last executing test programs: 3m3.188473022s ago: executing program 2 (id=5649): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xa8954c89) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000580)='sched_switch\x00', r0, 0x0, 0x10001}, 0x18) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xb, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES8=r1, @ANYRESHEX=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="0100000000000000000006000009"], 0xffffffffffffffb0}, 0x2, 0x34005, 0x0, 0x54}, 0x40000) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040c0}, 0x8800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f00000006c0)=@ethtool_regs={0x4, 0x80, 0x142, "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"}}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) close(0xffffffffffffffff) r7 = socket$inet(0xa, 0x801, 0x84) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000680)={r2}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0xe5f1e69b}, 0x0, 0x0, 0x1, 0x630d, 0xa, 0xffffffffffffffff, 0x4d, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x7ff, 0xc8}, 0x0, 0x0, 0x9, 0x5, 0x45, 0x3, 0x40, 0xb}}], 0xb0}, 0x0) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r7, 0x8) setsockopt$MRT_ASSERT(r7, 0x0, 0xcf, &(0x7f0000000500)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="05", 0x1, 0x8, 0x0, 0xffffffffffffffc1) r9 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000000), 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x1}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x1fffffffffffff2e, &(0x7f0000000d80)=ANY=[@ANYBLOB="180002fc03000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r1, @ANYRES32=0x0], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[{0x1, 0x1, 0x1}, {0x2, 0x3, 0xc, 0xa}, {0x5, 0x5, 0x3, 0x7}, {0x1, 0x1, 0x5}, {0x2, 0x2, 0xd, 0xb}, {0x3, 0x2, 0x5, 0x8}, {0x0, 0x3, 0x4}, {0x0, 0x3, 0x6, 0x5}, {0x4, 0x5, 0xc, 0x6}], 0x10, 0x3ff}, 0x94) 3m2.260479471s ago: executing program 2 (id=5653): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r2, 0x26, 0x0, @void}, 0x10) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201300000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x6) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x300, 0x70bd28, 0xfffffff8, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x16}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe98}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r7, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x8d43, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x81}}]}, 0xc4}}, 0x2c000010) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x8007f, @empty, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xec99}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffff}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xc93d}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xec2e}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) accept$alg(r0, 0x0, 0x0) 3m1.852408254s ago: executing program 2 (id=5658): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000440)=0x1003, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, 0x0}}], 0x1, 0x80) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xe, 0x8}}]}]}]}, 0x38}, 0x1, 0x2, 0x0, 0x80}, 0x150) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000800000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800001fb703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x5}]}]}, 0x23c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, [@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x487}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x31, &(0x7f0000000180)=""/49, 0x41100, 0x30, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0xc, 0x6, 0x4}, 0x10, r7, r3, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x3, 0xb, 0x5}, {0x4, 0x1, 0xd, 0x1}], 0x10, 0x3}, 0x94) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time_for_children\x00') sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x7c, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x12089}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xd0}, @IFLA_MAP={0x24, 0xe, {0x8, 0x3ff, 0x7, 0x8, 0xa, 0x5}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_EVENT={0x8, 0x2c, 0xf}, @IFLA_EVENT={0x8, 0x2c, 0x1ff}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 3m1.751231226s ago: executing program 2 (id=5661): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8004) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8004) (async) 3m1.596702028s ago: executing program 2 (id=5663): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001100)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000001200)=0xe8) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001240)={0x28c, 0x21, 0x400, 0x70bd29, 0x25dfdbfb, {0x16}, [@nested={0xd5, 0x96, 0x0, 0x1, [@typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x42}, @nested={0x4, 0x68}, @generic="f3ba95d05fdca521ead8c324eeaffdd275551843bdec56a29fc1ec5f1bae1cf1bedd41248c0aa5725a47bf4702041f98e744c98a52fddea2b0abe9f65a46aa6147df5d493a7696f0e8c55bf262715d3b4294ecceef42", @nested={0x4, 0x10e}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0x7fb}, @generic="708f3186d6abacab04c8f217e5dddc81ee2b5106c58e0aeca28082a3c657bec517f7829cc5b84e09919c458d56eaa64cfd5292f455ec1cefa47bbebcb0beb368dc7729e8f44ec917bb83d8", @nested={0x4, 0x117}, @nested={0x4, 0x116}]}, @nested={0xd0, 0x83, 0x0, 0x1, [@nested={0x4, 0x18}, @generic="3ba84d8d7acdb2b943e0c38b3ac73de377d200bfdc4e136f7ff0395c9d98d1c4b54847ba67481bef88dd802c2c68cea12d1df41168bd4f1e206e5757e723dfa5e88ef9bb6bf88f8bf3e8a9e8f67a2f84ee4393b01d27a38887316d7c04c15e26f7c48d57d5c13121f6056ad8473bdd494abb032feeeb854a6df4b14fea8dea60e4daf7d4bb8a2c45873cae46517792ac0fefca14b3d9aa5a37d4a499e68deacc0e9602f73793e6ab8652424b5f1d42d90cbeb378506bcc728e8edd36c49ecbe5", @typed={0x8, 0xc3, 0x0, 0x0, @fd=r3}]}, @typed={0x8, 0x33, 0x0, 0x0, @uid=r5}, @nested={0xc6, 0xdb, 0x0, 0x1, [@generic="992587b444640941aa361d21e98c25a0b7997d297ec81741c80cb3b3ff8b23c877300da575a62da1965fc0a37ce9a2f50c2c6b64bacf4bf6cd79599593519be41dadb95dcc0de1c4c09a9e51ab7ebcb1ab76ff81be", @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@broadcast}, @generic="1d31f9d2f87bf4f657a13378c099f445e5b567aabc91f68c07a85ad18eac71a988a3cd40a86b2b8570e59c4716d2ec8d8940cdde39bb5c3762eda9b663859351911a4efa2e6d4715490c98e81f58419de9c49f87a2b22fa8fb016c714a1e31c398", @nested={0x4, 0x2d}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000015c0)={'wlan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001b80)={'syztnl2\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r4, 0x2f, 0x4, 0xc3, 0x7ff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x1, 0x7800, 0x2, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f00)={r3, 0xe0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000001d00)=[{}], 0x8, 0x10, &(0x7f0000001d40), &(0x7f0000001d80), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000001dc0)}}, 0x10) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', 0x0, r3, 0x0, 0x4, 0x4}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x13, 0x1c, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @alu={0x0, 0x1, 0x4, 0x6, 0x6, 0xfffffffffffffff8, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x4b}]}, &(0x7f0000001a00)='syzkaller\x00', 0x2, 0xad, &(0x7f0000001a40)=""/173, 0x40f00, 0x44, '\x00', r6, @fallback=0x24, r3, 0x8, &(0x7f0000001bc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0x5, 0x7, 0x7}, 0x10, r7, r3, 0x3, &(0x7f0000002040)=[r8, r9, r3, r3], &(0x7f0000002080)=[{0x5, 0x5, 0x0, 0x3}, {0x5, 0x4, 0x9, 0x3}, {0x4, 0x1, 0x10, 0x6}]}, 0x94) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002380)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000002200)={0x120, 0x15, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xcf, 0x8, "6bd80b0839acd1186e21d70511e2e821f0fd5fc45938fbbdbc7b8ff3595e3ef7b97045b1bf2b3ce9336ab36bd3cbf9ad67f4835d509087b8197fd51818d3e3f8356c362298a0bf07d32c30fccc920c43c198868ceb888c4639e05688ba50f8bbcb68f2504033f30a7c61c670378f3739e16523b75621e6ba07f562699d250a058fc371207124b2d69663e4bde79090f901f5f6dfd9947af229b6d7805533c821f84ea2076ef71dcf2162ebe9da1702876d7055baa3ca1083b4b53d1420713dc8316d83821c1d34fc72b5e7"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x240408c5}, 0x4044800) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002400)={0xe4, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x28}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002700)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000002840), r3) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002d00)={0x0, 0x3}, &(0x7f0000002d40)=0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r10, 0xc, 0x30}, &(0x7f0000000100)=0xc) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c1, 0xffffffff, 0xfffffff8}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220200000000000002000000e001e"], 0x2c}}, 0x0) 3m1.338374067s ago: executing program 2 (id=5665): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0xcc, @mcast2, 0x1}}, 0x0, 0x0, 0xe, 0x0, "f19fee81ac0408e00fa01abddc1e781657803f7364f44362551c9110e812ab70d82a2d12b4265ac87d54361e663ce77b9cf5e40044842b38a0f9c6eb7d7ee9f3507a9f30dfc4f0becac28f91b487079a"}, 0xd8) 3m0.893053916s ago: executing program 32 (id=5665): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0xcc, @mcast2, 0x1}}, 0x0, 0x0, 0xe, 0x0, "f19fee81ac0408e00fa01abddc1e781657803f7364f44362551c9110e812ab70d82a2d12b4265ac87d54361e663ce77b9cf5e40044842b38a0f9c6eb7d7ee9f3507a9f30dfc4f0becac28f91b487079a"}, 0xd8) 24.870102117s ago: executing program 0 (id=6192): unshare(0x26020480) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 24.726842987s ago: executing program 3 (id=6193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='fib6_table_lookup\x00', r0, 0x0, 0x10000000ffff8}, 0xffffffffffffff29) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 24.656232765s ago: executing program 0 (id=6194): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v'], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180), 0x0}, 0x20) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) close(0xffffffffffffffff) connect$inet(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x931b}}, 0x4, 0xff80}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44840) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x3, 'wlc\x00', 0x1b, 0x7, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000afc5000000020300000004000000", @ANYRES32=0x0, @ANYBLOB="0131010000000000180012800e00010069703665727370616e000000040002800a000100ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 24.623161275s ago: executing program 3 (id=6195): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x16, 0x0, &(0x7f0000000140)="259a00f2710000001000"/22, 0x0, 0xd11, 0x2a0, 0x0, 0xffffffffffffff80, 0x0, 0x0}, 0x50) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000000000)=""/149, 0xaa) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x601200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000001000000000000001f0f00"/28], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000200), &(0x7f00000002c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) close(r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='M\b\x00\x00', @ANYRESOCT, @ANYBLOB="010000000d0001000000010000e6ff00000001410000001c001700000000000000006574", @ANYRESDEC=r0, @ANYRES16=r3, @ANYRES16=r5], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000000000000400000000000000", @ANYRES32, @ANYBLOB="030000000000004000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r9, {0x4, 0x9}, {0x0, 0xb}, {0x5, 0xa858712265c6c23}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f0000000380)=0x10, 0x800) 24.322867425s ago: executing program 3 (id=6199): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x29bb, 0x80000000, 0x40000, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x3, 0x1, 0x0, 0xe}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x10000009, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 23.937619198s ago: executing program 0 (id=6200): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x18, 0x0, @val=@kprobe_multi=@syms={0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000000080)='\xee[:%$#(*)\\\'\x00', &(0x7f00000000c0)=']*]!:\x00', &(0x7f0000000100)='}##\x00']}}, 0x30) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000002c0)={0xf, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "3042fe6e239d80"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000012c0)={{r4, 0x100, 0x9d, 0x36, 0x10001, 0x81, 0x100000000, 0x8, 0x54, 0xfffffffd, 0x0, 0xffff, 0x7, 0x2, 0xe92}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000001380)={0x1, 0x21179281, 0x0, 0x1, 0x1, [0x4, 0x4, 0x22d3, 0x9]}) socket$alg(0x26, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r5, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x500, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000001400)=0xda7b) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000001440)) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000001480)=@full={0xb, @remote, @remote, 0x0, [@rose, @bcast, @default, @rose, @rose, @rose]}, &(0x7f00000014c0)=0x40, 0x400) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000001500)=0x1) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000001540)={0x2, 0x0, @multicast2}, &(0x7f0000001580)=0x10) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000001600)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000015c0), {[{{@arp={@empty, @multicast1, 0xff, 0xffffffff, 0x4, 0xc, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x8000, 0x9, 0x5, 0x1748, 0x4, 'veth0_vlan\x00', 'veth1\x00', {}, {}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0xf1d}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @broadcast, @remote, 0x1, 0xe81d52d4db50684}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3f}, @empty, 0x0, 0xffffffff, 0x9, 0xc, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xffff, 0x0, 0x8001, 0x6, 0x2, 0x4, 'gre0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x0, 0x98}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001a40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000001a80)={0x8, 'ipvlan1\x00', {'bridge_slave_1\x00'}, 0x40}) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000001fc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2a02000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001b00)={0x464, 0x3f3, 0x100, 0x70bd2a, 0x25dfdbff, {0x2, 0x2, 0x30, [0x400, 0x2, 0x7, 0x3984, 0xffffffff, 0x0, 0x7f, 0x7, 0x8, 0x1, 0xc, 0x4, 0x4, 0x3ebf, 0xffffffff, 0x5, 0x400, 0x2, 0x5, 0x4, 0x8, 0x9, 0xe, 0x0, 0x4, 0xb2, 0x3, 0xffff8000, 0x81, 0x4, 0x9, 0x4, 0x5, 0x8001, 0x80000, 0x9, 0x0, 0xfc, 0x5, 0x2, 0xd, 0x800, 0x8, 0x0, 0x2, 0x2, 0x1, 0x1000, 0x5, 0xd, 0x406, 0xc33, 0x1, 0x66d30265, 0x401, 0x9, 0x101, 0x9, 0x9, 0x1, 0x80000000, 0xf, 0x9, 0x200], [0x8, 0x4, 0x2, 0x6, 0x3, 0xfff, 0x3, 0x2, 0x8, 0x1, 0x4, 0x7, 0xff, 0x1, 0x3, 0x40, 0x7fffffff, 0x128a, 0x80000000, 0x700000, 0x0, 0x2, 0x7802, 0x6, 0x2, 0x4, 0x10001, 0xc, 0x9, 0x1, 0x5, 0x2, 0x6, 0x0, 0xffff0000, 0x200, 0x5e, 0x7, 0x7, 0x101, 0x5f0, 0x7f, 0x3, 0x1ff, 0x4, 0x1, 0x9, 0x5, 0x2, 0x3, 0x6, 0x9, 0x6, 0x7, 0xffffffff, 0x1000, 0x101, 0x80000001, 0x2, 0x0, 0x962, 0x100, 0x9, 0x7], [0x7, 0x100, 0x0, 0xb55, 0xfffffe01, 0x7, 0xba9, 0x0, 0x9, 0x48, 0x400, 0x5, 0xe2a5, 0xfffffff0, 0x0, 0x6, 0x8, 0x80000000, 0xfffffff9, 0x3501, 0x0, 0xc, 0x40, 0x400, 0xbecc, 0x7, 0x3, 0x8, 0xb6, 0x7ff, 0xe1c3, 0x7, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x1, 0x1, 0x1d1, 0x9, 0x6706, 0x400, 0x4, 0xf072, 0x4, 0x6, 0x401, 0x7, 0xd, 0x5, 0x1, 0x1ff, 0x7, 0x7, 0x2, 0x1ff, 0x9, 0x200, 0x6, 0x4, 0x8, 0x907], [0x9, 0x100, 0x0, 0x800, 0x8, 0x2, 0x8, 0x6, 0x80, 0x5, 0x8, 0x7f, 0x5e6b, 0x4, 0x80000001, 0x5, 0xf49, 0x4, 0x4, 0x0, 0x6, 0x35a9, 0x195, 0x18, 0x9dd, 0xa, 0x509f, 0xfffffff7, 0xffffffff, 0x0, 0x7, 0x3, 0x3, 0x4, 0x5, 0x3, 0x4e, 0x9, 0x5, 0x9, 0x4c, 0xd1a8, 0x0, 0x791b, 0x5, 0xffffffff, 0x9, 0x6, 0xb3, 0x0, 0x6, 0xffffff37, 0x5, 0x1, 0x4, 0x9, 0x462, 0x381, 0xfffffffe, 0x4, 0x1, 0x2, 0xffffff45, 0x200], 0x41, ['+!.y-:\x00', '.(\x00', ')\xf6\x00', 'gre0\x00', '!\x00', '\xbb\xbb\xbb\xbb\xbb\xbb', './cgroup.cpu/syz1\x00', '&*\x00', './cgroup.cpu/syz1\x00']}, ["", "", "", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f00000022c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002040)={0x208, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x208}}, 0x90) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r11, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040800}, 0x4000000) socket$netlink(0x10, 0x3, 0x8) r13 = accept$inet6(0xffffffffffffffff, &(0x7f0000002480)={0xa, 0x0, 0x0, @dev}, &(0x7f00000024c0)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r13, 0x84, 0x70, &(0x7f0000002580)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0x2, 0x6a5, 0x8, 0x3e3c, 0x6, 0xffffffffffffffff, 0x40, 0x80000001, 0x35, 0x0, 0x93, 0xa, 0x1, 0x4, 0x80000000]}, &(0x7f0000002680)=0x100) 23.860537493s ago: executing program 0 (id=6201): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x6}]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x3e) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r2) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000140)=0x6, 0x4) 23.546687454s ago: executing program 0 (id=6203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_1\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r6, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r6, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x802, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178cdeb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x802, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178cdeb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000380)=[{0x4, 0x5, 0x5, 0xf}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000140)={0x2, 0x4e5c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @broadcast}}}], 0x20}}], 0x1, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0xfdef) 22.88021539s ago: executing program 3 (id=6205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendto$packet(r1, &(0x7f0000000000)="f5ac0e744e29f4f828f1c5af672b0e75aca397d03e84040eca7e6da714b069e740f59b372e6816c64ce637ab187bd4518dc380", 0x33, 0x400c054, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @random="49862c0926dc"}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c000008000180d8ba7c430c000380050001"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) 22.830671192s ago: executing program 0 (id=6206): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040b0000000100000000160000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, 0x0, 0x0, 0x1, r1}, 0x38) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x5, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0xbc, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, r3, 0x36, 0x2c, 0x0, @void, @void, @void, @value=r4}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xffffff6c}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x68c}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400d0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x1f) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) 22.826414922s ago: executing program 3 (id=6207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) 22.820622587s ago: executing program 3 (id=6209): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600894f0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) unshare(0x6a040000) (async) unshare(0x6a040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385000000850000", @ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8050241b98105fd88bf2edbdf25"], 0x10}}, 0x810) (async) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8050241b98105fd88bf2edbdf25"], 0x10}}, 0x810) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0xfdef) (async) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc41d6c9de4f40b08, 0x4, 0x5, 0x80000000, 0x1084, 0xffffffffffffffff, 0x6000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) 22.351582994s ago: executing program 5 (id=6213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) (async) 22.23259347s ago: executing program 4 (id=6214): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000007, 0x10010, 0xffffffffffffffff, 0xd626e000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000010428bd70000300000000000000", @ANYRES32, @ANYBLOB="00000000051c0000440012800e00010069703665727370616e0000003000028004001200060018000300000005001600"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x12) r3 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000070000003249000000000000010000", @ANYBLOB="208be65d2fc69d7734cdfbc269f34cd2e8", @ANYRES32=0x0, @ANYRES32], 0x50) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="210000002000000000000000ee951004000000000000008c46dc628a1da71fbc2ebc58742f838e53e65d56de00f954851f6e85910db7f6a4408b4cf145aa9166e25f4c0fadf8082447fce6941402f4dfcc79c598d003a8acce65140dfcf29a769d8fbb984e00f7a307af58575bf7f8f903f602fd4024dee07e", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xb}, 0x1c) listen(r6, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a427da158da988456d30026b433186f53cdcdb93a4722bf306a10470d5008cc1ece9ead3459bab1cf1538cd0b15765345e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc9f89db7d3b7ab973266eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500180601fe8000000000004359bda7f5fd25144cb9b5b4590000000000000000aafe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) vmsplice(r5, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="04", 0x1}, {&(0x7f0000000580)='|', 0x1}, {&(0x7f0000000540)="27b7", 0x2}, {&(0x7f0000001f80)="419cfa8adaa7aa6d54b4e8fe6ee3ced175b56ec890979e8f0609e1bb426da629565f307cd788b26243612354e9a6708eb326898bf082c980000039059093c8fadc1c4b75e96f7c712a3b7c82533d167c7b41cd0ea8e212ab4f5397363d7682095fe3f91761b48f47f3e6e7967a4cd20dda11abcb434b2b", 0x77}, {&(0x7f0000002040)='b', 0x1}, {&(0x7f0000002100)='P', 0x1}, {&(0x7f0000000780)='j', 0x1}], 0x7, 0x4) vmsplice(r5, &(0x7f0000000680)=[{&(0x7f00000004c0)="cf", 0x1}, {&(0x7f0000000500)="8b", 0x1}, {&(0x7f0000000600)=']', 0x1}, {&(0x7f0000000640)="fa", 0x1}, {&(0x7f0000000440)='\"', 0x1}, {&(0x7f0000000a40)="cb48eb0b02f247", 0x7}, {&(0x7f00000009c0)="fdacc564", 0x4}, {&(0x7f0000000c00)="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", 0x401}], 0x8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000001200)=""/19, &(0x7f00000011c0)=0x13) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x2, 0x4, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, &(0x7f0000005280)) 22.09967936s ago: executing program 5 (id=6216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) close(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20048051}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff00}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1, 0x3f00}, @generic={0x5, 0x0, 0x0, 0x2, 0x27}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x90) syz_emit_ethernet(0x24, &(0x7f0000000240)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x60, 0x4a, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, r2}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) 21.999643174s ago: executing program 4 (id=6217): gettid() socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000480)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x4, 0x0, 0x0, 0x7, 0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_GET_DEVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="6ba8e05d8c010094dc561a9147c9dab469739307f7f36341a8ba5b77921635a85534f741b4d61aee494953596eb9a41ea629ad4ac934bf659f8201fce3986fc7d20cee7a385ce14b102fcf8120c1dec3c66b094fb2823aa001c356cdf0499ddcb14476b40490665de56b172ec6ce7fe1f1bf83f0c447dd34cae31395c32b17acd2c597b7ea326a855fe5b53ff8f779", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x16}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x100}}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdfffffff9ffffff0000000000000000000000002cbd70000035100002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r12], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe87}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xccbb}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0xb00, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x10}}, 0xa0}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 21.991117435s ago: executing program 1 (id=6218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7, 0x2}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) unshare(0x20000400) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x60, 0x7, 0x1, 0x0, 0xc29600}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0xc08, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbdc, 0x3, 0x0, 0x1, [{0x9dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x760, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x750, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "b531b3b2b29af01498bca728bd401e57bc0de08598003c1c3d91e1b42021ec5a71776e9d23c99070b3531eb19b4efd974581a88e93c792994c62ba8ae1bbc6153aed5600f13c005c00d5c5f78869d29a6a4ce38ee7c89248acb8ff7bc965f74a212c0b1405975db1508b0056838a75aefd948f7df96099d7cb2c0cac8b45a40f5edf1f81addaeb189b7fdf8f39251e77fdb4521415ecfd333c005210bc6164c3398770b8dfe1dfa4fa27"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x93, 0x1, "2d6bc7b9a3eaf93e66e44096ef02e1bf3eabddf3cb83cdd7a2a44d1ab366b0af38f25224e5bc3ca254a9bd152e24bac00ddfdedfc51b44124957e9fb14f20a0d7ee20abdb6345aa5aac38ed50ce7fe8e8245fb37f5ff896baf4721492a724252bf400d9c034ae091f60dfe1505219efa740e1e47cc11f03adde140ce8439242ba275fc09707bc8f8be83c3914a5cbe"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x200, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "e62622d412029ac6866da8e71837c1ef6dc823ba1a67bace8ec7a654e8c158bbf90e882b1ff3e943540cd7584200b3aad5269b8785549d2ae9f0874dbd5007ea7e9b86d815b811704ace3e5340d39088b0d20414b6cd1b2debe0dd421882f7d566d137ebf31ed6696cd4f91c08ca93a3e1cbf9a3fe1da65e285135776a6fa3f39798f3488af2f557fb5206b00ca12494af85d3b2b4a3ccedc9d4064507a89613cc175b38f7b42a7361fd8f7b1318db"}, @NFTA_DATA_VALUE={0xe0, 0x1, "85a459e09d959f71fa70e0981929ec6519f9d59baea9c75b9f005c2a3be12cd6bd44aee21181148ceb92dbd790acdcd838bb9fda0913578674438907b03a35deb567c7efee5ad4f8ec3da84e892d19612cb5a76d85e1432aebb6f564383b38c11035d6c6d97e65487dfbfa76de80039cf90bb5f629ed2477273d28d9644e3ed321546be841ed78cf44867b4ac8124b5a34cff2a865fef5f32bbe229339ce08e7311f4319f364da6f95abe54c00944bd22a553d4c28edb8a6ad71153e0b7f2514590b75b6451ec963843614fdefce810bf99e0bfdee76bfd711dcc3f2"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_TO_DATA={0x398, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xc, 0x1, "4cfee5e7430c53f4"}, @NFTA_DATA_VALUE={0xab, 0x1, "980d34e14877f18a99ea91a1b2e54514e7674c158a9f7f2f1afa36175fb00c8e4c0373d34da978f24929d61c2278711d585d268d5d40deff113e2af794c78a221d8623ac61fd8ca10f1f4bc21f3597d5247406ed20e4c3027b55d0b17e9d0e90fc26f694b6eae13fdd84eecef14158be7f2e2724fa0d2afbf72e7356a7be42ef0ef317f4fdb62741cf72050ac06d6a85a16e066da5519179d44de5d288a59accecfa7a2e60ce02"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "f5043921988d730d2ed28b6d5669783d2bce420c44e85b4285c42b93982135211c707b1ad075ab7c5b5c8b10c765f666ae28e7e5c5ebf4a15d2325043bb855c01dc63007078e4e22373870b4a117af73244f9a76bc9d7b77ebd00ec090da6107dbebb5bf451f97ffa4d54b8bae527f6983c804358cb7e4944c2e9c86e8713c683c74d49fb17ff929e924"}, @NFTA_DATA_VALUE={0x38, 0x1, "d07fa1d526228dbc49168a7f41efd3b4ba34dfd0f897140c57b3ddd3d9a5a483b796a3ad875943b93023a0cd39aa1bdf7e56c5ae"}, @NFTA_DATA_VALUE={0xa6, 0x1, "0e8c08b87bb8f863963994681606582ad049b28317d5201071d955f397f220ab6376785bc13b8eeac8a30a927cca2a7620db27dee32d07040d26c8b9265f0f5ff5caef5bfd5ed6ea538b9333fc0158813268ff37d326e5dbacfdc56051a179ea2a81d9e22a7e30ad50b5946383a901ce1d4a374c4058bcc0d3d62168e3e2b6d5b743c7b70b4c7a5d4cfec0ce80779f2fdb5b5e13d6b97b714e805d00a9cf6c108894"}]}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4d53785689b16c36}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "24ab3807284d54ae1721bccfab85654e2f81ca5f6521283bbea84144134b5e58b304183127cfb6c1e2c8cb633669156943607a97dcd68beed2c9b1e75890082ba7b5d035d8caa64504622651e2cb178ea513cac12f5c80490b2409c6aa74737c29e9983702385c8964c4df7cc3efffd3761ef385d16f2d37cc27bb292e4a790e6107eb5c76ef4a26a539523f58a3842af23560f72072f92c656e5c51b8502d4df8e9ec6e2fcb8d382a7017557df49b89ef05f09280b1eb52d15ddfec32bdcef55c4377398ed97fb39c34bc433b66140d3a4b0eb00eac14873c87af813136b16e272259780508708865f7"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "65c9b259365184a55e22b38baa3bf7014933d9f7ecb7c5055acdd39c2d90a0f8c1203aa2b2df36a426647afd6d0483b3babce1669a9029b5adab5f7407872989973190199dbebc317c3552ce8058f948cfe21da3746b26110cf5dac1ff598adbe9af9f3157f86c2a283a02c2e3166e48abad8478b7096abc05d48a6c2ca6436d1361cd3a924925d670a6e1c19a461adb3cd979d51f621dcb098804dee931d51bf830407d49dbd93812c77161882bc0f6ca1a4fd4e3d72211a97a163a9d4540cb9f72da2848"}]}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, "74a5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "1e08e6e2c7303ea9cefa0fb443a3b47c5eab802f5e38aa1ee20c4a410e2c17f4a10ece3665"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x32, 0x1, "69a5407982cc352f688ce88698c6a742107a88a834aca74ff3de87ac845a6081923b52869392582e0fdfff9f284f"}, @NFTA_DATA_VALUE={0x45, 0x1, "b391ac9c5fa6aa72d9099bd31eb1b15633d4bc22e12893ecda4480768684fccc9480f60c6295dbf662509621915bc1c8847317f80a555b718a456f592dae1e4e13"}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_USERDATA={0x99, 0x6, 0x1, 0x0, "e0f5caef2d2cdbc46c9fa1d298b9a1ebcca9ffcc54c1773d4d7f5893408fc1cabf8baf8acb3e1ca2e0e87549ff2d58b78667db1ee9145073c5ff3ff58043b62bfd9ee4a0110e7e5a1d6d827a35eb3d141f56daedc0bb2dcf8d16c0ee831b9a5d829ad17a56e85f18829fcf05a89901f0823e4fdd1d068b446dcf0ae3cecfd8c9e6a5aaa66ce640723d5d5e9ce8230fb528af2d8d54"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcb0}}, 0x4050) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x6c, r3, 0x302, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dri_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8014}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x20) 21.919371769s ago: executing program 5 (id=6219): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001100)=""/132, &(0x7f00000011c0)=0x84) sendmsg$IPSET_CMD_RENAME(r2, 0x0, 0x900) (async) sendmsg$IPSET_CMD_RENAME(r2, 0x0, 0x900) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000000)={{r1}, "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"}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0xf, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0xf, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xa3, 0x8, &(0x7f0000000180)="b80a000500000000eaefd1df733d5ce4b6fd4ade2ab2bb6f23816e35850843619171917c35301bbaa0a87213622776ed2503920396dcb4907d44b1430d8d5459f1269dac4b3a48278f8c4ac1ee1de65d6755dd1596fbc4454b612da0ce5942b7f250f2d014cc9c92479d3120c6ff48a9fe7dddb325698da3efd0486ec53fa3d1bdcbef15e364854ceb387326eaeb7d977ff53c57ee1e424d35bc329a4792d82ef83893", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2a51d8891246edc1}, 0xc, &(0x7f0000000340)={&(0x7f0000000f00)={0xbb8, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x10001}, 0x0, 0x5, 0x7, 0x800, 0x16, 'syz1\x00', "f29a7676a52981e97a3cc0ea00cc76488a6e23ebd7f68c17a4d237076263982b", "f4fe0877455a87a44292b73a99756462e3a2bffcce00835791f285a4a4f219ce", [{0x1ff, 0x1, {0x2}}, {0xb5, 0x1000, {0x3, 0x7fffffff}}, {0x0, 0x1bfc, {0x2, 0x10}}, {0x1, 0x4, {0x3, 0x7}}, {0x5, 0x9, {0x2, 0x1}}, {0x1, 0x5, {0x0, 0x6}}, {0x9, 0x5c5}, {0x6, 0x8000, {0x1, 0x3c5}}, {0xdc4, 0x2, {0x1, 0x5}}, {0xfff8, 0x63b6, {0x1, 0x4}}, {0x1ff, 0x6, {0x3, 0x9}}, {0x4, 0x8001, {0x1, 0xf}}, {0x8001, 0x2b04, {0x3, 0x200}}, {0x9, 0x2d, {0x1, 0x7}}, {0x4, 0x0, {0x3, 0x1}}, {0x9, 0x8, {0x1, 0x5}}, {0x5, 0x0, {0x0, 0x9}}, {0x7, 0x9, {0x1, 0x40000}}, {0x12, 0x3bec, {0x2, 0x9e2f}}, {0xdf8d, 0x0, {0x3, 0x4}}, {0x0, 0x10, {0x1, 0x90}}, {0x993c, 0x4, {0x0, 0x101}}, {0xed, 0x200, {0x2, 0x7f}}, {0x7, 0x10, {0x0, 0xaf}}, {0x1, 0x7, {0x2, 0x3}}, {0x10, 0x10, {0x2, 0x5}}, {0x80, 0x81, {0x3, 0x5}}, {0x0, 0xda, {0x3}}, {0x6, 0xfbff, {0x1, 0x3}}, {0xed5, 0x5, {0x0, 0x7}}, {0x6, 0x6822, {0x0, 0x1}}, {0x2, 0x1, {0x0, 0xfffffffd}}, {0x9, 0x0, {0x3, 0xb89}}, {0x4, 0xdb8, {0x1, 0x4}}, {0x1, 0x6, {0x0, 0xd5}}, {0x3, 0x6, {0x3, 0xe}}, {0x1b8b, 0x8, {0x0, 0x1ff}}, {0x8000, 0x6, {0x3, 0x5}}, {0x76, 0x4, {0x3, 0x8}}, {0x5, 0xee7, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x74847f30}, 0x9, 0x3, 0x9, 0x2, 0x21, 'syz0\x00', "3b0fadfb0de72b94b23baf44723abaf8aa948624fbfbb2b6432861910ce77071", "f4a639ee001ddc9cd02a917dae9239b7c5e45f9aa85f9d6aa47190a1dc96fc52", [{0x0, 0x9, {0x0, 0x9}}, {0xe60, 0x5, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0x5}}, {0x3ff, 0x3, {0x3, 0x6}}, {0x0, 0xfffa, {0x3, 0x8001}}, {0x3ff, 0x2, {0x2, 0x3201}}, {0x8000, 0xfff3, {0x2, 0x7}}, {0x9, 0xffff, {0x2}}, {0x400, 0x5522, {0x0, 0x1}}, {0x380, 0x3, {0x1, 0x88}}, {0x64, 0xfc, {0x0, 0x9f}}, {0x81, 0x8, {0x3, 0x5}}, {0x7ff, 0x1, {0x0, 0x8}}, {0xa01, 0x7f, {0x0, 0xd208}}, {0xfffa, 0xffff, {0x1, 0x4}}, {0x9, 0xbd, {0x3, 0x2}}, {0xfa8a, 0x8, {0x3, 0x4}}, {0xd, 0x8, {0x2}}, {0xff, 0x89, {0x3, 0x80}}, {0x1, 0x6, {0x3, 0x5efa}}, {0x4, 0x8000, {0x2, 0x1}}, {0x4, 0x269, {0x3}}, {0x4, 0x4, {0x2, 0x3}}, {0x8, 0xff, {0x0, 0x7f}}, {0x8, 0x800, {0x1, 0x8}}, {0x8, 0x200, {0x3, 0x4}}, {0xfffe, 0xd, {0x1, 0x1}}, {0x5, 0xc000, {0x2, 0x80}}, {0x80, 0x3, {0x3, 0x8000}}, {0x6ca, 0x6, {0x2, 0x9}}, {0x7, 0x12b, {0x3, 0x1}}, {0xd1a, 0x6, {0x2, 0x4}}, {0x0, 0xfffd, {0x3, 0x1ff}}, {0xc, 0x401, {0x2, 0x3}}, {0xade5, 0x101, {0x1, 0x1}}, {0x8, 0x3, {0x1, 0x4}}, {0xff, 0x7, {0x2, 0x80}}, {0xff, 0x3, {0x2, 0x6}}, {0x7, 0x8000, {0xf31294ea56a3e453, 0xc8e}}, {0x7, 0xe37, {0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x4, 0xd, 0x3, 0x9e8, 0xb, 'syz1\x00', "409e6c5dd2bc63c70f9016be8cf3a06f554367e471a5f9f48a89583b7f4e2790", "f61eba65ba418649c215cc750c859d7dcbe5ac7b7812f865bb8cfedc2bba528a", [{0xfff5, 0x3, {0x3, 0x9}}, {0x4, 0x5, {0x3, 0xc}}, {0x6, 0x92, {0x1, 0xc46}}, {0x7, 0x7ff, {0x2, 0x10000}}, {0x7fff, 0x9, {0x3, 0x7}}, {0x8d3e, 0x7, {0x0, 0x4f}}, {0x2, 0x9, {0x0, 0xfffffff7}}, {0x7, 0x3, {0x0, 0x1ff}}, {0x7, 0x81, {0x0, 0x7ee63d85}}, {0x6, 0x97, {0x3, 0xe893}}, {0x80, 0x1, {0x1}}, {0x101}, {0x270, 0x4, {0x3, 0x3}}, {0x5, 0x8001, {0x1, 0x7a62}}, {0x7, 0x7f, {0x1, 0xb7f4}}, {0x0, 0x6, {0x0, 0xfff}}, {0x5, 0x15ab, {0x0, 0x10001}}, {0x9, 0xa, {0x0, 0x2}}, {0x8, 0x1e, {0x1, 0x80}}, {0x0, 0x8, {0x0, 0x3d5c}}, {0x6c4, 0x0, {0x0, 0xffff}}, {0x0, 0x2, {0x2, 0x6}}, {0x2d, 0x4, {0x1, 0x100}}, {0xd, 0x5, {0x2, 0xb}}, {0xbb, 0x9668, {0x2, 0xffff}}, {0x8, 0x6, {0x2, 0xff}}, {0x3, 0xfffb, {0x3, 0xffffffff}}, {0x6, 0x344, {0x0, 0x8}}, {0xc, 0x101, {0x1, 0x8}}, {0x3, 0x99, {0x2, 0x9}}, {0x3, 0xa, {0x3, 0x9}}, {0x0, 0xbc, {0x3, 0x80b}}, {0x30, 0xffff, {0x1, 0xad56}}, {0x7, 0x2, {0x0, 0x3}}, {0x3, 0x3, {0x1, 0x857}}, {0x66, 0x3, {0x0, 0x4}}, {0x5, 0x7, {0x1, 0x9e77}}, {0xffa8, 0x219, {0x2, 0x9}}, {0x8, 0x1000, {0x2, 0x401}}, {0x4, 0x7, {0x3, 0x80}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x3, 0x0, 0x5, 0x81, 0x1f, 'syz1\x00', "06709ced06404c1ea642eab657a9ae72bb03dee122403e839f3433fb9b1ff4e8", "1df05d036906307d4ba6517d6e11e83a8de06b948b9dce0fb149e4f9ea311350", [{0x0, 0x4, {0x3}}, {0x200, 0x5, {0x2, 0x6769}}, {0x10, 0xfd, {0x4, 0x5}}, {0xa, 0x400, {0x3, 0x200}}, {0x9, 0x8, {0x3, 0xc6}}, {0xad, 0x80, {0x3, 0x2}}, {0x7, 0x200, {0x0, 0x280}}, {0x3, 0x7, {0x0, 0x5}}, {0x5, 0x70, {0x3, 0x81}}, {0xfffd, 0x9, {0x2, 0xffffffff}}, {0x400, 0xffed, {0x3, 0x7fffffff}}, {0x617, 0x8, {0x2, 0x5}}, {0x3, 0x7, {0x1, 0x4}}, {0x5, 0xd5, {0x2, 0x6}}, {0xffff, 0x7f, {0x0, 0x6}}, {0x5, 0xe568, {0x2, 0xffffffff}}, {0x4, 0xfff8, {0x2, 0xb}}, {0x7ff, 0x4, {0x1, 0x5}}, {0x7, 0xfffb, {0x0, 0x1ff}}, {0x101, 0xfff, {0x0, 0x5}}, {0x101, 0x4fcd, {0x0, 0x3}}, {0x3, 0x1, {0x1, 0x4d3}}, {0x5, 0x8, {0x1, 0x6}}, {0x8f, 0xcd13, {0x1, 0x8}}, {0x4, 0x2, {0x1}}, {0x2, 0x1, {0x1, 0x7}}, {0x9, 0x6, {0x0, 0x4}}, {0x9, 0x1, {0x3, 0x4}}, {0x8, 0xb, {0x3, 0x4}}, {0x0, 0x3, {0x3, 0x6}}, {0x9, 0x7fff, {0x2, 0x3}}, {0x3, 0x5, {0x3, 0x8}}, {0x1f22, 0x9f0, {0x0, 0x8}}, {0xa2, 0x8001, {0x2, 0x1}}, {0x7, 0x4, {0x3}}, {0x2, 0x3, {0x0, 0x9}}, {0xc, 0x9, {0x1, 0x1}}, {0x4, 0x9, {0x0, 0xa4}}, {0x0, 0xb79d, {0x1, 0x1ba5}}, {0xfffe, 0x7f, {0x1, 0x597}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x83, 0x0, 0xf, 0xd, 0x26, 'syz1\x00', "97ab79395b858f60a45f109375fc76687a6d45ec07a07b000f78bd13aac11a5b", "9a23166bb6df7c6df64b41ef73012859ff057464aa01eb89ce089a1bfaac49dc", [{0x5, 0x31, {0x3, 0xfffffff7}}, {0x620, 0x5, {0x2, 0x413}}, {0xd, 0x3, {0x1, 0x7}}, {0x2, 0x3, {0x2, 0x2}}, {0x1ff, 0x77, {0x1, 0xe}}, {0x4, 0x5, {0x2, 0x1}}, {0x49a, 0x4, {0x0, 0x81}}, {0x3, 0x7000, {0x3, 0xc9}}, {0x2400, 0x9, {0x2, 0x1}}, {0x6, 0x100, {0x3, 0x3}}, {0x8, 0x4, {0x0, 0x1}}, {0x8, 0x4, {0x2, 0xfffff573}}, {0xa4a, 0x9, {0x1, 0x73}}, {0x5, 0x5, {0x0, 0x7643}}, {0x3, 0x0, {0x3, 0xfffffe09}}, {0xb, 0x9, {0x9bc7eb8d2a3eff97, 0x9}}, {0x8, 0x1, {0x0, 0x8}}, {0x9, 0x3, {0x3, 0x7}}, {0x9, 0x40, {0x3, 0x4}}, {0xa6e3, 0x9, {0x1, 0x8}}, {0x4, 0x9, {0x0, 0x80}}, {0x5, 0x8, {0x1, 0x401}}, {0x6, 0x4, {0xcb504cc0b52c9493, 0x1}}, {0x3, 0x1e, {0x4, 0x7}}, {0x7, 0x5d, {0x1}}, {0x1, 0x0, {0x1, 0x2}}, {0x6, 0xfff, {0x2, 0x8001}}, {0x6, 0xc17, {0x2, 0xf}}, {0x8, 0xd, {0x1, 0x7}}, {0x7f, 0xa, {0x0, 0xff}}, {0x800, 0xbb3, {0x3, 0x3}}, {0x4, 0x9, {0x2, 0x200}}, {0x8, 0x1, {0x3, 0x7}}, {0x69d, 0x0, {0x1, 0x98}}, {0x6, 0xcd5f, {0x1, 0x2}}, {0x0, 0x9, {0x1, 0x3400}}, {0x6, 0x8}, {0x4, 0x3, {0x0, 0x6}}, {0xc, 0x0, {0x3, 0x6}}, {0x3, 0x7ff, {0x0, 0xf922}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20040014}, 0x20) 21.75076574s ago: executing program 1 (id=6220): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x800000, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_icmp(0x2, 0x2, 0x1) listen(r1, 0xf8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x81, @remote, 0x80000001, 0x1}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x26000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0x23b8f613, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @multicast1}}) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000100)={0xa, 0x20, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) 21.749289126s ago: executing program 4 (id=6221): r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in, &(0x7f0000000140)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffdffffe}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xb}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000080)={r7, 0x5}, 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x7f, 0x8}, 0xc) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0xb2be, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8c}, [@generic={0x80, 0x2, 0x6, 0x7fff, 0x7}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @map_val={0x18, 0xa, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xaa, &(0x7f0000000340)=""/170, 0x41100, 0x2e, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x2, 0x7f, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r11], &(0x7f0000000600)=[{0x1, 0x5, 0x2, 0x1}, {0x4, 0x1, 0xb, 0x7}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x2}, 0x94) 21.643386239s ago: executing program 5 (id=6222): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x7d1841, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f00000008c0)=""/207, 0xcf}, {&(0x7f0000000a80)=""/252, 0xfc}], 0x4}, 0x2}], 0x1, 0x20, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd700004400000060003"], 0x30}}, 0x8040) 21.587776172s ago: executing program 4 (id=6223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c008000", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd70007affa19afd6ade8a3c0004803519010673797a3100ff07002c00078008000400040000000800010018000000080002000900000008000400050000000800040000040000"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x40, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom(r1, 0x0, 0x0, 0x40000040, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELFWD(r7, 0x89eb, 0x0) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f0000000380)}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 21.250060758s ago: executing program 4 (id=6224): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000026c0)={'gretap0\x00', &(0x7f0000002640)={'sit0\x00', 0x0, 0x20, 0x8000, 0xb, 0xff, {{0x18, 0x4, 0x3, 0x0, 0x60, 0x68, 0x0, 0x3, 0x0, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x2c, 0x78, 0x0, 0x7, [0x1a5, 0x0, 0x6, 0x9, 0xff, 0x8, 0x7, 0xff, 0x5d, 0x3]}, @ssrr={0x89, 0x1f, 0x38, [@multicast2, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002a00)={@initdev, 0x0}, &(0x7f0000002a40)=0x14) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000040)="5b57964f5bdb6249c2667fb0cfd3832ae2283b1bc3285e27e9d7f2087bfd2e93918c262c1e3660ddfbc2d11c714b5687b00476d4ad488bc2a56f29eabe3303241073ba80967466b35b562b38e92d80141c6b1dbd43f5d995def235211349cd0f630bbea789f88aafdb3e1dcf9a41673de3ca2b71a1bfab56fd3cbc92f1f5e562fd2c595af5bd5f2d2e68f4ffabff6fe7606d88344998c84b28c90adb624e919313c779a2d5a43342b18fb94c9e9abb19a8716408296625ba0e48a4f66056296cdb5995ea7fe550e89a4e8f1e8fd360deb7334971b3ed50493216c3069735c97dbd5fcaa9c2d267f1ce12cd18f287be9e4051d786fe56af69965262baa1a78be979c0212c381f2537d274147b25b1369028aa09de289e307f52f6e4f6da3952e70d0231f8fb709dd69c556b421728cfbac006ba0bf449a6b935ec9533684648fc353e6696fe7aba28a1dd1dc3c865e5b36ce550a19159b97a27c843d4d9f68e9c58ec8d3c39214e856ebb2cd12c69db314636f7b5cc0bbd40c3541c6a755bce2757e2bf189c2cf87dccdc191789ba21b319b27edde3871b1a5d96ad443cf9212d4f54e9dc7e7b0a62607a1b2edf6ab6f6010953b2d20596a8089966077e1936fa974414466f41ddfec8d68e4223b0338fc5ed2af3b391810284e24e79af6c5d47f098c0b171a79eb0d336138dbb6be143bf988da428b7846f1561ea1389ce58608636f8fd854aa12047bee70a80ac2b4171ce8d98137a6a02efbdf6cddd019eabb36ed21f45872f1a143aa035f774b78ac5273a4c591835357f8894c5eb1ab3a5c5a8da17bf6a179438ce24d4d64b518b326896d7028c8b608ca86021665f97400a0334ac7cf4a27be1a67913a75d2170c4940850649748385d60c3a7ce5bfc6cbe6d6216eb2ce8b90394708db6cbe27f2bcdb66c6028ee9dedf5c6d84b8ddf3227d3321552493a777089cf9772bd0e3e986c112cd25711e854969b2e77ad7a1901c0b0dcaa5db572e626680148e65719c5c3b6b6051b98da3a85698037081231bb1e4820b013beb06a79e1f9791f54beb579cd0a4a3af2c67ade1276dc4cfff50b383b63495bfa36fecead89ae44e701d2eb3f2164ab04af69ebb54760aa19069b07b90c7e636204507fdc85a13ee056defddf850c95d06131d840386ac1f274ea90d0fc1fc10903474da1864caab9f4f69d2ed96d6ed4aee79a89c67c6134cb4b5394cef727c45ed5a02485d29cefc0ea14e15d4aac73f472c59c534df9442e73f68c04c1016ee48dc8a2dad09e15bd737878576092e51da598c7d8d4fec818be9163b5e61b51907b0ab88f3d30404c177874c36e0bc4623fb45da88d0059672a26a84b4e20dd7fa38167c79852dfc04ff9757de7689e78c60391de5c170daefc84db53e2fe9864b7549df23b59bc2ce339fc2ba7cc2d1c4717bd1ef39a4ca3129e554c86549c5340950cf2e0924200fe5eeb0e68e00303cf65d62ca3e43f7e46e631af6241a9cd86f82ed8f89439def4c5fa6d9e0066e6e79ff98bf2ff86d0ee9faf512dab46a4984466fba34c04b10d7734f8b4a4301f6432602a54a50a402aee9bb4230f8f1b6ccea40972a7a3a699d9eca8496129b31bcb6e02877147a22fbd3327e479c7872f13fb94c804840955ad42e61cf637ee6c218d8ef58443db654e9038c177271decc96d9d24258afb8054696642727bdd39db2c1eeed5704b4f4b24f1b81087a509b9c70506af701efb33770de396583ae06728352395bf9d2db21061a9d021a10d379047aa3f96397cb2f03b7bd19b85597e2de8801b8be300154e4e75e2439da516ae2fdc01d8e51024cb27a3973df0eadcc4849f5aac44c0af3a956b1e52ea2a38661e13fafd0442fd9c37cafb1ce452ef7866e00bc5f4fd3ce6ab805cb1d060c89972aa46bd3b49bca9f98b2072c182aaba4248a24210ea48db7e54aeda2fee12bb0e6f3ca6dc2b6a10ff6028bef806211604b38cae3ead53e56b0cab667a33f7510f4167c726a00e4240bdb5dbf9606f4b6655ba786e9a26a962a726f97f3b0ea8da38af7839799427fda695260eb8758fe9ff59f0d54e1523608d06d0517d5e61ffbbde955b5f31a96e9e2b05f96ba60c14ff4bdee3148737380f517be5038342f8d339523316a60970f38fedc63ad5106546725754cae068d756cc621790120d6a18c067a35b74d9bc5a3944835103bf3c303668030bb96f19488116e07151a45dd77e1bfb3e362c22fe099718edbb17c23521a9fa881d507f36635fd338efe2b3bf9d37a92efa688d77ad78f8e81de78c0df7ead0da9f082f4e2774b2568f9c9bd48aa2406ed657445e57b2aa94c43f5ef2afbaedc35d19734109f544f034fa0f98ec6ba204a8c0846b72924e192c83440fc737b5c64f6070eb0359733dc66beeb35a6c85e6ce1e5e06d8455eb19b39fc8043f0a22814484b0c35b192dd5c7f0290a3ff8aae3bbd6cc2b6baec1ceb60e8700381c41893588ee866b3350c663ad41883553491576e532e4640e7079011377d1714b881a6decbe81badda90a773348ad06dd8a83446aa49d2a99bf2bc31fc40890bb6ef806692cde1df4e3d1909c5eca054633782c652b0a0bbf6489a87c7f3971c48ae4e97d6f31faba4507e03c102cc5a26ad7958cb51d2e9b95265d862cf4b8037bf7d48dd70bb4b1e0f974dc38ee6dcfaf4a5c7abc78b185e8f1b133bf680cf63f0a96cc262b042dce3fae25259f0b3fcea6095e46e5eee4833699bdb1a5ee168dfea5340e01c42f217b29e2e8acd0381717049eb905dc4dc1df808b390f56a57cec14c720de10834716da9a83826201c0d3814a973cb2eb7b4f461328f3fe1addd94a6c9172931ede46efba24f372921d35ad31543c45f13a458cc908f90f1ef5a3bba167a28c57bf6b06b49e7f5518d4da9a485610f2965502090738e7ba5bcedcc94d4b11a2327f953bbeddad5e46be798ee04bdd3db4af44a2d0811ca8469eb6ebbd5a42b86be798a935b0046ca32efb7bf8b65e1e6e57a60e449345a2025071551af98b3e979cc5fd0f02236eedcac9939a217b53f9d21ced47df9f6eae8b464bf0f2cdd6c8aaf3378eaba117c0d991dcb6accf9c93098fabd187303ea3c1a3ae0cb48ce322738151d5a78510710624777cbee59152a10fe3fac25759dde2179a0971305101b6bba94dd3e3336d82d2506abcabf8c9cf8b0cc9c58f314e37926ab56b3690f1eecaf03f91ffae1e5559d18123ba9774a1a67b20a6a87ecf07033cbbf199c389dda10467febfb16d7bd7999c1eec08777172faceb8cd79879a295f4b1ba12a107c2cf2321168e0554f8aa38568a6b0740135a3b2bf05b9afcfe4026d76b7008e8b12e1e458b66fe16c15ac2e91ce4138e4f8bc1107214fe4cd8cd83a8a613bb768ced956e1aa232c9594ec09b82414edb36fe5b107a2eeddd5c122b0784f7037db62b94c01e4e5a216a7ab76fb0e8d4b42537fa6b81d65a2a5c31f3bf8a779e19af9bbcc0e4cd2a97b67305319e3187848d1178eca6f989c68dab25e887397824c15dc1cd9201709284e82567222b639f367ff58a5d0e97268199e8685b0d9c6f97db02268c0bf0fe440f0b19b4a1b24388878a1d580062c1cfa9def92f7e9b8efdb9953dd86e095e60b91f5b1dde785695e2c3d6755552e5990aeca6a2f7f4f8e4c1d8e512acf3a5b1b63e687ce9c956fb2301b260f73be3e89e744f80bc59ebaf0efc8b621a7c6e57d155699cca84ad407ebfadd67d5559517b703c12e260093ebad4a905c3a24bf57c53e4b7d0790c971d6023eac05e1f95ed2271b5a569482ff2eb35e65e9ad4764b17e8da6042f7c7e333a58aa3b7468f26505b9b36a74e3eb892fbb14c0849e21cbd59a0705c187a93e5f01a05f231ad07229de487ab54e35d019b2295d5355fc64e3d9dc7d69af395dbbbc47cea24f743f852458eb613d3af69b09bda1b30434d03b562253d346a55f4762976480a3924db53e7e6c8eb59a5e2026f6010c5094775cd5244a9ab8c3c65bab3764c2ad8005133602ef9e4102abf020aab2e7f0b9fb5b7662f93eca9b15d30d926906dcb5d0cf2d28b08b605ff1d20ac42dd918001b1aff9f7077352611967124f0aeda222916e06d4675ebd87feaaa9ed5413d2eb3d5ffc9a597838eba661809d3d44e1ea2d0ef659d73bdbba3e76b1ef1456cacd44adddbce67ca26b1ddb91815a98149d238259e348f326e529bf0c89ba79a0520f6c40aec5f6d900c90510b098e11765c5636c5ce7e9060f0100934ccf4c7f6da2a4df3263e2523f6e7cc90f7332488bced234a0448dc58856fa091e9d559faeb3a83a1942db4ace1beb86f5057862370c8d2c013eecd02615d843530eff7e3f5579856f6a55fcd19189fcf8269d712f30fd06cb686a094e09f7bc2309d013fd67735ec4ce306306b41d10a1d2b019f40811c4029f2bc8abd7ea3cca25d57dd777c19385ce903e8f1c75210f03ad3b5ffae02e9485042ce79ff1d51bae6aa7c17eae4d7f2afd41815e7300fbd2ee1dbe92e056f0923e3910d1b80e7443effb2053a9f7c0b0d35edd6d9f6eedd2fdf53e1dc46936a7958a9ff680f50eefb26a6a07bf4dde908972e593ff3c61e20cf5118e224ea1b703b1aea9cfc8b2fc8e5d6a4a7c34e6687e066632ecc0f26c6539a1df584a497a93d43d7554da64e4e97d6073a93276980b70f82ee09ec1652d7bef0a4edfe2688193ddc9cc378e3fe7951f91adfe8919b97fb6172fde3684bb06a0dd390130c44eb3fe6cb41ed12e8664bf6ccdc4dd655c00e50ace74a74800130b50ac0115d7a1e0cdb650f72cd216fe1da96a3602360980bc21006184d55ef9582a5fa75b70273520928cd532d50df5b02c4d24d740124192a252672146866bf8f5dfdc46643b270084681f2f7bde8dd375f90feadd3bef9740aade9fe10f4c08122535ff76b6d27bfe19e24b7e53ffa6ee16bc70aafaf7a30609d000fb91d4fbd90d94b43c4e1070903cec9174b5f732718bbca819efee57102a6d05f7de788b7940d60b21433945dde4dbd54937337e4ebc1530c51dfef11906d635fcf986a0e3cd8c7b6abef199b83a6a583b067f8b5c4afca4d842815de2d97dd06f574d5a83fd09e57320c881b6ab7cad820429a945bc6c6512168d217a36c3920476113391a16e096a2ae456df13ec12fce7aec7b48bc644f0226ffbb83c46fca5344d0aabd66c75ef0730959465546f83539d4ed2afcf12b16df9c7a98e84fccf463c25ad33188d424a614b895f7570f15984d36c54a3ab77c741db1e940af1df94d295e53afbae15a5e7c6817c7503745ee6c3c9a6aa048fb445eff11f29e5f9b9b3f9861cab4175d7e29695db257f6ba35353aa268dbfb17dd06ee39138bf7f92748a12c87c4fe65200c00f1e9eb0f4f3fecb35700086df7f21a6e44cd1aed33e765042b8f3bcc650bcf5720e14c5e767638e6030ab1d04dca48599f49b4d6430180eadaaebb4a88af12a2cab8c795ecdc297d7b7e371647987fb6e769de912bca508019006e6f8e6540376549aa77b81d785dcc4180614db2313377ed5523f77d6b815936d2fc584ff38c8f0cb85e43a54deb8a960862e6fbd48c5739cd92b8af47a88d4e09360646b657bc860b3833406a8f372117ee9422f6b19fe06be700564d57f6d697b4c5895f72b15c1dc07ddb17c001b3c32b7956109c7e2014a626db7102371021b2cc5d5d87bc651fff3ee6adf47abf4ec54b76984e8fcfc6b06d69c4832876df1fad87e54d603c0b39e0d66ea8321b2598bd6e9406beebd7fbf41", 