350.825355][T15306] netlink: 'syz.7.2303': attribute type 5 has an invalid length. [ 350.825370][T15306] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2303'. [ 350.835359][T15306] netlink: 'syz.7.2303': attribute type 4 has an invalid length. [ 350.871081][T15320] nbd: must specify at least one socket [ 351.141990][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.610517][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2317'. [ 351.698510][T15367] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 351.888656][T15379] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2322'. [ 351.935110][T15385] TC_ACT_REPEAT abuse ? [ 351.959082][T15377] syzkaller0: entered promiscuous mode [ 351.966068][T15377] syzkaller0: entered allmulticast mode [ 355.355521][T15394] pim6reg1: entered promiscuous mode [ 355.361349][T15394] pim6reg1: entered allmulticast mode [ 355.550009][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 355.564503][T15411] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2329'. [ 355.574706][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 355.807824][T15411] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2329'. [ 356.164468][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2335'. [ 356.746141][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 356.846304][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2345'. [ 356.999835][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2344'. [ 357.425138][T15507] vlan2: entered promiscuous mode [ 357.433608][T15507] macvlan0: entered promiscuous mode [ 357.626577][T15515] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2354'. [ 357.801695][T15526] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2355'. [ 358.267245][T15543] syzkaller0: entered promiscuous mode [ 358.275647][T15543] syzkaller0: entered allmulticast mode [ 358.287342][T15548] netlink: 'syz.5.2363': attribute type 6 has an invalid length. [ 358.495828][T15556] bridge6: entered promiscuous mode [ 358.707907][T15569] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 358.720002][T15569] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 358.739033][ T30] audit: type=1800 audit(1787527116.076:6): pid=15569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2368" name="memory.events" dev="tmpfs" ino=2765 res=0 errno=0 [ 359.310484][T15594] lo speed is unknown, defaulting to 1000 [ 360.124730][T15631] vlan5: entered promiscuous mode [ 360.151165][T15631] macvlan0: entered promiscuous mode [ 360.208444][T15627] syzkaller1: entered promiscuous mode [ 360.223469][T15627] syzkaller1: entered allmulticast mode [ 361.163441][T15675] bond2: option downdelay: invalid value (18446744073709551487) [ 361.173472][T15675] bond2: option downdelay: allowed values 0 - 2147483647 [ 361.191542][T15675] bond2 (unregistering): Released all slaves [ 361.303579][T15684] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 361.342052][T15684] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 361.415193][T15684] netlink: zone id is out of range [ 361.440006][T15684] netlink: zone id is out of range [ 361.463449][T15684] netlink: zone id is out of range [ 361.485002][T15684] netlink: zone id is out of range [ 361.527564][T15684] netlink: zone id is out of range [ 361.549473][T15684] netlink: zone id is out of range [ 361.586122][T15684] netlink: zone id is out of range [ 361.592557][T15699] __nla_validate_parse: 6 callbacks suppressed [ 361.592581][T15699] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2404'. [ 361.592616][T15699] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2404'. [ 361.707308][T15701] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2403'. [ 361.720494][T15684] netlink: zone id is out of range [ 361.747930][T15684] netlink: zone id is out of range [ 361.769449][T15684] netlink: zone id is out of range [ 362.144972][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 362.176450][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 362.197126][T15715] x_tables: duplicate underflow at hook 3 [ 362.855113][T15722] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.862497][T15722] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.166831][T15722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.317560][T15722] bond2: left allmulticast mode [ 363.338060][T15722] sit2: left promiscuous mode [ 363.343957][T15722] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 363.352377][T15722] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 363.428579][T15722] bond4: left promiscuous mode [ 363.452307][T15722] gretap2: left allmulticast mode [ 363.633533][T15722] bridge6: left promiscuous mode [ 363.911477][ T8047] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.965333][ T8047] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 364.006448][ T8047] netdevsim netdevsim2 netdevsim3: unset [0, 2] type 1 family 0 port 60387 - 0 [ 364.030096][ T8047] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.065211][T15752] netlink: 'syz.7.2414': attribute type 6 has an invalid length. [ 364.074077][T15752] netlink: 