0x1000}, {&(0x7f0000001040)="6a6f763cb1fa1fc0c6985002d2e56467fe289eb7bdf4c2ff430e1057bc633c9bf4e4e86b154d35c2858610025c62899a6a5304a397e1015599b08357d7583bd7adc205b59ebe64e0494ce621453bf4c516c1cb03f6d86d094c8a97a10222ba52683f83c50675db4da2d61058bf0232031238467146e1e11245c03adc3194d7dcc18fd3a6f7f073f342201fdd54333937f439f2aaee86e59b3e5a642995679749617b7ca8ce990f7f061002a51fcc186046b2599dbc534d337112661155e85c536c912b39e82bf66e1b52859effbc89c0f283b388258c7f6700c321452f13181360383636b602f3e45e6deec48ba9089cd5", 0xf1}, {&(0x7f0000001140)="3bb49ce9e1f4a04871a24b247fcfc8ff729c6abde0f231dea505c5b79b6eff2b82a1eb3eeaac9109b5cc6b8113409e769953899d24c27ab4ab0f0d6229b496653c8331c6fa4506a376e7755116b93957a457f11ff34aa57756a28dabd834a284d645a3b1b1f81f2497967dacb8d3871cbfec4b7c1e1272fe049183ebfe85445f698b0ed0e9ef3b4070ceb0ddefc6e1d062710e8c9ebe1f089fc96b8ec032f44d2df25fea902c33dc835c35ca3ddb31d9fef1fd3a36e6d6e601", 0xb9}, {&(0x7f0000001200)="62679057cce2d18d5458507a7cd8e2acce7577dd9cf51b3efff7f7a06534a006b3f2bf9af630f0690bf47d109279445da085e318f38b0748c7b346564bd8078a24de227966211cf1ea1cddf42960297605517f3d4e33e0b2abbdfc", 0x5b}, {&(0x7f0000001280)="a26661b1875e607b644dbf2b549f95b62836bab69bc5015b1cb290e99f7f7495141775ff9555df1e3c859a90c85050f44295cf1aae6ee4915a3486aee31309606a96046f451040e4c2dfdd7309e7726894f81b4f70547ff5066a4901faf20afcfd7cd5578a441082eb8e8b2e6a2e61412c78cfe6f159ad9e4d9456faf197a3fa681a30f46a79b264c6a83d2215f661daa11951c5e7920b92d3a836774d781777214b8b09de28b26cfa4ac5cd87d909bb6dac9be52c96cca730736465b1107caedcf5e514e6bebf7d0760ff3ad429353c1161958799b78b6924338a2ad1d143ccb039969330d29fd92746a32cdd", 0xed}, {&(0x7f0000001380)="226806a087f11375a12202edc2fdc142c16f285fee3b919c6752c511ce526656410ff88cea708957ea7fa045ca545c1f761aba6d3fc05280c21c76b22fcf938ca8744fac364c58d2029af3895553fa599018c8b4d3ea23817a3b2826f754b65485ea66cc6eb7adaba2a3d20f51afec38202f671b7af3f56b34f016da0bb0be767d10bd73cd249799200f5005e3153e6fa4562c664c2ddcde6448d95d9d687e184b7ed46a4b0ed0a383baf2e3996c99ef86794df34abed7af4384a1559ce40e9523da1f12259e14fde9195c37cb8c6a8ca76c31df459622da7719639fa622de2c8ccbbb", 0xe3}, {&(0x7f0000001480)="30cd0aa61f1e4273f2a1cad29489d4c6aaea53b55fbd06542e7996ee14c86d2ec39c145d2d7913def7013f84d096f853d3e403f67b52673ed6a3ef8fe4a03d8a31acda6649bcb23487", 0x49}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="6eeb1f6d9538b1ae29fe277ac8861dbf6a9f78b68708ba687ef3a14d535722c0573036d7983d9ffab07733260cf8c2c10fe86dfd94f089ababa0c9f3dbff4113215dd8a01859b909a2a2ad8683e60149637b7912cd", 0x55}], 0x9, &(0x7f0000002700)=[@ip_retopts={{0x84, 0x0, 0x7, {[@rr={0x7, 0xb, 0xcc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x23, 0x6f, [@private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @local]}, @timestamp_prespec={0x44, 0x44, 0xf7, 0x3, 0x0, [{@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x5c5}, {@multicast2}, {@broadcast, 0x41}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x3}, {@remote, 0x4}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002800)="598e7c7a1e6fceb10067c34550777a9f01d46b8dba3cfbd383a3317be8368dd726b42d56aaa8c9cfa6ecbfe0bce66905d82b811aad5e28fcdd6f23d7ce0c9fd4207217", 0x43}, {&(0x7f0000002880)="966d7b36100d8c2aca9cec9c85db41ce3cd77d3e853abe434a3951896f6a20a9e08b75a543ea7b18e2c7e7731b83faeaa422c5b9f31cdb6300e65db0953ebb63df5c53963f0b1e3abd6fb9181af6a3caefe2f05e8b1f8876c4475ad9e5858b95d65bd9f58e9df1506ee01c79a12c277aa3f0b12f9412aa2d52bfa3150b39666c3430a66d8a1ede26a22f59074da7d295b871e833a85ebd60d38557f93406c46c27c562f15fa92804b810c8", 0xab}, {&(0x7f0000002940)="82549992d87eef8b7bcb8e5d10d2c8130f3a65857b7dadc3e3f745e4da3e97a22015df63725b0c9c0c48bb76ca558553f3ebcd6e52a5151a618bcbbcbc565d674b916e22bbe4a0aa3c78fb00325f6f35cb22321e579021d1ad529b22f206b6c41013f8fd8e7eeaa50bd5dedcd47d", 0x6e}], 0x3, &(0x7f0000002a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x31}}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x5}]}, @timestamp={0x44, 0x20, 0x44, 0x0, 0x4, [0x5, 0x0, 0x401, 0x6, 0x1, 0x1000, 0x5a]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xf7, [@loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0xe}, @remote, @multicast1]}, @rr={0x7, 0x7, 0x20, [@loopback]}, @lsrr={0x83, 0x23, 0x1c, [@private=0xa010100, @multicast2, @private=0xa010102, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}, @end, @timestamp_addr={0x44, 0x1c, 0xb3, 0x1, 0x3, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x2b, 0x27, [@local, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ssrr={0x89, 0xb, 0xe1, [@loopback, @local]}, @timestamp={0x44, 0x8, 0x5d, 0x0, 0x3, [0x9]}, @noop, @lsrr={0x83, 0x1b, 0xce, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010101, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x44, 0x4, "df21"}, @timestamp={0x44, 0xc, 0x84, 0x0, 0xe, [0x6, 0x53c5]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x73, 0x3, 0x1, [{@multicast1}, {@remote, 0x62}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc42}, {@loopback, 0x5}, {@loopback, 0x42}, {@empty, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x210}}, {{&(0x7f0000002cc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002d00)="d083d8fc3e353693fee2c42998fc07640da0449f5e612b4a00a6fe71f6a8bfc185d6b1112972712fa6f128555a6a953d173c1be0a3bbc0b0855ae4ed07e7d163a2e5c0998b6704756fa35ee9a950b066e28c4bda5378e5e0b49b8d8a5e011f1c962eb65c43c849c990289c7bfe49271d73c81d33f6144d266cf64132679f3ce7c3d6db4d49238493c1efa9042414369ce9218f4c6584272bbc1eed54d376ab47195d59b3e37c686a7b045c0060878aeef6c08e3f28269235ef23cb60c0522ec7e9b8858d3b57d9d48a8800f7678dce65fd78578253a3a3b6a3acdd3d1b8077728a5cfb6c954e612b2a02d61a20c4", 0xee}], 0x1, &(0x7f0000002e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd9, 0x3, 0x9, [{@local, 0x4}, {@empty, 0x8}]}, @timestamp_addr={0x44, 0x2c, 0xa2, 0x1, 0x4, [{@multicast2, 0x9}, {@remote, 0x8}, {@broadcast}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0x2}]}, @generic={0x86, 0x9, "20dd5259ab0c80"}, @lsrr={0x83, 0x1f, 0xa1, [@private=0xa010100, @broadcast, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x9, [{@multicast1, 0x8000}, {@loopback, 0x5}, {@multicast2, 0x38b4}, {@broadcast, 0xffffffff}, {@empty, 0x2bd}, {@empty}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x120}}, {{&(0x7f0000002f80)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002fc0)}}, {{&(0x7f0000003000)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000032c0)=[{&(0x7f0000003040)}, {&(0x7f0000003080)="54179bb8e746801f774e27fff6d1aa8a2779ad4af6d297d8ad2594e91fdb86988545a8822645255fef0bdecd91f38c0fe38713bc412d119e267716c4a65df4a3f4f5f8cc36eb54fec4ceefdfdfb437f5017c9d1930724950", 0x58}, {&(0x7f0000003100)="0cdb567c2131511b484560651e45c10052b6afb616e94243d923de80f9a85832c4487b8f592498d57f5f70dd305381b1e357096624658cb8d4802da16f75cdfa6936d05384b84e3ad16d4a0ae71d85e084a7ca4eb9101c8dfd930fedf6497692ea88d8338a19182b1a78415a7d46281a38b084854e841421ad", 0x79}, {&(0x7f0000003180)="299f8387f33bfd177afb6c2a23df8eb3a66eb95b34284f3d96c5d896a234a574caa4438056d7e5c0825915f8a6a47cff854d31d6607be9abbba5b99bc3e4a3646d744ac4d2470f2f033d0bf515b471d7f3d90dac1fd8159b14d7ae6c3bb81669f0c0b05e0c947bab119c1fdfec90ccb512968d04e429a3d54b2648989c83da98313be04e66526910336196cafe455b741f6b6988d09b9a036f666f2b9a64667fe36bf0cddff0b51453e30ec88abc9f8abd745897adc7a79b9fc56ed0848f146e0411a968f581a88811a9439ce1e40189ea6cbd70bca260fddf81817c1c9f627e263c9bac7c2e2ed820c9a12ec99279740dd3", 0xf2}, {&(0x7f0000003280)="f609008d2b63e49d15e46b4333231b16fe9049b4a52c4b4ea8af6ac97b49f9d2700ea43c425aaace3b9f56de1d5d240e46c680b66802bb20354602e375", 0x3d}], 0x5}}, {{&(0x7f0000003340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003380)="6d184d1a7fb88af347692abb0bae58651721f4a0bf649205e517899451a77d972cbca6b9418846d1daa081f73b8778e6be309afc6c15c3d4c06d056e56fc2a63c10080e203f90f8062df4538fcf338ac0ee0c1d1dc3421440052a8ab223289b50ef251e0", 0x64}, {&(0x7f0000003400)="ee49bd5fd37cc4f8dbf6cb09b7cd3db0348a1c3e0abb4b8f95bd3b0770e31333d3008848a9b99d898e465dcd532d52d2afe5ca4c121e822e309dc9c17c0480c3e73ced632ce544c1630d7b52a812721d66066118b98662242601e3430ef215bfc5e507732065b4af405e01cb7c491f", 0x6f}, {&(0x7f0000003480)="b330a3c4925d8a7d2c181845867464fee2cbd8948091d3f6ff4f2f233c4b5908a8f28fd72c7f667389910bb74120a6690e2cfbdfce1781851a57b30da8570d7b3ba527d385a9c58f3a00835366d34c60193fd9d2e76c562ecef04c2d0c2c8a51317767b7bde08dde65d516fbf162f5aa21e9ee1911", 0x75}, {&(0x7f0000003500)="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", 0xff}, {&(0x7f0000003600)="99f07a403870217b688286760ffc4c9e64dcd165b5c46ff13203c065486496c454973bd5f3467ab47c65c4ce36f3c702ecf0904b60bfce4e8d61f6741e4854dfc8eb30b494ac3edd9cde0b6a32d8ae3dc3db1896b1f3689fd7a5f1980d001a167f5dea91bd8ee06187199f43f791ad18b8ed6bd6357115f05adc39131f9b344f052fe30471923cbee30be3bbe5cffef5566bb0ca28f0768441b83305a350aa93141fd7e3706654447413cfd4b1a7c816d1fb5a5300fd74a7f63e721757af5368a53b", 0xc2}], 0x5, &(0x7f0000003780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x30}}, {{&(0x7f00000037c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003900)=[{&(0x7f0000003800)="26fd6e995437f17045299a4531", 0xd}, {&(0x7f0000003840)="264e9581133b47f485eb5c466e627d28739a6a8a92e598ad454c6d78d938b379da1121a9469c1d5a369a07fb295400ab0d33dfe0f06996c5b7ad86f483651917ba6a87350d86538764d21afc05e41430f91c1a9d923735064b428452841e6bdbb94e255eb5952cf6ae80ef69b7bdd284344972dae71abd07d8d6353a31964dbe4f6a1982ddb99da8bf23d665413c166132748b248cc4ef6ee83d50ce02f70abde503213de0d91e9feb7dbbe9408edffe6bbac4ec8fcb283e2eb7535f", 0xbc}], 0x2, &(0x7f0000003940)=[@ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x28, 0x3, [{0x6, 0x2}, {0x0, 0xf, "091ddb8ce82f664242efe7459a"}, {0x2, 0x2}, {0x6, 0x6, "e69c88b3"}, {0x7, 0x2}, {0x1, 0x7, "41b29a76cb"}]}, @timestamp={0x44, 0x18, 0x85, 0x0, 0x6, [0xfffffffc, 0x6, 0x145c5826, 0xfffff800, 0x6]}, @lsrr={0x83, 0xf, 0x5e, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @end, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @end, @ssrr={0x89, 0x17, 0x44, [@dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x3c, 0x0, 0x0, [0x3]}, @cipso={0x86, 0x5a, 0x0, [{0x2, 0xd, "5c9922e1bff5ee9997cd7c"}, {0x5, 0xe, "5479fe733045f39aa1fb8754"}, {0x2, 0x7, "8ddd7e901c"}, {0x31d9bd1eac987faf, 0xa, "4386dd773fec747d"}, {0x2, 0xb, "36086c1781d48e514d"}, {0x1, 0xe, "7df073395ca440852e252301"}, {0x2, 0xf, "af6af5ceff677cea5b1aa41b73"}]}, @timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2b}}]}, @noop, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x98, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x99, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010102, @local, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4c, 0x3b, 0x3, 0x4, [{@private=0xa010102, 0x20000000}, {@broadcast, 0x9}, {@loopback, 0x7}, {@local, 0x7ff}, {@empty, 0x6}, {@multicast2, 0x8001}, {@loopback, 0xff}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0xb, 0x6a, [@multicast1, @private=0xa010100]}, @generic={0x82, 0x7, "9a5f76785a"}, @rr={0x7, 0xb, 0x37, [@remote, @loopback]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x7d, 0x0, 0x7, [0x7, 0x0, 0x9, 0xfffffffa, 0xb, 0x7, 0x2, 0xfffffffd, 0x7f]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x228}}], 0x7, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003d40)={'wlan1\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000003d80)={0x2, 'vlan1\x00', {0x400}, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000003dc0), 0x4) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000003e00)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000003e40)=0x1c, 0x0) sendto$inet6(r4, &(0x7f0000003e80)="8d127f3fd6cbd56827337e3151e313d934e0c259cd218dff79de2859f0a59bd58461b61da98cbd4473852145849c04de57e4ea7afed772fd2a4e16b5d569caa4b69d2919c2ced42bedee2616ab266fe91271caab787d605832490b8676bc7418591f03bf262d1fd4ffb9c2ffd2edd6abb7e6f8bf730a8f9c9ca1d19ada7964fa543e2755a7839660e27a030b346a9377eb6b0f6c33331aecd3973a858929f71ceafc77ca949afd5a26098625c95aa0604695fde33dd1235a6468cdcef8f61338851802f6a4156c11ad8e60897a56a26c87951fe85aee94e459ac333ea2aabc7f92e4ca8b8895887293a10d", 0xeb, 0x8000, &(0x7f0000003f80)={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) bind$l2tp6(r4, &(0x7f0000003fc0)={0xa, 0x0, 0xf1d1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8, 0x2}, 0x20) sendmmsg(r4, &(0x7f0000004980)=[{{&(0x7f0000004000)=@phonet={0x23, 0x64, 0x7, 0x1}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004080)="a3c20d01e36a7b66b6927b5ae60157881497de160895a1b86ac4c62dbea4fa8f9af36007cb24434eeb65febdfb7cfa384063a6c3242971242b31481ced861e605a8ed8d06433f4cc2ae3c3c2270cba00635bcfdce83f686d57a1d7f32c7c2173d9cb", 0x62}, {&(0x7f0000004100)="78fe8c0b7e10901763fba50b753ed60137d13415020aed59d38a8fccaa3ab3918ab820a0e85efc5374e4274c958c4b17d46f4b9edfe4037eb78ba42335e6168bcb3465f169a6003334b9e7a1a0863811139de226bcc9d5a13769b3e2073348ee39b7f8cd1f3d767a72aced081289ecc8c7dc6ce800a2a63f7e3d378d65d5dbae99f296b1e9a09987da52a8ddc2b3247dbcdc65f3f0e549223246c1bb626b18cd43654e644c77ff8a2a6b1fa2798ee2690b9efa9808758e341be219e2e1b96b158174ca115a6962034306b0ad44801d4c3e", 0xd1}], 0x2, &(0x7f0000004240)=[{0x50, 0x1, 0x6, "18c14f7787d9019b12c0a423477a1c5dacfc51211be3d50a32ac397e85abdcd830351b8874f3cd5e4b0c859c253300f8bd7bd032c18bde6be63b"}, {0x90, 0x112, 0xaebf, "6ee8ad12b1e4742dd0147305bc2cd553f2733fe0f39380c8a737ea6ca9d12809db1f68b3036fb7d0e370b2d5ba8abac3466079cab6cade72a993767c6ab11eb2dc0d27506ba9871ca05a9cc818814876e0e30207ccd663001dd121730fab8aab5e25d26307c316fb5e4e423a000f821c33f02c3ba9611069a5e890"}], 0xe0}}, {{&(0x7f0000004340)=@phonet={0x23, 0x3, 0x3c, 0x63}, 0x80, &(0x7f0000004580)=[{&(0x7f00000043c0)="b71fb0f8afd2c86e110363dd6e856b7c557aa1c36cbecf18d86a0880f5b93291e90f1a3c1c20f46958bd5434bd88067d6129739c57e7c14d1ea0376b6006c70a881e411678b7d8ad5e30f13403c2921d89f2e0c6d7d3f338bafb1df0061437189308c4e2be1e1d26899c67", 0x6b}, {&(0x7f0000004440)="8a560b42a4f7e4", 0x7}, {&(0x7f0000004480)="170b69f4060e6c40bd45920409402f9fef977afe2e3f444e635db1e6a058c34aa91c355741dc8dce0d5ea25c6f3ee1389b4adbaa5b1ed52c09b574e065ab916cbb0c0bb098b61d16e33bae2a12bc6901df44c954c729546162ae17f2406c12ee8f8e2915b077863da92c872982a72b69b6824f68aa14dc4ae7497ab98573ee6072432bcd3613714ef1a4b293ad12db8f135a3840cf48b22af5a4e778d41cbac810b742e11aa513d15130283ab6036fb9b872f2e3d29e96f5450e8cd7188213e44fa2e0877a7f4469e879f6b602a64c0ec41e2a62", 0xd4}], 0x3}}, {{&(0x7f00000045c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x1, 0x4, {0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}}}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004640)="184d89899e6941e326242304aa", 0xd}], 0x1, &(0x7f00000046c0)=[{0x38, 0x101, 0xffff00a5, "baf466108dc7cbda728e31cabfa48185aaf44f8354acd72813b9087a81e829f4b9c24a9b9144b44f"}], 0x38}}, {{&(0x7f0000004700)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004780)="39ff3d32e52dfce3c83260dfbbbc91dcf135f0240d124f51521da2bcf96a91fe4e5cc5932305f33e3a479b1f162a137508ebe3c745746fdc154522682accb07f6a74b613f2d5ec621e1e7bffa65eeaf61da0bc2b816ee56f4016c03da12e426f10c4717b30cb9240860cefeb60604963371f7de061e386cad3938199faee78b975210ababeb8aa9cf31a2948ac8ab4ed7123808d0a4c7cc1f642cb971c", 0x9d}, {&(0x7f0000004840)="5adb30babba6a7962c13df5811a7df80b99bfed182349b5748760fd17413085a69a0624c058bc6e52ecf2b7fa3958bad9891ac58545c0be4bbb27ea68f9651ce0dd6bedd918d511efac72e8a58d6d6b858625f6fd8d6ced0e64879092032dbf0865a2234e7562dc2ef6f5782f39db0e90d78e076cd3009a73fe7078ce8703172419cc75ce0191dffe9093ab8a03418bc110bc5c77367cf4806649bfc81c44206b575fdd257d49e848c8ccb5f115753da0211a020c97525540c32fbc5e6efd9a4", 0xc0}], 0x2, &(0x7f0000004940)=[{0x40, 0x117, 0x3, "46e0d61d229f008e8b04d20fcebf19e00447c13753d946f1182668e478a752eb2b17b26f7991c37330aa8d6e91b0"}], 0x40}}], 0x4, 0x4000000) recvmsg(0xffffffffffffffff, &(0x7f0000004d40)={&(0x7f0000004a80)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b00)=""/40, 0x28}, {&(0x7f0000004b40)=""/217, 0xd9}], 0x2, &(0x7f0000004c80)=""/173, 0xad}, 0x100) bind$l2tp6(r4, &(0x7f0000004d80)={0xa, 0x0, 0x8, @mcast1, 0x1, 0x4}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000004dc0), 0x10002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000004e00)={'vlan1\x00', 0x1}) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000004e40)=0x7, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000004f80)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x59}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x40840) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000004fc0)={r4, 0x0, 0x6, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000005000), r8) openat$tun(0xffffffffffffff9c, &(0x7f0000005040), 0x146c2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000005080)={0x0, @in6={{0xa, 0x4e23, 0x3ed5, @empty, 0x5b6}}, 0x5, 0x35}, &(0x7f0000005140)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000005180)={r9, @in6={{0xa, 0x4e23, 0x4, @empty, 0x6}}, 0x80, 0x5}, &(0x7f0000005240)=0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005280)={'wlan1\x00'}) bind$bt_hci(r8, &(0x7f00000052c0)={0x1f, 0x0, 0x3}, 0x6) connect$bt_l2cap(r8, &(0x7f0000005300)={0x1f, 0x9, @none, 0x3b5, 0x1}, 0xe) syz_genetlink_get_family_id$gtp(&(0x7f0000005340), r8) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005440)={&(0x7f00000053c0)={0x48, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7e68}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x41}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1380}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) 21.209511368s ago: executing program 4 (id=6225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r1, @ANYBLOB="0500fedbdf250100b3c608000100ee2d14e5817ec054c8848f25f3cab48abe2369987657939ea200067d311eaef420aef11c76bfa2c274bcd799847fccf535f06b7c1b656cc07090b26527021903ded8a8b350ecb4c910d84c04eeee7db67948371bbc00000400"/118, @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000000800010002110000"], 0x20}}, 0x0) unshare(0x68040200) r5 = socket$inet(0x2, 0x3, 0x7) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001811000009763e19850dfd00e576efb9300ebf4d4339edd04ce54a0223dbb1ce1df1aabf6f31cac3df7b291f47b314860b85930280d9230e584d08a90e225cde333ec89c396a41f80e075612144bfd9f2fb7865a23dd57e33659f990e25e3c915235a08dadcc7c45d25fb364280aa3a8dfdf0611509f3a79153e2672b4f30393235a89644bb8f9b4bae8184e34d90494a8703f028c609d", @ANYRESHEX=r6, @ANYRES8=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x3, 0xfffffffffffffffe, 0x7, 0x0, 0x3, 0x40}, 0x0, &(0x7f00000002c0)={0x3ff, 0x10001, 0x0, 0x9, 0x0, 0x0, 0x8, 0x1ff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x0, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x0, 0xf0, 0x2}, {0x2, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x1, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0x0, 0x3}, {0x0, 0xf0, 0x1}, 0x0, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}}], 0x100) close(0x4) 20.880698518s ago: executing program 1 (id=6226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f0000008680)=0x1000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000006910480011ff0414000000000000000000000000116b4b42a7f6167d70939ec595e4cf7beeed0111cdfe31e0772728b7bead65271f6d4b9371fc3e8caeb2714b5d41e59882fe561e9e74d67debff0148"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv4_getrule={0x0, 0x22, 0xb00, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x80, 0xf9, 0x0, 0x0, 0x8, 0x9}, ["", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="2e000300010003", 0x7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@ipv6_deladdrlabel={0x4c, 0x49, 0x0, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r9, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socket(0x1, 0x803, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 20.398917197s ago: executing program 5 (id=6227): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ldst={0x0, 0x2, 0x3, 0xa, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) 20.398443901s ago: executing program 1 (id=6228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000009f0af32dc00000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x424100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x9, 0x80, 0x3a, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7, 0x50, 0x4}}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)=r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0x3) 20.293370456s ago: executing program 5 (id=6229): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 64) unshare(0x62040200) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) socket(0x8, 0x3, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) unshare(0x20400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa, 0x0, 0x3, 0x8000000000, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 20.272743086s ago: executing program 1 (id=6230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='c\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf254c0000000c00a70040000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a600ff00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 19.932342744s ago: executing program 1 (id=6231): syz_emit_ethernet(0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb73fd8541f8e686dd60122d92004b3afffe8000000000000000000000000000bbff020000000000000000000000000001010390780600000060fd760900083200fe8000000000000000000000000000aafe8a"], 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x10, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r11, @ANYBLOB="18000000000000000000000000000000181100000454e5afaa46e3459ca1ef67cffc7ec348f2de8fb6b42c5cad3d98de5389405a6592", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r10}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r13}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0x1, 0xff, 0x1, 0xfffffc01, 0x1, [0x4, 0x73babe82, 0x6, 0xbe1a]}) 6.229716729s ago: executing program 33 (id=6206): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040b0000000100000000160000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, 0x0, 0x0, 0x1, r1}, 0x38) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x5, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0xbc, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, r3, 0x36, 0x2c, 0x0, @void, @void, @void, @value=r4}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xffffff6c}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x68c}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400d0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x1f) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) 4.689813225s ago: executing program 34 (id=6209): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600894f0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) unshare(0x6a040000) (async) unshare(0x6a040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385000000850000", @ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8050241b98105fd88bf2edbdf25"], 0x10}}, 0x810) (async) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8050241b98105fd88bf2edbdf25"], 0x10}}, 0x810) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0xfdef) (async) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc41d6c9de4f40b08, 0x4, 0x5, 0x80000000, 0x1084, 0xffffffffffffffff, 0x6000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) 3.050996914s ago: executing program 35 (id=6231): syz_emit_ethernet(0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb73fd8541f8e686dd60122d92004b3afffe8000000000000000000000000000bbff020000000000000000000000000001010390780600000060fd760900083200fe8000000000000000000000000000aafe8a"], 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x10, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r11, @ANYBLOB="18000000000000000000000000000000181100000454e5afaa46e3459ca1ef67cffc7ec348f2de8fb6b42c5cad3d98de5389405a6592", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r10}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r13}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0x1, 0xff, 0x1, 0xfffffc01, 0x1, [0x4, 0x73babe82, 0x6, 0xbe1a]}) 1.388976323s ago: executing program 36 (id=6229): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 64) unshare(0x62040200) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) socket(0x8, 0x3, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) unshare(0x20400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa, 0x0, 0x3, 