'syz.7.2414': attribute type 7 has an invalid length. [ 364.082317][T15752] netlink: 'syz.7.2414': attribute type 8 has an invalid length. [ 364.090813][ T9867] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.113924][ T9867] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 364.125230][ T9867] netdevsim netdevsim2 netdevsim1: unset [0, 2] type 1 family 0 port 60387 - 0 [ 364.143896][ T9867] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.179195][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 364.191183][ T8047] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.213086][ T8047] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 364.235359][ T8047] netdevsim netdevsim2 netdevsim0: unset [0, 2] type 1 family 0 port 60387 - 0 [ 364.263592][ T8047] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.274478][ T8047] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.286680][ T8047] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 364.303517][T15776] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2420'. [ 364.305569][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2419'. [ 364.318055][ T8047] netdevsim netdevsim2 netdevsim2: unset [0, 2] type 1 family 0 port 60387 - 0 [ 364.334764][ T8047] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.341369][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2419'. [ 364.354988][T15759] veth0 (unregistering): left allmulticast mode [ 364.366140][T15773] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2419'. [ 364.375708][T15759] veth0 (unregistering): left promiscuous mode [ 364.382870][T15759] bridge0: port 1(veth0) entered disabled state [ 365.049249][T15807] macsec1: entered promiscuous mode [ 365.142505][T15809] pim6reg1: entered promiscuous mode [ 365.175913][T15809] pim6reg1: entered allmulticast mode [ 369.017081][T15856] smc: net device lo erased user defined pnetid SYZ0 [ 369.130095][T15858] __nla_validate_parse: 4 callbacks suppressed [ 369.130116][T15858] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2440'. [ 369.181446][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2440'. [ 369.204232][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2442'. [ 369.574726][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2440'. [ 370.201143][T15903] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2449'. [ 371.761129][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.437177][T15911] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2450'. [ 374.534762][T15980] netlink: 'syz.4.2467': attribute type 1 has an invalid length. [ 374.626735][T15980] bond8: entered promiscuous mode [ 374.656646][T15980] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.722807][T15980] syz_tun: entered promiscuous mode [ 374.750839][T15980] macsec0: entered allmulticast mode [ 374.770109][T15980] syz_tun: left promiscuous mode [ 374.805368][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2470'. [ 375.046816][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2473'. [ 375.275869][T16018] netlink: 'syz.2.2474': attribute type 32 has an invalid length. [ 375.321088][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 375.408950][T16018] bond10: option coupled_control: invalid value (10) [ 375.495345][T16022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.639978][T16018] bond10 (unregistering): Released all slaves [ 376.079756][T16035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2481'. [ 376.114110][T16040] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2482'. [ 376.195887][T16047] sctp: [Deprecated]: syz.7.2482 (pid 16047) Use of int in maxseg socket option. [ 376.195887][T16047] Use struct sctp_assoc_value instead [ 376.211688][T16049] sctp: [Deprecated]: syz.7.2482 (pid 16049) Use of int in maxseg socket option. [ 376.211688][T16049] Use struct sctp_assoc_value instead [ 376.437338][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 376.452390][T16060] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 376.466516][T16058] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2486'. [ 376.482432][T16060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2487'. [ 376.520653][T16063] netlink: 'syz.2.2488': attribute type 1 has an invalid length. [ 376.660541][T16065] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2488'. [ 376.697580][T16063] 8021q: adding VLAN 0 to HW filter on device bond10 [ 376.752101][T16074] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.784833][T16074] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2488'. [ 376.826356][T16073] 8021q: VLANs not supported on ip_vti0 [ 377.977851][T16130] netlink: 'syz.0.2507': attribute type 39 has an invalid length. [ 378.928916][T16169] tipc: Enabled bearer , priority 0 [ 378.967095][T16169] syzkaller0: entered promiscuous mode [ 378.985323][T16169] syzkaller0: entered allmulticast mode [ 378.991145][T16179] netlink: 'syz.4.2519': attribute type 2 has an invalid length. [ 379.104015][T16169] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 379.307787][T16197] tipc: Resetting bearer [ 379.339123][T16166] tipc: Resetting bearer [ 379.395612][T16166] tipc: Disabling bearer [ 379.685015][T16214] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 379.960216][T16227] syzkaller0: entered promiscuous mode [ 379.979116][T16227] syzkaller0: entered allmulticast mode [ 380.045335][T16227] : renamed from veth1_to_bridge (while UP) [ 380.108517][T16227] : entered allmulticast mode [ 380.893859][T16280] __nla_validate_parse: 4 callbacks suppressed [ 380.893881][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2542'. [ 380.975220][T16285] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2544'. [ 380.990041][T16286] net_ratelimit: 499 callbacks suppressed [ 380.990224][T16286] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.679582][T16312] Cannot find del_set index 0 as target [ 382.394051][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'. [ 382.406673][T16343] tipc: Failed to remove unknown binding: 66,1,1/0:1914291725/1914291727 [ 382.419591][T16328] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 382.480543][ T9868] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.502272][ T9868] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.529107][ T9868] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.554216][ T9868] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.568202][T16341] tap0: tun_chr_ioctl cmd 1074025677 [ 382.609976][T16341] tap0: linktype set to 778 [ 382.701524][ T9868] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.729204][ T9868] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.752386][ T9868] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.783339][ T9868] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.934554][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2558'. [ 383.173103][T16383] netlink: 'syz.0.2560': attribute type 62 has an invalid length. [ 383.691714][T16410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.052992][T16430] tipc: Enabling of bearer rejected, failed to enable media [ 384.598289][T16458] x_tables: duplicate underflow at hook 3 [ 384.851115][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2578'. [ 384.954179][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 384.975625][T16465] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2578'. [ 385.004691][T16472] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2580'. [ 385.101255][T16472] geneve4: entered promiscuous mode [ 385.132910][T16472] geneve4: entered allmulticast mode [ 385.134347][T16480] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 385.195264][ T9868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.238555][ T9868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.274210][ T9868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.412244][ T8044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.440639][T16480] tipc: Enabled bearer , priority 0 [ 385.509194][T16484] lo speed is unknown, defaulting to 1000 [ 386.170088][T16486] netlink: 'syz.7.2583': attribute type 1 has an invalid length. [ 386.278045][T16531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2591'. [ 386.319082][T16531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2591'. [ 386.762881][T16548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2596'. [ 386.938863][T16552] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 387.400827][T16565] netlink: 'syz.4.2598': attribute type 1 has an invalid length. [ 387.932924][T16585] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 387.954403][T16585] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 387.969117][T16586] dvmrp0: left allmulticast mode [ 387.983964][T16586] pimreg: left allmulticast mode [ 388.469441][T16607] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2609'. [ 388.653867][T16614] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2611'. [ 388.684457][T16609] bond2: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 388.714572][T16609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.925071][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2616'. [ 388.966404][T16622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.144235][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2622'. [ 389.165115][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2622'. [ 389.195800][T16639] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2622'. [ 389.222632][T16637] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2622'. [ 389.362326][T16649] IPv6: Can't replace route, no match found [ 389.373496][T16649] IPv6: Can't replace route, no match found [ 389.645947][T16670] netlink: 'syz.7.2627': attribute type 6 has an invalid length. [ 389.901198][T16677] syzkaller0: entered promiscuous mode [ 389.917578][T16677] syzkaller0: entered allmulticast mode [ 389.954193][T16682] pim6reg: renamed from team0 (while UP) [ 389.984868][T16682] tipc: Disabling bearer [ 390.560737][T16708] bond11 (unregistering): Released all slaves [ 390.675076][T16714] set match dimension is over the limit! [ 390.994821][T16730] bond0: Unable to set down delay as MII monitoring is disabled [ 391.168457][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.278653][T16731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.295629][T16731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.323304][T16731] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 391.368835][T16752] __nla_validate_parse: 5 callbacks suppressed [ 391.368854][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2647'. [ 391.575351][T16757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'. [ 391.685749][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 391.704534][T16766] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2652'. [ 392.005282][T16772] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.554647][T16801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.783391][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 392.886539][T16822] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2668'. [ 392.931839][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2668'. [ 393.668788][T16874] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2680'. [ 393.682130][T16865] bond3: option arp_interval: invalid value (18446744073709551615) [ 393.690074][T16865] bond3: option arp_interval: allowed values 0 - 2147483647 [ 393.732311][T16875] ip_tables: iptables: counters copy to user failed while replacing table [ 393.754075][T16865] bond3 (unregistering): Released all slaves [ 393.838380][T16863] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 394.053603][ T8045] tipc: Subscription rejected, illegal request [ 394.083466][T16888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2686'. [ 394.116567][T16890] set match dimension is over the limit! [ 394.262364][T16892] block nbd3: server does not support multiple connections per device. [ 394.287930][T16892] block nbd3: shutting down sockets [ 394.317690][T16900] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 394.352972][T16900] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 394.466818][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2690'. [ 394.497902][T16903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.639186][T16908] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.707253][T16912] tipc: Enabling of bearer rejected, already enabled [ 394.838347][T16914] nbd: socks must be embedded in a SOCK_ITEM attr [ 395.068993][T16924] ipvlan2: entered promiscuous mode [ 395.235659][T16934] syzkaller0: entered promiscuous mode [ 395.262156][T16934] syzkaller0: entered allmulticast mode [ 395.344193][T16935] tipc: Enabled bearer , priority 0 [ 395.376442][T16934] tipc: Enabling of bearer rejected, already enabled [ 395.483639][T16934] tipc: Resetting bearer [ 395.603658][T16934] tipc: Disabling bearer [ 395.792406][T16965] xt_hashlimit: size too large, truncated to 1048576 [ 395.833519][T16965] xt_hashlimit: invalid interval [ 395.935383][T16976] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 395.952662][T16974] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 395.966463][T16978] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 396.019869][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 396.032586][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 396.047421][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 396.061673][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 396.076871][ T5618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.092313][T16976] tipc: Enabling of bearer rejected, already enabled [ 396.179341][ T4930] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 396.188594][ T4930] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 396.233947][ T4930] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 396.243752][ T4930] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 396.259803][ T4930] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.556128][T16987] netlink: 'syz.5.2712': attribute type 1 has an invalid length. [ 396.698677][T16987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.769420][T16992] macvlan2: entered promiscuous mode [ 396.818977][T16992] macvlan2: entered allmulticast mode [ 396.855568][T16992] bond5: entered allmulticast mode [ 396.875866][T16992] bond5: entered promiscuous mode [ 396.889630][T16992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.916669][T16992] team0: Port device macvlan2 added [ 397.357333][T17032] __nla_validate_parse: 3 callbacks suppressed [ 397.357365][T17032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2721'. [ 397.389251][T17033] syzkaller0: entered promiscuous mode [ 397.398905][T17033] syzkaller0: entered allmulticast mode [ 397.422111][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2723'. [ 397.437411][T16977] lo speed is unknown, defaulting to 1000 [ 397.471050][T17033] bond2 (unregistering): Released all slaves [ 397.497548][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2723'. [ 397.510013][T17037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2724'. [ 397.863940][T17055] lo speed is unknown, defaulting to 1000 [ 397.865435][T17053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2727'. [ 