0x8000000000, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 0s ago: executing program 37 (id=6225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r1, @ANYBLOB="0500fedbdf250100b3c608000100ee2d14e5817ec054c8848f25f3cab48abe2369987657939ea200067d311eaef420aef11c76bfa2c274bcd799847fccf535f06b7c1b656cc07090b26527021903ded8a8b350ecb4c910d84c04eeee7db67948371bbc00000400"/118, @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000000800010002110000"], 0x20}}, 0x0) unshare(0x68040200) r5 = socket$inet(0x2, 0x3, 0x7) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001811000009763e19850dfd00e576efb9300ebf4d4339edd04ce54a0223dbb1ce1df1aabf6f31cac3df7b291f47b314860b85930280d9230e584d08a90e225cde333ec89c396a41f80e075612144bfd9f2fb7865a23dd57e33659f990e25e3c915235a08dadcc7c45d25fb364280aa3a8dfdf0611509f3a79153e2672b4f30393235a89644bb8f9b4bae8184e34d90494a8703f028c609d", @ANYRESHEX=r6, @ANYRES8=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x3, 0xfffffffffffffffe, 0x7, 0x0, 0x3, 0x40}, 0x0, &(0x7f00000002c0)={0x3ff, 0x10001, 0x0, 0x9, 0x0, 0x0, 0x8, 0x1ff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x0, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x0, 0xf0, 0x2}, {0x2, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x1, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0x0, 0x3}, {0x0, 0xf0, 0x1}, 0x0, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}}], 0x100) close(0x4) kernel console output (not intermixed with test programs): l slaves [ 846.066883][ T3521] bond5 (unregistering): Released all slaves [ 846.169782][ T3521] bond6 (unregistering): Released all slaves [ 846.182510][ T3521] bond7 (unregistering): Released all slaves [ 846.282049][ T3521] bond8 (unregistering): Released all slaves [ 846.294298][ T3521] bond9 (unregistering): Released all slaves [ 846.395822][ T3521] bond10 (unregistering): Released all slaves [ 846.493635][ T3521] bond11 (unregistering): Released all slaves [ 846.593905][ T3521] bond12 (unregistering): Released all slaves [ 846.613605][T16841] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 40688 - 0 [ 846.622305][T16841] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 40688 - 0 [ 846.636225][T25995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 846.666479][T25972] wg1 speed is unknown, defaulting to 1000 [ 846.674650][T25983] rdma_rxe: rxe_newlink: failed to add bond0 [ 846.680416][T25985] rdma_rxe: rxe_newlink: failed to add bond0 [ 846.884135][ T3521] : left promiscuous mode [ 846.953062][T26014] vlan3: entered promiscuous mode [ 846.958510][T26014] bond0: entered promiscuous mode [ 846.963795][T26014] dummy0: entered promiscuous mode [ 846.970839][T26014] vlan3: entered allmulticast mode [ 846.976715][T26014] bond0: entered allmulticast mode [ 846.982034][T26014] dummy0: entered allmulticast mode [ 847.012667][ T3521] tipc: Left network mode [ 847.266903][T26027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5281'. [ 847.749808][T26038] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5286'. [ 848.029243][T26041] syzkaller1: entered promiscuous mode [ 848.048592][T26041] syzkaller1: entered allmulticast mode [ 848.181385][T26054] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.192885][T26054] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.206529][T26054] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 848.394561][T26054] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.407796][T26054] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.414629][T26068] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 848.426653][T26054] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 848.438065][T26068] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20004 [ 848.456964][T26065] syzkaller1: entered promiscuous mode [ 848.462568][T26065] syzkaller1: entered allmulticast mode [ 848.485085][T26054] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.497992][T26054] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.521568][T26054] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 848.618463][T26054] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.629342][T26054] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.647374][T26054] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 848.787363][T26082] __nla_validate_parse: 3 callbacks suppressed [ 848.787383][T26082] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5296'. [ 849.732241][T12030] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.756131][T12030] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 849.777003][T12030] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 849.812848][T12030] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.838064][T12030] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 849.865351][T12030] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 849.886582][T26103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5300'. [ 850.025962][T26109] bond2: option updelay: invalid value (18446744073709551615) [ 850.063553][T26109] bond2: option updelay: allowed values 0 - 2147483647 [ 850.076840][T26109] bond2 (unregistering): Released all slaves [ 850.167392][T26122] lo: Caught tx_queue_len zero misconfig [ 850.189636][T26110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5302'. [ 850.206755][T26110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5302'. [ 850.216624][T12030] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.233268][T12030] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 850.267146][T12030] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 850.384893][T12030] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.425342][T12030] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 850.445296][T12030] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 850.598291][ T3521] IPVS: stop unused estimator thread 0... [ 850.914244][T26164] tipc: Enabled bearer , priority 0 [ 850.950261][T26164] syzkaller0: entered promiscuous mode [ 850.961101][T26164] syzkaller0: entered allmulticast mode [ 851.025164][T26163] tipc: Resetting bearer [ 851.086794][T26163] tipc: Disabling bearer [ 851.290855][T26182] vet0_virt_wif speed is unknown, defaulting to 1000 [ 851.885894][T26182] wg1 speed is unknown, defaulting to 1000 [ 852.484533][T26223] vet0_virt_wif speed is unknown, defaulting to 1000 [ 852.524814][T26227] tipc: Enabled bearer , priority 0 [ 852.563935][T26230] syzkaller0: entered promiscuous mode [ 852.591428][T26230] syzkaller0: entered allmulticast mode [ 852.690723][T26237] openvswitch: netlink: IP tunnel TTL not specified. [ 852.744977][T26227] tipc: Resetting bearer [ 852.764850][T26226] tipc: Resetting bearer [ 852.852927][T26226] tipc: Disabling bearer [ 853.233090][T26223] wg1 speed is unknown, defaulting to 1000 [ 853.343731][T26263] vet0_virt_wif speed is unknown, defaulting to 1000 [ 853.410514][T26260] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5341'. [ 853.423940][T26260] A link change request failed with some changes committed already. Interface hwsim0 may have been left with an inconsistent configuration, please check. [ 853.640970][T26269] netlink: 'syz.1.5340': attribute type 5 has an invalid length. [ 854.083800][T26276] netlink: 'syz.2.5343': attribute type 6 has an invalid length. [ 854.250225][T26263] wg1 speed is unknown, defaulting to 1000 [ 854.711553][T26293] vet0_virt_wif speed is unknown, defaulting to 1000 [ 854.753803][T26289] vet0_virt_wif speed is unknown, defaulting to 1000 [ 854.837794][T26297] netlink: 'syz.0.5349': attribute type 1 has an invalid length. [ 854.857655][T26297] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5349'. [ 854.943679][T26302] netlink: 'syz.0.5350': attribute type 15 has an invalid length. [ 854.952177][T26302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5350'. [ 854.973653][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 854.973785][T26302] netlink: 'syz.0.5350': attribute type 15 has an invalid length. [ 854.990445][T26302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5350'. [ 855.028755][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 855.044773][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 855.064797][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 855.073079][T26304] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 855.115347][T26304] bridge_slave_0: left allmulticast mode [ 855.121044][T26304] bridge_slave_0: left promiscuous mode [ 855.127141][T26304] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.149846][T26304] bridge_slave_1: left allmulticast mode [ 855.159117][T26304] bridge_slave_1: left promiscuous mode [ 855.166172][T26304] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.177779][T26307] netlink: 'syz.4.5351': attribute type 10 has an invalid length. [ 855.186934][T26304] bond0: (slave bond_slave_0): Releasing backup interface [ 855.196738][T26304] bond0: (slave bond_slave_1): Releasing backup interface [ 855.206928][T26304] : Port device team_slave_0 removed [ 855.217078][T26304] : Port device team_slave_1 removed [ 855.223948][T26304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.224043][T26308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5352'. [ 855.241628][T26304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.292194][T26304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 855.310656][T26307] mac80211_hwsim hwsim48 wlan1: left allmulticast mode [ 855.321589][T26307] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 855.395711][T26310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5352'. [ 855.436223][T26315] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5353'. [ 855.453688][T26315] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5353'. [ 855.538664][T26293] wg1 speed is unknown, defaulting to 1000 [ 855.554173][T26289] wg1 speed is unknown, defaulting to 1000 [ 855.689795][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5356'. [ 855.906598][T26319] pim6reg: entered allmulticast mode [ 856.423971][T26343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5360'. [ 856.679031][T26353] pim6reg1: entered allmulticast mode [ 856.802072][T26361] netlink: 'syz.1.5366': attribute type 29 has an invalid length. [ 856.812566][T26361] netlink: 'syz.1.5366': attribute type 29 has an invalid length. [ 856.869580][T26366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.920627][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5369'. [ 857.163016][T26381] vet0_virt_wif speed is unknown, defaulting to 1000 [ 857.207465][T26386] netlink: 'syz.4.5376': attribute type 10 has an invalid length. [ 857.277963][T26386] openvswitch: netlink: Flow key attr not present in new flow. [ 857.311117][T26394] erspan0: entered promiscuous mode [ 857.319856][T26394] erspan0: left promiscuous mode [ 857.438941][T26396] netlink: 'syz.4.5376': attribute type 6 has an invalid length. [ 857.652816][T26381] wg1 speed is unknown, defaulting to 1000 [ 857.759881][T26412] xfrm0: Caught tx_queue_len zero misconfig [ 857.805739][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 857.823765][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 857.835247][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 858.075386][T26412] infiniband syz2: set active [ 858.080551][T26412] infiniband syz2: added ip6_vti0 [ 858.133227][T26412] RDS/IB: syz2: added [ 858.139324][T26412] smc: adding ib device syz2 with port count 1 [ 858.146917][T26412] smc: ib device syz2 port 1 has no pnetid [ 858.190289][T26426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 858.219892][T26427] bond2: entered promiscuous mode [ 858.232615][T26427] bond2: entered allmulticast mode [ 858.245817][T16900] ip6_vti0 speed is unknown, defaulting to 1000 [ 858.269943][T26430] bridge0: port 3(dummy0) entered disabled state [ 858.277241][T26430] dummy0: left promiscuous mode [ 858.282332][T26430] bridge0: port 3(dummy0) entered disabled state [ 858.296077][T26430] bond2: (slave dummy0): making interface the new active one [ 858.303468][T26430] dummy0: entered promiscuous mode [ 858.311076][T26430] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 858.342114][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 858.541042][T26426] bond2 (unregistering): (slave dummy0): Releasing active interface [ 858.550071][T26426] dummy0: left promiscuous mode [ 858.562102][T26426] bond2 (unregistering): Released all slaves [ 858.600923][T26431] tipc: Enabled bearer , priority 0 [ 858.607825][T21549] ip6_vti0 speed is unknown, defaulting to 1000 [ 858.618840][T26436] tipc: Disabling bearer [ 858.668924][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 858.911805][T26448] x_tables: ip_tables: osf match: only valid for protocol 6 [ 858.948931][T26454] bond8: (slave erspan0): Releasing active interface [ 858.983767][T26454] ip6gretap1: entered promiscuous mode [ 859.021550][T26454] bond0: (slave dummy0): Releasing backup interface [ 859.057202][T26454] dummy0: left promiscuous mode [ 859.071796][T26454] dummy0: left allmulticast mode [ 859.138157][T26454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 859.314067][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 859.496435][T26472] dummy0: left allmulticast mode [ 859.501418][T26472] dummy0: left promiscuous mode [ 859.525196][T26472] bridge0: port 3(dummy0) entered disabled state [ 859.547640][T26472] bridge_slave_0: left allmulticast mode [ 859.553320][T26472] bridge_slave_0: left promiscuous mode [ 859.565519][T26472] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.578916][T26472] bridge_slave_1: left allmulticast mode [ 859.587929][T26472] bridge_slave_1: left promiscuous mode [ 859.594169][T26472] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.612986][T26472] bond0: (slave 30): Releasing backup interface [ 859.635429][T26472] bond0: (slave bond_slave_1): Releasing backup interface [ 859.659835][T26472] team0: Port device team_slave_0 removed [ 859.668448][T26472] team0: Port device team_slave_1 removed [ 859.674688][T26472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.682492][T26472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.705724][T26472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 859.758888][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 859.850941][T26480] geneve4: entered promiscuous mode [ 859.860076][T26480] geneve4: entered allmulticast mode [ 860.100970][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 860.176664][T26493] __nla_validate_parse: 18 callbacks suppressed [ 860.176683][T26493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5405'. [ 860.239917][T26494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5405'. [ 860.304222][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 860.420547][T26498] validate_nla: 2 callbacks suppressed [ 860.420564][T26498] netlink: 'syz.3.5406': attribute type 1 has an invalid length. [ 860.479778][T26498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 860.494032][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 860.621746][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 860.754138][T26412] ip6_vti0 speed is unknown, defaulting to 1000 [ 860.972709][T26469] vet0_virt_wif speed is unknown, defaulting to 1000 [ 860.981453][T26459] vet0_virt_wif speed is unknown, defaulting to 1000 [ 861.118987][T26469] wg1 speed is unknown, defaulting to 1000 [ 861.198975][T26515] macvlan0: entered promiscuous mode [ 861.284006][T26521] tipc: Enabled bearer , priority 0 [ 861.348463][T26521] syzkaller0: entered promiscuous mode [ 861.354143][T26521] syzkaller0: entered allmulticast mode [ 861.360442][T26521] tipc: Resetting bearer [ 861.361415][T26524] netlink: 'syz.2.5412': attribute type 1 has an invalid length. [ 861.400818][T26524] 8021q: adding VLAN 0 to HW filter on device bond10 [ 861.415693][T26521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5412'. [ 861.443693][T26459] wg1 speed is unknown, defaulting to 1000 [ 861.459949][T26527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5414'. [ 861.510695][ T77] tipc: Resetting bearer [ 861.522593][T26528] netlink: 'syz.1.5414': attribute type 1 has an invalid length. [ 861.524565][T26459] ip6_vti0 speed is unknown, defaulting to 1000 [ 861.538128][T26520] tipc: Resetting bearer [ 861.645206][T26530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5414'. [ 861.706475][T26531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5414'. [ 861.725686][T26497] rdma_rxe: rxe_newlink: failed to add bond0 [ 861.912966][T26539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5416'. [ 862.323565][T26554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5420'. [ 863.387890][T26520] tipc: Disabling bearer [ 863.400749][T26527] : entered promiscuous mode [ 863.406822][T26528] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 863.433928][T21549] tipc: Node number set to 910708957 [ 863.602869][T26559] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5421'. [ 863.976847][T26582] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 864.261557][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5427'. [ 864.423943][T26586] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 864.448604][T26586] bond6 (unregistering): Released all slaves [ 864.675935][T26590] tc_dump_action: action bad kind [ 864.760545][T26581] vet0_virt_wif speed is unknown, defaulting to 1000 [ 864.914967][T26603] netlink: 'syz.1.5432': attribute type 2 has an invalid length. [ 864.984041][T26603] : entered promiscuous mode [ 865.235595][T26622] sit0: entered allmulticast mode [ 865.293034][T26627] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 865.433178][T26581] wg1 speed is unknown, defaulting to 1000 [ 865.441028][T26581] ip6_vti0 speed is unknown, defaulting to 1000 [ 865.607233][T26635] syzkaller1: entered promiscuous mode [ 865.618353][T26635] syzkaller1: entered allmulticast mode [ 865.719920][T26638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5444'. [ 865.849657][T26643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5446'. [ 865.851847][T26640] bond11: option primary_reselect: invalid value (6) [ 865.890813][T26640] bond11 (unregistering): Released all slaves [ 866.087598][T26650] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5448'. [ 866.119871][T26654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5450'. [ 866.164632][T26657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5450'. [ 866.299288][T26662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5448'. [ 866.309395][T26662] netlink: 'syz.0.5448': attribute type 2 has an invalid length. [ 867.092470][T26692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5456'. [ 867.259881][T26705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5459'. [ 867.271869][T26705] netlink: 'syz.4.5459': attribute type 62 has an invalid length. [ 867.353142][T26713] tipc: Enabled bearer , priority 0 [ 867.415328][T26713] syzkaller0: entered promiscuous mode [ 867.420990][T26713] syzkaller0: entered allmulticast mode [ 867.492233][T26725] netlink: 212188 bytes leftover after parsing attributes in process `syz.4.5464'. [ 867.599137][T26716] tipc: Resetting bearer [ 867.624793][T26738] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5467'. [ 867.655833][T26716] tipc: Disabling bearer [ 868.286200][T26787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 868.362949][T26785] vet0_virt_wif speed is unknown, defaulting to 1000 [ 868.422158][T26794] vet0_virt_wif speed is unknown, defaulting to 1000 [ 868.532304][T26791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.866405][T26794] wg1 speed is unknown, defaulting to 1000 [ 868.875496][T26794] ip6_vti0 speed is unknown, defaulting to 1000 [ 868.936155][T26810] geneve0: Caught tx_queue_len zero misconfig [ 869.316743][T26785] wg1 speed is unknown, defaulting to 1000 [ 869.346552][T26785] ip6_vti0 speed is unknown, defaulting to 1000 [ 869.834147][T26840] netlink: 'syz.0.5493': attribute type 5 has an invalid length. [ 869.921812][T26832] vet0_virt_wif speed is unknown, defaulting to 1000 [ 869.977004][ T30] audit: type=1800 audit(1764877513.714:27): pid=26847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5496" name="memory.events" dev="tmpfs" ino=2563 res=0 errno=0 [ 870.107603][T26847] vet0_virt_wif speed is unknown, defaulting to 1000 [ 870.116070][ T8252] ip6gretap1: left promiscuous mode [ 870.803627][T26832] wg1 speed is unknown, defaulting to 1000 [ 870.826697][T26832] ip6_vti0 speed is unknown, defaulting to 1000 [ 871.051382][T26860] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 871.084637][T26860] CPU: 1 UID: 0 PID: 26860 Comm: syz.2.5500 Not tainted syzkaller #0 PREEMPT(full) [ 871.084666][T26860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.084679][T26860] Call Trace: [ 871.084688][T26860] [ 871.084697][T26860] dump_stack_lvl+0x189/0x250 [ 871.084740][T26860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.084761][T26860] ? __pfx__printk+0x10/0x10 [ 871.084792][T26860] ? kernfs_path_from_node+0x2f/0x290 [ 871.084814][T26860] ? kernfs_path_from_node+0x250/0x290 [ 871.084836][T26860] ? kernfs_path_from_node+0x2f/0x290 [ 871.084864][T26860] sysfs_warn_dup+0x8e/0xa0 [ 871.084887][T26860] sysfs_do_create_link_sd+0xc0/0x110 [ 871.084912][T26860] device_add_class_symlinks+0x1cf/0x240 [ 871.084941][T26860] device_add+0x475/0xb50 [ 871.084970][T26860] wiphy_register+0x1d2e/0x2d20 [ 871.085009][T26860] ? __pfx_wiphy_register+0x10/0x10 [ 871.085029][T26860] ? __pfx_netdev_run_todo+0x10/0x10 [ 871.085049][T26860] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 871.085086][T26860] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 871.085116][T26860] ieee80211_register_hw+0x3473/0x40d0 [ 871.085158][T26860] ? ieee80211_register_hw+0x1451/0x40d0 [ 871.085193][T26860] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 871.085215][T26860] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 871.085241][T26860] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 871.085262][T26860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 871.085291][T26860] ? __hrtimer_setup+0x181/0x200 [ 871.085312][T26860] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 871.085340][T26860] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 871.085396][T26860] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 871.085416][T26860] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 871.085441][T26860] ? kstrndup+0xbf/0x160 [ 871.085468][T26860] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 871.085497][T26860] ? __pfx___nla_validate_parse+0x10/0x10 [ 871.085536][T26860] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 871.085565][T26860] ? rcu_is_watching+0x15/0xb0 [ 871.085591][T26860] ? __nla_parse+0x40/0x60 [ 871.085618][T26860] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 871.085650][T26860] genl_family_rcv_msg_doit+0x215/0x300 [ 871.085678][T26860] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 871.085719][T26860] ? bpf_lsm_capable+0x9/0x20 [ 871.085738][T26860] ? security_capable+0x7e/0x2e0 [ 871.085771][T26860] genl_rcv_msg+0x60e/0x790 [ 871.085801][T26860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.085822][T26860] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 871.085861][T26860] netlink_rcv_skb+0x208/0x470 [ 871.085880][T26860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.085903][T26860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.085941][T26860] ? down_read+0x274/0x2e0 [ 871.085963][T26860] ? genl_rcv+0xd/0x40 [ 871.085987][T26860] genl_rcv+0x28/0x40 [ 871.086006][T26860] netlink_unicast+0x82f/0x9e0 [ 871.086042][T26860] ? __pfx_netlink_unicast+0x10/0x10 [ 871.086069][T26860] ? netlink_sendmsg+0x642/0xb30 [ 871.086090][T26860] ? skb_put+0x11b/0x210 [ 871.086119][T26860] netlink_sendmsg+0x805/0xb30 [ 871.086149][T26860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.086171][T26860] ? aa_sock_msg_perm+0xf1/0x1b0 [ 871.086192][T26860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.086215][T26860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.086235][T26860] __sock_sendmsg+0x21c/0x270 [ 871.086260][T26860] ____sys_sendmsg+0x505/0x820 [ 871.086293][T26860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.086330][T26860] ? import_iovec+0x74/0xa0 [ 871.086359][T26860] ___sys_sendmsg+0x21f/0x2a0 [ 871.086393][T26860] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.086428][T26860] ? futex_wait+0x285/0x360 [ 871.086481][T26860] ? __fget_files+0x2a/0x420 [ 871.086498][T26860] ? __fget_files+0x3a0/0x420 [ 871.086527][T26860] __x64_sys_sendmsg+0x19b/0x260 [ 871.086557][T26860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 871.086600][T26860] ? do_syscall_64+0xbe/0xf80 [ 871.086625][T26860] do_syscall_64+0xfa/0xf80 [ 871.086646][T26860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.086663][T26860] ? clear_bhb_loop+0x60/0xb0 [ 871.086685][T26860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.086702][T26860] RIP: 0033:0x7efe8218f749 [ 871.086727][T26860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.086743][T26860] RSP: 002b:00007efe803ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.086763][T26860] RAX: ffffffffffffffda RBX: 00007efe823e5fa0 RCX: 00007efe8218f749 [ 871.086776][T26860] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 871.086787][T26860] RBP: 00007efe82213f91 R08: 0000000000000000 R09: 0000000000000000 [ 871.086798][T26860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.086809][T26860] R13: 00007efe823e6038 R14: 00007efe823e5fa0 R15: 00007ffd2c2a64e8 [ 871.086843][T26860] [ 871.697568][T26847] wg1 speed is unknown, defaulting to 1000 [ 871.748297][T26847] ip6_vti0 speed is unknown, defaulting to 1000 [ 872.508570][T26881] __nla_validate_parse: 5 callbacks suppressed [ 872.508589][T26881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5504'. [ 872.527296][T26881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5504'. [ 872.555004][T26881] netlink: 540 bytes leftover after parsing attributes in process `syz.4.5504'. [ 872.571429][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5507'. [ 872.767508][T26902] netlink: 'syz.2.5510': attribute type 13 has an invalid length. [ 872.916087][T26906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5509'. [ 872.969132][ T8771] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.986992][ T8771] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 872.999233][ T8771] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.008436][ T8771] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.017086][ T8771] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 873.027389][ T8771] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.036063][ T8771] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.056192][ T8771] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 873.073575][ T8771] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.153658][ T8771] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.165523][ T8771] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 873.175770][ T8771] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.483952][T26930] pim6reg99999999: entered allmulticast mode [ 873.589773][T26942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5517'. [ 873.739005][T26947] 0{X: left allmulticast mode [ 873.744674][T26947] erspan0: left allmulticast mode [ 873.750169][T26947] sit0: left allmulticast mode [ 873.761391][T26947] macvlan0: left promiscuous mode [ 873.768822][T26947] macvtap1: left promiscuous mode [ 873.774825][T26947] geneve2: left promiscuous mode [ 873.781732][T26947] geneve3: left promiscuous mode [ 873.787568][T26947] macvtap2: left promiscuous mode [ 873.807661][T26947] veth7: left promiscuous mode [ 873.817836][T26947] ip6gretap2: left promiscuous mode [ 873.829933][T26947] vlan3: left promiscuous mode [ 873.837179][T26949] netlink: 'syz.0.5523': attribute type 1 has an invalid length. [ 873.840750][T26947] bond0: left promiscuous mode [ 873.857994][T26947] vlan3: left allmulticast mode [ 873.868421][T26947] bond0: left allmulticast mode [ 873.879935][T26947] geneve4: left promiscuous mode [ 873.890192][T26947] geneve4: left allmulticast mode [ 873.904918][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5521'. [ 873.956415][T26949] 8021q: adding VLAN 0 to HW filter on device bond11 [ 874.065849][T26955] bond11: (slave geneve4): making interface the new active one [ 874.080241][T26955] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 874.120905][T26954] hsr_slave_0: left promiscuous mode [ 874.141836][T26954] hsr_slave_1: left promiscuous mode [ 874.409769][T26975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5531'. [ 874.666435][T26987] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5534'. [ 874.700369][T26987] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5534'. [ 874.930700][T26996] netlink: 'syz.4.5536': attribute type 1 has an invalid length. [ 875.023834][T27005] tipc: Enabling of bearer rejected, failed to enable media [ 875.142006][T26999] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 875.177930][T26999] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 875.228817][T26999] bond2: (slave vxcan3): making interface the new active one [ 875.291164][T26999] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 875.841540][T27030] batadv1: entered promiscuous mode [ 875.909595][T27044] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 876.232036][T27041] vet0_virt_wif speed is unknown, defaulting to 1000 [ 876.555193][T27057] netlink: 'syz.4.5548': attribute type 1 has an invalid length. [ 876.740161][T27060] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 876.783201][T27060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.880582][T27054] bond11: option miimon: invalid value (18446744073709551607) [ 876.924637][T27054] bond11: option miimon: allowed values 0 - 2147483647 [ 876.934293][T27054] bond11 (unregistering): Released all slaves [ 876.988535][T27041] wg1 speed is unknown, defaulting to 1000 [ 877.033097][T27041] ip6_vti0 speed is unknown, defaulting to 1000 [ 877.393056][T27082] syzkaller0: entered promiscuous mode [ 877.398699][T27082] syzkaller0: entered allmulticast mode [ 877.620590][T27092] vet0_virt_wif speed is unknown, defaulting to 1000 [ 877.778699][T27100] __nla_validate_parse: 10 callbacks suppressed [ 877.778719][T27100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5560'. [ 877.832303][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5561'. [ 877.947609][T27092] wg1 speed is unknown, defaulting to 1000 [ 877.976290][T27092] ip6_vti0 speed is unknown, defaulting to 1000 [ 878.332793][T27119] xt_CT: No such helper "snmp" [ 878.452726][T27122] vet0_virt_wif speed is unknown, defaulting to 1000 [ 878.725361][T27122] wg1 speed is unknown, defaulting to 1000 [ 878.732868][T27122] ip6_vti0 speed is unknown, defaulting to 1000 [ 878.806975][T27129] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5569'. [ 878.917346][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5570'. [ 878.958405][T27134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5570'. [ 879.010097][T27136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5571'. [ 879.101722][T27138] netlink: 'syz.1.5572': attribute type 2 has an invalid length. [ 879.542281][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5576'. [ 879.611534][T27153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5577'. [ 879.899582][T27162] tipc: Enabled bearer , priority 0 [ 879.925667][T27162] syzkaller0: entered promiscuous mode [ 879.944485][T27162] syzkaller0: entered allmulticast mode [ 879.967169][T27166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5582'. [ 880.023103][T27162] tipc: Resetting bearer [ 880.063152][T27160] tipc: Resetting bearer [ 880.126278][T27160] tipc: Disabling bearer [ 880.383589][T27186] netlink: 'syz.2.5587': attribute type 2 has an invalid length. [ 880.452431][T27189] netlink: 'syz.3.5588': attribute type 1 has an invalid length. [ 880.488172][T27192] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5590'. [ 880.522185][T27192] .70: renamed from hsr0 [ 880.563519][T27192] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 880.619605][T27192] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 880.661474][T27192] .70: entered allmulticast mode [ 880.687437][T27192] hsr_slave_0: entered allmulticast mode [ 880.713394][T27192] hsr_slave_1: entered allmulticast mode [ 880.736174][T27192] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 881.072914][T27217] sock: sock_timestamping_bind_phc: sock not bind to device [ 881.152807][T27221] syzkaller0: entered promiscuous mode [ 881.179298][T27221] syzkaller0: entered allmulticast mode [ 881.212528][T27221] vlan0: entered allmulticast mode [ 881.232959][T27221] bridge_slave_0: entered allmulticast mode [ 881.246069][T27221] bridge0: port 1(vlan0) entered blocking state [ 881.258083][T27221] bridge0: port 1(vlan0) entered disabled state [ 881.267529][T27221] vlan0: entered promiscuous mode [ 881.273031][T27221] bridge_slave_0: entered promiscuous mode [ 881.569807][T27244] vet0_virt_wif speed is unknown, defaulting to 1000 [ 881.598601][T27250] netlink: 'syz.0.5603': attribute type 8 has an invalid length. [ 881.849260][T27244] wg1 speed is unknown, defaulting to 1000 [ 881.856897][T27244] ip6_vti0 speed is unknown, defaulting to 1000 [ 882.186923][T27258] tipc: Enabling of bearer rejected, already enabled [ 882.196423][T27257] tipc: Enabling of bearer rejected, already enabled [ 882.495228][T27263] netlink: 'syz.2.5607': attribute type 6 has an invalid length. [ 882.730491][T27279] wireguard0: entered promiscuous mode [ 882.747654][T27279] wireguard0: entered allmulticast mode [ 882.885189][T27289] __nla_validate_parse: 1 callbacks suppressed [ 882.885210][T27289] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5613'. [ 882.921413][T27291] syzkaller0: entered promiscuous mode [ 882.932845][T27291] syzkaller0: entered allmulticast mode [ 882.969325][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5614'. [ 882.999484][T27291] netlink: 'syz.4.5614': attribute type 13 has an invalid length. [ 883.023933][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5614'. [ 883.263944][T27320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5622'. [ 883.273844][T27319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5622'. [ 883.287542][T27319] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5622'. [ 883.297058][T27319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5622'. [ 883.803895][T27339] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 883.823460][T19475] ip6_vti0 speed is unknown, defaulting to 1000 [ 883.848503][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 883.976636][T27347] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5628'. [ 883.986749][T27347] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5628'. [ 883.998414][T27343] bond12: option arp_all_targets: invalid value (18446744073709551615) [ 884.008552][T27343] bond12 (unregistering): Released all slaves [ 884.037860][T27346] tipc: Enabled bearer , priority 0 [ 884.045798][T27346] syzkaller0: entered promiscuous mode [ 884.051284][T27346] syzkaller0: entered allmulticast mode [ 884.116686][T27345] tipc: Resetting bearer [ 884.158419][T27345] tipc: Disabling bearer [ 884.182920][T27351] netlink: 'syz.3.5630': attribute type 2 has an invalid length. [ 884.362241][T27355] vet0_virt_wif speed is unknown, defaulting to 1000 [ 884.526744][T27363] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 884.607230][T27366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.643630][T27366] batadv_slave_0: entered promiscuous mode [ 885.226845][T27355] wg1 speed is unknown, defaulting to 1000 [ 885.306165][T27355] ip6_vti0 speed is unknown, defaulting to 1000 [ 885.485069][T27404] syz_tun: entered promiscuous mode [ 886.589556][T27431] netlink: 'syz.1.5654': attribute type 1 has an invalid length. [ 886.799412][T27439] netlink: 'syz.1.5656': attribute type 15 has an invalid length. [ 887.077080][T27456] syzkaller0: entered promiscuous mode [ 887.082743][T27456] syzkaller0: entered allmulticast mode [ 887.110903][T27458] netlink: 'syz.4.5660': attribute type 13 has an invalid length. [ 887.946887][T27469] __nla_validate_parse: 5 callbacks suppressed [ 887.946905][T27469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5667'. [ 887.983258][T27471] vet0_virt_wif speed is unknown, defaulting to 1000 [ 888.278314][T27482] tipc: Enabled bearer , priority 0 [ 888.299158][T27482] syzkaller0: entered promiscuous mode [ 888.308477][T27482] syzkaller0: entered allmulticast mode [ 888.340074][T27489] netlink: 'syz.3.5673': attribute type 3 has an invalid length. [ 888.345165][T27482] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 888.408146][T27490] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 888.452713][T27482] tipc: Resetting bearer [ 888.471697][T27481] tipc: Resetting bearer [ 888.485635][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.495575][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 888.503852][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 888.512396][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 888.520087][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.569001][T27481] tipc: Disabling bearer [ 888.593351][T27471] wg1 speed is unknown, defaulting to 1000 [ 888.595808][T27493] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 888.601254][T27471] ip6_vti0 speed is unknown, defaulting to 1000 [ 888.726480][T27492] vet0_virt_wif speed is unknown, defaulting to 1000 [ 888.988479][T27503] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5676'. [ 889.223027][T27492] wg1 speed is unknown, defaulting to 1000 [ 889.268294][T27492] ip6_vti0 speed is unknown, defaulting to 1000 [ 889.275670][T27513] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 889.533603][T27523] bond4: option packets_per_slave: invalid value (1048582) [ 889.540967][T27523] bond4: option packets_per_slave: allowed values 0 - 65535 [ 889.561482][T27523] bond4 (unregistering): Released all slaves [ 889.751831][T16841] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 889.779009][T27531] syzkaller0: entered promiscuous mode [ 889.789329][T27531] syzkaller0: entered allmulticast mode [ 889.826648][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5687'. [ 889.895355][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5689'. [ 889.909911][T27543] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 889.915098][T27547] netlink: 'syz.0.5689': attribute type 23 has an invalid length. [ 889.923552][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5689'. [ 889.933214][T27543] syzkaller1: linktype set to 260 [ 889.971140][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5689'. [ 890.005879][T27547] netlink: 'syz.0.5689': attribute type 23 has an invalid length. [ 890.044435][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5689'. [ 890.112944][T27557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5690'. [ 890.553550][ T5852] Bluetooth: hci0: command tx timeout [ 890.588356][T27575] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.5695'. [ 890.831905][T27492] chnl_net:caif_netlink_parms(): no params data found [ 890.951703][T27580] tipc: Enabling of bearer rejected, failed to enable media [ 890.994186][T27585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5698'. [ 891.013536][T27589] FAULT_INJECTION: forcing a failure. [ 891.013536][T27589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.027982][T27589] CPU: 0 UID: 0 PID: 27589 Comm: syz.0.5700 Not tainted syzkaller #0 PREEMPT(full) [ 891.028007][T27589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 891.028018][T27589] Call Trace: [ 891.028025][T27589] [ 891.028033][T27589] dump_stack_lvl+0x189/0x250 [ 891.028057][T27589] ? __pfx____ratelimit+0x10/0x10 [ 891.028078][T27589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.028095][T27589] ? __pfx__printk+0x10/0x10 [ 891.028116][T27589] ? __might_fault+0xb0/0x130 [ 891.028142][T27589] should_fail_ex+0x414/0x560 [ 891.028166][T27589] _copy_from_user+0x2d/0xb0 [ 891.028189][T27589] do_ipv6_setsockopt+0x23e/0x2eb0 [ 891.028214][T27589] ? get_pid_task+0x20/0x1f0 [ 891.028235][T27589] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 891.028256][T27589] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 891.028290][T27589] ? __lock_acquire+0x6b6/0x2cf0 [ 891.028312][T27589] ? __pfx___might_resched+0x10/0x10 [ 891.028333][T27589] ? ksys_write+0x1cb/0x250 [ 891.028356][T27589] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 891.028375][T27589] ? aa_sk_perm+0x15f/0x920 [ 891.028399][T27589] ? aa_sk_perm+0x7ee/0x920 [ 891.028426][T27589] ? __pfx_aa_sk_perm+0x10/0x10 [ 891.028449][T27589] ? aa_sock_opt_perm+0xff/0x1a0 [ 891.028467][T27589] ipv6_setsockopt+0x59/0x170 [ 891.028483][T27589] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 891.028525][T27589] do_sock_setsockopt+0x17c/0x1b0 [ 891.028552][T27589] __x64_sys_setsockopt+0x13f/0x1b0 [ 891.028580][T27589] do_syscall_64+0xfa/0xf80 [ 891.028599][T27589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.028615][T27589] ? clear_bhb_loop+0x60/0xb0 [ 891.028636][T27589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.028651][T27589] RIP: 0033:0x7f7f6718f749 [ 891.028667][T27589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.028687][T27589] RSP: 002b:00007f7f6807c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 891.028705][T27589] RAX: ffffffffffffffda RBX: 00007f7f673e5fa0 RCX: 00007f7f6718f749 [ 891.028716][T27589] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 891.028726][T27589] RBP: 00007f7f6807c090 R08: 0000000000000320 R09: 0000000000000000 [ 891.028736][T27589] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.028746][T27589] R13: 00007f7f673e6038 R14: 00007f7f673e5fa0 R15: 00007ffd8702a378 [ 891.028775][T27589] [ 891.433642][ T8771] gretap0: left allmulticast mode [ 891.443645][ T8771] gretap0: left promiscuous mode [ 891.451912][ T8771] bridge0: port 1(gretap0) entered disabled state [ 891.677630][ T8771] bond9 (unregistering): (slave gretap2): Releasing active interface [ 892.120632][ T8771] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 892.130466][ T8771] bond0 (unregistering): Released all slaves [ 892.232585][ T8771] bond1 (unregistering): Released all slaves [ 892.332496][ T8771] bond2 (unregistering): Released all slaves [ 892.431718][ T8771] bond3 (unregistering): Released all slaves [ 892.532857][ T8771] bond4 (unregistering): Released all slaves [ 892.624534][ T5852] Bluetooth: hci0: command tx timeout [ 892.636685][ T8771] bond5 (unregistering): Released all slaves [ 892.649046][ T8771] bond6 (unregistering): Released all slaves [ 892.750582][ T8771] bond7 (unregistering): Released all slaves [ 892.846920][ T8771] bond8 (unregistering): Released all slaves [ 892.859172][ T8771] bond9 (unregistering): Released all slaves [ 892.871582][ T8771] bond10 (unregistering): Released all slaves [ 892.883869][ T8771] bond11 (unregistering): Released all slaves [ 892.952075][T27492] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.973649][T27492] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.995327][T27492] bridge_slave_0: entered allmulticast mode [ 893.011259][T27492] bridge_slave_0: entered promiscuous mode [ 893.028848][T27492] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.036286][T27492] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.043582][T27492] bridge_slave_1: entered allmulticast mode [ 893.052858][T27492] bridge_slave_1: entered promiscuous mode [ 893.181386][ T8771] !: left promiscuous mode [ 893.312187][ T8771] tipc: Left network mode [ 893.342374][T27492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.391626][T27492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.497546][T27492] team0: Port device team_slave_0 added [ 893.512347][T27492] team0: Port device team_slave_1 added [ 893.592251][T27492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.601082][T27492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.637497][T27625] __nla_validate_parse: 5 callbacks suppressed [ 893.637517][T27625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5710'. [ 893.658747][T27492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.671484][T27617] vet0_virt_wif speed is unknown, defaulting to 1000 [ 893.707776][T27492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.715681][T27492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.741964][T27492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.993652][T27632] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5712'. [ 894.062412][T27617] wg1 speed is unknown, defaulting to 1000 [ 894.090220][T27492] hsr_slave_0: entered promiscuous mode [ 894.113522][T27492] hsr_slave_1: entered promiscuous mode [ 894.139778][T27617] ip6_vti0 speed is unknown, defaulting to 1000 [ 894.275844][T27637] syzkaller0: entered promiscuous mode [ 894.284793][T27637] syzkaller0: entered allmulticast mode [ 894.388951][T27637] tipc: Enabled bearer , priority 0 [ 894.456902][T27636] tipc: Resetting bearer [ 894.518045][T27639] FAULT_INJECTION: forcing a failure. [ 894.518045][T27639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.533148][T27636] tipc: Disabling bearer [ 894.559163][T27639] CPU: 0 UID: 0 PID: 27639 Comm: syz.0.5714 Not tainted syzkaller #0 PREEMPT(full) [ 894.559187][T27639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.559198][T27639] Call Trace: [ 894.559205][T27639] [ 894.559213][T27639] dump_stack_lvl+0x189/0x250 [ 894.559237][T27639] ? __pfx____ratelimit+0x10/0x10 [ 894.559258][T27639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 894.559283][T27639] ? __pfx__printk+0x10/0x10 [ 894.559305][T27639] ? __might_fault+0xb0/0x130 [ 894.559337][T27639] should_fail_ex+0x414/0x560 [ 894.559362][T27639] _copy_from_user+0x2d/0xb0 [ 894.559385][T27639] do_ip6t_set_ctl+0x69f/0xce0 [ 894.559408][T27639] ? rcu_is_watching+0x15/0xb0 [ 894.559428][T27639] ? trace_contention_end+0x39/0x100 [ 894.559449][T27639] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 894.559488][T27639] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 894.559520][T27639] ? __pfx_aa_sk_perm+0x10/0x10 [ 894.559550][T27639] nf_setsockopt+0x26f/0x290 [ 894.559572][T27639] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 894.559595][T27639] do_sock_setsockopt+0x17c/0x1b0 [ 894.559623][T27639] __x64_sys_setsockopt+0x13f/0x1b0 [ 894.559652][T27639] do_syscall_64+0xfa/0xf80 [ 894.559674][T27639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.559692][T27639] ? clear_bhb_loop+0x60/0xb0 [ 894.559713][T27639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.559729][T27639] RIP: 0033:0x7f7f6718f749 [ 894.559745][T27639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.559761][T27639] RSP: 002b:00007f7f6807c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 894.559779][T27639] RAX: ffffffffffffffda RBX: 00007f7f673e5fa0 RCX: 00007f7f6718f749 [ 894.559791][T27639] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 894.559802][T27639] RBP: 00007f7f6807c090 R08: 0000000000000320 R09: 0000000000000000 [ 894.559812][T27639] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.559824][T27639] R13: 00007f7f673e6038 R14: 00007f7f673e5fa0 R15: 00007ffd8702a378 [ 894.559854][T27639] [ 894.776840][ T5852] Bluetooth: hci0: command tx timeout [ 895.265618][T27652] netlink: 'syz.1.5718': attribute type 2 has an invalid length. [ 896.636261][T27492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 896.648956][T27492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 896.669358][T27492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 896.681512][T27492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 896.789650][ T5852] Bluetooth: hci0: command tx timeout [ 896.829097][T27492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.861739][T27492] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.881321][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.888517][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.893230][T27671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 896.978278][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.979494][T27674] netlink: 'syz.1.5723': attribute type 1 has an invalid length. [ 896.985465][T12068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.186713][T27681] FAULT_INJECTION: forcing a failure. [ 897.186713][T27681] name failslab, interval 1, probability 0, space 0, times 0 [ 897.212578][T27681] CPU: 1 UID: 0 PID: 27681 Comm: syz.4.5724 Not tainted syzkaller #0 PREEMPT(full) [ 897.212604][T27681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 897.212615][T27681] Call Trace: [ 897.212622][T27681] [ 897.212630][T27681] dump_stack_lvl+0x189/0x250 [ 897.212652][T27681] ? __pfx____ratelimit+0x10/0x10 [ 897.212673][T27681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.212691][T27681] ? __pfx__printk+0x10/0x10 [ 897.212716][T27681] ? __pfx___might_resched+0x10/0x10 [ 897.212734][T27681] ? fs_reclaim_acquire+0x7d/0x100 [ 897.212760][T27681] should_fail_ex+0x414/0x560 [ 897.212783][T27681] should_failslab+0xa8/0x100 [ 897.212808][T27681] __kvmalloc_node_noprof+0x158/0x910 [ 897.212830][T27681] ? xt_alloc_table_info+0x40/0xb0 [ 897.212858][T27681] xt_alloc_table_info+0x40/0xb0 [ 897.212876][T27681] do_ip6t_set_ctl+0x88a/0xce0 [ 897.212897][T27681] ? rcu_is_watching+0x15/0xb0 [ 897.212914][T27681] ? trace_contention_end+0x39/0x100 [ 897.212932][T27681] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 897.212969][T27681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 897.213000][T27681] ? __pfx_aa_sk_perm+0x10/0x10 [ 897.213028][T27681] nf_setsockopt+0x26f/0x290 [ 897.213050][T27681] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 897.213072][T27681] do_sock_setsockopt+0x17c/0x1b0 [ 897.213099][T27681] __x64_sys_setsockopt+0x13f/0x1b0 [ 897.213127][T27681] do_syscall_64+0xfa/0xf80 [ 897.213148][T27681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.213165][T27681] ? clear_bhb_loop+0x60/0xb0 [ 897.213184][T27681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.213200][T27681] RIP: 0033:0x7fb79538f749 [ 897.213215][T27681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.213230][T27681] RSP: 002b:00007fb7962ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 897.213248][T27681] RAX: ffffffffffffffda RBX: 00007fb7955e5fa0 RCX: 00007fb79538f749 [ 897.213261][T27681] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 897.213271][T27681] RBP: 00007fb7962ff090 R08: 0000000000000320 R09: 0000000000000000 [ 897.213289][T27681] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.213300][T27681] R13: 00007fb7955e6038 R14: 00007fb7955e5fa0 R15: 00007ffcb9b0d108 [ 897.213329][T27681] [ 897.334880][T27492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.526374][T27696] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5727'. [ 897.600908][T27696] vlan2: entered allmulticast mode [ 897.614725][T27696] erspan0: entered allmulticast mode [ 897.908744][T27716] vxcan0: entered promiscuous mode [ 898.083384][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 898.120112][T27492] veth0_vlan: entered promiscuous mode [ 898.177048][T27492] veth1_vlan: entered promiscuous mode [ 898.259524][T27492] veth0_macvtap: entered promiscuous mode [ 898.299153][T27492] veth1_macvtap: entered promiscuous mode [ 898.309809][T27731] netlink: 'syz.3.5737': attribute type 2 has an invalid length. [ 898.319553][T27733] FAULT_INJECTION: forcing a failure. [ 898.319553][T27733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.349553][T27733] CPU: 0 UID: 0 PID: 27733 Comm: syz.4.5736 Not tainted syzkaller #0 PREEMPT(full) [ 898.349580][T27733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 898.349590][T27733] Call Trace: [ 898.349598][T27733] [ 898.349606][T27733] dump_stack_lvl+0x189/0x250 [ 898.349630][T27733] ? __pfx____ratelimit+0x10/0x10 [ 898.349651][T27733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.349669][T27733] ? __pfx__printk+0x10/0x10 [ 898.349703][T27733] should_fail_ex+0x414/0x560 [ 898.349728][T27733] _copy_from_user+0x2d/0xb0 [ 898.349751][T27733] copy_from_sockptr_offset+0x66/0xa0 [ 898.349772][T27733] do_ip6t_set_ctl+0x8b7/0xce0 [ 898.349793][T27733] ? rcu_is_watching+0x15/0xb0 [ 898.349813][T27733] ? trace_contention_end+0x39/0x100 [ 898.349833][T27733] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 898.349872][T27733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 898.349904][T27733] ? __pfx_aa_sk_perm+0x10/0x10 [ 898.349933][T27733] nf_setsockopt+0x26f/0x290 [ 898.349962][T27733] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 898.349985][T27733] do_sock_setsockopt+0x17c/0x1b0 [ 898.350013][T27733] __x64_sys_setsockopt+0x13f/0x1b0 [ 898.350041][T27733] do_syscall_64+0xfa/0xf80 [ 898.350063][T27733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.350080][T27733] ? clear_bhb_loop+0x60/0xb0 [ 898.350101][T27733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.350117][T27733] RIP: 0033:0x7fb79538f749 [ 898.350133][T27733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.350148][T27733] RSP: 002b:00007fb7962ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 898.350167][T27733] RAX: ffffffffffffffda RBX: 00007fb7955e5fa0 RCX: 00007fb79538f749 [ 898.350180][T27733] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 898.350191][T27733] RBP: 00007fb7962ff090 R08: 0000000000000320 R09: 0000000000000000 [ 898.350201][T27733] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.350212][T27733] R13: 00007fb7955e6038 R14: 00007fb7955e5fa0 R15: 00007ffcb9b0d108 [ 898.350242][T27733] [ 898.361370][T27735] netlink: 'syz.0.5738': attribute type 33 has an invalid length. [ 898.577387][T27735] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5738'. [ 898.643863][ T8771] IPVS: stop unused estimator thread 0... [ 898.660605][T27492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.693149][T27492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.715576][T12068] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.753204][T12068] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.773290][T12068] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.797768][T12068] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.811713][T27749] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 898.867180][T27749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 898.976009][ T8771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.994406][ T8771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.048932][T27757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5745'. [ 899.261678][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.283093][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.482531][T27773] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 899.497478][T27773] bond1 (unregistering): Released all slaves [ 899.530319][T27779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5750'. [ 899.541830][T27782] netlink: 'syz.5.5666': attribute type 1 has an invalid length. [ 899.573538][T27782] netlink: 'syz.5.5666': attribute type 2 has an invalid length. [ 899.698875][T27782] netlink: zone id is out of range [ 899.703074][ T30] audit: type=1800 audit(1764877543.434:28): pid=27785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5752" name="2" dev="tmpfs" ino=2878 res=0 errno=0 [ 899.715946][T27782] netlink: zone id is out of range [ 899.803753][T27773] netlink: set zone limit has 4 unknown bytes [ 899.862760][T27792] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5754'. [ 899.880690][T27792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5754'. [ 899.978450][T27792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5754'. [ 900.053456][T27803] netlink: 'syz.5.5756': attribute type 1 has an invalid length. [ 900.167745][T27809] x_tables: duplicate underflow at hook 2 [ 900.239754][T27806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5758'. [ 900.249620][T27810] veth3: entered promiscuous mode [ 900.459458][T27825] sock: sock_timestamping_bind_phc: sock not bind to device [ 900.468824][T27825] Bluetooth: MGMT ver 1.23 [ 900.594088][T27832] 8021q: VLANs not supported on caif0 [ 901.086457][T27855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5772'. [ 901.121601][T27853] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5771'. [ 901.126469][T27855] netlink: 'syz.0.5772': attribute type 1 has an invalid length. [ 901.132945][T27853] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5771'. [ 901.146075][T27855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5772'. [ 901.175992][T27853] netlink: 'syz.3.5771': attribute type 178 has an invalid length. [ 901.293162][T27869] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 901.457633][T27879] netlink: 'syz.1.5778': attribute type 28 has an invalid length. [ 901.857975][T27900] netlink: 'syz.4.5785': attribute type 1 has an invalid length. [ 901.900728][T27896] : entered promiscuous mode [ 901.949960][T27900] bond4: entered promiscuous mode [ 901.955878][T27900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.978662][T27903] veth1_vlan: entered allmulticast mode [ 902.001757][T27903] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 902.130214][T27896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 902.164933][T27896] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 902.175931][T27896] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 902.236787][T27896] bond4: (slave gre1): Opening slave failed [ 902.402506][T27934] netlink: 'syz.4.5793': attribute type 4 has an invalid length. [ 902.609970][T27943] bond0: (slave dummy0): Releasing backup interface [ 902.632356][T27943] dummy0: left promiscuous mode [ 902.662328][T27943] batman_adv: batadv0: Adding interface: dummy0 [ 902.698540][T27943] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.776204][T27943] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 902.995905][T27960] netlink: 'syz.5.5802': attribute type 1 has an invalid length. [ 903.030165][T27960] gretap1: entered allmulticast mode [ 903.097730][T27962] tipc: Enabling of bearer rejected, already enabled [ 903.387046][T27977] tipc: Enabling of bearer rejected, already enabled [ 903.405304][T27977] tipc: Enabling of bearer rejected, already enabled [ 903.437138][T27977] tipc: Enabling of bearer rejected, already enabled [ 903.480175][T27977] tipc: Enabling of bearer rejected, already enabled [ 903.539513][T27982] tipc: Resetting bearer [ 903.796860][T28002] netlink: 'syz.5.5813': attribute type 1 has an invalid length. [ 903.800037][T28004] netlink: zone id is out of range [ 903.961564][T28014] tipc: Enabling of bearer rejected, failed to enable media [ 904.043548][T28019] tipc: Resetting bearer [ 904.128297][T28019] netlink: 'syz.0.5819': attribute type 1 has an invalid length. [ 904.178850][T28019] bond12: entered promiscuous mode [ 904.186325][T28019] 8021q: adding VLAN 0 to HW filter on device bond12 [ 904.331383][T28038] netlink: 'syz.4.5826': attribute type 21 has an invalid length. [ 904.342512][T28038] __nla_validate_parse: 22 callbacks suppressed [ 904.342528][T28038] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5826'. [ 904.372586][T28038] netlink: 'syz.4.5826': attribute type 5 has an invalid length. [ 904.380602][T28038] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5826'. [ 904.391497][T28035] syzkaller0: entered promiscuous mode [ 904.397369][T28035] syzkaller0: entered allmulticast mode [ 904.573020][T28047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5828'. [ 904.658058][T28052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5828'. [ 904.847564][T28065] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.5834'. [ 904.902196][T28039] wg1 speed is unknown, defaulting to 1000 [ 904.915419][T28067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5835'. [ 904.926127][T28039] ip6_vti0 speed is unknown, defaulting to 1000 [ 905.470404][T28076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5838'. [ 905.500878][T28076] bond0: Caught tx_queue_len zero misconfig [ 905.925184][T28103] nbd: must specify at least one socket [ 905.963510][T28104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5847'. [ 905.988612][T28108] nbd: must specify at least one socket [ 905.993626][T28094] bond13: entered promiscuous mode [ 906.000725][T28094] 8021q: adding VLAN 0 to HW filter on device bond13 [ 906.196922][T28109] macvlan2: entered promiscuous mode [ 906.202495][T28109] macvlan2: entered allmulticast mode [ 906.210620][T28109] bond5: (slave macvlan2): Opening slave failed [ 906.244925][T28121] validate_nla: 2 callbacks suppressed [ 906.244944][T28121] netlink: 'syz.5.5850': attribute type 1 has an invalid length. [ 906.258680][T28114] block nbd4: server does not support multiple connections per device. [ 906.268872][T28114] block nbd4: shutting down sockets [ 906.502093][T28131] netlink: 'syz.0.5853': attribute type 1 has an invalid length. [ 906.654018][T28137] syzkaller1: entered promiscuous mode [ 906.664656][T28137] syzkaller1: entered allmulticast mode [ 907.274937][T28167] @: renamed from veth0_vlan [ 907.423723][T28163] wg1 speed is unknown, defaulting to 1000 [ 907.431892][T28163] ip6_vti0 speed is unknown, defaulting to 1000 [ 908.154060][T28189] netlink: 'syz.1.5867': attribute type 10 has an invalid length. [ 908.182139][T28186] netlink: 'syz.1.5867': attribute type 6 has an invalid length. [ 908.253034][T28196] syzkaller0: left promiscuous mode [ 908.258464][T28196] syzkaller0: left allmulticast mode [ 908.476124][T28205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5874'. [ 908.848805][T28185] delete_channel: no stack [ 909.007031][T28214] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.028408][T28214] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.037615][T28223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5875'. [ 909.199995][T28223] hsr_slave_0: left promiscuous mode [ 909.227125][T28223] hsr_slave_1: left promiscuous mode [ 909.367683][T28224] syzkaller1: entered promiscuous mode [ 909.406619][T28224] syzkaller1: entered allmulticast mode [ 909.696466][T28254] netlink: 'syz.0.5882': attribute type 1 has an invalid length. [ 909.851941][T28263] 8021q: adding VLAN 0 to HW filter on device bond15 [ 909.913095][T28268] __nla_validate_parse: 2 callbacks suppressed [ 909.913114][T28268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5882'. [ 909.921762][T28263] bond14: (slave bond15): making interface the new active one [ 909.939348][T28263] bond14: (slave bond15): Enslaving as an active interface with an up link [ 910.002715][T28268] 8021q: adding VLAN 0 to HW filter on device bond14 [ 910.088020][T28254] vlan0: entered promiscuous mode [ 910.106118][T28254] bond14: entered promiscuous mode [ 910.122244][T28254] bond15: entered promiscuous mode [ 910.242435][T28256] wg1 speed is unknown, defaulting to 1000 [ 910.260339][T28256] ip6_vti0 speed is unknown, defaulting to 1000 [ 910.300839][T28280] netlink: 'syz.1.5888': attribute type 33 has an invalid length. [ 910.317224][T28280] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5888'. [ 910.436361][T28284] netlink: 'syz.0.5890': attribute type 4 has an invalid length. [ 910.476716][T28284] netlink: 'syz.0.5890': attribute type 4 has an invalid length. [ 910.684862][T28288] warn_alloc: 1 callbacks suppressed [ 910.684881][T28288] syz.3.5891: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 910.742612][T28288] CPU: 1 UID: 0 PID: 28288 Comm: syz.3.5891 Not tainted syzkaller #0 PREEMPT(full) [ 910.742638][T28288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 910.742649][T28288] Call Trace: [ 910.742657][T28288] [ 910.742666][T28288] dump_stack_lvl+0x189/0x250 [ 910.742694][T28288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.742712][T28288] ? __pfx__printk+0x10/0x10 [ 910.742735][T28288] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 910.742759][T28288] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 910.742786][T28288] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 910.742820][T28288] warn_alloc+0x214/0x310 [ 910.742849][T28288] ? __pfx_warn_alloc+0x10/0x10 [ 910.742880][T28288] ? __get_vm_area_node+0x28f/0x300 [ 910.742901][T28288] ? xskq_create+0xbf/0x170 [ 910.742924][T28288] __vmalloc_node_range_noprof+0x690/0x12d0 [ 910.742974][T28288] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 910.742999][T28288] ? __kasan_kmalloc+0x93/0xb0 [ 910.743026][T28288] vmalloc_user_noprof+0xad/0xf0 [ 910.743046][T28288] ? xskq_create+0xbf/0x170 [ 910.743064][T28288] xskq_create+0xbf/0x170 [ 910.743086][T28288] xsk_init_queue+0xb0/0x110 [ 910.743108][T28288] xsk_setsockopt+0x57b/0x8d0 [ 910.743129][T28288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 910.743147][T28288] ? __pfx_aa_sk_perm+0x10/0x10 [ 910.743172][T28288] ? aa_sock_opt_perm+0xff/0x1a0 [ 910.743190][T28288] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 910.743212][T28288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 910.743232][T28288] do_sock_setsockopt+0x17c/0x1b0 [ 910.743262][T28288] __x64_sys_setsockopt+0x13f/0x1b0 [ 910.743291][T28288] do_syscall_64+0xfa/0xf80 [ 910.743314][T28288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.743331][T28288] ? clear_bhb_loop+0x60/0xb0 [ 910.743353][T28288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.743370][T28288] RIP: 0033:0x7fdb0cb8f749 [ 910.743387][T28288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.743402][T28288] RSP: 002b:00007fdb0da3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 910.743420][T28288] RAX: ffffffffffffffda RBX: 00007fdb0cde6090 RCX: 00007fdb0cb8f749 [ 910.743433][T28288] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 910.743443][T28288] RBP: 00007fdb0cc13f91 R08: 0000000000000004 R09: 0000000000000000 [ 910.743454][T28288] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 910.743465][T28288] R13: 00007fdb0cde6128 R14: 00007fdb0cde6090 R15: 00007ffce664bbd8 [ 910.743497][T28288] [ 910.743504][T28288] Mem-Info: [ 911.000930][T28288] active_anon:9536 inactive_anon:0 isolated_anon:0 [ 911.000930][T28288] active_file:3623 inactive_file:40187 isolated_file:0 [ 911.000930][T28288] unevictable:768 dirty:165 writeback:0 [ 911.000930][T28288] slab_reclaimable:13449 slab_unreclaimable:212278 [ 911.000930][T28288] mapped:32344 shmem:4223 pagetables:1033 [ 911.000930][T28288] sec_pagetables:0 bounce:0 [ 911.000930][T28288] kernel_misc_reclaimable:0 [ 911.000930][T28288] free:1185813 free_pcp:28227 free_cma:0 [ 911.095152][T28288] Node 0 active_anon:38144kB inactive_anon:0kB active_file:14492kB inactive_file:160548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117976kB dirty:660kB writeback:0kB shmem:15356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14784kB pagetables:4016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 911.185225][T28288] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 911.256928][T28288] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.312312][T28288] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 911.319385][T28288] Node 0 DMA32 free:847384kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26644kB inactive_anon:0kB active_file:14492kB inactive_file:160548kB unevictable:1536kB writepending:660kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:95844kB local_pcp:71844kB free_cma:0kB [ 911.344990][T28284] tipc: Resetting bearer [ 911.354295][T28288] lowmem_reserve[]: 0 0 0 0 0 [ 911.364617][T28288] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.394831][T28288] lowmem_reserve[]: 0 0 0 0 0 [ 911.399575][T28288] Node 1 Normal free:3890708kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18484kB local_pcp:8072kB free_cma:0kB [ 911.435628][T28288] lowmem_reserve[]: 0 0 0 0 0 [ 911.440383][T28288] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 911.454856][T28288] Node 0 DMA32: 3073*4kB (UME) 1119*8kB (UME) 250*16kB (UME) 68*32kB (ME) 96*64kB (UME) 36*128kB (UME) 37*256kB (UM) 54*512kB (UME) 120*1024kB (UME) 9*2048kB (UM) 154*4096kB (UM) = 847388kB [ 911.474179][T28288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 911.486440][T28288] Node 1 Normal: 177*4kB (UE) 42*8kB (UME) 36*16kB (UME) 126*32kB (UME) 44*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3890708kB [ 911.530053][T28288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.547998][T28288] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 911.561587][T28288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.571928][T28288] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 911.581778][T28288] 45180 total pagecache pages [ 911.586747][T28288] 0 pages in swap cache [ 911.590906][T28288] Free swap = 124996kB [ 911.595303][T28288] Total swap = 124996kB [ 911.599654][T28288] 2097051 pages RAM [ 911.603456][T28288] 0 pages HighMem/MovableOnly [ 911.608835][T28288] 424280 pages reserved [ 911.614292][T28288] 0 pages cma reserved [ 911.853441][T28287] vxcan3: entered allmulticast mode [ 911.886393][T19475] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.893132][T19475] syz2: Port: 1 Link DOWN [ 911.897654][T28262] wg1 speed is unknown, defaulting to 1000 [ 911.906534][T19477] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.933640][ T77] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 911.942803][ T77] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.966684][T28262] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.998757][ T77] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 912.024929][ T77] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.064808][ T77] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 912.083969][ T77] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.295460][T28310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5896'. [ 912.316341][ T77] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 912.325506][ T77] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.354463][T28315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5896'. [ 912.373799][T28274] wg1 speed is unknown, defaulting to 1000 [ 912.414998][T28323] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5898'. [ 912.471737][T28274] ip6_vti0 speed is unknown, defaulting to 1000 [ 912.516567][T28323] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ˀx)% ].>n6# [ 912.539743][T28330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5899'. [ 912.594880][T28332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5899'. [ 912.984431][T28342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5902'. [ 913.565081][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5906'. [ 913.961967][T28365] syzkaller0: entered promiscuous mode [ 913.968684][T28365] syzkaller0: entered allmulticast mode [ 914.386534][T28376] netlink: 'syz.3.5912': attribute type 1 has an invalid length. [ 914.465161][T28376] 8021q: adding VLAN 0 to HW filter on device bond6 [ 914.555783][ T5846] Bluetooth: hci0: command 0x0405 tx timeout [ 914.695916][T28386] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 914.767479][T28391] SET target dimension over the limit! [ 915.192456][T28422] netlink: 'syz.4.5921': attribute type 1 has an invalid length. [ 916.216944][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5930'. [ 916.485121][T28416] wg1 speed is unknown, defaulting to 1000 [ 916.512445][T28416] ip6_vti0 speed is unknown, defaulting to 1000 [ 916.530408][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 916.541312][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 916.549957][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 916.589604][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 916.603941][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 916.939353][T28445] wg1 speed is unknown, defaulting to 1000 [ 917.092114][T28445] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.377452][T28453] wg1 speed is unknown, defaulting to 1000 [ 917.637740][T28453] ip6_vti0 speed is unknown, defaulting to 1000 [ 918.720702][ T5852] Bluetooth: hci2: command tx timeout [ 919.123435][T28453] chnl_net:caif_netlink_parms(): no params data found [ 919.469665][T28453] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.504803][T28453] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.532410][T28453] bridge_slave_0: entered allmulticast mode [ 919.546641][T28453] bridge_slave_0: entered promiscuous mode [ 919.587460][T28453] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.624066][T28453] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.631468][T28453] bridge_slave_1: entered allmulticast mode [ 919.647354][T28453] bridge_slave_1: entered promiscuous mode [ 919.668993][T28418] Set syz1 is full, maxelem 65536 reached [ 919.730510][T28506] syzkaller0: entered promiscuous mode [ 919.736585][T28506] syzkaller0: entered allmulticast mode [ 919.836188][T28453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.880083][T28453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.996445][T28513] syz.3.5945 uses old SIOCAX25GETINFO [ 920.046428][T28453] team0: Port device team_slave_0 added [ 920.070847][T28453] team0: Port device team_slave_1 added [ 920.122272][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 920.210064][T28453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.284401][T28453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.346020][T28453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.360690][T28534] mac80211_hwsim hwsim70 wlan1: entered promiscuous mode [ 920.384564][T28534] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode [ 920.393157][T28453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.404674][T28453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.431057][T28453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.443153][T28520] wg1 speed is unknown, defaulting to 1000 [ 920.467034][T28520] ip6_vti0 speed is unknown, defaulting to 1000 [ 920.518968][T28453] hsr_slave_0: entered promiscuous mode [ 920.573337][T28453] hsr_slave_1: entered promiscuous mode [ 920.784728][ T5852] Bluetooth: hci2: command tx timeout [ 920.866063][ T12] wlan1: Trigger new scan to find an IBSS to join [ 921.237585][T28559] geneve2: entered promiscuous mode [ 921.393515][T28563] netlink: 'syz.5.5962': attribute type 23 has an invalid length. [ 921.407422][T28563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5962'. [ 921.471792][T28566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5963'. [ 921.533875][T28569] lo: entered allmulticast mode [ 921.542266][T28568] lo: left allmulticast mode [ 921.551232][T28453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 921.573020][T28453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 921.609289][T28453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 921.639158][T28453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 921.693736][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5967'. [ 921.711667][T28585] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5966'. [ 921.774092][T28584] netlink: 'syz.1.5965': attribute type 13 has an invalid length. [ 921.783243][T28573] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5966'. [ 922.153463][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5968'. [ 922.190538][T28587] syzkaller0: entered promiscuous mode [ 922.208340][T28600] nbd: socks must be embedded in a SOCK_ITEM attr [ 922.208755][T28587] syzkaller0: entered allmulticast mode [ 922.381849][T28453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.411587][T28453] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.450276][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.457493][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.485006][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.492219][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.552035][T28590] wg1 speed is unknown, defaulting to 1000 [ 922.560556][T28590] ip6_vti0 speed is unknown, defaulting to 1000 [ 922.859788][T28453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.881899][ T5852] Bluetooth: hci2: command tx timeout [ 922.911297][T28613] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 922.988106][T28615] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5974'. [ 923.132972][T28453] veth0_vlan: entered promiscuous mode [ 923.191318][T28453] veth1_vlan: entered promiscuous mode [ 923.367042][T28453] veth0_macvtap: entered promiscuous mode [ 923.414924][T28453] veth1_macvtap: entered promiscuous mode [ 923.556279][T28621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5977'. [ 923.604167][T28453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.719780][T28453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.804303][ T3521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.854988][ T3521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.957694][T28627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5978'. [ 923.979934][ T3521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.045460][ T3521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.127858][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5978'. [ 924.592990][T28633] ip6tnl2: entered allmulticast mode [ 924.826836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.846659][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.902214][T28643] netlink: 'syz.1.5980': attribute type 30 has an invalid length. [ 924.927913][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.944796][ T5852] Bluetooth: hci2: command tx timeout [ 924.958125][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.181323][T28665] netlink: 'syz.4.5987': attribute type 10 has an invalid length. [ 925.199763][T28665] dummy0: entered promiscuous mode [ 925.209856][T28665] bridge0: port 1(dummy0) entered blocking state [ 925.216511][T28665] bridge0: port 1(dummy0) entered disabled state [ 925.223175][T28665] dummy0: entered allmulticast mode [ 925.531939][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f74e000: rx timeout, send abort [ 925.542056][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053634000: rx timeout, send abort [ 925.550473][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f74e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 925.564808][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053634000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 925.638922][T28678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 925.835989][T13713] wlan1: Trigger new scan to find an IBSS to join [ 926.877899][T16841] wlan1: Creating new IBSS network, BSSID 46:7c:53:8e:4a:19 [ 927.141502][T28666] wg1 speed is unknown, defaulting to 1000 [ 927.148840][T28682] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 927.166409][T28666] ip6_vti0 speed is unknown, defaulting to 1000 [ 927.545566][T28708] block nbd0: NBD_DISCONNECT [ 927.550287][T28708] block nbd0: Send disconnect failed -32 [ 927.556070][T28708] block nbd0: shutting down sockets [ 927.989893][T28703] wg1 speed is unknown, defaulting to 1000 [ 928.025523][T28703] ip6_vti0 speed is unknown, defaulting to 1000 [ 928.194685][T28717] __nla_validate_parse: 10 callbacks suppressed [ 928.194705][T28717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5999'. [ 928.225126][T19477] IPVS: starting estimator thread 0... [ 928.324766][T28730] IPVS: using max 36 ests per chain, 86400 per kthread [ 928.716532][T28745] smc: net device geneve0 applied user defined pnetid SYZ0 [ 928.997519][T28756] netlink: 'syz.0.6007': attribute type 1 has an invalid length. [ 929.061219][T28727] wg1 speed is unknown, defaulting to 1000 [ 929.183615][T28757] veth3: entered promiscuous mode [ 929.263438][T28707] wg1 speed is unknown, defaulting to 1000 [ 929.263481][T28727] ip6_vti0 speed is unknown, defaulting to 1000 [ 929.833889][T28772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.856976][T28772] team0: Port device bond1 added [ 929.934294][T28728] wg1 speed is unknown, defaulting to 1000 [ 929.943556][T28707] ip6_vti0 speed is unknown, defaulting to 1000 [ 929.952903][T28747] wg1 speed is unknown, defaulting to 1000 [ 930.211176][T28728] ip6_vti0 speed is unknown, defaulting to 1000 [ 930.437754][T28747] ip6_vti0 speed is unknown, defaulting to 1000 [ 931.509785][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.679833][T28789] veth1_to_bond: entered allmulticast mode [ 931.760127][T28787] veth1_to_bond: left allmulticast mode [ 959.025185][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 990.384814][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 992.948671][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1020.307206][T28800] netlink: 'syz.3.6020': attribute type 4 has an invalid length. [ 1020.315114][T28800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6020'. [ 1020.343755][T28806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6021'. [ 1020.353246][T28804] netlink: 'syz.1.6018': attribute type 3 has an invalid length. [ 1020.444777][T28813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6021'. [ 1020.456833][T28813] nbd: device at index 64 is going down [ 1020.568416][T28818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.647313][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1020.657914][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1020.670694][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1020.716340][T28826] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6024'. [ 1020.755994][T28823] bond3: option tlb_dynamic_lb: invalid value (5) [ 1020.772583][T28823] bond3 (unregistering): Released all slaves [ 1020.773110][T28831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6026'. [ 1020.880110][T28815] ip6tnl0: Master is either lo or non-ether device [ 1020.887972][T28835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6027'. [ 1020.897484][T28832] batadv_slave_1: entered promiscuous mode [ 1020.914257][T28826] geneve5: entered promiscuous mode [ 1020.971532][T28835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.058301][T28842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6030'. [ 1021.083982][T28835] batadv_slave_1 (unregistering): left promiscuous mode [ 1021.092139][T28835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.680901][T28840] wg1 speed is unknown, defaulting to 1000 [ 1021.689263][T28840] ip6_vti0 speed is unknown, defaulting to 1000 [ 1021.723103][T28866] bridge_slave_0: default FDB implementation only supports local addresses [ 1021.767954][T28868] netlink: 'syz.5.6037': attribute type 1 has an invalid length. [ 1021.831460][T28868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1022.387870][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1022.444819][T28870] wg1 speed is unknown, defaulting to 1000 [ 1022.495577][T28870] ip6_vti0 speed is unknown, defaulting to 1000 [ 1022.662464][T28906] vlan0: entered promiscuous mode [ 1022.678135][T28906] bond0: entered promiscuous mode [ 1022.707851][T28906] bond_slave_0: entered promiscuous mode [ 1022.734867][T28906] bond_slave_1: entered promiscuous mode [ 1022.740870][T28906] team0: entered promiscuous mode [ 1022.771490][T28906] team_slave_0: entered promiscuous mode [ 1022.796357][T28906] : entered promiscuous mode [ 1022.854628][T28911] nbd: socks must be embedded in a SOCK_ITEM attr [ 1022.875436][T28911] block nbd0: shutting down sockets [ 1023.306532][T28931] netlink: 'syz.1.6052': attribute type 4 has an invalid length. [ 1023.358950][T28932] netlink: 'syz.1.6052': attribute type 4 has an invalid length. [ 1023.487862][T28925] wg1 speed is unknown, defaulting to 1000 [ 1023.506491][T28925] ip6_vti0 speed is unknown, defaulting to 1000 [ 1023.770895][T28945] veth0_to_batadv: entered promiscuous mode [ 1023.791770][T28945] veth0_to_batadv: entered allmulticast mode [ 1024.058762][T28954] netlink: 'syz.4.6060': attribute type 2 has an invalid length. [ 1024.267117][T28964] pim6reg: entered allmulticast mode [ 1024.471355][T28976] netlink: 'syz.1.6066': attribute type 1 has an invalid length. [ 1024.627130][T28981] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1024.633232][T28981] syzkaller1: linktype set to 825 [ 1025.029021][T28974] wg1 speed is unknown, defaulting to 1000 [ 1025.036767][T28974] ip6_vti0 speed is unknown, defaulting to 1000 [ 1025.105171][T28992] erspan0: entered allmulticast mode [ 1025.792292][T29006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.800034][T29006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.919914][T29006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.028094][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.038761][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.048780][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.058147][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.072773][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1026.126470][T29010] __nla_validate_parse: 13 callbacks suppressed [ 1026.126488][T29010] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6077'. [ 1026.144587][T29010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1026.160274][T29015] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6077'. [ 1026.170073][T29015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1026.204952][T28999] wg1 speed is unknown, defaulting to 1000 [ 1026.224962][ T2958] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.233894][ T2958] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.254176][ T2958] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.274241][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6079'. [ 1026.299542][T28999] ip6_vti0 speed is unknown, defaulting to 1000 [ 1026.393739][ T2958] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.408733][T29029] netlink: 'syz.1.6080': attribute type 11 has an invalid length. [ 1026.440458][T29027] ipvlan2: entered promiscuous mode [ 1026.455082][T29029] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6080'. [ 1026.653030][T29033] nftables ruleset with unbound chain [ 1026.675325][T28995] wg1 speed is unknown, defaulting to 1000 [ 1026.724800][T29038] netlink: 'syz.5.6083': attribute type 5 has an invalid length. [ 1026.736181][T29038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6083'. [ 1026.745282][T29038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6083'. [ 1026.755689][T29038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6083'. [ 1026.765234][T29038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6083'. [ 1026.814084][T28995] ip6_vti0 speed is unknown, defaulting to 1000 [ 1026.900260][T29041] mac80211_hwsim hwsim70 wlan1: left promiscuous mode [ 1027.098499][ T3521] vlan0: left promiscuous mode [ 1027.103303][ T3521] bridge_slave_0: left promiscuous mode [ 1027.110242][ T3521] bridge0: port 1(vlan0) entered disabled state [ 1028.145771][ T5852] Bluetooth: hci3: command tx timeout [ 1028.187648][ T3521] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1028.392256][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6091'. [ 1029.743743][ T3521] bond0 (unregistering): Released all slaves [ 1029.846620][ T3521] team0: Port device bond1 removed [ 1029.852711][ T3521] bond1 (unregistering): Released all slaves [ 1029.951732][ T3521] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1029.960517][ T3521] bond2 (unregistering): Released all slaves [ 1030.066233][ T3521] bond3 (unregistering): Released all slaves [ 1030.080933][ T3521] bond4 (unregistering): Released all slaves [ 1030.182366][ T3521] bond5 (unregistering): Released all slaves [ 1030.227479][ T5852] Bluetooth: hci3: command tx timeout [ 1030.289944][ T3521] bond6 (unregistering): Released all slaves [ 1030.313602][T29022] wg1 speed is unknown, defaulting to 1000 [ 1030.352175][T29022] ip6_vti0 speed is unknown, defaulting to 1000 [ 1030.453346][T29068] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1030.505385][ T3521] : left promiscuous mode [ 1030.654577][ T3521] tipc: Left network mode [ 1030.720797][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6094'. [ 1031.312760][T29075] wg1 speed is unknown, defaulting to 1000 [ 1031.355823][T29075] ip6_vti0 speed is unknown, defaulting to 1000 [ 1031.696689][T29092] __nla_validate_parse: 2 callbacks suppressed [ 1031.696706][T29092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6099'. [ 1031.775777][T29022] chnl_net:caif_netlink_parms(): no params data found [ 1032.305578][ T5852] Bluetooth: hci3: command tx timeout [ 1032.442453][T29022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.474606][T29022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.482079][T29022] bridge_slave_0: entered allmulticast mode [ 1032.517232][T29022] bridge_slave_0: entered promiscuous mode [ 1032.643942][ T3521] hsr_slave_0: left promiscuous mode [ 1032.665906][T29119] Cannot find del_set index 2 as target [ 1032.671625][ T3521] hsr_slave_1: left promiscuous mode [ 1033.400110][T29022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.407673][T29022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.415259][T29022] bridge_slave_1: entered allmulticast mode [ 1033.423183][T29022] bridge_slave_1: entered promiscuous mode [ 1033.627199][T29022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.657310][T29138] syzkaller1: entered promiscuous mode [ 1033.658369][T29136] netlink: 'syz.0.6108': attribute type 6 has an invalid length. [ 1033.662803][T29138] syzkaller1: entered allmulticast mode [ 1033.670753][T29136] IPv6: NLM_F_CREATE should be specified when creating new route [ 1033.700178][T29136] netlink: 'syz.0.6108': attribute type 21 has an invalid length. [ 1033.721911][T29022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.773961][T29140] netlink: 'syz.5.6110': attribute type 39 has an invalid length. [ 1033.783214][T29136] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6108'. [ 1033.911202][T29022] team0: Port device team_slave_0 added [ 1033.929193][T29022] team0: Port device team_slave_1 added [ 1033.963359][T29151] netlink: 'syz.4.6113': attribute type 9 has an invalid length. [ 1033.971477][T29151] netlink: 'syz.4.6113': attribute type 6 has an invalid length. [ 1033.989463][T29148] : entered promiscuous mode [ 1034.008959][T29148] netlink: 'syz.0.6112': attribute type 10 has an invalid length. [ 1034.033690][T29151] xfrm0: entered promiscuous mode [ 1034.040333][T29151] xfrm0: entered allmulticast mode [ 1034.048459][T29148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.060920][ T3521] IPVS: stop unused estimator thread 0... [ 1034.069692][T29148] bond0: (slave team0): Enslaving as an active interface with an up link [ 1034.096651][T29022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.114909][T29022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.172568][T29022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.198288][T29022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.205719][T29022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.222796][T29159] No such timeout policy "syz0" [ 1034.232677][T29022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.298182][T29155] netlink: 'syz.5.6114': attribute type 1 has an invalid length. [ 1034.326939][T29155] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6114'. [ 1034.384430][ T5852] Bluetooth: hci3: command tx timeout [ 1034.436490][T29166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6116'. [ 1034.635856][T29175] netem: change failed [ 1034.640369][T29142] wg1 speed is unknown, defaulting to 1000 [ 1034.647381][T29171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6117'. [ 1034.656645][T29171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6117'. [ 1034.713345][T29022] hsr_slave_0: entered promiscuous mode [ 1034.773310][T29022] hsr_slave_1: entered promiscuous mode [ 1034.790765][T29022] debugfs: 'hsr0' already exists in 'hsr' [ 1034.814957][T29022] Cannot create hsr debugfs directory [ 1034.820660][T29171] macvlan0: entered allmulticast mode [ 1034.826659][T29142] ip6_vti0 speed is unknown, defaulting to 1000 [ 1034.835024][T29171] veth1_vlan: entered allmulticast mode [ 1035.121330][T29190] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6121'. [ 1035.197193][T29190] sctp: [Deprecated]: syz.5.6121 (pid 29190) Use of int in max_burst socket option. [ 1035.197193][T29190] Use struct sctp_assoc_value instead [ 1035.348255][T29192] netlink: 'syz.4.6123': attribute type 8 has an invalid length. [ 1035.375089][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6123'. [ 1036.392516][T29022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1036.419878][T29022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1036.454230][T29022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1036.504722][T29022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1036.698180][T29022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.798157][ T77] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.824939][T29022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.847516][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.854751][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.910512][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.917720][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.949435][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1036.999675][T29234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6130'. [ 1037.046278][T29234] veth1_vlan: left allmulticast mode [ 1037.075307][T29234] macvlan0: left allmulticast mode [ 1037.085427][T29234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6130'. [ 1037.122111][T29237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1037.137659][T29239] netlink: 'syz.4.6133': attribute type 8 has an invalid length. [ 1037.154428][T29239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1037.220539][T29239] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1037.227982][T29244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1037.248517][T29239] bond8 (unregistering): Released all slaves [ 1037.269326][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6133'. [ 1037.279368][T29246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6133'. [ 1037.313634][T29247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6134'. [ 1037.717705][T29022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.819970][T29022] veth0_vlan: entered promiscuous mode [ 1037.844356][T29022] veth1_vlan: entered promiscuous mode [ 1037.931168][T29022] veth0_macvtap: entered promiscuous mode [ 1037.973799][T29022] veth1_macvtap: entered promiscuous mode [ 1038.031056][T29022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.067342][T29022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.113885][T29286] tipc: Enabled bearer , priority 0 [ 1038.126903][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.139799][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.152891][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.162957][T29290] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6139'. [ 1038.172603][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.317307][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.328167][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.342704][T29292] tipc: Disabling bearer [ 1038.373619][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.407175][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.431573][T29296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6140'. [ 1038.452627][T29296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.579922][T29296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.641617][T29302] netlink: 'syz.1.6142': attribute type 30 has an invalid length. [ 1038.719545][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.743544][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.789224][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.823205][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.169568][T29338] team_slave_0: entered promiscuous mode [ 1039.175367][T29338] team_slave_1: entered promiscuous mode [ 1039.222787][T29338] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1039.678121][T29363] netlink: 'syz.1.6155': attribute type 1 has an invalid length. [ 1039.731997][T29363] netlink: 'syz.1.6155': attribute type 3 has an invalid length. [ 1040.039721][T29381] netlink: 'syz.5.6161': attribute type 12 has an invalid length. [ 1040.093433][T29384] tipc: Started in network mode [ 1040.104837][T29384] tipc: Node identity be223538924d, cluster identity 4711 [ 1040.122313][T29384] tipc: Enabled bearer , priority 0 [ 1040.134938][T29385] syzkaller0: entered promiscuous mode [ 1040.150728][T29385] syzkaller0: entered allmulticast mode [ 1040.164984][T29367] wg1 speed is unknown, defaulting to 1000 [ 1040.200864][T29367] ip6_vti0 speed is unknown, defaulting to 1000 [ 1040.202692][T29384] tipc: Resetting bearer [ 1040.265051][T29388] netlink: 'syz.4.6163': attribute type 1 has an invalid length. [ 1040.275343][T29384] x_tables: duplicate underflow at hook 1 [ 1040.306398][T29385] x_tables: duplicate underflow at hook 1 [ 1040.342248][T29383] tipc: Resetting bearer [ 1040.364268][T29383] tipc: Disabling bearer [ 1040.465570][T29353] wg1 speed is unknown, defaulting to 1000 [ 1040.650191][T29353] ip6_vti0 speed is unknown, defaulting to 1000 [ 1041.116599][T29407] netlink: 'syz.4.6169': attribute type 2 has an invalid length. [ 1042.081187][T29419] __nla_validate_parse: 18 callbacks suppressed [ 1042.081205][T29419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1042.112538][T29419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1042.126905][T29419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1042.169982][T29421] netlink: 'syz.4.6174': attribute