397.879743][T17053] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2727'. [ 398.142373][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2729'. [ 398.232937][T17062] vlan0: entered allmulticast mode [ 398.252676][T17062] bridge4: entered allmulticast mode [ 398.267507][T16977] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.278890][T16977] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.292142][T16977] bridge_slave_0: entered allmulticast mode [ 398.310583][ T4930] Bluetooth: hci8: command tx timeout [ 398.312271][T16977] bridge_slave_0: entered promiscuous mode [ 398.350012][T16977] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.368385][T16977] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.398708][T16977] bridge_slave_1: entered allmulticast mode [ 398.434016][T16977] bridge_slave_1: entered promiscuous mode [ 398.584790][T16977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.746985][T16977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.853929][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'. [ 398.869503][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'. [ 398.957570][T17096] netlink: 'syz.5.2736': attribute type 30 has an invalid length. [ 398.976314][T17097] netlink: 'syz.5.2736': attribute type 30 has an invalid length. [ 399.106034][T16977] team0: Port device team_slave_0 added [ 399.167251][T16977] team0: Port device team_slave_1 added [ 399.282125][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'. [ 399.357345][T16977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.376930][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.454338][T17118] netlink: 'syz.0.2742': attribute type 58 has an invalid length. [ 399.468138][T16977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.471839][T17119] netlink: 'syz.0.2742': attribute type 58 has an invalid length. [ 399.563616][T16977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.581338][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.634507][T16977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.693702][T17122] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 399.730122][T17122] bond9: option mode: invalid value (7) [ 399.737593][T17122] bond9 (unregistering): Released all slaves [ 399.854543][T17122] netlink: 'syz.4.2743': attribute type 10 has an invalid length. [ 400.032270][T17122] dummy0: entered promiscuous mode [ 400.166849][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.214670][T16977] hsr_slave_0: entered promiscuous mode [ 400.246177][T16977] hsr_slave_1: entered promiscuous mode [ 400.264485][T16977] debugfs: 'hsr0' already exists in 'hsr' [ 400.282195][T16977] Cannot create hsr debugfs directory [ 400.300581][ T1167] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.390792][ T4930] Bluetooth: hci8: command tx timeout [ 400.396642][ T8045] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.396726][ T8045] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.396756][ T8045] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.627679][T17153] netlink: 'syz.5.2753': attribute type 7 has an invalid length. [ 400.650410][T17153] netlink: 'syz.5.2753': attribute type 8 has an invalid length. [ 400.803804][T17156] netlink: 'syz.7.2755': attribute type 4 has an invalid length. [ 400.851680][T17159] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 401.400669][T17163] tipc: Enabling of bearer rejected, failed to enable media [ 401.737479][T17186] IPVS: Error connecting to the multicast addr [ 401.899501][ T1167] IPVS: starting estimator thread 0... [ 402.011084][T17210] IPVS: using max 36 ests per chain, 86400 per kthread [ 402.023280][T17186] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 402.333119][T17222] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 402.472780][ T4930] Bluetooth: hci8: command tx timeout [ 402.806069][T17222] tipc: Enabling of bearer rejected, failed to enable media [ 402.915458][T16977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.952951][T16977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.973553][T16977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.036172][T16977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.055424][T16977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.095881][T16977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.112427][T16977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.136152][T16977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.402954][T17262] __nla_validate_parse: 6 callbacks suppressed [ 403.402974][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2774'. [ 403.450001][T16977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.499028][T17265] tipc: Invalid UDP bearer configuration [ 403.499091][T17265] tipc: Enabling of bearer rejected, failed to enable media [ 403.544473][T17263] lo speed is unknown, defaulting to 1000 [ 403.607068][T17273] netlink: 'syz.5.2778': attribute type 10 has an invalid length. [ 403.616024][T17273] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2778'. [ 403.634121][T17262] bond2: Removing last arp target with arp_interval on [ 403.657555][ T30] audit: type=1804 audit(1787527160.996:7): pid=17273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2778" name="/newroot/381/cgroup.controllers" dev="tmpfs" ino=1970 res=1 errno=0 [ 403.681620][ T30] audit: type=1800 audit(1787527160.996:8): pid=17273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2778" name="cgroup.controllers" dev="tmpfs" ino=1970 res=0 errno=0 [ 403.713578][T16977] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.931696][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.939098][ T8045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.977665][T17285] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 404.104871][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.121298][ T8045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.433528][T17309] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2786'. [ 404.566109][ T4930] Bluetooth: hci8: command tx timeout [ 404.667420][T17311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.705640][T17317] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 404.820357][T17319] syz_tun: entered allmulticast mode [ 404.853666][T17318] syz_tun: left allmulticast mode [ 405.391609][T17356] netlink: 'syz.0.2794': attribute type 4 has an invalid length. [ 405.428522][T17356] netlink: 'syz.0.2794': attribute type 4 has an invalid length. [ 405.673132][T17362] lo speed is unknown, defaulting to 1000 [ 406.389414][T16977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.714872][T16977] veth0_vlan: entered promiscuous mode [ 406.773506][T16977] veth1_vlan: entered promiscuous mode [ 406.929355][T17385] lo speed is unknown, defaulting to 1000 [ 407.081434][T17397] ip_tables: iptables: counters copy to user failed while replacing table [ 407.106705][T17399] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2808'. [ 407.209033][T16977] veth0_macvtap: entered promiscuous mode [ 407.275392][T16977] veth1_macvtap: entered promiscuous mode [ 407.326492][T17411] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 407.348311][T16977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.363703][T17411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.692185][T17418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2813'. [ 407.708434][T17418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2813'. [ 407.723644][T16977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.764962][ T8529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.812252][ T8529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.957489][ T9867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.998828][ T9867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.411967][T17436] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.929731][ T8529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.945465][ T8529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.993396][ T8529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.002383][ T8529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.105957][T17471] netlink: 'syz.2.2707': attribute type 32 has an invalid length. [ 410.790635][ T31] INFO: task syz.3.1455:11879 blocked for more than 143 seconds. [ 410.798482][ T31] Not tainted syzkaller #0 [ 410.803596][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.812438][ T31] task:syz.3.1455 state:D stack:26192 pid:11879 tgid:11878 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 410.825026][ T31] Call Trace: [ 410.828446][ T31] [ 410.831648][ T31] __schedule+0x17d4/0x5630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 410.836396][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 410.842947][ T31] ? preempt_schedule_notrace+0x56/0x90 [ 410.848535][ T31] ? __pfx___schedule+0x10/0x10 [ 410.853659][ T31] ? schedule+0x90/0x2b0 [ 410.857992][ T31] schedule+0x164/0x2b0 [ 410.862416][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.867967][ T31] __mutex_lock+0x7c1/0x1550 [ 410.872951][ T31] ? __mutex_lock+0x5d4/0x1550 [ 410.877802][ T31] ? nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 410.885789][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.891258][ T31] ? net_generic+0x1e/0x240 [ 410.895847][ T31] ? net_generic+0x1e/0x240 [ 410.900591][ T31] nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 410.907018][ T31] ? irqentry_exit+0x218/0x910 [ 410.912215][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 410.917531][ T31] ? irqentry_exit+0x218/0x910 [ 410.922452][ T31] ? trace_irq_disable+0x3b/0x140 [ 410.927618][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 410.935619][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 410.956980][ T31] genl_dumpit+0x10b/0x1b0 [ 410.989940][ T31] netlink_dump+0x711/0xee0 [ 411.017661][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 411.053567][ T31] ? genl_start+0x497/0x6d0 [ 411.067214][ T31] __netlink_dump_start+0x589/0x7b0 [ 411.084430][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 411.103626][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 411.122450][ T31] ? __pfx_genl_start+0x10/0x10 [ 411.139352][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 411.158718][ T31] ? __pfx_genl_done+0x10/0x10 [ 411.179264][ T31] ? bpf_lsm_capable+0x9/0x20 [ 411.196504][ T31] ? security_capable+0x7e/0x2c0 [ 411.214938][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 411.236184][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.257818][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 411.287031][ T31] netlink_rcv_skb+0x226/0x4a0 [ 411.309757][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.351688][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.359790][ T31] ? down_read+0x2be/0x330 [ 411.390369][ T31] genl_rcv+0x28/0x40 [ 411.408845][ T31] netlink_unicast+0x7bd/0x940 [ 411.434709][ T31] netlink_sendmsg+0x813/0xb40 [ 411.450191][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.480422][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 411.485681][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.510739][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 411.517500][ T31] ____sys_sendmsg+0x54e/0x850 [ 411.540560][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.550457][ T31] ? import_iovec+0x73/0xa0 [ 411.575380][ T31] ___sys_sendmsg+0x2a5/0x360 [ 411.600442][ T31] ? __lock_acquire+0x683/0x2cf0 [ 411.610429][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.631836][ T31] ? futex_wake+0x51b/0x5f0 [ 411.651286][ T31] ? __fget_files+0x2a/0x420 [ 411.677018][ T31] ? __fget_files+0x3a2/0x420 [ 411.691107][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 411.710894][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.734008][ T31] do_syscall_64+0x166/0x520 [ 411.770374][ T31] ? trace_irq_disable+0x3b/0x140 [ 411.775570][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.793655][ T31] ? clear_bhb_loop+0x70/0xc0 [ 411.811019][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.826538][ T31] RIP: 0033:0x7f9f70f9e0d9 [ 411.831382][ T31] RSP: 002b:00007f9f71f1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.842871][ T31] RAX: ffffffffffffffda RBX: 00007f9f71225fa0 RCX: 00007f9f70f9e0d9 [ 411.851082][ T31] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 0000000000000007 [ 411.859238][ T31] RBP: 00007f9f71035024 R08: 0000000000000000 R09: 0000000000000000 [ 411.868396][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.881837][ T31] R13: 00007f9f71226038 R14: 00007f9f71225fa0 R15: 00007fff49a53c48 [ 411.902289][ T31] [ 411.910703][ T31] [ 411.910703][ T31] Showing all locks held in the system: [ 411.931894][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 411.950433][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 411.962498][ T31] locks held by getty/5372: 2, on CPU#0: [ 411.968551][ T31] #0: ffff88803669b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.979342][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 411.990149][ T31] locks held by syz-executor/5624: 1, on CPU#0: [ 411.997192][ T31] #0: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 412.008877][ T31] locks held by kworker/u8:13/8044: 4, last CPU#1: [ 412.015561][ T31] #0: ffff8880b873b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 412.025686][ T31] #1: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 412.034717][ T31] #2: ffff8880b8726018 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 412.043928][ T31] #3: ffffffff9a9e3998 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 412.054490][ T31] locks held by kworker/u8:16/8529: 2, last CPU#1: [ 412.061161][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 412.073491][ T31] #1: ffffc90005657c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 412.086698][ T31] locks held by syz.1.862/9455: 2, on CPU#0: [ 412.092981][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.101335][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 412.112060][ T31] locks held by syz-executor/10060: 1, on CPU#0: [ 412.118444][ T31] #0: ffff888057f38ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 412.128809][ T31] locks held by syz.3.1455/11879: 3, on CPU#1: [ 412.135205][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.144378][ T31] #1: ffff88801e31a6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 412.155036][ T31] #2: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 412.166162][ T31] locks held by syz.6.1784/13351: 2, on CPU#1: [ 412.172515][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.180975][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 412.191447][ T31] [ 412.196627][ T31] ============================================= [ 412.196627][ T31] [ 412.207005][ T31] NMI backtrace for cpu 1 [ 412.207035][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.207063][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.207077][ T31] Call Trace: [ 412.207086][ T31] [ 412.207095][ T31] dump_stack_lvl+0xe8/0x150 [ 412.207163][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 412.207322][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.207374][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 412.207417][ T31] sys_info+0x135/0x170 [ 412.207449][ T31] watchdog+0xfd7/0x1030 [ 412.207499][ T31] ? watchdog+0x1c7/0x1030 [ 412.207540][ T31] kthread+0x38b/0x480 [ 412.207575][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.207606][ T31] ? __pfx_kthread+0x10/0x10 [ 412.207643][ T31] ret_from_fork+0x514/0xb70 [ 412.207694][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.207731][ T31] ? __switch_to+0xc89/0x1420 [ 412.207763][ T31] ? __pfx_kthread+0x10/0x10 [ 412.207800][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.207855][ T31] [ 412.207864][ T31] Sending NMI from CPU 1 to CPUs 0: [ 412.326421][ C0] NMI backtrace for cpu 0 [ 412.326443][ C0] CPU: 0 UID: 0 PID: 8045 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 412.326470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.326484][ C0] Workqueue: events_unbound toggle_allocation_gate [ 412.326550][ C0] RIP: 0010:bcmp+0x1af/0x230 [ 412.326582][ C0] Code: 48 c1 e9 03 42 0f b6 0c 39 84 c9 75 2b 0f b6 04 1f 48 8d 0c 1e 49 89 c8 49 c1 e8 03 47 0f b6 04 38 45 84 c0 75 3a 0f b6 0c 1e <29> c8 75 60 48 ff c3 48 39 da 75 c3 eb 54 41 89 c0 41 80 e0 07 41 [ 412.326601][ C0] RSP: 0018:ffffc90003bd7740 EFLAGS: 00000046 [ 412.326618][ C0] RAX: 000000000000005c RBX: 0000000000000000 RCX: 000000000000005c [ 412.326632][ C0] RDX: 0000000000000004 RSI: ffffffff9372acdb RDI: ffffffff822aa28d [ 412.326647][ C0] RBP: ffffc90003bd7890 R08: 0000000000000000 R09: dffffc0000000000 [ 412.326671][ C0] R10: ffffc90003bd7680 R11: fffff5200077aed8 R12: dffffc0000000000 [ 412.326688][ C0] R13: ffff88801b061558 R14: 00002aaaaaaac000 R15: dffffc0000000000 [ 412.326704][ C0] FS: 0000000000000000(0000) GS:ffff888124f24000(0000) knlGS:0000000000000000 [ 412.326722][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.326736][ C0] CR2: 00007fd8de557e20 CR3: 000000000e946000 CR4: 00000000003526f0 [ 412.326755][ C0] Call Trace: [ 412.326763][ C0] [ 412.326775][ C0] ? __kmalloc_cache_noprof+0xbd/0x660 [ 412.326814][ C0] __text_poke+0x752/0x9b0 [ 412.326841][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 412.326863][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 412.326895][ C0] ? __kmalloc_cache_noprof+0xbd/0x660 [ 412.326921][ C0] ? __pfx___text_poke+0x10/0x10 [ 412.326950][ C0] smp_text_poke_batch_finish+0x8f2/0x1110 [ 412.326975][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 412.327006][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 412.327035][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 412.327065][ C0] ? __jump_label_update+0x347/0x370 [ 412.327109][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 412.327136][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 412.327166][ C0] ? process_scheduled_works+0xa1a/0x14c0 [ 412.327191][ C0] static_key_enable+0x1a/0x20 [ 412.327218][ C0] toggle_allocation_gate+0xab/0x290 [ 412.327247][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 412.327276][ C0] ? process_scheduled_works+0xa1a/0x14c0 [ 412.327306][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 412.327330][ C0] ? process_scheduled_works+0xa1a/0x14c0 [ 412.327353][ C0] process_scheduled_works+0xa88/0x14c0 [ 412.327395][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.327426][ C0] ? assign_work+0x3cf/0x5d0 [ 412.327453][ C0] worker_thread+0xa47/0xfb0 [ 412.327496][ C0] kthread+0x38b/0x480 [ 412.327525][ C0] ? __pfx_worker_thread+0x10/0x10 [ 412.327548][ C0] ? __pfx_kthread+0x10/0x10 [ 412.327579][ C0] ret_from_fork+0x514/0xb70 [ 412.327610][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.327640][ C0] ? __switch_to+0xc89/0x1420 [ 412.327674][ C0] ? __pfx_kthread+0x10/0x10 [ 412.327705][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.327748][ C0] [ 412.663815][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 412.670762][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.679922][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.690026][ T31] Call Trace: [ 412.693354][ T31] [ 412.696501][ T31] vpanic+0x56d/0xa60 [ 412.700546][ T31] ? __pfx___schedule+0x10/0x10 [ 412.705447][ T31] ? __pfx_vpanic+0x10/0x10 [ 412.710014][ T31] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 412.716242][ T31] panic+0xc5/0xd0 [ 412.720034][ T31] ? __pfx_panic+0x10/0x10 [ 412.724502][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 412.730017][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 412.735433][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 412.741740][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 412.747989][ T31] watchdog+0x1030/0x1030 [ 412.752389][ T31] ? watchdog+0x1c7/0x1030 [ 412.756868][ T31] kthread+0x38b/0x480 [ 412.760999][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.765850][ T31] ? __pfx_kthread+0x10/0x10 [ 412.770510][ T31] ret_from_fork+0x514/0xb70 [ 412.775169][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.780333][ T31] ? __switch_to+0xc89/0x1420 [ 412.785072][ T31] ? __pfx_kthread+0x10/0x10 [ 412.789730][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.794575][ T31] [ 412.799945][ T31] Kernel Offset: disabled [ 412.804297][ T31] Rebooting in 86400 seconds..