type 3 has an invalid length. [ 1042.188945][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6174'. [ 1042.250540][T29421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6174'. [ 1042.278825][T29411] wg1 speed is unknown, defaulting to 1000 [ 1042.286588][T29411] ip6_vti0 speed is unknown, defaulting to 1000 [ 1042.403211][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1042.444515][T29429] netlink: 'syz.4.6176': attribute type 30 has an invalid length. [ 1042.475006][T29434] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 1042.569868][T12068] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.578870][T12068] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.590745][T12068] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.603972][ T9641] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1042.611948][T12068] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1043.411148][T29472] netlink: 'syz.4.6185': attribute type 21 has an invalid length. [ 1043.440781][T29472] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1043.470568][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1043.586787][T29481] tipc: Enabled bearer , priority 0 [ 1043.616299][T29481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6187'. [ 1043.656037][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6187'. [ 1043.707890][T29481] tipc: Resetting bearer [ 1043.758261][T29475] tipc: Disabling bearer [ 1044.041337][T29502] xt_l2tp: v2 doesn't support IP mode [ 1044.381825][T29494] wg1 speed is unknown, defaulting to 1000 [ 1044.392046][T29494] ip6_vti0 speed is unknown, defaulting to 1000 [ 1044.565161][ T5975] IPVS: starting estimator thread 0... [ 1044.613946][T29521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1044.667926][T29522] IPVS: using max 34 ests per chain, 81600 per kthread [ 1044.883411][T29527] tipc: Started in network mode [ 1044.889491][T29527] tipc: Node identity 8e396824c958, cluster identity 4711 [ 1044.897379][T29527] tipc: Enabled bearer , priority 0 [ 1044.921635][T29527] tipc: Disabling bearer [ 1045.527118][T29541] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1045.543096][T29545] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1046.034310][T29551] wg1 speed is unknown, defaulting to 1000 [ 1046.042273][T29551] ip6_vti0 speed is unknown, defaulting to 1000 [ 1046.698276][T29554] wg1 speed is unknown, defaulting to 1000 [ 1046.869801][T29582] IPVS: length: 132 != 8 [ 1046.892314][T29582] pimreg: entered allmulticast mode [ 1046.900253][T29582] pimreg: left allmulticast mode [ 1047.110461][T29555] wg1 speed is unknown, defaulting to 1000 [ 1047.128658][T29590] netlink: 'syz.1.6220': attribute type 1 has an invalid length. [ 1047.140650][T29554] ip6_vti0 speed is unknown, defaulting to 1000 [ 1047.205966][T29596] netlink: 'syz.5.6222': attribute type 3 has an invalid length. [ 1047.676362][T29555] ip6_vti0 speed is unknown, defaulting to 1000 [ 1047.909707][T29609] netlink: 'syz.1.6226': attribute type 1 has an invalid length. [ 1048.008245][T29611] Bluetooth: MGMT ver 1.23 [ 1048.038808][T29609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1048.170206][T29611] erspan0: entered allmulticast mode [ 1054.510589][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1056.553337][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 1063.300870][T29603] wg1 speed is unknown, defaulting to 1000 [ 1064.951066][T29603] ip6_vti0 speed is unknown, defaulting to 1000 [ 1077.912294][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1078.081459][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1078.171140][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1078.634060][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1078.801935][T29024] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1081.511521][ T5846] Bluetooth: hci4: command tx timeout [ 1082.383890][T29024] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1082.423481][T29024] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1082.502053][T29024] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1082.982534][T29024] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1083.083915][T29024] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1083.603178][ T5846] Bluetooth: hci4: command tx timeout [ 1084.763109][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1084.814092][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1084.871851][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1085.314202][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1085.513886][T29644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1085.539060][T29644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1085.593723][T29644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1085.612773][T29644] Bluetooth: hci5: command tx timeout [ 1085.683030][T29644] Bluetooth: hci4: command tx timeout [ 1085.761925][T29642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1085.982418][T29024] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1086.180137][T29645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1086.342487][T29024] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1086.533043][T29024] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1086.593823][T29024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1086.822760][T29645] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1087.131291][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1087.671304][ T5846] Bluetooth: hci5: command tx timeout [ 1087.750831][T29645] Bluetooth: hci4: command tx timeout [ 1088.316786][T29645] Bluetooth: hci7: command tx timeout [ 1089.512257][T29621] wg1 speed is unknown, defaulting to 1000 [ 1089.751866][T29645] Bluetooth: hci5: command tx timeout [ 1090.074221][T29645] Bluetooth: hci8: command tx timeout [ 1090.081183][ T5852] Bluetooth: hci6: command tx timeout [ 1090.472305][T29645] Bluetooth: hci7: command tx timeout [ 1091.763166][T29621] ip6_vti0 speed is unknown, defaulting to 1000 [ 1091.841875][T29645] Bluetooth: hci5: command tx timeout [ 1092.243096][T29645] Bluetooth: hci6: command tx timeout [ 1092.252126][ T5852] Bluetooth: hci8: command tx timeout [ 1092.551105][ T5852] Bluetooth: hci7: command tx timeout [ 1094.313341][ T5852] Bluetooth: hci6: command tx timeout [ 1094.320555][T29645] Bluetooth: hci8: command tx timeout [ 1094.643315][ T5852] Bluetooth: hci7: command tx timeout [ 1096.403468][ T5852] Bluetooth: hci8: command tx timeout [ 1096.412345][T29645] Bluetooth: hci6: command tx timeout [ 1115.853070][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1144.184276][T29645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1144.443645][T29645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1144.544041][T29645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1145.133193][T29645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1145.452217][T29645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1146.623165][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1146.661281][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1146.741386][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1147.004229][T29024] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1147.111442][T29024] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1147.193264][T29024] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1147.293099][T29024] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1147.353209][T29024] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1147.914139][T29645] Bluetooth: hci9: command tx timeout [ 1147.982716][T29645] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1148.123262][T29645] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1148.173853][T29645] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1148.463127][T29645] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1148.570506][T29642] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1148.720888][T29645] Bluetooth: hci3: command 0x0406 tx timeout [ 1149.061521][T29662] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1149.222149][T29662] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1149.287074][T29662] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1149.422448][ T5852] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1149.563656][ T5852] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1149.750028][T29024] Bluetooth: hci10: command tx timeout [ 1150.002650][T29024] Bluetooth: hci9: command tx timeout [ 1150.191507][T29024] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1150.674059][ T5852] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1151.831853][T29644] Bluetooth: hci10: command tx timeout [ 1151.910904][T29644] Bluetooth: hci11: command tx timeout [ 1152.071611][T29644] Bluetooth: hci9: command tx timeout [ 1152.400612][T29644] Bluetooth: hci12: command tx timeout [ 1153.591583][T29644] Bluetooth: hci13: command tx timeout [ 1153.911418][T29644] Bluetooth: hci10: command tx timeout [ 1153.992787][T29644] Bluetooth: hci11: command tx timeout [ 1154.160294][T29644] Bluetooth: hci9: command tx timeout [ 1154.481938][T29644] Bluetooth: hci12: command tx timeout [ 1155.674056][T29644] Bluetooth: hci13: command tx timeout [ 1156.004112][T29644] Bluetooth: hci10: command tx timeout [ 1156.072993][T29644] Bluetooth: hci11: command tx timeout [ 1156.562848][T29644] Bluetooth: hci12: command tx timeout [ 1157.762600][T29644] Bluetooth: hci13: command tx timeout [ 1158.181093][T29644] Bluetooth: hci11: command tx timeout [ 1158.642512][T29644] Bluetooth: hci12: command tx timeout [ 1159.134000][T29638] wg1 speed is unknown, defaulting to 1000 [ 1159.432736][T29636] wg1 speed is unknown, defaulting to 1000 [ 1159.621541][T29638] ip6_vti0 speed is unknown, defaulting to 1000 [ 1159.831184][T29644] Bluetooth: hci13: command tx timeout [ 1162.240212][T29634] wg1 speed is unknown, defaulting to 1000 [ 1177.273681][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.824167][T13713] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 1177.952177][T13713] bond8 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ae:3f:36:d5:d7:a8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1196.981737][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1197.181553][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1197.393922][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1197.564017][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1197.792979][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1200.582802][T29644] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1200.803286][T29644] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1201.082021][T29644] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1201.120902][T29644] Bluetooth: hci3: command tx timeout [ 1201.310375][T29024] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1201.533050][T29024] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1203.199965][ T5852] Bluetooth: hci3: command tx timeout [ 1203.942702][T29644] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1204.043438][T29644] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1204.092384][T29644] Bluetooth: hci14: command tx timeout [ 1204.123992][T29644] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1204.422151][T29644] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1204.541729][T29644] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1204.953309][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 1205.014258][T13713] bond5 (unregistering): (slave bridge3): Releasing active interface [ 1205.284310][T29644] Bluetooth: hci3: command tx timeout [ 1205.944019][T29024] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1206.004277][T29024] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1206.154209][T29644] Bluetooth: hci14: command tx timeout [ 1206.180482][T29024] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1206.491342][T29024] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1206.603209][T29024] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1207.191587][T29024] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1207.361035][T29644] Bluetooth: hci3: command tx timeout [ 1207.413733][T29662] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1207.439747][T29644] Bluetooth: hci15: command tx timeout [ 1207.480978][T29644] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1207.882397][T29644] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1208.230394][T29024] Bluetooth: hci14: command tx timeout [ 1208.453038][T29024] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1209.371756][T29024] Bluetooth: hci16: command tx timeout [ 1209.510845][T29024] Bluetooth: hci15: command tx timeout [ 1210.083743][T29024] Bluetooth: hci5: command 0x0406 tx timeout [ 1210.092244][ T5852] Bluetooth: hci7: command 0x0406 tx timeout [ 1210.321181][T29024] Bluetooth: hci14: command tx timeout [ 1210.951422][T29644] Bluetooth: hci17: command tx timeout [ 1211.443543][T29662] Bluetooth: hci16: command tx timeout [ 1211.601400][T29662] Bluetooth: hci15: command tx timeout [ 1213.040665][T29662] Bluetooth: hci17: command tx timeout [ 1213.513716][T29024] Bluetooth: hci16: command tx timeout [ 1213.683329][T29024] Bluetooth: hci15: command tx timeout [ 1215.130749][T29024] Bluetooth: hci17: command tx timeout [ 1215.210807][ T5852] Bluetooth: hci8: command 0x0406 tx timeout [ 1215.223165][T29024] Bluetooth: hci6: command 0x0406 tx timeout [ 1215.631470][T29024] Bluetooth: hci16: command tx timeout [ 1217.191408][T29662] Bluetooth: hci17: command tx timeout [ 1220.692390][T13713] bond0 (unregistering): Released all slaves [ 1221.553607][T13713] bond1 (unregistering): Released all slaves [ 1228.173693][T13713] bond2 (unregistering): Released all slaves [ 1234.651509][T13713] bond3 (unregistering): Released all slaves [ 1238.720898][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1241.983335][T13713] team0: Port device bond4 removed [ 1242.232006][T13713] bond4 (unregistering): Released all slaves [ 1249.440917][T13713] bond5 (unregistering): Released all slaves [ 1257.013684][T29644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1257.143868][T29644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1257.181226][T29644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1257.579871][T29644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1257.732576][T29644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1258.482062][T13713] bond6 (unregistering): Released all slaves [ 1260.390500][T29644] Bluetooth: hci2: command tx timeout [ 1261.593941][T29662] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1261.641444][T29662] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1262.083117][T29662] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1262.292348][T29662] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1262.371867][T29662] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1262.470923][T29662] Bluetooth: hci2: command tx timeout [ 1263.541342][T29662] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1263.573798][T29662] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1263.722654][T29662] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1264.161993][T29662] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1264.553599][T29662] Bluetooth: hci2: command tx timeout [ 1264.591568][T29662] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1264.790236][T29662] Bluetooth: hci18: command tx timeout [ 1266.261595][T29662] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1266.344121][T29024] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1266.393939][T29024] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1266.504215][T29024] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1266.671595][T29024] Bluetooth: hci2: command tx timeout [ 1266.692299][T29024] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1266.844041][ T5852] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1266.871427][ T5852] Bluetooth: hci18: command tx timeout [ 1267.023990][T29024] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1267.191058][T29024] Bluetooth: hci19: command tx timeout [ 1267.322964][T29024] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1267.393777][T29024] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1267.741802][T29644] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1268.072085][T13713] bond7 (unregistering): Released all slaves [ 1268.961266][T29644] Bluetooth: hci18: command tx timeout [ 1269.282302][T29644] Bluetooth: hci19: command tx timeout [ 1270.011076][T29024] Bluetooth: hci20: command tx timeout [ 1270.400975][T29024] Bluetooth: hci21: command tx timeout [ 1271.043200][T29024] Bluetooth: hci18: command tx timeout [ 1271.361410][T29024] Bluetooth: hci19: command tx timeout [ 1271.521706][T29024] Bluetooth: hci9: command 0x0406 tx timeout [ 1271.534287][ T5846] Bluetooth: hci10: command 0x0406 tx timeout [ 1272.072484][ T5846] Bluetooth: hci20: command tx timeout [ 1272.482867][T29662] Bluetooth: hci21: command tx timeout [ 1273.430434][T29662] Bluetooth: hci19: command tx timeout [ 1273.793577][T13713] bond8 (unregistering): (slave veth7): Releasing active interface [ 1274.071431][T13713] bond8 (unregistering): Released all slaves [ 1274.160688][T29662] Bluetooth: hci20: command tx timeout [ 1274.570693][T29662] Bluetooth: hci21: command tx timeout [ 1274.922696][T13713] bond9 (unregistering): Released all slaves [ 1276.232483][T29645] Bluetooth: hci20: command tx timeout [ 1276.572114][ T31] INFO: task syz.5.6229:29621 blocked for more than 143 seconds. [ 1276.722700][ T31] Not tainted syzkaller #0 [ 1276.732580][T29645] Bluetooth: hci21: command tx timeout [ 1276.749446][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1276.750753][ T5852] Bluetooth: hci12: command 0x0406 tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1276.774120][T29662] Bluetooth: hci11: command 0x0406 tx timeout [ 1276.791247][T29645] Bluetooth: hci13: command 0x0406 tx timeout [ 1276.914104][ T31] task:syz.5.6229 state:D stack:24320 pid:29621 tgid:29618 ppid:27492 task_flags:0x400140 flags:0x00080003 [ 1276.951609][ T31] Call Trace: [ 1277.060865][ T31] [ 1277.063847][ T31] __schedule+0x14bc/0x5000 [ 1277.183146][ T31] ? __pfx___schedule+0x10/0x10 [ 1277.314005][ T31] ? schedule+0x91/0x360 [ 1277.363020][ T31] schedule+0x165/0x360 [ 1277.413562][ T31] schedule_preempt_disabled+0x13/0x30 [ 1277.511684][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 1277.662989][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 1277.771879][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1277.829910][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 1277.913762][ T31] down_write+0x1ab/0x1f0 [ 1277.973519][ T31] ? __pfx_down_write+0x10/0x10 [ 1278.040421][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1278.100117][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1278.263465][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 1278.380046][ T31] rdma_dev_exit_net+0x8c/0x340 [ 1278.533208][ T31] ? __pfx___might_resched+0x10/0x10 [ 1278.673314][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1278.813322][ T31] ? net_generic+0x1e/0x240 [ 1278.923795][ T31] ? mutex_is_locked+0x17/0x50 [ 1278.982624][ T31] ? rtnl_is_locked+0x15/0x20 [ 1279.030569][ T31] ops_undo_list+0x49a/0x990 [ 1279.120770][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1279.213168][ T31] ? ops_init+0x469/0x5c0 [ 1279.281444][ T31] setup_net+0x2e8/0x330 [ 1279.350532][ T31] ? __pfx_setup_net+0x10/0x10 [ 1279.411322][ T31] ? preinit_net+0x47d/0x780 [ 1279.473682][ T31] copy_net_ns+0x3e3/0x570 [ 1279.541589][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1279.583896][ T31] ? security_capable+0x7e/0x2e0 [ 1279.711190][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1279.790796][ T31] ksys_unshare+0x4c8/0x8c0 [ 1279.931693][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1280.011029][ T31] __x64_sys_unshare+0x38/0x50 [ 1280.063862][ T31] do_syscall_64+0xfa/0xf80 [ 1280.114072][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.180816][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1280.241647][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.403217][ T31] RIP: 0033:0x7f8af5b8f749 [ 1280.479948][ T31] RSP: 002b:00007f8af697e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1280.582619][ T31] RAX: ffffffffffffffda RBX: 00007f8af5de6180 RCX: 00007f8af5b8f749 [ 1280.661575][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 1280.762401][ T31] RBP: 00007f8af5c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1280.853940][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.961172][ T31] R13: 00007f8af5de6218 R14: 00007f8af5de6180 R15: 00007ffe55ead598 [ 1281.071258][ T31] [ 1281.162991][ T31] [ 1281.162991][ T31] Showing all locks held in the system: [ 1281.253991][ T31] 2 locks held by rcu_exp_gp_kthr/18: [ 1281.397691][ T31] #0: ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1281.622638][ T31] #1: ffff8880b8924448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1281.733734][ T31] 1 lock held by kworker/1:0/24: [ 1281.772918][ T31] 1 lock held by khungtaskd/31: [ 1281.812047][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1281.942408][ T31] 3 locks held by kworker/u8:4/60: [ 1282.061582][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1282.163148][ T31] #1: ffffc9000211fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1282.273871][ T31] #2: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1282.380604][ T31] 3 locks held by kworker/u8:5/77: [ 1282.451796][ T31] 3 locks held by kworker/u8:8/1133: [ 1282.472642][ T31] #0: ffff88802fd80148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1282.530598][ T31] #1: ffffc900040afb80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1282.582905][ T31] #2: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1282.760128][ T31] 1 lock held by kworker/u8:13/3521: [ 1282.950854][ T31] 2 locks held by getty/5592: [ 1283.033036][ T31] #0: ffff8880305220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1283.144256][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1283.291557][ T31] 4 locks held by kworker/u9:4/5846: [ 1283.353414][ T31] #0: ffff888089673948 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1283.503070][ T31] #1: ffffc900041dfb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1283.572020][ T31] #2: ffff8881579d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1283.693960][ T31] #3: ffff8881579d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1283.831663][ T31] 5 locks held by kworker/u8:24/13713: [ 1283.920278][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1284.054151][ T31] #1: ffffc9000eb0fb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1284.183864][ T31] #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1284.371333][ T31] #3: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1284.521032][ T31] #4: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1284.630848][ T31] 3 locks held by kworker/0:15/19475: [ 1284.701488][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1284.881917][ T31] #1: ffffc9000eb37b80 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1284.972213][ T31] #2: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1285.132109][ T31] 7 locks held by kworker/u9:0/29024: [ 1285.220775][ T31] #0: ffff888089676148 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1285.280544][ T31] #1: ffffc900051f7b80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1285.432756][ T31] #2: ffff8881579dcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1285.560923][ T31] #3: ffff8881579dc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1285.663404][ T31] #4: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1285.782301][ T31] #5: ffff888067c3cb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1285.863843][ T31] #6: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1286.011430][ T31] 1 lock held by syz.0.6206/29546: [ 1286.033872][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1286.153678][ T31] 2 locks held by syz.4.6225/29603: [ 1286.334196][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1286.412190][ T31] #1: ffff888079d4cf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: rdma_dev_exit_net+0x1ac/0x340 [ 1286.533763][ T31] 2 locks held by syz.5.6229/29621: