last executing test programs: 3m28.29941612s ago: executing program 0 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x5) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/41, 0xc}, 0xffffff81}], 0x3d5, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 3m27.559099046s ago: executing program 0 (id=1405): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="11708092db597625fb761a438cac14ff80bbae0d42c2e7f63f761fe53b27a513f3769bfdeea51f958ed28e8aa792a89554744441b60b495533e67b292ae580a42d9399dd8238143a75228946e70ed4c7ea4caa0697bbc3b0d943ef36bc22097d56fcd3f51999dbdfe2b8540b6f89d944340dc842dbd4769bded1bc06c48c603c996df16a22e96d2bd654db8c3f7a4006d26a1b0cbb3e80971c3e96e8b8d493f61684a3eb9237db1aea3e5a4e27ccfc694024a3", 0xb3}, 0x1, 0x0, 0x0, 0x8040000}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r2, &(0x7f0000000d40), 0x0}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x36, 0x6c, &(0x7f0000000140)="fe02b2071bca0d61a855b09f177a74ea31587a97e50095d8be7f55eecf3dac9be4bbb8980c5a4c5ef99fc0430ab2b3e87776c06bf99f", &(0x7f0000000180)=""/108, 0x7, 0x0, 0xd4, 0x15, &(0x7f0000000200)="a580b38fe6a175193a7f121bee6ef5e4860025a7f4300b28769a719af7263154d59111a378edda7f5392bba2e30e95dbf14321e37feb5ede4c57352c2febc25db28f6b7915a41821a387f61096caf847cea32a3faf55cca02cacc06908c0de51b9fb487ceb7c4a2785bea6869d5ea716137c369cd9a5045611262d104d58f0f4ae29fb0b3ad787c6373ff2721b73931af13be00a4feaa24b381b20ac77372b39aedb653ba56029d36baf2cdf0a3c591d7ffeb61ca033dc3cc5af343bf9afa3916b5b49ade558b6746281260fecd8ce96c472e228", &(0x7f0000000340)="7d300d7d83252584865ca992bb8d558fb13f6662c6", 0x1, 0x0, 0x3c}, 0x50) 3m27.345889383s ago: executing program 0 (id=1410): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2f75def3d81b5a02ddbc65acf0a375a9aa7acb78f4acb0aefcbd3bfb4021006b977482cc98e722474a971eb9623c481bad2239dc2968b62897af564a0707764f996fbf44dd995bd13fe24f59dad4b83e95147d381b77dfd8ac563c83505169029c04a3b4d91d188170c3cdff54b3edf41a9fed9950a66773d5b76e98557045f2ae3fbdadb4a88a2ce87f0bb37dfb82f5f6a82004cf1eb4ad58b277610d1eee487289209bc2fa30f1b3f233303fb3dfe92df0a9eabb8ba8e796fdfbf094774aed7ae18db93115a04e599f2c0151d9df4cf8a141b581d913b6618e914c27c47d1bd2bb0b14bcb5955aa535b96b8d404992c0275f01d24675ee02be30007f"], 0x40}}, 0x8d4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@bridge_setlink={0x4c, 0x13, 0x300, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x41272, 0x10885}, [@IFLA_MAP={0x24, 0xe, {0x0, 0x80, 0xffffffffffdffb0d, 0x5, 0x6, 0x40}}, @IFLA_LINKMODE={0x5, 0x11, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r9) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 3m27.074512737s ago: executing program 0 (id=1416): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newchain={0x0, 0x64, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x10, 0xb}, {0xd, 0x7}}, [@filter_kind_options=@f_basic={{}, {0x0, 0x2, [@TCA_BASIC_POLICE={0x0, 0x4, [@TCA_POLICE_RATE={0x0, 0x2, [0x2800000, 0x9, 0x2, 0x3, 0x9, 0x7, 0x3be7, 0x4fa, 0x7, 0x7, 0xc, 0x7, 0x5, 0x7, 0x7, 0x1, 0x10000, 0x5, 0x87df3473, 0x7f, 0x7, 0x6, 0xb, 0x7, 0x807, 0x1, 0x7, 0x8001, 0x6, 0x3, 0xdfc, 0x3b91, 0x2, 0x0, 0x9, 0x3, 0xace4, 0x1, 0x6, 0x200, 0x6, 0x0, 0xffff50b4, 0x7, 0x8, 0x7, 0x6, 0x9, 0x673e, 0x8, 0x4, 0x4, 0xace3, 0xf4, 0xfffffffe, 0xc3a7, 0xb, 0x2, 0x9, 0x4, 0xbfa, 0x8, 0x101, 0x8000, 0x8, 0x1, 0x4, 0x5, 0x3, 0x1, 0x1, 0x1, 0x0, 0x3, 0x8, 0x7ff, 0x4, 0xd470, 0x7, 0x7, 0xffffff6e, 0xfffffff4, 0x6, 0x98b7, 0x5, 0xffffffff, 0x7, 0xf5, 0x1c, 0x8, 0x8000, 0x4, 0x8, 0x76, 0x2, 0x8655, 0x0, 0x8, 0x4, 0x1, 0x3, 0x1, 0x6, 0x973, 0x5, 0x6, 0x7, 0x79, 0x40, 0xffffff66, 0x5, 0x3ff, 0x6, 0x2, 0x0, 0x8, 0x8, 0x800, 0x7, 0x316, 0x1904, 0x0, 0x3, 0x40, 0x1, 0x4, 0x8, 0x8, 0xb2, 0x2, 0x3c0, 0x8, 0x0, 0x80000000, 0x5, 0x3, 0x6, 0xff, 0x4, 0x2, 0x7, 0x0, 0x8, 0x8, 0xfff, 0x4, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfff, 0x80000001, 0x2, 0x8, 0x228f0442, 0x9, 0x1, 0x58e, 0x2, 0x9, 0x4, 0x6d7, 0xa00, 0x2, 0x0, 0x4, 0x40, 0x7, 0xfffffff5, 0x600000, 0x6, 0x9, 0x800, 0x1000, 0x652, 0x4c5e, 0xf, 0x5, 0x9, 0x4, 0x9, 0x608, 0x2, 0x5, 0x2, 0x8, 0x5, 0x8000000, 0x5, 0x7, 0x5, 0xf, 0x9, 0x1, 0x7fffffff, 0x4, 0x9, 0x42, 0x3, 0x7, 0x8, 0x0, 0x9, 0x1, 0x9, 0x87, 0x2, 0xfffff800, 0x0, 0x0, 0xfd56, 0xa, 0xaa92, 0x8, 0x3, 0xffffffff, 0x4, 0x800, 0x499, 0x7ff, 0x6, 0x200, 0x5, 0x9, 0x8, 0x80, 0xff, 0x4, 0xdd, 0x401, 0x3ff, 0x0, 0x3, 0x18, 0x7, 0x101, 0x9, 0x3, 0x3b40fcc0, 0xfff, 0x4, 0x1000, 0x8, 0xb1e5, 0x2, 0x6, 0x6, 0x80000000, 0x0, 0x9, 0x9, 0xc, 0x8, 0xe63, 0x402]}]}, @TCA_BASIC_CLASSID={0x0, 0x1, {0x7, 0x4}}]}}, @TCA_CHAIN={0x0, 0xb, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newchain={0x0, 0x64, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x10, 0xb}, {0xd, 0x7}}, [@filter_kind_options=@f_basic={{}, {0x0, 0x2, [@TCA_BASIC_POLICE={0x0, 0x4, [@TCA_POLICE_RATE={0x0, 0x2, [0x2800000, 0x9, 0x2, 0x3, 0x9, 0x7, 0x3be7, 0x4fa, 0x7, 0x7, 0xc, 0x7, 0x5, 0x7, 0x7, 0x1, 0x10000, 0x5, 0x87df3473, 0x7f, 0x7, 0x6, 0xb, 0x7, 0x807, 0x1, 0x7, 0x8001, 0x6, 0x3, 0xdfc, 0x3b91, 0x2, 0x0, 0x9, 0x3, 0xace4, 0x1, 0x6, 0x200, 0x6, 0x0, 0xffff50b4, 0x7, 0x8, 0x7, 0x6, 0x9, 0x673e, 0x8, 0x4, 0x4, 0xace3, 0xf4, 0xfffffffe, 0xc3a7, 0xb, 0x2, 0x9, 0x4, 0xbfa, 0x8, 0x101, 0x8000, 0x8, 0x1, 0x4, 0x5, 0x3, 0x1, 0x1, 0x1, 0x0, 0x3, 0x8, 0x7ff, 0x4, 0xd470, 0x7, 0x7, 0xffffff6e, 0xfffffff4, 0x6, 0x98b7, 0x5, 0xffffffff, 0x7, 0xf5, 0x1c, 0x8, 0x8000, 0x4, 0x8, 0x76, 0x2, 0x8655, 0x0, 0x8, 0x4, 0x1, 0x3, 0x1, 0x6, 0x973, 0x5, 0x6, 0x7, 0x79, 0x40, 0xffffff66, 0x5, 0x3ff, 0x6, 0x2, 0x0, 0x8, 0x8, 0x800, 0x7, 0x316, 0x1904, 0x0, 0x3, 0x40, 0x1, 0x4, 0x8, 0x8, 0xb2, 0x2, 0x3c0, 0x8, 0x0, 0x80000000, 0x5, 0x3, 0x6, 0xff, 0x4, 0x2, 0x7, 0x0, 0x8, 0x8, 0xfff, 0x4, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfff, 0x80000001, 0x2, 0x8, 0x228f0442, 0x9, 0x1, 0x58e, 0x2, 0x9, 0x4, 0x6d7, 0xa00, 0x2, 0x0, 0x4, 0x40, 0x7, 0xfffffff5, 0x600000, 0x6, 0x9, 0x800, 0x1000, 0x652, 0x4c5e, 0xf, 0x5, 0x9, 0x4, 0x9, 0x608, 0x2, 0x5, 0x2, 0x8, 0x5, 0x8000000, 0x5, 0x7, 0x5, 0xf, 0x9, 0x1, 0x7fffffff, 0x4, 0x9, 0x42, 0x3, 0x7, 0x8, 0x0, 0x9, 0x1, 0x9, 0x87, 0x2, 0xfffff800, 0x0, 0x0, 0xfd56, 0xa, 0xaa92, 0x8, 0x3, 0xffffffff, 0x4, 0x800, 0x499, 0x7ff, 0x6, 0x200, 0x5, 0x9, 0x8, 0x80, 0xff, 0x4, 0xdd, 0x401, 0x3ff, 0x0, 0x3, 0x18, 0x7, 0x101, 0x9, 0x3, 0x3b40fcc0, 0xfff, 0x4, 0x1000, 0x8, 0xb1e5, 0x2, 0x6, 0x6, 0x80000000, 0x0, 0x9, 0x9, 0xc, 0x8, 0xe63, 0x402]}]}, @TCA_BASIC_CLASSID={0x0, 0x1, {0x7, 0x4}}]}}, @TCA_CHAIN={0x0, 0xb, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) (async) 3m26.951381723s ago: executing program 0 (id=1418): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x1, 0x3d, 0x1, 0x1, 0xace}, &(0x7f0000000240)=0x14) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180100001f0001000000000000000000060100800c00010004000000000000000926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e1408009600", @ANYRES32=r3, @ANYBLOB="59007a8008006400", @ANYRES32, @ANYBLOB="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da08000800000018000000000800c300", @ANYRES32, @ANYBLOB="2ec5"], 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xc}}]}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m26.852678651s ago: executing program 0 (id=1420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair(0x15, 0xa, 0x40, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x50, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 3m11.806645032s ago: executing program 32 (id=1420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair(0x15, 0xa, 0x40, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x50, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 2m32.016602713s ago: executing program 4 (id=1987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000001280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2m31.887011389s ago: executing program 5 (id=1989): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400c0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002c0012800b00010062726964676500001c0002800c00210036080000000000000c0022000104080000000000"], 0x4c}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'gre0\x00'}}, 0x1e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000009, 0x10, r4, 0x0) writev(r3, &(0x7f0000003580)=[{&(0x7f00000002c0)="97", 0x1}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x1, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009b80)=@newtaction={0x4f0c, 0x30, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{0x3f0, 0x1, [@m_simple={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'blackhole\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x0, 0x2, 0x2}}]}, {0x92, 0x6, "b21f913cdcad1309e0391c3e8ba3b6c21a8c241e43b7e3fbe2d1214e364278d639277b962c000908617ff3c5c6170129f0d27d47e0aedda1216c5dea5d405c89b0c69c1de5001e8af1cbe43c1bcc74dbf7a28002768c9beff513bf4d4d620bd48b884712eb41436ab9b05e875d0d20d73586e16086b1b5e4392ab0751dce1f4826c762e9208283d215b4cf23e341"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xc4, 0xf, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0x70, 0x6, "01a00671f37ba86843e1ad282be7528bf21073af68aa40fca19e59afca7d2b18459c2f0849da17882e1274893abf65e5d0091162de0858af678637a10a978f8ab4f824068c3ba0df094b776f1125fbfd6283009c24a30eda0f6dd995d15a1bbd35507e6912c8c4f7da23965b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x13c, 0x1b, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xe9, 0x6, "560d8d4ac9bbb90b3d58b00ba1d043df89e2cf42f3c53f38606eade3906af12dc3f4ce0d97174d9b33acae09366a8a43933d53949a5e455cb347c3304a8b2dcec4e1d0348505efa61504ddf55a70afa8b8bcf2600146ad060535afec84a94488233d07d76c0ae9be2f4a971055fd82ab9b48e57632b4095c427e15f2d71c6495dad109d5e1e6848a04bd5ebb31f41ae405c2706771bd492232417607b02aab7e58c2042d4890605b3d7538bc0717bbd00fe318cf5988962032be5f4151e75aa873d47c4502b80c14890736b1b6d467daf6bca25c90f2b842164af241c2ed73822c55c88bb5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xe0, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0xb4, 0x6, "09297bb2ad57d3d21524d1c419ab50fa136b74963dac3928a1dc9da51ebe8bd85ccbe346d735977157d4b5ffd35d281777516f1c8b650d22912e0f6d56fb2ab65fb69871033971b85429c01bad8c1c81d99fa84c751ef17295701d0b43d004161b3934bff22361fdf2d5fd3e8818a45823515280ce5f5f19bdecb04c6af90e902085e65f1d4eb624d347e8062bd314c2396f2c5830e3eb4e4ee8e725d258b872ad3dc799d6b4ae66cfed678b2bfee3d7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x21e0, 0x1, [@m_vlan={0x10a4, 0x3, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x349}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x8, 0x6, 0x7d78, 0x4}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x300, 0x4, 0x3000000e, 0x406, 0x7520}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x557}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x2, 0x8, 0x98f1, 0x2}, 0x3}}]}, {0x1004, 0x6, "2d7bc1c583efc1d9b5e05b2aec044ce3af444d498eaaa332dab2e46601b04bb5846d211f24797de61490a415c7fd36db2c1bf1fe2c427411fe11f6007888fad39f4d9cd318a37b8b4a559db7c8216e5c70b72b16185a8e5b684b2f31e1d767f9ffa7d9423d0964f16afed262aea067aefaef0a8dc240aa4c019b82611533a94690f25e31a03b1ad5470f847831eccffcf4689a0b50e501208e1647bfb30973e50349f773f63c1be68e37015558b5840eaf0437fcd3d75cd4637cc37d746bd339f37abe44c547215fc10e4ef7abc99cc12f7c7622f3e6936e54d7997463bd7c97069206209e1b27c911811cf389667edca81594db791f6735d0f0725e51563360a8a6036a81b4ac940f3a8de3629f0431e80278ff4d9c941afc0632dcf94c6365a09cf49ab387b834535f99438350666f89cc56284af78d3f1f84bdfd45abe98529140216d184fbe7be3bd890d72d3760a28cb427ff17875211945b1d79e71253ee8950bbd54471d0d95c8f9759631a5d086ea0a641cb5cf0683735703d4b574ae3d1039132c45aa273a78b743ab51498a21224a704b8b1f32dfc1f99d20455507654ac8cbfb691abf32e0466e495be287d839a8d55bc51512d3a43e83c55d8fbb63cd436bd650c9d36460dd36eb0f9fd6218c77a60666f7cf196b47bf32e4ff8b47c5d4f93ac9aca1316f1c34afa60e369a263e7ddd4a0344eb42b7aa4c6005d42e0d0c0e8536f7885b72732f862a8d181474d8c000719eefec00e20e8b277acf20b22016ba3791a4454de8a4b6dc2c75c52e31496c63a82b7d4e5c650a7a552434998e872feeede0a3160f43f33be1f6a8852e6be4f78fc3fe2ab54330a2364dc64513817c0f03c336dbf4821c5cac1973cd3de6578764b83bdc29147a4199fcb298dc41fbeb170800d4cfd6d74278365d5d02fd4a6d659b469a804fd3589b3e53ee63d4a8043fc48cbb3e8ba4060c607a16ac5e64d11f9f6235fe53e4c8ebecf56c6d796baadbc50ff9df189a303d2ebc1ca977767b20d38b8a7220718f68af0c14a67b57b3cb68b750fe567c32a44604e88ae3495cd28e05bd5a4cdbde0642c61165923f8ba2e6b500a832f29d4af6279dca3974528d3f449359c9ecc9b9b4b3f8b12d32267dafd4cb7baea8473a629692e15e7fe11cdf1ddc84148c805c85a6372812fbd904b03d3c76f2cce844d68d8241107da34bfce7d90b14b739467c66ef3d39b6ae38836ccc60ef4383c0c6654649ed5abdbed436549b895852b6a5e8bd686661eacc9ab1c0146e2ae14a26b2152d8bcacfed1f53e0a91a857f9519867eca2b4cf8d94958cfa7f3134952c3f9a66e554d2d35590a4e82ccfcd934e50585c3f09571eeb5586bab94959a9962c70fd08a2f2ab16f38570da3de1eee6a4ee52fc5bd20a25b5c32de1d81bb0989d14684e20666f69b3ab0fe1eabd13a0990dda4864c640c157e4c2ba3a8ce65de8c6ee6b16754ae769ae3946d807258bec36b09a09a3e25e19011da44c98c9feb413b9ec79429e5971b2c8aae8397c272287b8c2c281c925e3e3a1123ba9ab6f6bbd4a5055d0f2df002e4e6c352d2cc62e38980c657652b976f6b08814f34515ae13faf4dbb559e24845edaec06be42e188856cf424ec61f4121f09526574c87bd419f6d4da1a0649e90e251ee870157ec0309c4d7ab8b0902553249c5677764d9ea4eaaf12dcbcd7740e12d8a5599719091d37da6450e06c24fec0af2998f2b8a2337c1b880a3a1a81817025d62f875c0ba351cc653632c233f82de4e646453bb751e27a3312bbe8f5dc72a1762ce96d78351b3ce6463b8356693c9224a831a4203d2c09576bf37e5b7ca0006c94ab5b3af9e8526c3319ae706a0c2eadbda104cb7cd2701bbb11a17c02424bc4323babffe7b6f68b5f92acf80982f6d137edc75ab35ed578faaa980b9886fd01c0dd8d081176e4910fe5d2f0ab27d9509dc8e3f0bdc30528d4a4703ac924e55b08f91543926cd16428f562e00ffd73233110e98469e3ece541bb7fd0962395e2b20a6eb30c2cf2bdeeca43865000f1f72d569301115109e0b6a598692077dbd59ce3dd2cdbde914d5b5029a3e4fd665c66100c6f430a8298132526c0c07828f1d03edb661aa9ddf654a4ebda95ffab1710564961292f1c9c524586a2dd12b3548b6fdbba717d3f631c6c04b89dcf95fac8e0e303d68a685a2b9f35c1e936297b698d3729e43dc18b36115bd9f70135ab05f7725b1b74077d1da242057e1dda4d8c27fff9fb329f90ce166de45a2fd406ddbc0ce274d9bd6d71facd5de6282ec81b317e950f39ab39850018e4273c2fbb679f69fbeed2de393f8680c68508a85bb94c9c4f0a5e5d334ec63492050dee71fae43a40e269f0fb59c0108f6abe811af5b3495500960c09779ff9b9e1c9ee20a9a8b643580189f1dbdedd386d1353c4b3803a2c81d7a87f1c5e14f361b1b71026e7d51ccc2999e6db7fe4787ec0f424af579891dc372f6f0a074745ca22dd9dca5c12e56cef83e80cae8dfa0fa4e81b3c9f1689fd7699c54ce27ae9d779792adac90e709520901c2ff3e012db7664ef81e1e9f03bb0eeb94a87c43492886fc26e123f7a960fc5cbc550a2ed5a2ce76522520315acd7e94dbfefd64a2352f42092c7ef41ec6575b25ca71c4a570b95f0e03b34320db1cff398f541369a884cc709bf51bbc11891172cf36b859437a8b466c2da53d4414f1142ee06fac2b3a655fcbe1809117a6a1844e04246d450d210ad96e421f7d8e5409df6b81a02618fb908cd1e0cb3d61f06a40f9b8230dedbaf0e36a0d7ba3c9299e7aecf78504673f19d9780f7ef87008d138c88de28570cc0093c3b77799d8dc2ec4e6fe475f1f4354598dc0275c92c612a79d7dd6950059f98390f1f126f9d62b25024edfaf1ac0561cf9027db0767506ae55bab61b34f161ea7e5da5f366deb7c4997c50041d2daff9e513d0ace5901ee614894acbb8a300139884a1474061a70a12b38dcf543f7bb7bb33c44c9744b834682b36ce6b78f806e7260cf2bd8922e616fba19fcf66ee1d34f1acc660beb92cec72a7cc3f3a65440e945f98293d73888cd6286d9d2aebbd92de5c7ebbe6cb394e385089cf1328dfcb8034bb11b383eb2c49c66b857bfdcaa7958fbb536573b5b549e4221399afa77521d466f0f9416ccf3c2ce509a434e68329fba8875d2107875448108922d4e29e69b464cca4f53581e9ddc06d8f7a4438d1dd16a98e782fccdca92f70ce9e89eeddca881c293f11423c9a75780bf385e7c6720ac5179319f8892015ec66f95abec220f838673ae8fe8cd5d28c3760df3b4a1f3e91d496b50c206960466822298202d742a2d631925a712b78a59548c142ef539986c12c8feab2aedb5107096d1f5b0a2ee9eb13e0e305a3cd61182488eef17816f37f8860e843b208edc8840cbd38adbbb2f566356f359b2dc8651c883bb7f45bf5e5927db66278f6e3f0500beeedacdb1297e4c99df16e80ccd83fa6d3e9478b16367df4b0d2ba80cb947fb00ec870abba8cf5c7c91ef269ef8435a5c332335d7763c87724287fa6714f10628bc16d0f999b8c017633808376e8eeb56230805b0551f3fa59ef2eeae27768e886584e6c6ab36de3b16d03c22b015a6f69ba1a2b78866a39ca664a873068ee5d93636a3c3364927f117e8d8755054072693cba90010aa00375e012469e8ccb2396b3e4f81ac0987cb4538089a39bc1afeaaa5e6909b57ecf1031072cd19f18d9b334154d6fb2e62edeca62c99ca724026f9c0c80a3ef9a689a9a20d7bec303a3e693e5def5ab4421dd3847d0359dc26a1f8de4934bd0db7bbeba0153d0c979b40cddff35bd9cf0a4314431cd365fa70c3eb339431fcbcb4cf4d3bfd9f8c4de27cce0dc0414381d94f052728ae6b9b1b3a2bb8fd16974b9e13a70eb31a454c9433922ca5d9aeaeb554d4d951dd15c0ca340e83f29f565d4da39c7bd4f969ec7b93696eb920e893d1f43205bb365df42107e1513a2d1de68222d9690175cdaa8d0913d200b24baf33975f64b532b654e72878e0bf19a546b19d4598e16aa29e7dedb1ea18734f63f22ec52a17fd619d103f474c98e8692ef65595e82f1574124b08cb4327b9248c7c00baaa77f37c524009f253edb6402cbdfb8fedf4e309602e2c48f9545e8ded798f5706cad0f1ea23fed05d276b28b60504247988e3857c7446df7cf87697c6336ecea33a6e9198abba35f7685f6e92cdb57e02082d43fccc66849e1222f32abae5197a120f21d4dcc1944f6d0849c9905d8a35a5f536bc66eeb4f7641c6d0a92917d59eb396c0dc04fb2e7ec0422d68a2b8c644790d2168fb90edc351c0d92e72cca7488927d6449ba37d2202c98c7eedf2fea02747e59051d9efc1ce2ec7a532411fff809b92806b03c59b976fed311762f49cbca23cc7d933f59da58c2656e24c54dd04ff98df4a0f5c7aa7d827f098111b3d83f73f02575b43e03441f476a1d35c21aef2b2b18d6aa7dfab02fc8291275532d8e72623b7630962713ff682dd5d4586355370086c1f7f20964f89e14d7907b70b39da4238f2d2feec374b0715a3c2d03c29f907b1eecc60d83ce74b7368f316054501f23defb9ace638dc180aa5b9aabc2af8423c6374c98412c99b4648726f60e3f5c03360fe22eb7bc8be773e20738ffd15d6e6fbd0e2c212a24b68e418296f7c0f75e9e2fa643c5d33d29ae6ea937ad8b52ea6aeca31e21d8c2522468b81414e06fd107c7f82363be6206e3f648887e0f998330c68c02a42e8a8e0a32c50a3d464d5b98ecd2236825b437e65f7126e19afdf08c2721e920a610190aa0aa474a2c75215e1faee8930154734b96dcfa3633950806c6fe5b212aa17a43763747d889a8343cb8ab30365f536f78772a85e3d3698aa456ffbfcc6ab0f5737ec5c305e3b4fe38ac006558c8eabce9f1a878e250add37adbc60857f26b0617326b3287d4da993652147f32103a8571e10734dca6a0291632d9511e804bbd1098507da522ddb06ccf8b9b262ea6290b7b51f7f7f8535ae393275d577dc1900bed6aeabe7c45943ddcb574b3f75d9385218bf128807cb194958805a25890e297b066c68baa57c96ef8fed6015c83b77bae7ac735e9cd31655734f06d3d4ebf8119ac4dbf3a667848282aa87fbec11bfb541e0e764b169d1e80c8e6563ebfdfb45a9701f9081ab70f585c4df6c38d3cd38f294cc4ae763f59303fdb715af033a325a941788f38a29702e3d1479b8dc58c336e30f1008068608672223f1960d98ec242f4b9b0510cb9fe31587231d8e5cac14f05cc93e865e3f0567de7c7d27bdeadd9d7ecd2762397a8df0a279f6c883bd95d4a5da2fdb143b45cc49f0a394cfac51e85a74ed22669bc69fd5076be119178fba5b4a5a99fb86ec8f093b4437db986ec15959c1be2781381fac207ff1bdc28f13d8a5ee75480f3da393328ae9412c681d05147b45bad2f63eb8363e94b4e325c39760fde1df0bb914ff2ab00f83ea2a488f691fd03314785fcbcf914c2918852ac1f0c98d62546545bd294754f5d8deb05df7d99a4bcb4c48eb983585e4e5d82449d5be275a3a2668e16c925b1a59ba33e3d247f8df75153a389e361d439ebae1751021269792305880fc21987f8514dab874e5c295542a9ea47e3415728ffe9248fb7a0dd23ebe761fe925ae3867508893231b5367592e8e98f4c4b1e02ab98100b81da8cfa8603f024c909affe731125d405e72a79eef49323f269b1c4155af26910c9868d596c3668017c2180573bf1996993e24bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xe0, 0x1a, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x62, 0x6, "4d53c51b0e0d892f2fdd6396d51b77a5a9193db8546c0ee14dc166fb3e69ddb6aba2e28f01907c2f5a1c001e22c9a7ea0357039ee258bdf3e62bfb1dd27a8711e66b56e5a347f7fee43abfd00af4434718fde575b8ba29e95d36cb412266"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x1058, 0x1f, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xdebe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x401, 0x1, 0x0, 0x3ff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}, {0x1410, 0x1, [@m_ife={0x150, 0x17, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0xda, 0x6, "741be3c9bfef2ec12d1f21dff844d015d95faefd5cd52cb5b3b70f30055fa9c5090d1b05eb37276c7220ce728cc188b161806e3903e40bc2ac77ea33e6857b30c038dbb8cf6db2c396696090a340704ff0c4545cee4ccdd63a553bafdb230229088b168f4d6f7d47d66a39d426015531fde196b44d9de83f3dc652f2d94a44b43dcd6d518d422d1cfecf4adc696d78e9dd08152c55b1d6d5511e4709f12997f63f701ab08bd36f39557131805a6d864526aea9858be416f6caec45b1d2fb8a0cd8f2c152c3877946a991eadb6288660450b4392a70d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x1a0, 0x1e, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7ff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x6, 0x20000000, 0x2, 0x401}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc0, 0x7, 0x2, 0x4, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80, 0x8, 0x0, 0x0, 0x1}, 0x1}}]}, {0xea, 0x6, "a761aa69a503f5a9f8b0edb7773814a910122e5d7db9df019dabe5b038dd10291f871a2a816705a264263f17ea2bd35c688ea3a64bee788883f4cdf5e0a3c1cc21669f8398fd3fe83ed49513640665ed9dddb3ad2a0d4db3a37c99429e309d1d306c2a2df7108d0e7fb7554e49665a095d6aaf9e93e7817a43ba1de04abcc4a4d7fbddd69c2b8397214a65fcb28ea6f097722d031e352bd81bf44f2b1272e3c4e5f69b7aeb0e0f141380475665b4177ce6accef454bf11a7041800e6cbcc3c169ec597f0f7f6d42596cd2c56c9aa6bb4e1f3d3bbd22780250b2bd2ad61b1189a424c3c10a892"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x1038, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x1004, 0x6, "cb46bcf7a65390852ff4ec1ade9670145c589d65d4ed418fac90d308db7195e3557c203f96d08ce6f78dd6e232e7d1f272f2d252b019bf2e039aaa2c1397226998c420d839f8544f94ccaa0990de822fb2a63dba1ff95a19deb44eb70e4288da7fd4644da553e2faceae295aa65a7f1dcdc9b204b69e6830a319e9a6d4e51e72cef418ed617072f5042a91797982c3c77d363d61a76a4f07ed16c062dde63eb11ddb1ec84557d4693a119d8b2602f34140321a6a9dd8242b3e95d90e92454cddb2540d57d48a59340e2d1e59a95f606297e52636c4193f828ccb4ffde4c567f3cdc98c5c3f881da3f7dbcf80ba8a23adedd8ad1693beba356b3656d5d2bd81e26a27eb2a93a6cea6d7a6277d492f6c622e803a80036ef603506f72732fdd0dc3cacd6fb97d7225e8cfae1b878e99dd069c12bfa8a5438039ccd1d8bd8a93913a9876e87b4a610776a63bae533d25c580e751a42176e5dd048772dcd42817f9adb11aace01f453971030988aa1f9de62e266e4cedd09a21d8da716ff67b0dfa02b5ca089a428a347c95a97fd643b299cc9cdb41cb90de0ab49434c8afaae5adf0bf8ec44ce05ec09d505370cabf4896dd45055c980cff75b4b3f6d5416221e0c9dd6cb5b18ce83d21ddcc3ccaa505734ffbe880e573c9d985478011e33fa0fada4ea6f43b4a446195e740e2cce390935c478ddb34615888046fc318e51f802213a5e4acd3ad61ea10fe15a10bb6c5913cb491a71135be787b0888bec2c0966c7d0bc1e0a62f431d1df14b7128d5fcadf2c844d4ef3526b49e005fa16b906f4696452b09566cbaca54e9dbb5afbbc243ab218550495d1738f7834f72a593028490c6a4484a75076a0df9748cbb6a992c56064f7f80cd60d5e601d712631cb4803bab47ade3bd5d801866b154a2dd4dff6df5871db9b401b937173fd6926d651c3191bdb47bc4e42d9f803e3d588e2c156097fc48e3463a789e529f0b7f0d482216b1a95202ebeffa4363dd507c9ce23fad9390706c50f519e03bc67211afc477414414d5e256e5beddb0d9fa8b66026778118b079ca6994b4eaca8a3c0b32242b1376555218b35c1c2150c4f3ee812c16345bf4f4aabd18c29a6d824345103a34391c2e97c9c8ff386a926e2682220f8036331f7a5bf6ec6aae8414855ed3cef7abc54a0147753caac79d0e05cf6b31d346ff2419c1526ef368a40b0876c3ca5add30cafe3ef2bbd109dabccbcd40065b31000254cb96b0abb7d6be7bb98785cf7237509fdf3f248a5951d5ea0fcfabb1d4e6aef53263e974dea3f6fde356f8897e3de03681abb785f73c69313b833e5048335de2a60a2e9b5115d12667088dac77a43dd67297fac7ba8da492b1cf4774984fe97229d0cc8d4b4d3d4cc8a97e4f4789c2bb3f68471ae8aba9db5c34991141d85df65c0609a52127888a47113f22606d5d8e8fa66379ca21c736308490087b694fe622101e975b8eb4eb260c8dc9fcffb71db33e9f26af6e3a2c939c4539f2b12a85c4575143b06ba0a21081dfb46a9586c42e92104adebcb0d2ce5809836079789016c0058397092b600dc19c6c2191cc6eefe0037ee4c2b4c664dfe795a3e7b1ee5a267a6c6995c6d8c52407d7074f1a6558fd789fb06ee93bdb8466b243bf7653e24a79149043689ef104390004857c15b0ef09281289fee2aa1781ba91d3427608053b2fbaee56b26163cc3aca8cb805432cbafe2299d187dff9ddee016fac4aac7fe65ae52ba3e65e09d30239032e155801d252f860975b11a8905d97c9555dfb5b0bb88ee604c0b1be07a22d1d100a449edff1a914fd117d187738a234eb81e2372058a3bad9b80ab2b5fb2310996e9521b444d520968eb949f7670304067c2d04cca2d3168f4528eb10597b301f4fe420453c4140146702370950cd2b1f412dc356fb0568e8cc04f2832d09c5db814372dc26d45bfd09e129e7c0b81686772c08a29ddc670609d6af0410b1c28f7ba7496ee4fed7bc48fad4b43e1a16c9666c35581723c4e4381f9a7c12779dc0bdc92ee530b19e5927fa22d7700f38af3d782fd271cc2d8275b674626eeb6cd17178c3d6450a67ba13f267bf0d4acce1839c03c862d4e1159b1f65b9402551ff7b79d10a3faccb15b3a609bba7e8e7f850793176a0f6ef5e8aa21a221e8b780fd709b2d0f2e4e8173043e01e4fd58b0fc614633a31078a4b5419fab4eeecd01b5e19dd0eead6485d9b7742374e4b0c82b33f61af0f92027d6f2827894ee0c5bf45d4642fb54e7ce1eb89b20c6231c9366b45edc56663d9da5b88416979be1aa9aef7913d212cdc9f1940a50afe9649ac0d91621a27b5993713166ef3e4c06f2439a5bb2f51fc1693a9a61bd8f6d1dc4853d3089d1f50af79dcdaca891ed390eaf8087c8036c3d4a7b290292ddc8be02de77ddea27c39dcfe56f9968f0901cb979f2d8b9ec73480e3f7459e1a06569d4b2ba7f3304fdad1407f37fa4eb65c65323a7114a388c1be2ce11f7617fd0f9bb5e1b5e2f59a83155a06c7ef09b03d550db93f8269893af5c2089233c4b3e1ddfe17dc44e29be14baa88a4102ad8dc9d9052f2cf515ccae9122b4df7e8c65e891ab7de0037e4168a2ebb954a5460516911eac511b49760295d9f07b87521184623aa90d02cbe9b534da3a98164398f51d37b0a25ef7e8b50eb4773ff8a0bae99ac9bd617e9d0ec0684a9dc06a02e0f2fb8412f55a6ef584c17e05d0dd5f6e8d6db514e725e02688b5bbc84c6755436e11c2c741844ee5f65168c03d41b5649f2d218bb5f77959fac90acb5134627a26771715a59f586c826e6ef80d167471f9842c397d0197b2e3a9aba9659becbc8d618f27506d83f17972a3b43ec3858dd15dbae7fd92bc74db5e63c8b9b889f9ac0598f109b23a738dc4d5439af5f18f8dc9275d911f425a6bd6b888cf492b020b35f76dbb289ed039b6f9cf0531d75a5be113c66bb32264dd084218107380e284df48498d83fe4af3c4dd4b540f23d5849b99b1c3bc2bb76cea3ffa939d700a9182d2d5d71d311a6b2939183b7c139c49f27f7de3466f6f8c6b5054238ee66ebb9f7b668d502c02939920bec0354eb3a91d2f7a2ce5548e1c5bb3017e65cc6cc981cbfb57e27ac8f5a76e56e9138b71d6d5c621a398ea8c829c09edd7d4dc970f391c9a9e88094623ec5e151b011dc715e6512d36481ab200f49fd4e84c627a643c1f87ec7221581b1d430c67f5080981129ebfb121638de8163f505dd0b1bf9c80de41af01fff9be5788655b968148fb8a7d75dc3175d74273336eab8a860e4907bbff167d938b69aa4b116970ae94d6beef76a1bf254be540a97973f1969dad7f892410a33f3e47ac1a3a7a90447a9de3fba778e72c2fa094305b3cf012f825602e91d85c4fda148d746336dedb8dea7200972301db46d413b37a1ae809dd754f21ac73f9121d00ae202fd2aff3cfff671c5c6a0c9195a57e527463073a6445c7ca8096765c5723f54c2f89d07651ce032bd9fe23cc30fdcfe1066c2cab808f0e8569809b819f9b361349e6788fc632d8f67e183c96c9ae6d891f7f1ee10fc299f84688a43d9f737ff970b247baf0e8195106adcd98aa0ed7e69074bc38771b44d9e043ff0659df51d77c91133550ecbd0b9438285bfac3c922d99abe11a8bf12a02214349ef846b06b418420fc7f9275403801ae3076351454b0ac552d3bf565e63fe424b09ebd89f5e83cf97f68fb676686b6cc181b9daa74d3f30389f07f35d40559b25abaf376d7ca512d7fa0c14cbec0b11bb7bbb0cd1544ac61e1e7c2e1e0bcbfc2d214fccee2b8acf24265be88158c5f965df02643c730a3539278af48b1aae06857855983caa68487dcbfffde798d3dc12ec84163f0dfccf9db07d3a1d903f6303d375936e71d8380c8f5720e8c68afef0a0d0beb8b36d7cce64b66ae3e84ce453f2962cf2c4955cdd18b2df114252bdc325afb278177d57eb48372b415a9e828958e517c2ed0a3ff2e0f4ce2657d792d8c89f6e83fae516eab44890957aa1c426f7ee622df3edab785268e1140d66a2fe79eece585538de79b60bcb1fd2dab22064c947821bba5b55fae4e9425976147b299b4fcd952b9eeb81be9d9a91688b6c6d7722510d06a754c847bfcaab036cf8a9d2d27e48354d83bc9a77d4cd53d44a62065fcde7eb45bf6b7a5b257817ce50db755a64756aa4390f0e448ac25309fd4a49d407d42c1e7cd2f5caaf02a910c97f71989de0697967f01202e7051ea8d9b4255b5c627bea887c57ad438fc04d276124a0cb002068d5d3d4493baff62c20c0bbc2b1b5ee6cb9ce5b2820aa89060dae4a8b54490508f311653f772aa9b8734565047560a484bcf83879e8e14ccb558925d33839afd4f7fbd1ed24ce619facd27c009312526e035dd1c808770e7b20c1dec6f415e5cbcc747bf8757c87ba8cf5a1ee656389b48d7837a0eb8abfa44cd14237b099577de2d7bf22874689768a091eb8c796b66ee3ea5d8f56de23fe3b089a195ffaa8e7b1d0c971b1fbfe5d4c8d04e996969a35157ce3fe8b64d836dbbdb34b9ac8bd4e297ec1d8cf13ba62d83cb404a8e844f29ab8b584bcf63f248ba714f121371454ad84c6430af49ddebc78b6df05430331736414edeee226ca2484c0f6bfa73889f8f4aa65a90f8bed7e772e02dc55df449f31cc6591f1a95bfb3324f845cbfb178444b2e642cea11e7e53367725bc8172d4f31f5cd85af6bc95075b9402623032353a32460a184440aecb2c94450071bc544f2ccaa3afcd52308d8124b4009f20c2b9b8b5b0456b526dc6fed19b9962c2d48f539d3ad83a5ad02ca829f5e2bb64fcb4a3890b7a1d490d21e91514bac95a5ee7a5d58a5ed9523f1977a2a3acada1132c8ae309f8a24ae6197ab80d3da6213a1ac1dd7f28aeecc73b5b6d3edf7513eb214803d15617089b95054567552413390e5804223538258c738c8199d48720844956501615719b8202d9760e27ee692cf53490fe1e6196788f5b25273a9086fe0debf9ab32c6613c2ae48eee9aece7f5635fcfddc0dddcc8e3c1928836fa08439d764727f50b96a645073cdc61da67ea8a0f51e8ebef6a8dfffbd4679f25e972e6f60661e703d070ca62b7f67e4cb8be8ce775d5ca657bb1d36be7a4757947903888587a99cbee22fc5032ea927d58ef2de1e950494b78f0a852431a90a265e449becab7e480bd9035311d8a9a77786d352e8c6a483562d232f5214ec48fb15620c4ca93fbee7624ab2a1ab4f60ab0fee4f4835a0863c30cc4e06edde30972a5b613374a06d32be27919b0c0c893f29c22c2238e80fa53e9eddcb5decec316fae830df4abbbbb23eab2c441850436b0ae1d8ad3e3a03aca42c1c3960a70f9039e676f69cec6bae138d68f1cbc17fa603d1fc675e8369921eff768f57abd90666b74c1ee39823a6197ce87a8acd3984c10912233d5719874dcb462873e0c687fcb0dd1a5686ba9be334def1177ac0995d97d4d4e888b1286531c1125f3f0835ad68f2908561b7d3e2efe6383d73ca08795c9e2a5a13f5c72157e4960ed5ba019d921424b7f157c9dc372f87ff9c137758f3a69725bea115b4fbd9338fcadcacb2af7b3894be98e42dfec74a31b070e40072fb687a514e2ef3b5dfde2b5416dd7ab7aaa4d8c56ad199fb967c0830a5edf1f9435e0f8461b3588a931fa38c2d90b73fbbddad9bda0775c2f2e170a81911fe90bdcb3e140deadba64dcff0c5f1569795c4d2a5d074e9b61ed4197716d849bb0bb3e61f3bd932d96efaa7c130d56ac75be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0xe4, 0x1b, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x5ab1, 0x2, 0xfffff964, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0xb}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "3fd10976be5b9c80b97172575966e4ef"}]}, {0x7f, 0x6, "3cfb1cc739b399a155102fa2a5ab799d66bbfab08012c88cb7602464f612b43f8ba7098acf60b5ca0fafe243e6b89ec3ea10caaa68a27b0c40b32903201e889a82daa1af49ac5e5bc1625d2feac3a7af431a600697f42b36b51b72c9a3295f5b102c60b86f04b8c292eeb199381ae968db20c70897dffce430dfce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x1518, 0x1, [@m_nat={0x148, 0x1e, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4a7, 0x40, 0x6, 0x40, 0x80000001}, @initdev={0xac, 0x1e, 0x3, 0x0}, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x9, 0x0, 0x2, 0x9}, @dev={0xac, 0x14, 0x14, 0x33}, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x5, 0x9, 0xfffffbff}, @local, @local, 0xff, 0x1}}]}, {0xa8, 0x6, "11e50d4cec71c9af1b525f226f469f23e2be5b3055b9de865c3dc56ecd8f1a7e630f1e445eb3d8d350285f2a25e7b67432c42825e95a0463f02d3479df5eaa139671d0028cf4f48c5f55acbc5b9814ab820cc2a37eaa9a29915eaecc3f9049e64895a67e73601b59bbfd7c8c3a9ad8f8dea471a80b74f9fbb3bf166ad16156186717e559f66882d31b7cda41a98773c60636038263522fdfc229dff19668a547ff06b702"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x258, 0x5, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x7e6, 0x1, 0x9, 0x9}, @remote, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9960, 0x6, 0x10000000, 0x3, 0x3ff}, @broadcast, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x5c, 0x2, 0x6, 0x4}, @empty, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x8, 0x7, 0x5, 0xfffffff7}, @local, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0xffffffffffffffff, 0x4d, 0x7}, @empty, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x6, 0x4, 0x5, 0x9}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc, 0x0, 0x1, 0x49}, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ffb, 0x3, 0x8, 0xfffffffa, 0xc06}, @loopback, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x1, 0x764, 0x7}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0xc6, 0x6, "ac1b977aa5f38f629bab9406eb6cda8ec98150e35df2282a24592be4a5c84cfdd15fdeb08f56e5e0f9162112a1ec80f4aed9690b55abfd5297ec2ffd92970a06aba736f49fddd6c27cd681375baeafef9ecdaa06c1bb8717a2e9f20f3b64e8acd9b3bf555f36aa15b36f4e0b70628dfdd03aa819b463a3715689ea94140720d2e11ff52dddfcf7cd442ab915e625083bb825ee9316b9224daaf80ac65f9a89294668e0bc3322aab6d982023a5e0b1ab333a08086607beedf108c9c0a895cdec977c6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x10bc, 0x5, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x1, 0x2, 0x7bd, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xcc, 0x5, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x9, 0x0, 0x74e, 0x3}}]}, {0x1047, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xb8, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x2, 0x6, 0x10, 0x1}}]}, {0x71, 0x6, "e09445c148af51f4685963e3e4a820062a4f5ef4bba6aaf9a220411511b62724597b2f208dacd6a00666b97ef9d28f3e89ffd3ed6401dd3a84a10ea315cd8da837ec85b1980768ebc04efa8a24e348a8002da8af7aefe9ed1bb73320ae77cd47253853ff0d9d7606edb97a52ba"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x4f0c}, 0x1, 0x0, 0x0, 0x2400c8e4}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m31.850969825s ago: executing program 4 (id=1990): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0xf15, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0xce1d, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$tcp_congestion(r3, &(0x7f0000000040)='lp\x00', 0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x11, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0xa5dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) accept(r2, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x137, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0x29, 0x0, &(0x7f00000009c0)="b90103600040f000009e0ff008001f0300e100004000632f77fb7f0200013f020001be3e7d2a182fffa6e2d0c3103157a82163539c6e79a6465f7256b4a240cd5b00441fb81f35757ce253c3a75cc6bf4438ec7a46d75b09917fd9f7480eb5c0708298634468fa8875feb00275f5028e07509cab3de62a7909711ed1c29c4ac6f154caf1a0c130b55075f0141340", 0x0, 0x104, 0x6000000000000000, 0xffffffffffffff3b, 0x0, &(0x7f0000000400)="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", &(0x7f0000000000), 0x1}, 0x50) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 2m31.054078017s ago: executing program 5 (id=1998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000006b581f97b57119d66b085fe00000000fc00000000000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000200800000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000f9ffffff00"/128], 0x128}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000006b581f97b57119d66b085fe00000000fc00000000000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000200800000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000f9ffffff00"/128], 0x128}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 2m30.995722553s ago: executing program 4 (id=2000): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000440)={0x4, 0x4, 0x4, 0xee7}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000440)={0x4, 0x4, 0x4, 0xee7, 0x0}, &(0x7f0000000140)=0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000400)={r8, 0x5}, 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x301) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x10, 0x4, 0x1, 0x2, 0x40, 0xe4, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102, {[@generic={0x44, 0x6, "a5ac4051"}, @timestamp_addr={0x44, 0x24, 0x85, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@local, 0x7}, {@remote, 0x10}]}]}}}}}}}, 0x56) socket$nl_rdma(0x10, 0x3, 0x14) 2m30.865942511s ago: executing program 5 (id=2003): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'nr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}}, 0x0) 2m30.563456922s ago: executing program 5 (id=2005): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x36, 0x0, &(0x7f00000001c0)="e027429b49dcd4ff9782762f86dd21e91717c73f9ae529df2043ca50862bc9797b8fff68c17bd528bf996d5e3acc9c39914d6afb75cd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8905}, 0x20008800) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) write$tun(0xffffffffffffffff, 0x0, 0x141) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) writev(r4, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f00000025c0)="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", 0xffca}, {&(0x7f0000000240)="de21cff472aa580c2ee9f8581f07935d8e9b5f279f2813c7763c3e6f113ea2b36230ba98873cad7777a83a746a6c6db65abb5e03aaf95c2be0dbe015fe56b07a8b2ce6ca3b79", 0xc}, {&(0x7f0000000540)="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", 0xde4}], 0x5) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xf12ea5e6, 0x7ff, 0xfff, 0x2c100, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0xf}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x9, 0x8000, {{0xa, 0x4, 0x3, 0xb, 0x28, 0x68, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_prespec={0x44, 0x14, 0xf6, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x3, [{0x0, 0x4, 0x57455b9a}, {0x2, 0x3, 0x3}]}]}, {0x0, [0x0, 0xe, 0x30]}}, &(0x7f0000000900), 0x4d, 0x0, 0x1, 0x6}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x9}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0xfd, &(0x7f00000006c0)=""/253, 0x40f00, 0x10, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff], &(0x7f00000009c0), 0x10, 0x1}, 0x94) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket(0x23, 0xa, 0xa) 2m30.507665875s ago: executing program 4 (id=2008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004007f6c7e001200800000000000001e45c9c12c4163df4e845368449d4362735a911c0fc99513a9eb2604cc518cd8f2c7a0f10d57e0b4ae61b1713d699567ba5d59ccdae0b742cb124719a646c8ec9f8b96bbb8706406734f1ee0d4814d97fd5cae2805f89ee08c354ba0e640ff04898b15a80fd3b9c354a19caf2e5036b0911e2049a30c85e7cd2849aeae9a89cefa2f4dee2f6c7877e2fb84971cdd09cdc1b932abb2f2e4a1628603f8ff6b9ed986d9", @ANYRES32, @ANYBLOB="0000e24d71ce9527bc00"/27, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00009b09e1b093ffff679ba647000000000000000000000100000000"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x101, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="149100"/20], 0x14}}, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) tee(r0, r1, 0x7, 0x3) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffef00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140045c3420d000327bd7000fbdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8018) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r11, r11, &(0x7f0000000000)=0x8, 0xffffffff) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'dvmrp1\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xffff}, {0x4, 0xfff1}, {0xfff2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x4, 0x5, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x68, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, {[@ssrr={0x89, 0x17, 0x76, [@empty, @local, @broadcast, @multicast1, @remote]}, @lsrr={0x83, 0x2b, 0x37, [@local, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @rand_addr=0x64010102, @local, @private=0xa010101, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x73, 0x3, 0x6, [{@loopback, 0xfdf8}]}]}}}}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0016000000000000b705000008acf71453c542015100000095933b6c8bce73e9208b3b06016ab6018f2aa6000000"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) 2m30.402530453s ago: executing program 4 (id=2009): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x11, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6c0401, 0x0) 2m30.046004006s ago: executing program 4 (id=2011): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfb, {0xe}}, 0x14}}, 0x400c084) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000000)='&', 0x840000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000340)=0x100}) syz_emit_ethernet(0x62, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x2c, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x42, 0x25}, @sack_perm={0x4, 0x2}, @sack={0x5, 0xa, [0x1, 0x9dd]}]}}}}}}}}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000640)={r5, r5}) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0xa92) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x4000}, {r3, 0x400c}, {r2, 0x4014}], 0x3, 0x0, 0x0, 0x1f) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00\b', 0x8, 0x3a, 0x0, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x31}}}}}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) preadv(r9, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m30.045080234s ago: executing program 5 (id=2012): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000002c0)=0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r9, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r9, 0x40, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r10 = socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r11) epoll_create1(0x80000) write$cgroup_subtree(r11, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000140), 0x4) splice(r5, 0x0, r10, 0x0, 0x25a5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001080)="b9ff02316844268cb89e14f065581c", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 2m29.440624013s ago: executing program 5 (id=2017): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="58d1e923e2eb36fc230db7cf", 0x2, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffdb4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x1}, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a3000000000140000001100010000000000000000000000000aa190fb027b576e54c169df25285b7d481cd6eab57a0c55a87bb3511b2640ca833f414f1d7350f5d4dd32230536"], 0x68}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}]}]}]}], {0x14}}, 0x68}}, 0x24040884) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000002c0)={{r6, &(0x7f0000000000)='\x00', 0x348f436a27e0bc3f, &(0x7f0000000040)={@align=0x4, {0x3, 0x4, 0x4, 0xb}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, {[0x1, 0x4, 0x1, 0x275]}, 0xfffffff9, 0xc4, &(0x7f00000005c0)=""/196}) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r7) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000400)) 2m15.04959396s ago: executing program 33 (id=2011): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfb, {0xe}}, 0x14}}, 0x400c084) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000000)='&', 0x840000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000340)=0x100}) syz_emit_ethernet(0x62, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x2c, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x42, 0x25}, @sack_perm={0x4, 0x2}, @sack={0x5, 0xa, [0x1, 0x9dd]}]}}}}}}}}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000640)={r5, r5}) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0xa92) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x4000}, {r3, 0x400c}, {r2, 0x4014}], 0x3, 0x0, 0x0, 0x1f) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00\b', 0x8, 0x3a, 0x0, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x31}}}}}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) preadv(r9, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m14.280591007s ago: executing program 34 (id=2017): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="58d1e923e2eb36fc230db7cf", 0x2, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffdb4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x1}, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a3000000000140000001100010000000000000000000000000aa190fb027b576e54c169df25285b7d481cd6eab57a0c55a87bb3511b2640ca833f414f1d7350f5d4dd32230536"], 0x68}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}]}]}]}], {0x14}}, 0x68}}, 0x24040884) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000002c0)={{r6, &(0x7f0000000000)='\x00', 0x348f436a27e0bc3f, &(0x7f0000000040)={@align=0x4, {0x3, 0x4, 0x4, 0xb}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, {[0x1, 0x4, 0x1, 0x275]}, 0xfffffff9, 0xc4, &(0x7f00000005c0)=""/196}) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r7) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000400)) 1m57.990176371s ago: executing program 7 (id=2180): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2c, 0x1000}, 0x14}}, 0x4000004) 1m57.743201268s ago: executing program 7 (id=2268): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) socket(0x1d, 0x4, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x4000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x27, 0x22, 0x0, &(0x7f00000004c0)="8e5763539bb91a84c8007f5b0800f08db9b5b254aaea0075d4a8248217893240553e", 0x0, 0x4200, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m57.148584452s ago: executing program 7 (id=2273): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) close(r6) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.080796059s ago: executing program 7 (id=2283): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0xa0}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xdc, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x4002, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x3, 0x2, 0xfd}}, 0xe8) sendmmsg$sock(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x400, @mcast1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)="5a45fd50b5b3fa24f8aa39cd09a699958170196d468b09d1647e8cda015b4278d298db1b31c642cad8010e18baf0e7d31c2dca78a6bb678600d56c023a9559299b82bf5c51872972f7ef770c230feb9dc73ccbe239b405ad622bdd107d9a0c9fe39bb2a3f7adc4f47b0a4f3dc823f534c1d74c7b8370ecdfb195c925b978a9890576fc681580cda935424c7ecf1d3f28601e506f88bad1c94eb7f2cdebdc1c874581241d6bc418a278e74f33e353a72fc7dc18dddb6b", 0xb6}, {&(0x7f0000000200)="8acccae66343fc1d0781afe324019d1bec95e74b60fa2cb58bab62f1e1c23c707b9385c75b5224d61f9cb365d8c52f23492ffa09f7d46a3eff5e36722f39fba6a28b048411b9942cdd8aa5884f43800d166f6df8d1726a04a73817f0b43c7b5a8a39187b3e27582c27ba19e76bed454067c063c91755491ffdf6a0932eceaf8cfb7ef8c8b4cb413af82c9a7cc22885f86a340fa400161c633e1a8fdcdc800b3f48bacbb4208071d3fd61bf7cd9e1e6e71b2b097aac210457b44f52f263b5e7d03ea69e3a28239534e050b3dc5b5b1768328277a8922c84684c", 0xd9}, {&(0x7f0000000580)="78073b851d5e26f4fc8fce58c600fda40ebc7adfcb8cb3e6201fcb1b1d60ffd3554a6975b62dc54a049e14eaf031da985235c0e8b9acb49bef3e506c7cc51411723232e4beb82073b73a1e77d120cf08c7b97f107dc79eddf57b63f490b7b9c547912c5683a6d662749bca78e05f60131ddfe7ca8745454241c195a2f0fc2b6543920a2fc30f026cd486ee20990ce7e549789c641e4065aa507ef4d6a5f43c59cb5a082bb625b4e6f42f0c0190d8c65fd4af10e469d5b98c48fe1512b4d8c8546d24", 0xc2}], 0x3, &(0x7f00000006c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x60}}, {{&(0x7f0000000740)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}, 0x1}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)="ff58f76f43e15cecd534bd0c01bbc80627a8b076ebeaff2afc2a8136df9a560a24a939b2a9bc1fa5bcdc0a4ef3bf0366cdc158ac9849c673c5f3f6e9403960ec376cb54a8531e756b2df652c447943c668e4db94de1c6774313c883eb3e09b3dc741a889da900737034bb37afa7dc1e419ad237dddea0914a6b6892a09a363a691bd3bcb649bb97197522ba8863dde9c239fe05066e1aef6c5ab5a6266003b79ccfcfdc9a886e817f8a408c1fc75541473595a141ffa7e515bb02facba5e6e0b60c7", 0xc2}, {&(0x7f00000008c0)="d055b3706d5acb45dd2af39d59601897ee320d834032420ad6bb189a7880847f525c04ee9291039aa6e3299c06531338caebac25d7c045ba0644f192d363b0e6e4ba8967d71e155a633738ef9ad4b997c9dac721e4d9bd231e1f0721b7858df7f72947e4c8dea2b7516d546be32512938fa33bd1c656b66ff716b7b61fb3bc628019041a632d1e0cd66e403dea4810a69c9a19d82987f859c8", 0x99}, {&(0x7f0000000980)}], 0x3, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x3f7b}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xa8}}], 0x2, 0x0) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000180)={0xb6, 0x80}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000b40)="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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add", 0xd6}], 0x1}, 0xff00) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0xfef94000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8004f, 0x10000}) 1m10.065880105s ago: executing program 7 (id=2288): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socket$netlink(0x10, 0x3, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040400}, 0x10) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040400}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r4) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) socket$inet6(0xa, 0x3, 0x7) (async) socket$inet6(0xa, 0x3, 0x7) r7 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x105c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x73}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.065288485s ago: executing program 35 (id=2288): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socket$netlink(0x10, 0x3, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040400}, 0x10) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040400}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r4) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) socket$inet6(0xa, 0x3, 0x7) (async) socket$inet6(0xa, 0x3, 0x7) r7 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x105c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x73}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.135615891s ago: executing program 3 (id=2830): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004891, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000240)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001240)=@nfc, 0x80, &(0x7f00000014c0)=[{&(0x7f00000012c0)=""/236, 0xec}, {&(0x7f00000013c0)=""/176, 0xb0}, {&(0x7f0000001480)=""/59, 0x3b}], 0x1000000000000005, &(0x7f0000001500)=""/143, 0x8f}}, {{&(0x7f00000015c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002680)=""/251, 0xfb}, 0x28de}, {{&(0x7f0000002780)=@x25, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/188, 0xbc}, {&(0x7f00000028c0)=""/254, 0xfe}, {&(0x7f00000029c0)=""/48, 0x30}], 0x3, &(0x7f0000002a40)=""/166, 0xa6}, 0x8000}, {{&(0x7f0000002b00)=@qipcrtr, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b80)=""/26, 0x1a}, {&(0x7f0000002bc0)=""/226, 0xe2}], 0x2, &(0x7f0000002d00)=""/228, 0xe4}, 0x9}, {{0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/72, 0x3e}, {&(0x7f0000004e40)=""/4096, 0x1000}], 0x4, &(0x7f0000005e80)=""/165, 0xa5}, 0xc2}], 0x6, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000240)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001240)=@nfc, 0x80, &(0x7f00000014c0)=[{&(0x7f00000012c0)=""/236, 0xec}, {&(0x7f00000013c0)=""/176, 0xb0}, {&(0x7f0000001480)=""/59, 0x3b}], 0x1000000000000005, &(0x7f0000001500)=""/143, 0x8f}}, {{&(0x7f00000015c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002680)=""/251, 0xfb}, 0x28de}, {{&(0x7f0000002780)=@x25, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/188, 0xbc}, {&(0x7f00000028c0)=""/254, 0xfe}, {&(0x7f00000029c0)=""/48, 0x30}], 0x3, &(0x7f0000002a40)=""/166, 0xa6}, 0x8000}, {{&(0x7f0000002b00)=@qipcrtr, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b80)=""/26, 0x1a}, {&(0x7f0000002bc0)=""/226, 0xe2}], 0x2, &(0x7f0000002d00)=""/228, 0xe4}, 0x9}, {{0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/72, 0x3e}, {&(0x7f0000004e40)=""/4096, 0x1000}], 0x4, &(0x7f0000005e80)=""/165, 0xa5}, 0xc2}], 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback={0xfec0ffffffffffff}, 0xffee}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x30, 0x4) 7.120426688s ago: executing program 3 (id=2839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) 6.826138592s ago: executing program 3 (id=2841): r0 = socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe8, 0x4, 0xe, 0x3, 0x81}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400a59500000000000000000a6800c8", @ANYRES64, @ANYBLOB="1400020000000900000114000100fe000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@polexpire={0xc0, 0x1b, 0x31d, 0x70bd28, 0x25dfdbfc, {{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x4e20, 0x1, 0x4e24, 0x400, 0x2, 0x0, 0x0, 0x87}, {0x8, 0x10001, 0xfffffffffffffff4, 0x4, 0x2, 0x41ba, 0x7, 0x80000000}, {0x7fffffff, 0x3, 0x4, 0x8}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, 0x4}}, 0xc0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r8, 0xd371f000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000180)=@caif=@dbg={0x25, 0xe2, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="990729580000203d497b75a47f668f13c4", 0x11}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 5.41882476s ago: executing program 3 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000140)="9bb2fd99a31aee87e88c00472e5b71cecc2b2bb787a1a5c36e9f13464152a1a4c00e69e40c478c07dec71b", &(0x7f0000000340)=@tcp=r2, 0x2}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xc00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0xff, 0xffdff032}, {0x6, 0x3e}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe"], 0x98}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 4.834792072s ago: executing program 3 (id=2859): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x20, 0x8, 0x101, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="d100000000001b80c2000000080045"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 4.694760078s ago: executing program 3 (id=2860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r8], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) 3.141853462s ago: executing program 8 (id=2872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000000c0)="5bcbf75c025a239bc6a544725a893ca1841c66c78ad7af63f8567c38cc861ba43c830828c7ea4e4618b53cb1cf0428ae466b97982ca3b8fd1528a11eb1b9629c9f073544829b561a0c24b3756562bc78a3abf8b0cf9a441a40a937257e68efd1561be4094a7cec6e792a5ac6f239d7db8e1a90d29f209629be8487145f05e57a209dad4e7c4efb746028d7ab830442cad9cdef58c1e3d5c53653d45f338b5ee14783dcd84435411b8e713ad0caf0c147d3d3e84bd5ec34b31bdd300cfcc01e8537b16c5919e189f34d9fb7a6bb6d7ff33e82429f1fcf78a5eeaae9c8", 0xdc, 0x4040000, &(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1) bpf$PROG_LOAD(0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x18, 0x2, 0x2) connect$unix(r6, &(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x4d, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4b) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0x2, 0x6, 0x8, 0x0, 0xf], 0x6, &(0x7f0000000380)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r7, 0x201, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a006d0700000000000000001c000000000000071f"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x20}}, 0x20080000) 2.747220499s ago: executing program 8 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000100)) connect$bt_l2cap(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xc00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.158645854s ago: executing program 1 (id=2883): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x80, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4000000}, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x7fff, 0x0, 0x0, 0x0, 0x1a80, &(0x7f0000000100)='ip6tnl0\x00', 0x100, 0x6, 0x6}) 2.08176546s ago: executing program 2 (id=2884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6d}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1b}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x6709feb948b99dda}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xaa9}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8ba4c44d72b92e86) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'batadv0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@const={0xf}, @ptr={0x7}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x30, 0x5f, 0x61, 0x2e, 0x71]}}, &(0x7f00000015c0)=""/198, 0x44, 0xc6, 0x1, 0x9}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f0000001740)=""/255, 0xff, 0x0, &(0x7f0000001840)=""/43, 0x2b}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x8, 0x1c, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @call={0x85, 0x0, 0x0, 0x7d}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @generic={0x7, 0x4, 0x7, 0x2}]}, &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x9, '\x00', r6, @fallback=0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x4, 0x2, 0x7, 0x8}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r4) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@filter={'filter\x00', 0xe, 0x2, 0x314, [0x0, 0x200000001a40, 0x200000001cc4, 0x200000001cf4], 0x0, &(0x7f0000001a00), &(0x7f0000001a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x21, 0x1, 'pim6reg1\x00', 'pimreg\x00', 'bond0\x00', 'dvmrp1\x00', @broadcast, [0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff], 0xae, 0xae, 0xf6, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0xec4, 0x1b68, 0x8, {0xf800}}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5, 0x3, {0x5}}}}}, {0x9, 0x2, 0x88be, 'bridge_slave_1\x00', 'xfrm0\x00', 'ip6gre0\x00', 'veth0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0x12e, 0x15e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x3, 0x9}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{}, {0xfffffffffffffffc}], 0x2}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x3d, {0xb}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x38c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r10, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000110) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000001f00)={{0x2f, @loopback, 0x4e21, 0x2, 'sh\x00', 0x2, 0x8, 0x65}, {@multicast2, 0x4e23, 0x10000, 0x4, 0xfffffff6, 0x2}}, 0x44) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001fc0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r1, 0x301, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000020c0)="0c2bd838e40a105af9857b8e25934dccab296824edd186cb956cb19f5c275d183dd2e03d3c4fa009eeefc0423186e412", 0x30}, {&(0x7f0000002100)="ed451c0c862ef344e960facb08ee67275f6fa38d41ec00aa85aa195c78afba1f2aa9da2cba03f98dbf06b921339736d28b18db8d865246a734c20f4991b311a2889143487c49f44b26e920647cf6484e85845c2bf16a991e574c83e2ddb13d9e6c973564bae9e557f153e0a5a261824b2aa7a4eb72098e150b31920b9a6f0af330c4a7051f46b26416c2204fdf65697c754568d704913c78e38fb6440cad19c1850197cc873cb4c3d711351c7c7a99e47742f236ac092374eebd66af13d45c705592a17689a55305c2190918793c0c29909367a1a794209453bd62ac389817c8069de691", 0xe4}, {&(0x7f0000002200)="2a89a05dbdba1dfdd98ac492d6a392a915799b4f420a7f0b00a799220138cf149fdf27584d080d7027aba0014da26e09d1538a4ce39e62e0e6124b3ecea4d6235134b016646fdc5c421a76ecf0cd4ec5d75aa1431d58225ee3e433f70cd14b7e0c6ae290c6dc3a19274db7f7", 0x6c}], 0x3, &(0x7f00000022c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x68}}], 0x30}, 0x4000010) bpf$TOKEN_CREATE(0x24, &(0x7f0000002340)={0x0, r4}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000023c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f0000002600)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x188, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80000000}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xdc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x99fce40dd23e57cb}, 0x24040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002900)={r9, 0x0, 0xd8, 0x90, &(0x7f0000002640)="c9a76eb765eb2e11bd4fb76d22d542c6af12b9a1d5fe4bdaea5d102e872e1ddb2c58a18422828684f9445cb4398ff3ae72056cdaa74c96b73822b0481f06bbc7b43225ebf69501b8c7cbffc806e8541dd26c42c7b1d488fcc32763c3203bff420160a987f135281a890896c509ca5e0c2228ccfc2f0117006cc61d9c184939d2acec206f91cd747ae2ac25eceaea9581392a73e31d5bfca6883826c5813f78eb997153e310ea7053e2a24938eddb1db4d937e667682645393ad009e1357f14d201e848fe7622db2dcc26d3191da09ca068d50afe2affc22c", &(0x7f0000002740)=""/144, 0x3, 0x0, 0x63, 0x57, &(0x7f0000002800)="c38e444cc4ff9e80cec2f51ae147e6edda3c274bac90f3d46569d1b09d5c468f8509a2fe621382b0803f7b88c23f19251fa89751a77732dcb5345ded105b91cc6e5269ff51fd51b25bf23e1f739e0b17555a0a5b82ebb87a44b90f63928fcda6da6dd5", &(0x7f0000002880)="f529e95302d125c2341ef6a31136ffc522514f722ae6861a99a59e6aef3a8936f58d3fb584b94de0f795b5dd479ed4cb3320e9045ad4583081f0fecd14dbcf5821ee09ea3db7afb4ffa1968f9640058711373998d9fc8e", 0x7, 0x0, 0x9}, 0x50) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000002980)={0x8, {{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1ff}}, {{0xa, 0x4e20, 0x0, @remote, 0x3}}}, 0x108) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r10, &(0x7f0000002d00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b40)={0x144, r14, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) bpf$ITER_CREATE(0x21, &(0x7f0000002d40)={r7}, 0x8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r1, 0xb00, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.855695014s ago: executing program 2 (id=2885): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x9, '\x00', 0x0, r1, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 1.854072577s ago: executing program 8 (id=2894): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000006d19fb0000000000000000000a1400000010000100"/40], 0x28}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002a8b2000000000000000000000000010500040001000000050001000700000014000780080006000000000508001340000000000011000300b93a6e65742c6e6574000000000900020073797a3000"/99], 0x60}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0x4}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.830198996s ago: executing program 1 (id=2886): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x2, {{0xa, 0x4e20, 0x3fa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x1, 0x6, [{{0xa, 0x4e22, 0xa9b, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffff9}}, {{0xa, 0x4e24, 0x1, @mcast1, 0x6}}, {{0xa, 0x4e22, 0x800, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x7ff}}, {{0xa, 0x4e22, 0x0, @private0, 0xeb69}}, {{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {{0xa, 0x4e21, 0x1, @private0}}]}, 0x390) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000480)="3a69b1ff1c9eca5c588ad61e565af939304519f20c118a7e1753704e535809ffbf4853d774e42529323e72b6382d16f67be156bb3bfadaaed61579589121561910891412ba6068b920805dd5df562f80b48c1f7743d326efb15f46f88ef965c3ec10c5a1d88d33f0427b69736a58c85519b7d746f257687926e3acdfba76fa0105e86387533a0a5651e43bb39756911279a4d4abca9d16b6b690b8272ecc9e48638cd13e7b9e7bafcba872fb42e11635bbfb694500309172e267342f88fd37ae5410d8122518a9de929ecc2e41e0e46d4b", &(0x7f0000000580)=@udp=r2}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.events.local\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, 0x14, 0x10, 0x70bd25, 0x25dfdbfb, {0x9, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "8c578c0da42fa6de34ad7401e6f4e4e627db74fd237c4227917a75c322fd42329e28e4a6110d78002e1d924bf0bedbf103e1b405c84b52920387686ea511169c6d46c7afe1f9428412c6a543dcb96fde3a6c3da0cc570510eaf7cea1fb2d829a4b443203feeb7e560b4759e304efc3b0099dc63d66aa381b443d81088369a335ca6a1a84696991f71e2cf34be1700a091e5f135d76408a07ae55a09590880418e1bcc559cfda9435567783b5b1c64ff119cf768af824f53166d60dd6dca0e5afae3a86af9e3755fe984e92dcbdc1"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40004041}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) unshare(0x200) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000840)=0x3, 0x4) (async) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000840)=0x3, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r4, 0xffffffffffffffff}, 0x4) close(r2) connect$bt_rfcomm(r3, &(0x7f0000000900)={0x1f, @none, 0x3}, 0xa) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000a00)='wg0\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000a40)="62b8822312410ac5a6a4b7758514bba25d428c13fd39b673007a6362c4a206381d7bc986227bee6b2d3267ca61322f302d07942f0a6a85521c36c64be47461e6b52c144e867c5e16cfc6783d68be8fdc", 0x50) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000a40)="62b8822312410ac5a6a4b7758514bba25d428c13fd39b673007a6362c4a206381d7bc986227bee6b2d3267ca61322f302d07942f0a6a85521c36c64be47461e6b52c144e867c5e16cfc6783d68be8fdc", 0x50) ioctl(r4, 0x6, &(0x7f0000000ac0)="abe1ef2fccd0c0cf7d8cc46695c7147b4c82e93c7075d19d13fe5d842fbce080eeb45fb8fe2a0c91ae4f68f0f90dadbbd82faab0d2d0c585b848d8513a87f35d0df01f899b303a") sendmsg$key(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x2, 0xa, 0x3, 0x5, 0x19, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in6=@private0, 0x3a, 0x14, 0x14}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd28, 0x3506}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d4}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_lifetime={0x4, 0x2, 0xc, 0x9, 0x3b, 0x46}, @sadb_address={0x5, 0x17, 0xff, 0x80, 0x0, @in6={0xa, 0x4e21, 0x5, @private0, 0xc4}}]}, 0xc8}}, 0x40014) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) unshare(0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001dc0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001dc0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x8, &(0x7f0000000d40)=@raw=[@ringbuf_query, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000d80)='GPL\x00', 0x53fd, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41100, 0x41, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x10, 0x6863d122}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x8, &(0x7f0000000d40)=@raw=[@ringbuf_query, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000d80)='GPL\x00', 0x53fd, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41100, 0x41, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x10, 0x6863d122}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001f00)={0x0, 0x200}, &(0x7f0000001f40)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r3) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r3) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x38, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000020c0)=0x1, 0x4) 1.657628242s ago: executing program 2 (id=2887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.48004392s ago: executing program 6 (id=2888): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 1.462634142s ago: executing program 1 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newqdisc={0x17c, 0x24, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0xa}, {0x1, 0x8}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xf, 0x7}}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x60, 0x8, 0x400, 0x6, 0x1, 0x7b, 0x7fff, 0x7}}, {0x12, 0x2, [0x1, 0x200, 0x6, 0x5, 0x6, 0x9, 0x0]}}, {{0x1c, 0x1, {0x5, 0x3, 0x60, 0x41, 0x2, 0x5, 0x8, 0x7}}, {0x12, 0x2, [0x2, 0x6, 0x985, 0xc6, 0xbcd7, 0x5, 0x9]}}, {{0x1c, 0x1, {0xd5, 0x4, 0xe, 0xdf7c, 0x0, 0xa, 0x0, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0x3, 0x0, 0x0, 0x20002000, 0x2, 0x6, 0x8, 0x4}}, {0xc, 0x2, [0x7ff, 0x1, 0x2, 0xd6]}}, {{0x1c, 0x1, {0xd, 0xf9, 0x120, 0x401, 0x2, 0xb72f, 0x40, 0x9}}, {0x16, 0x2, [0x2, 0x1ff, 0x65b4, 0xf, 0x8, 0x2, 0x6, 0xe738, 0x0]}}, {{0x1c, 0x1, {0x12, 0x0, 0x5a, 0x1000, 0x0, 0xed4, 0x6, 0x2}}, {0x8, 0x2, [0x8, 0x0]}}, {{0x1c, 0x1, {0xb, 0x8, 0x101, 0x9, 0x2, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x1, 0x401, 0x7]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4080000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x4a5}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf25030b00000500030000000101000001801400020073797a5f74756e000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x200098d5}, 0x4040084) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@loopback, @dev, 0x0}, &(0x7f0000000140)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x10078, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xa}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x7800, 0x7800, 0xfff, 0xb, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x66, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@end, @rr={0x7, 0xf, 0xc1, [@rand_addr=0x64010102, @rand_addr=0x64010101, @empty]}, @timestamp={0x44, 0xc, 0x5a, 0x0, 0x5, [0x1, 0x1]}, @lsrr={0x83, 0xf, 0x99, [@remote, @private=0xa010102, @multicast2]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @initdev}, &(0x7f0000000300)=0xc) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r12, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b00ace03dd65193dfb6c5619a3d86dd6067060000140654034d069cdb99b4dcf74b5c85cd6db0c10000000000000000", 0x32}, {&(0x7f0000000100)="0400e4eda7f6c173b552572f13f823c1", 0x10}, {&(0x7f0000002480)="37bcb3983785779df7392b7dca", 0xd}], 0x3) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)=ANY=[@ANYBLOB="78020000", @ANYRES16=r6, @ANYBLOB="00042bbd7000fedbdf250f000000300001800800030005000000140002000000000000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="080003000200000014000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="3c00018014000200697036677265300000000000000083d208000100", @ANYRES32=r4, @ANYBLOB="140002006e72300000000000000000000000000008000300010000003c00018014000200766c616e300000000000000000000000080003000100000008000300070000001400020073797a6b616c6c6572300000000000003400018014000200677265746170300000000000000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1c0001800800030001000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="5400018008000100", @ANYRES32=r11, @ANYBLOB="08000300010000001400020067656e65766531000000000000000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="1400020069705f767469300000000000000000007400018008000300000000001400020070696d3672656730000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002006e657470636930000000000000000000140002006261746164765f736c6176655f3000000800030002000000140002006970766c616e310000000000000000006000018008000100", @ANYRES32=r4, @ANYBLOB="08000300020000001400020067656e6576653100000000000000000014000200776c616e3100000000000000000000001400020076657468315f746f5f7465616d000000080003000200000008000300030000003000018008000100", @ANYRES32=r14, @ANYBLOB="1400020076657468300000000000000000000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB], 0x278}, 0x1, 0x0, 0x0, 0x867e2d3730a7c83e}, 0x8840) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14010000", @ANYRES16=r6, @ANYBLOB="080026bd7000fddbdf2513000000800001800800010073e0de1e1cc231f05aabc5b3353c51d47d7fa6ea7f8546820014b029afeb7a88bd503b67046bf894bdf5fb210478f8b0179a6235317ff5b471a17e546229e5f861d8cbb41f5fec836fbc1457c756a9a7308632987ec0635375bf54b493f611ca5f4291e2ac74607014a49df1ec2cdefd55ccc7eb170103bdca3c35260dcb2f482b890b84e7c736a1cf21f5394c929bda727958aca4fa0095eb2d46500000000000", @ANYRES32=r7, @ANYBLOB="140002006970766c616e310000000000000000001400020070696d36726567300000000000000000080003000100000014000200697036677265746170300000000000001400020069703667726574617030000000000000140002006970766c616e3000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="8000018014000200736974300000000000000000000000000800030000000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="1400020077673100000000000000000000000000140002006475001400020073797a6b616c6c657230000000000000140002006261746164763000000000000000000000000000000000000000000000052159bf7b34b37b8130bd54a4ba7c8fc9e2141289a8560fb73ce0cbe8429bd1a4d2e74b1ffa05ff268e9fff4acdb8a1289801eedf02db"], 0x114}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000026bd7070060000000000000002000300", @ANYRES32=r2, @ANYBLOB="08005a8004002080"], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1.380197121s ago: executing program 8 (id=2890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xfff0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.281888281s ago: executing program 6 (id=2891): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="0e7e1388c9ba80c28a32e1b4124ff0a86f9fcd98141d551ef3ef027d30eea6bc98c1bd31bbdc4fb3d2905173c05bb567b6", 0x31) (async) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa1953d3", 0x4}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x6e6bb0}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@multicast2, @in=@empty, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0xc810) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2b, 'devices'}, {0x16, 'memory'}, {0x2b, 'pids'}, {0x2b, 'freezer'}, {0x2b, 'cpu'}]}, 0x25) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x7, 0x4, 0x0, 0x7, 0x49b8}}, {0x4}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback, 0xe, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x10, @val=@netkit={@void, @value, @void, @void, r8}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@netkit={@void, @value, @void, @void, r8}}, 0x1c) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000b00)={r1, &(0x7f0000000a00)='devices', 0x80, &(0x7f0000000a40)={@align=0x39, {0x800, 0x3ff, 0x6, 0xd8f2}}, 0xcf04, &(0x7f0000000a80)={@_ha_fsid}, &(0x7f0000000ac0)=0x7}) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x21, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000090000000000000003000000b7080000000000007b8af8ff00000000b7080000ff0f00007b8af0ff00000000bfa100000000000007410000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000dc0)='GPL\x00', 0x9, 0x9a, &(0x7f0000000e00)=""/154, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x3, 0x9, 0x82c, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000f80)=[{0x2, 0x1, 0xc, 0x9}, {0x1, 0x1, 0x10, 0x4}, {0x3, 0x2, 0x5}, {0x3, 0x5, 0x5, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@cgroup=r9, 0xffffffffffffffff, 0x20, 0x1, 0xffffffffffffffff, @void, @value=r10, @void, @void, r8}, 0x20) (async) bind$can_raw(r4, &(0x7f0000000000), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111be00000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) (async) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x00', 0x101000, &(0x7f0000000100)={@align=0x2, {0x6, 0x5, 0x1c, 0xaf}}, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x10000}) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f0000000200), 0x4) 1.031787067s ago: executing program 6 (id=2892): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000001780)={'TPROXY\x00'}, &(0x7f00000017c0)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000001780)={'TPROXY\x00'}, &(0x7f00000017c0)=0x1e) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4c, "c46e9fd1a86b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x21}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4c, "c46e9fd1a86b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x21}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x2f, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0) (async) splice(r3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x178, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x24044090) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000769000800000000000000000000000000000000000000000000000090cbf175621857796a96555b3e2301e7818fd85e47f3ea47c271119586fefa17c15e525da1390c928b4bb540cb0e9b7f48cd4ee6a6b8dbb0bb4ab01730a2ef67207a044adbb57eb4873580191eee887078cf97e5f175d7764c340b9b00b0f323960fceb34db5a3c614764c387a030054e60c16c528919fd9fa"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$kcm(0x29, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x803, 0x6) (async) socket$inet6(0xa, 0x803, 0x6) 936.925153ms ago: executing program 6 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1062c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x9a}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x25}, @loopback, r3}, 0xc) 584.53087ms ago: executing program 2 (id=2895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d0301000000000007020000ffb00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb6"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb0, '\x00', 0x0, @fallback=0xd}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000"], 0xbc}}, 0x48004) 560.249963ms ago: executing program 1 (id=2896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x56, 0x0, 0x401, 0x12, @loopback, @loopback, 0x7, 0x0, 0x800, 0x6f20}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f00000001c0)='\x00', 0x400040, &(0x7f0000000200)={@_ha_fsid={[0x1, 0x1]}, {0x8, 0x5, 0x10001, 0x8}}, 0x7ff, &(0x7f00000002c0), &(0x7f0000000300)=0x81}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xa, '\x00', r2, r3, 0x0, 0x5, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x8, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x1000}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x2, 0x0, 0x3, 0xb, 0x18000000, 0x200, 0x5, 0x9, 0x38, 0x40}, {0x30}}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x8, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) 521.722413ms ago: executing program 2 (id=2897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x3ff, 0x4, 0xb6]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41000}, 0x44) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xebcb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x565}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7e}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004980}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x158, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x320c}]}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4be}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x3, 0x1c, 0x4, 0x1, 0xfffffffd, 0xb, 0x1, 0x0, 0xffff]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x118, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040}, 0x8801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x800) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000880)={'caif0\x00', 0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r9, 0x89e9) recvmsg(r0, &(0x7f0000001d80)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/173, 0xad}], 0x1, &(0x7f0000000d80)=""/4096, 0x1000}, 0x12180) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}]}, 0x28}}, 0x8010) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, r1, 0x49759000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001f00), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r10, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x1c}}, 0x48080) splice(r3, &(0x7f0000002000)=0x487, r0, &(0x7f0000002040)=0x2, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000002200)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0x90, r12, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x88d4}, 0x80) sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x154}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004006) socket$nl_generic(0x10, 0x3, 0x10) 377.877154ms ago: executing program 1 (id=2898): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000040)={@align=0xffffffffffffffff, {0xfffb, 0x800, 0x0, 0x2}}, 0xffff, &(0x7f0000000080), &(0x7f00000000c0)=0xf}, {[0x4, 0x3, 0x249, 0x7]}, 0x6, 0x94, &(0x7f00000002c0)=""/148}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5ea000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x8}, {0x0, 0x4}, {0xfff3, 0x5}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x70bb}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x40011) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) 372.580322ms ago: executing program 6 (id=2899): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001f200)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x0, 0x9, 0xfffc}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 361.217183ms ago: executing program 8 (id=2900): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2b0f77ecbcbb3265409a5d4b6708e373a68961c65b057044649be2f838632e276e96b3ea00cca3b33d60", 0x2a}], 0x1}, 0x4051) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r6, @ANYBLOB="000000000000000018140000", @ANYRES32=r6, @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0ff683850000001100000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', 0x0, r4, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x7ac9, 0x9eee}, 0x10, 0x459c, r5, 0x4, &(0x7f00000005c0)=[r2, r6, r2, r2, 0x1, r7, r2], &(0x7f0000000700)=[{0x5, 0x1, 0x1, 0xc}, {0x0, 0x4, 0x200, 0x8}, {0x2, 0x3, 0x2, 0x5}, {0x2, 0x2, 0x8, 0x8}], 0x10, 0x5a4}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="110000000400000004000000a704000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000000000000000"], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r8, 0x1, 0x28, 0x0, &(0x7f0000000000)) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)='u\x00', 0x2}], 0x1}, 0x2004a841) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r10, 0xe6905000) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xc, 0x12, r10, 0xfffff000) getsockopt$inet6_tcp_buf(r10, 0x6, 0xd, &(0x7f0000000100)=""/99, &(0x7f0000000180)=0x63) 121.958795ms ago: executing program 2 (id=2901): getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000001280)=0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffd, 0x42}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r6, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xdc1, &(0x7f0000002a00)=ANY=[], 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) getpeername$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, r8}, {}, {0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0xe8) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, {0x100000000000, 0xffffffffffffffff}, 0xfffffffc, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="402bcc1a9ef7050000007441b4ac357def000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf252b0000000c0099007f000000780000000c002380060010000600000007002400038648000a0006005050505050500000"], 0x40}, 0x1, 0x0, 0x0, 0x8000001}, 0x24008840) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 70.60529ms ago: executing program 1 (id=2902): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) read$alg(r3, &(0x7f0000000b80)=""/237, 0xed) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) r12 = socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setsockopt$inet_mreqsrc(r12, 0x0, 0x26, &(0x7f0000000040)={@loopback, @broadcast, @multicast1}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014000000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 70.146542ms ago: executing program 8 (id=2903): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x36}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) preadv(r4, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, 0xff, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) write$tun(r1, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1}, {0x4e20, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x3a}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 0s ago: executing program 6 (id=2904): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004540), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a40000001801000020"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r10, @ANYRES32=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10, @ANYRES64=r5], 0x1c}}, 0x840) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000000)=0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r15, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20001000) bind$nfc_llcp(r11, &(0x7f0000001040)={0x27, r13, 0xfffffffd, 0x2, 0x10, 0x8, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1b}, 0x60) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0xfffffffffffffffc, 0xc0004) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400", @ANYRES16=r8, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000004580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="99c12abd7000475f00002e00000009e701007770616e3000000005002b00000000000c0005000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x4048040) kernel console output (not intermixed with test programs): ][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.980874][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.991454][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.021485][T12253] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 251.045166][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.057241][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.067453][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.076629][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.097084][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.220621][T12256] vxcan1: entered promiscuous mode [ 251.249150][T12256] vxcan1: entered allmulticast mode [ 251.256778][T12256] team0: Device vxcan1 is of different type [ 251.368344][T12263] netlink: 'syz.1.1612': attribute type 9 has an invalid length. [ 251.568865][T12273] __nla_validate_parse: 3 callbacks suppressed [ 251.568883][T12273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1615'. [ 251.881179][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'. [ 251.914064][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'. [ 252.080064][T12250] lo speed is unknown, defaulting to 1000 [ 252.212546][T12303] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1623'. [ 252.364325][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 252.389630][T12311] netlink: 'syz.2.1625': attribute type 29 has an invalid length. [ 252.399557][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'. [ 252.484355][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.514536][T12314] lo speed is unknown, defaulting to 1000 [ 252.603804][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 252.614521][T12322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1627'. [ 252.635127][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 252.952750][T12250] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.965921][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.973318][T12250] bridge_slave_0: entered allmulticast mode [ 252.981350][T12250] bridge_slave_0: entered promiscuous mode [ 252.993247][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.000759][T12250] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.031215][T12250] bridge_slave_1: entered allmulticast mode [ 253.058407][T12250] bridge_slave_1: entered promiscuous mode [ 253.188356][ T5621] Bluetooth: hci5: command tx timeout [ 253.262548][T12250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.353461][T12250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.372299][T12356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1632'. [ 253.503127][T12250] team0: Port device team_slave_0 added [ 253.541227][T12250] team0: Port device team_slave_1 added [ 253.548842][T12349] block nbd1: not configured, cannot reconfigure [ 253.661553][T12250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.692351][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.783690][T12250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.832124][T12250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.849475][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.927846][T12250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.960366][T12370] netlink: 'syz.4.1638': attribute type 2 has an invalid length. [ 253.997379][T12372] sit0: left promiscuous mode [ 254.082661][T12372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.132572][T12372] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.164674][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.252838][T12372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.272311][T12372] veth1_macvtap: left promiscuous mode [ 254.283295][T12372] veth1_macvtap: entered promiscuous mode [ 254.297525][T12372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.308744][T12372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.317880][T12372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.327714][T12372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.342241][T12372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.359263][T12372] bond2: left promiscuous mode [ 254.364773][T12372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.373596][T12372] bond3: left promiscuous mode [ 254.380992][T12372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.394174][T12372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.418743][T12372] bond5: left promiscuous mode [ 254.425718][T12372] bond6: left promiscuous mode [ 254.430770][T12372] bond7: left promiscuous mode [ 254.500824][ T8959] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.512861][ T8959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.531764][ T8959] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.551780][T12384] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 254.555844][ T8959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.569182][ T8954] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.578286][ T8954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.656369][ T8954] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.676062][ T8954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.713553][T12250] hsr_slave_0: entered promiscuous mode [ 254.731976][T12250] hsr_slave_1: entered promiscuous mode [ 254.766666][T12250] debugfs: 'hsr0' already exists in 'hsr' [ 254.773656][T12250] Cannot create hsr debugfs directory [ 254.991275][T12401] netlink: 'syz.4.1647': attribute type 2 has an invalid length. [ 255.265970][ T5621] Bluetooth: hci5: command tx timeout [ 255.442028][T12407] lo speed is unknown, defaulting to 1000 [ 255.544143][T12435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.565858][T12435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.591082][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.727354][T12418] tipc: Enabling of bearer rejected, failed to enable media [ 255.748858][ T8952] wlan1: Trigger new scan to find an IBSS to join [ 255.761595][T12440] dvmrp0: entered allmulticast mode [ 255.923425][T12461] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 256.203453][T12250] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.245233][T12250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.273529][T12250] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.308078][T12250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.320281][T12250] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.334245][T12250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.344371][T12250] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.352944][ T8955] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 256.374233][T12250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.631059][T12494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.345996][ T5621] Bluetooth: hci5: command tx timeout [ 258.706757][ T8955] wlan1: Trigger new scan to find an IBSS to join [ 259.250703][T12474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.431960][ T5621] Bluetooth: hci5: command tx timeout [ 259.498213][T12505] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 259.500048][T12506] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 259.611904][T11658] IPVS: starting estimator thread 0... [ 259.684019][T12518] __nla_validate_parse: 12 callbacks suppressed [ 259.684037][T12518] netlink: 820 bytes leftover after parsing attributes in process `syz.3.1671'. [ 259.708188][T12518] netlink: 820 bytes leftover after parsing attributes in process `syz.3.1671'. [ 259.746671][T12519] IPVS: using max 38 ests per chain, 91200 per kthread [ 259.748819][T12250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.819822][T12250] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.867693][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.874878][ T8954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.939254][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.946508][ T8954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.996155][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 260.011218][T12533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.985398][T12567] SET target dimension over the limit! [ 261.409567][T12577] netlink: 'syz.3.1685': attribute type 2 has an invalid length. [ 261.749403][ T8952] wlan1: Trigger new scan to find an IBSS to join [ 262.561057][T12555] bond2: (slave syz_tun): Removing an active aggregator [ 262.584761][T12555] bond2: (slave syz_tun): Releasing backup interface [ 262.772472][ T8956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.963887][T12604] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1691'. [ 263.195458][T12250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.799747][T12637] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1698'. [ 263.920003][T12250] veth0_vlan: entered promiscuous mode [ 263.986634][T12250] veth1_vlan: entered promiscuous mode [ 264.095639][T12250] veth0_macvtap: entered promiscuous mode [ 264.147320][T12250] veth1_macvtap: entered promiscuous mode [ 264.196245][T12250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.235655][T12250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.386156][ T8954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.419092][ T8954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.440214][ T8954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.467309][ T8954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.522822][T12660] af_packet: tpacket_rcv: packet too big, clamped from 324 to 4294967272. macoff=96 [ 264.568018][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1705'. [ 264.759830][ T8956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.782905][ T8956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.840661][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1709'. [ 264.850275][T12672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1709'. [ 264.955376][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.972939][T12673] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 264.989639][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.999897][T12673] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1708'. [ 265.074323][T12682] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 265.323801][T12691] ip6gre1: entered promiscuous mode [ 265.336417][T12699] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.338173][T12691] ip6gre1: entered allmulticast mode [ 265.522665][T12705] batadv_slave_0: entered promiscuous mode [ 265.583158][T12704] batadv_slave_0: left promiscuous mode [ 265.607465][T12707] tipc: Enabling of bearer rejected, failed to enable media [ 266.039658][T12732] FAULT_INJECTION: forcing a failure. [ 266.039658][T12732] name failslab, interval 1, probability 0, space 0, times 1 [ 266.081372][T12732] CPU: 1 UID: 0 PID: 12732 Comm: syz.5.1726 Not tainted syzkaller #0 PREEMPT(full) [ 266.081397][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.081418][T12732] Call Trace: [ 266.081426][T12732] [ 266.081433][T12732] dump_stack_lvl+0xe8/0x150 [ 266.081465][T12732] should_fail_ex+0x40c/0x560 [ 266.081490][T12732] should_failslab+0xa8/0x100 [ 266.081517][T12732] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 266.081541][T12732] ? ip6_default_advmss+0x80/0x3b0 [ 266.081568][T12732] ? __alloc_skb+0x1d7/0x7a0 [ 266.081590][T12732] ? __alloc_skb+0x1d7/0x7a0 [ 266.081621][T12732] __alloc_skb+0x1d7/0x7a0 [ 266.081654][T12732] tcp_stream_alloc_skb+0x3f/0x580 [ 266.081682][T12732] ? __asan_memset+0x22/0x50 [ 266.081716][T12732] tcp_connect+0x1582/0x53e0 [ 266.081774][T12732] ? __pfx_tcp_connect+0x10/0x10 [ 266.081829][T12732] ? __kmalloc_cache_noprof+0x150/0x660 [ 266.081852][T12732] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 266.081885][T12732] tcp_sendmsg_fastopen+0x2c5/0x5f0 [ 266.081918][T12732] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 266.081938][T12732] ? tcp_sendmsg_locked+0x621/0x55c0 [ 266.081961][T12732] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 266.081997][T12732] ? __lock_acquire+0x683/0x2cf0 [ 266.082024][T12732] ? __lock_acquire+0x683/0x2cf0 [ 266.082069][T12732] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 266.082103][T12732] ? tcp_sendmsg+0x21/0x50 [ 266.082123][T12732] ? __local_bh_enable_ip+0xd0/0x130 [ 266.082189][T12732] tcp_sendmsg+0x2f/0x50 [ 266.082207][T12732] ? __pfx_inet6_sendmsg+0x10/0x10 [ 266.082222][T12732] sock_sendmsg_nosec+0x90/0x180 [ 266.082246][T12732] ____sys_sendmsg+0x54e/0x850 [ 266.082280][T12732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.082316][T12732] ? import_iovec+0x73/0xa0 [ 266.082346][T12732] ___sys_sendmsg+0x2a5/0x360 [ 266.082373][T12732] ? __lock_acquire+0x683/0x2cf0 [ 266.082402][T12732] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.082435][T12732] ? kstrtouint+0x6e/0xe0 [ 266.082481][T12732] ? __fget_files+0x2a/0x420 [ 266.082505][T12732] ? __fget_files+0x3a2/0x420 [ 266.082537][T12732] __sys_sendmmsg+0x273/0x4d0 [ 266.082561][T12732] ? __pfx___sys_sendmmsg+0x10/0x10 [ 266.082597][T12732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 266.082638][T12732] ? ksys_write+0x242/0x270 [ 266.082668][T12732] ? __pfx_ksys_write+0x10/0x10 [ 266.082711][T12732] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.082730][T12732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.082749][T12732] do_syscall_64+0x174/0x580 [ 266.082772][T12732] ? trace_irq_disable+0x3b/0x140 [ 266.082794][T12732] ? clear_bhb_loop+0x40/0x90 [ 266.082817][T12732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.082835][T12732] RIP: 0033:0x7f00f2b9de99 [ 266.082852][T12732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.082867][T12732] RSP: 002b:00007f00f39a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.082898][T12732] RAX: ffffffffffffffda RBX: 00007f00f2e25fa0 RCX: 00007f00f2b9de99 [ 266.082911][T12732] RDX: 0000000000000001 RSI: 0000200000002480 RDI: 0000000000000003 [ 266.082923][T12732] RBP: 00007f00f39a9090 R08: 0000000000000000 R09: 0000000000000000 [ 266.082933][T12732] R10: 000000000400c011 R11: 0000000000000246 R12: 0000000000000001 [ 266.082943][T12732] R13: 00007f00f2e26038 R14: 00007f00f2e25fa0 R15: 00007ffdb2858ea8 [ 266.082973][T12732] [ 266.424778][ T8954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.446987][ T8954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.456608][ T5735] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.563073][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 266.593421][T12744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.634365][T12748] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1731'. [ 266.646391][T12748] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1731'. [ 266.810789][T12755] netlink: 'syz.2.1725': attribute type 5 has an invalid length. [ 266.938060][ T5735] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.186457][ T5735] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.259421][T12778] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20002 [ 267.276960][T12780] sock: sock_timestamping_bind_phc: sock not bind to device [ 267.324510][T12782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1742'. [ 267.614913][T12782] netlink: 'syz.2.1742': attribute type 8 has an invalid length. [ 268.167075][T12808] vlan4: entered promiscuous mode [ 268.172312][T12808] hsr0: entered promiscuous mode [ 268.196029][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1753'. [ 268.209136][T12808] vlan4: entered allmulticast mode [ 268.225087][T12808] hsr0: entered allmulticast mode [ 268.230790][T12808] hsr_slave_0: entered allmulticast mode [ 268.238628][T12808] hsr_slave_1: entered allmulticast mode [ 268.239716][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1753'. [ 268.302891][T12808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1752'. [ 268.309668][T12811] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 268.328950][T12811] bond10 (unregistering): Released all slaves [ 268.744479][T12850] Cannot find map_set index 0 as target [ 269.113201][T12863] ip6tnl1: entered allmulticast mode [ 269.144188][T12874] syzkaller0: entered promiscuous mode [ 269.167681][T12874] syzkaller0: entered allmulticast mode [ 269.289431][T12874] tipc: Enabled bearer , priority 0 [ 269.388308][T12874] tipc: Resetting bearer [ 269.528244][T12892] openvswitch: netlink: IPv4 tun info is not correct [ 269.620977][T12894] netlink: 'syz.5.1768': attribute type 12 has an invalid length. [ 269.771421][T12861] tipc: Resetting bearer [ 269.863736][T12861] tipc: Disabling bearer [ 269.979598][T12907] ip6erspan0: entered allmulticast mode [ 270.146043][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.596529][T12943] can: request_module (can-proto-0) failed. [ 270.609277][T12942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.955998][T12956] netlink: 'syz.2.1781': attribute type 21 has an invalid length. [ 271.017774][T12956] __nla_validate_parse: 6 callbacks suppressed [ 271.017793][T12956] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1781'. [ 271.024970][T12960] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 271.063244][T12956] netlink: 'syz.2.1781': attribute type 5 has an invalid length. [ 271.073073][T12961] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 271.092503][T12956] netlink: 'syz.2.1781': attribute type 6 has an invalid length. [ 271.109089][T12956] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1781'. [ 271.379418][T12969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.503639][T12975] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1786'. [ 271.555932][T12975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.607030][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 271.637109][T12981] netlink: 'syz.2.1787': attribute type 5 has an invalid length. [ 271.664432][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 271.747267][T12981] geneve2: entered promiscuous mode [ 271.762073][T12981] geneve2: entered allmulticast mode [ 271.786216][ T8955] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 45514 - 0 [ 271.815650][ T8955] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 45514 - 0 [ 271.855875][ T8955] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 45514 - 0 [ 271.909476][ T8955] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 45514 - 0 [ 271.941400][T12994] tipc: Started in network mode [ 271.962926][T12994] tipc: Node identity 3611a7f33f77, cluster identity 4711 [ 271.981110][T12994] tipc: Enabled bearer , priority 0 [ 271.993359][T13001] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1792'. [ 271.993464][T12999] syzkaller0: entered promiscuous mode [ 272.021412][T12999] syzkaller0: entered allmulticast mode [ 272.044286][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 272.068620][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 272.086098][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 272.119572][T13007] netlink: 'syz.1.1795': attribute type 1 has an invalid length. [ 272.125610][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 272.167238][T12994] tipc: Resetting bearer [ 272.190536][T12992] tipc: Resetting bearer [ 272.270311][T12992] tipc: Disabling bearer [ 272.932418][T13058] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 273.274032][T13075] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 273.413803][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.424422][T13075] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 273.503722][ T8955] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 273.568725][T13078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.576051][T13078] IPv6: NLM_F_CREATE should be set when creating new route [ 273.583435][T13078] IPv6: NLM_F_CREATE should be set when creating new route [ 273.688371][T13095] ip6tnl1: entered allmulticast mode [ 273.968393][T13106] macsec0: entered promiscuous mode [ 273.982738][T13106] veth1_macvtap: entered promiscuous mode [ 274.246637][T13112] syzkaller0: entered promiscuous mode [ 274.263005][T13112] syzkaller0: entered allmulticast mode [ 274.710810][T13143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.963044][T13159] erspan1: entered allmulticast mode [ 277.147175][T13169] __nla_validate_parse: 48 callbacks suppressed [ 277.147194][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1840'. [ 277.267132][T13177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1841'. [ 277.627448][T13184] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1844'. [ 277.720947][T13186] netlink: 'syz.5.1845': attribute type 1 has an invalid length. [ 277.864481][T13169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.890837][T13169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.986251][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.000616][T13169] veth0_vlan: left promiscuous mode [ 278.233279][T13189] gretap1: entered allmulticast mode [ 278.265221][T13189] bond1: (slave gretap1): making interface the new active one [ 278.274482][T13189] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 278.285382][ T8959] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.295352][ T8959] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.343238][T13199] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 278.381840][ T8959] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.421225][ T8959] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.444637][T13176] lo speed is unknown, defaulting to 1000 [ 279.855554][T13282] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 279.980941][T13291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1863'. [ 279.995615][T13287] netlink: 'syz.1.1862': attribute type 13 has an invalid length. [ 280.141090][T13286] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 280.204041][T13286] bond4 (unregistering): Released all slaves [ 280.290403][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 280.395518][T13313] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 280.444867][T13313] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 280.573175][T13325] netlink: 'syz.5.1870': attribute type 1 has an invalid length. [ 280.665324][T13341] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1873'. [ 280.681450][T13325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.814230][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1874'. [ 280.949432][T13355] team0: entered promiscuous mode [ 280.977554][T13355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.097346][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'. [ 281.112569][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'. [ 281.139740][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1879'. [ 281.209237][T13368] x_tables: duplicate underflow at hook 1 [ 281.241731][T13366] netlink: 'syz.5.1879': attribute type 6 has an invalid length. [ 281.257227][T13383] syzkaller0: entered promiscuous mode [ 281.268470][T13383] syzkaller0: entered allmulticast mode [ 281.288157][T13383] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 281.296276][T13366] netlink: 'syz.5.1879': attribute type 5 has an invalid length. [ 281.312430][T13383] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 281.559155][ T8953] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.609649][ T8953] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.650516][ T8953] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.684798][ T8953] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.288821][T13416] syz_tun: entered promiscuous mode [ 282.335461][T13416] team0: Port device syz_tun added [ 282.534777][T13431] sctp: [Deprecated]: syz.3.1898 (pid 13431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.534777][T13431] Use struct sctp_sack_info instead [ 282.555622][T13431] x_tables: duplicate underflow at hook 2 [ 282.568484][T13434] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 282.741723][T13430] __nla_validate_parse: 4 callbacks suppressed [ 282.741740][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 282.829531][T13432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1895'. [ 283.313209][T13461] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1907'. [ 283.528197][T13474] syzkaller0: entered promiscuous mode [ 283.554832][T13474] syzkaller0: entered allmulticast mode [ 283.570969][T13474] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1908'. [ 284.123584][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 284.211493][ T5735] hid-generic 0005:0458:0007.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 284.474449][T13500] siw: device registration error -23 [ 284.553304][T13502] veth0: entered promiscuous mode [ 284.579592][T13502] netlink: 'syz.3.1918': attribute type 2 has an invalid length. [ 284.634224][T13502] : entered promiscuous mode [ 284.756356][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 284.772259][T13512] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 284.822651][T13501] veth0: left promiscuous mode [ 284.834456][T13519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1922'. [ 285.057981][T13527] xt_hashlimit: overflow, try lower: 6/0 [ 285.382884][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 285.840074][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 287.012143][T13619] x_tables: ip_tables: ah match: only valid for protocol 51 [ 287.162166][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1948'. [ 287.914594][T13665] netlink: 'syz.1.1960': attribute type 6 has an invalid length. [ 288.030393][T13672] __nla_validate_parse: 6 callbacks suppressed [ 288.030411][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1961'. [ 288.087082][T13677] netlink: 159 bytes leftover after parsing attributes in process `syz.2.1962'. [ 288.578251][T13691] openvswitch: netlink: IPv4 tun info is not correct [ 289.239010][T13726] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.254058][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.264023][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.274625][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.286342][T13725] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.312183][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.352565][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.383762][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 289.821431][T13744] syz.3.1983: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 289.844030][T13751] team1: entered promiscuous mode [ 289.853152][T13751] team1: entered allmulticast mode [ 289.859122][T13751] 8021q: adding VLAN 0 to HW filter on device team1 [ 289.872612][T13744] CPU: 0 UID: 0 PID: 13744 Comm: syz.3.1983 Not tainted syzkaller #0 PREEMPT(full) [ 289.872639][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.872650][T13744] Call Trace: [ 289.872658][T13744] [ 289.872666][T13744] dump_stack_lvl+0xe8/0x150 [ 289.872701][T13744] warn_alloc+0x24c/0x270 [ 289.872728][T13744] ? stack_depot_save_flags+0x33/0x800 [ 289.872754][T13744] ? __pfx_warn_alloc+0x10/0x10 [ 289.872780][T13744] ? kasan_save_track+0x3e/0x80 [ 289.872802][T13744] ? __kasan_kmalloc+0x93/0xb0 [ 289.872829][T13744] ? xsk_setsockopt+0x52a/0x960 [ 289.872852][T13744] ? do_sock_setsockopt+0x17c/0x1b0 [ 289.872879][T13744] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 289.872905][T13744] ? do_syscall_64+0x174/0x580 [ 289.872932][T13744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.872962][T13744] __vmalloc_node_range_noprof+0x12c/0x1730 [ 289.873015][T13744] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 289.873042][T13744] ? __kasan_kmalloc+0x93/0xb0 [ 289.873069][T13744] ? __kmalloc_cache_noprof+0x32d/0x660 [ 289.873094][T13744] ? __kmalloc_cache_noprof+0x150/0x660 [ 289.873122][T13744] vmalloc_user_noprof+0xad/0xe0 [ 289.873145][T13744] ? xskq_create+0xbf/0x170 [ 289.873172][T13744] xskq_create+0xbf/0x170 [ 289.873199][T13744] xsk_init_queue+0x8a/0xe0 [ 289.873223][T13744] xsk_setsockopt+0x52a/0x960 [ 289.873243][T13744] ? __fget_files+0x2a/0x420 [ 289.873268][T13744] ? __pfx_xsk_setsockopt+0x10/0x10 [ 289.873292][T13744] ? __pfx_aa_sk_perm+0x10/0x10 [ 289.873324][T13744] ? aa_sock_opt_perm+0xff/0x1a0 [ 289.873346][T13744] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 289.873365][T13744] ? __pfx_xsk_setsockopt+0x10/0x10 [ 289.873389][T13744] do_sock_setsockopt+0x17c/0x1b0 [ 289.873423][T13744] __x64_sys_setsockopt+0x13d/0x1b0 [ 289.873454][T13744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.873483][T13744] do_syscall_64+0x174/0x580 [ 289.873510][T13744] ? trace_irq_disable+0x3b/0x140 [ 289.873532][T13744] ? clear_bhb_loop+0x40/0x90 [ 289.873554][T13744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.873575][T13744] RIP: 0033:0x7fe412d9de99 [ 289.873594][T13744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.873611][T13744] RSP: 002b:00007fe413ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.873630][T13744] RAX: ffffffffffffffda RBX: 00007fe413025fa0 RCX: 00007fe412d9de99 [ 289.873642][T13744] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 289.873653][T13744] RBP: 00007fe412e33eaf R08: 0000000000000004 R09: 0000000000000000 [ 289.873663][T13744] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.873674][T13744] R13: 00007fe413026038 R14: 00007fe413025fa0 R15: 00007fff4cf93938 [ 289.873701][T13744] [ 289.873726][T13744] Mem-Info: [ 289.961353][T13751] team2: entered promiscuous mode [ 290.030417][T13744] active_anon:6350 inactive_anon:0 isolated_anon:0 [ 290.030417][T13744] active_file:0 inactive_file:43219 isolated_file:0 [ 290.030417][T13744] unevictable:768 dirty:102 writeback:0 [ 290.030417][T13744] slab_reclaimable:11195 slab_unreclaimable:137498 [ 290.030417][T13744] mapped:35690 shmem:1296 pagetables:1419 [ 290.030417][T13744] sec_pagetables:0 bounce:0 [ 290.030417][T13744] kernel_misc_reclaimable:0 [ 290.030417][T13744] free:1270400 free_pcp:15792 free_cma:0 [ 290.061317][T13751] team2: entered allmulticast mode [ 290.089779][T13744] Node 0 active_anon:25500kB inactive_anon:0kB active_file:0kB inactive_file:172680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142760kB dirty:404kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15124kB pagetables:5544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 290.111205][T13751] 8021q: adding VLAN 0 to HW filter on device team2 [ 290.173150][T13744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 290.305455][T13752] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 290.305507][T13744] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.352890][T13744] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 290.361104][T13744] Node 0 DMA32 free:1116120kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25600kB inactive_anon:0kB active_file:0kB inactive_file:172680kB unevictable:1536kB writepending:404kB zspages:0kB present:3129332kB managed:2548764kB mlocked:0kB bounce:0kB free_pcp:63080kB local_pcp:26032kB free_cma:0kB [ 290.431415][T13744] lowmem_reserve[]: 0 0 0 0 0 [ 290.449653][T13744] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.533113][T13744] lowmem_reserve[]: 0 0 0 0 0 [ 290.548833][T13744] Node 1 Normal free:3950660kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.631806][T13744] lowmem_reserve[]: 0 0 0 0 0 [ 290.646072][T13744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 290.669421][T13744] Node 0 DMA32: 832*4kB (ME) 554*8kB (UM) 276*16kB (UM) 475*32kB (UME) 86*64kB (UME) 33*128kB (UM) 16*256kB (UM) 5*512kB (UM) 5*1024kB (UE) 5*2048kB (UME) 258*4096kB (UM) = 1115888kB [ 290.670743][T13767] syzkaller0: entered promiscuous mode [ 290.688513][T13744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 290.705965][T13744] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 4*16kB (UM) 11*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 963*4096kB (UM) = 3950660kB [ 290.724620][T13744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.734613][T13767] syzkaller0: entered allmulticast mode [ 290.747497][T13744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.789349][T13744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.798700][T13774] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 290.815631][T13744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.837196][T13744] 44561 total pagecache pages [ 290.846742][T13744] 0 pages in swap cache [ 290.855515][T13744] Free swap = 124996kB [ 290.860326][T13744] Total swap = 124996kB [ 290.865159][T13744] 2097051 pages RAM [ 290.869929][T13744] 0 pages HighMem/MovableOnly [ 290.874747][T13744] 428178 pages reserved [ 290.879448][T13744] 0 pages cma reserved [ 290.955005][T13779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.657484][T13804] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 291.691023][T13804] bond10 (unregistering): Released all slaves [ 291.789420][T13803] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 291.804104][T13821] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 292.094173][T13839] vlan1: entered allmulticast mode [ 292.116710][T13839] gretap0: entered allmulticast mode [ 292.230569][T13846] syzkaller0: entered promiscuous mode [ 292.243070][T13846] syzkaller0: entered allmulticast mode [ 292.251309][T13841] xt_CT: No such helper "snmp_trap" [ 292.608686][T13856] xt_hashlimit: size too large, truncated to 1048576 [ 293.159790][T13898] sctp: [Deprecated]: syz.1.2016 (pid 13898) Use of int in max_burst socket option. [ 293.159790][T13898] Use struct sctp_assoc_value instead [ 293.440222][T13913] ip6tnl0: Caught tx_queue_len zero misconfig [ 293.644898][T13931] erspan0: left allmulticast mode [ 293.733482][T13931] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.819628][T13942] __nla_validate_parse: 9 callbacks suppressed [ 293.819648][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 293.999948][T13931] bond3: left allmulticast mode [ 294.005151][T13931] veth0_to_bond: left allmulticast mode [ 294.014432][T13931] ip6erspan0: left allmulticast mode [ 294.069807][T13931] bridge2: left allmulticast mode [ 294.095474][T13931] vlan4: left allmulticast mode [ 294.101624][T13931] hsr0: left allmulticast mode [ 294.108072][T13931] hsr_slave_0: left allmulticast mode [ 294.114572][T13931] hsr_slave_1: left allmulticast mode [ 294.122685][T13931] geneve2: left allmulticast mode [ 294.130564][T13931] ip6tnl1: left allmulticast mode [ 294.163817][ T1128] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.182885][ T1128] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.194036][ T1128] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 45514 - 0 [ 294.223058][ T1128] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.243849][ T1128] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.253513][ T1128] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 45514 - 0 [ 294.275680][ T1128] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.330528][ T1128] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.380893][ T1128] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 45514 - 0 [ 294.427680][ T1128] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.461227][ T1128] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.471772][ T1128] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 45514 - 0 [ 294.542357][T13971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2026'. [ 294.647858][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 294.727752][T13976] lo speed is unknown, defaulting to 1000 [ 295.063419][T13988] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 295.082834][T13988] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 295.091371][T13988] veth0_virt_wifi: entered allmulticast mode [ 295.106205][T13988] veth0_virt_wifi: entered promiscuous mode [ 295.119208][T13988] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 295.126512][T13988] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 295.360218][T14002] xt_TPROXY: Can be used only with -p tcp or -p udp [ 295.394627][T14005] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 295.475091][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2035'. [ 295.499122][T14005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 295.551503][T14012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 295.564348][T14008] bond8: (slave veth7): Enslaving as an active interface with a down link [ 295.597072][T13999] bond8: (slave veth9): Enslaving as an active interface with a down link [ 295.612266][T14005] bond8: entered allmulticast mode [ 295.759488][T14030] erspan0: left promiscuous mode [ 295.814790][T14030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.854429][T14030] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.949062][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 295.971457][T14030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.992342][T14030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.040294][T14030] veth1_vlan: left promiscuous mode [ 296.048775][T14030] veth0_vlan: left promiscuous mode [ 296.057144][T14030] veth0_vlan: entered promiscuous mode [ 296.067995][T14030] veth1_vlan: entered promiscuous mode [ 296.092090][T14030] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 296.106212][T14030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.119739][T14030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.140387][T14030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.157544][T14030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.168484][T14030] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 296.229491][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.236748][ T8950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.260845][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 296.267174][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.276992][ T8950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.313094][ T8956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.325583][ T8956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.334731][ T8956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.351859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.379563][ T8956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.389934][T14046] syzkaller0: entered promiscuous mode [ 296.395704][T14046] syzkaller0: entered allmulticast mode [ 296.466168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.519248][T14053] syzkaller0: entered promiscuous mode [ 296.532652][T14053] syzkaller0: entered allmulticast mode [ 296.576383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.588610][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 296.652740][T14065] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 296.667443][T14066] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 296.768937][T14076] sctp: [Deprecated]: syz.2.2046 (pid 14076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.768937][T14076] Use struct sctp_sack_info instead [ 296.898015][T14083] syzkaller0: entered promiscuous mode [ 296.903644][T14083] syzkaller0: entered allmulticast mode [ 296.915597][T14083] tipc: Enabled bearer , priority 0 [ 296.928320][T14079] tipc: Resetting bearer [ 296.966865][T14079] tipc: Disabling bearer [ 297.075138][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 297.245437][T14085] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 297.411405][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2057'. [ 297.451518][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2057'. [ 297.503413][T14111] syzkaller0: entered promiscuous mode [ 297.509445][T14111] syzkaller0: entered allmulticast mode [ 297.531120][T14111] tipc: Enabled bearer , priority 0 [ 297.577194][T14110] tipc: Resetting bearer [ 297.608816][T14110] tipc: Disabling bearer [ 297.641013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.655313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.098717][ T29] audit: type=1804 audit(1784512563.710:11): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2064" name="/newroot/434/cgroup.controllers" dev="tmpfs" ino=2245 res=1 errno=0 [ 298.168557][ T29] audit: type=1800 audit(1784512563.730:12): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2064" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 298.446516][T14167] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 298.467183][T14167] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.626270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.350092][T14182] __nla_validate_parse: 2 callbacks suppressed [ 299.350110][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'. [ 299.368652][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'. [ 299.550079][T14192] netlink: 'syz.1.2077': attribute type 4 has an invalid length. [ 299.780330][T14199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2079'. [ 299.883571][T14201] netlink: 'syz.2.2080': attribute type 21 has an invalid length. [ 299.894488][T14201] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.995632][T14203] lo speed is unknown, defaulting to 1000 [ 300.128074][T14216] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 300.199378][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 300.325370][T14203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2082'. [ 301.241138][T14239] netlink: 'syz.2.2091': attribute type 16 has an invalid length. [ 301.264457][T14239] netlink: 'syz.2.2091': attribute type 16 has an invalid length. [ 301.454160][T14247] netlink: 'syz.1.2094': attribute type 62 has an invalid length. [ 301.888334][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'. [ 301.899950][T14262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'. [ 301.918100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.554574][T14286] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004 [ 302.836986][T14275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.521301][T14318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2115'. [ 303.698452][T14330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.720224][T14330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.749087][T14330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.921722][T14346] netlink: 'syz.2.2121': attribute type 9 has an invalid length. [ 303.976079][T14349] netlink: 'syz.1.2122': attribute type 6 has an invalid length. [ 303.998394][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 304.264855][ T5621] Bluetooth: hci5: link tx timeout [ 304.271949][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.309032][T14361] team0 (unregistering): Port device team_slave_0 removed [ 304.313282][T14370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2126'. [ 304.329816][T14361] team0 (unregistering): Port device team_slave_1 removed [ 304.358812][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'. [ 304.371121][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 304.383297][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 304.404593][ T5622] Bluetooth: hci5: link tx timeout [ 304.410710][ T5622] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.428896][ T5622] Bluetooth: hci5: link tx timeout [ 304.434951][ T5622] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.600029][T14388] ipt_REJECT: TCP_RESET invalid for non-tcp [ 304.615459][T14392] ipt_REJECT: TCP_RESET invalid for non-tcp [ 304.641659][ T5622] Bluetooth: hci5: link tx timeout [ 304.646908][ T5622] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.349740][ T5622] Bluetooth: hci5: link tx timeout [ 305.359749][ T5622] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.408553][ T5622] Bluetooth: hci5: link tx timeout [ 305.413821][ T5622] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.668574][ T5622] Bluetooth: hci5: link tx timeout [ 305.676893][ T5622] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.750312][T14451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.138693][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2150'. [ 306.298810][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 306.309352][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 306.332826][ T5622] Bluetooth: hci5: link tx timeout [ 306.628464][T14503] netlink: 'syz.3.2159': attribute type 2 has an invalid length. [ 306.761064][T14511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2162'. [ 307.143639][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 307.168713][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 307.219869][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 307.310324][T14536] netlink: 'syz.1.2171': attribute type 2 has an invalid length. [ 307.319646][T14536] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2171'. [ 307.364759][T14539] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.661589][T14556] veth0: entered promiscuous mode [ 307.673460][T14556] veth0: left promiscuous mode [ 307.758911][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.769611][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.779574][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.799900][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.810500][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.994360][T14571] netlink: 'syz.2.2179': attribute type 8 has an invalid length. [ 308.021002][T14567] veth0: Caught tx_queue_len zero misconfig [ 308.027372][T14574] netlink: 'syz.2.2179': attribute type 8 has an invalid length. [ 308.412013][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.429864][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.440827][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.457346][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.472065][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.655201][T14558] lo speed is unknown, defaulting to 1000 [ 308.895163][T14607] lo speed is unknown, defaulting to 1000 [ 309.333263][T14634] netlink: 'syz.2.2191': attribute type 10 has an invalid length. [ 309.338469][T14590] lo speed is unknown, defaulting to 1000 [ 309.452108][T14634] bond5: (slave dummy0): Releasing active interface [ 309.480250][T14634] team0: Port device dummy0 added [ 309.651174][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.658852][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.666553][T14558] bridge_slave_0: entered allmulticast mode [ 309.674302][T14558] bridge_slave_0: entered promiscuous mode [ 309.704897][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.719103][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.742951][T14558] bridge_slave_1: entered allmulticast mode [ 309.777237][T14558] bridge_slave_1: entered promiscuous mode [ 309.907091][ T5621] Bluetooth: hci6: command tx timeout [ 310.041732][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.063082][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.172120][T14558] team0: Port device team_slave_0 added [ 310.231319][T14558] team0: Port device team_slave_1 added [ 310.393013][T14687] bond4: option min_links: invalid value (18446744073709551612) [ 310.405933][T14687] bond4: option min_links: allowed values 0 - 2147483647 [ 310.435517][T14687] bond4 (unregistering): Released all slaves [ 310.535070][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.546753][ T5621] Bluetooth: hci7: command tx timeout [ 310.567336][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.593774][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.607883][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.614977][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.642926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.646002][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.668119][T14686] debugfs: '!' already exists in 'ieee80211' [ 310.686737][T14692] lo speed is unknown, defaulting to 1000 [ 310.930065][T14558] hsr_slave_0: entered promiscuous mode [ 310.936896][T14558] hsr_slave_1: entered promiscuous mode [ 310.944613][T14558] debugfs: 'hsr0' already exists in 'hsr' [ 310.951060][T14558] Cannot create hsr debugfs directory [ 310.987662][ T7769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.999776][ T7769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.197975][T14590] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.209741][T14590] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.218825][T14590] bridge_slave_0: entered allmulticast mode [ 311.230433][T14590] bridge_slave_0: entered promiscuous mode [ 311.257115][T14718] lo speed is unknown, defaulting to 1000 [ 311.264809][T14590] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.277062][T14590] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.284494][T14590] bridge_slave_1: entered allmulticast mode [ 311.299620][T14590] bridge_slave_1: entered promiscuous mode [ 311.417838][T14725] sock: sock_timestamping_bind_phc: sock not bind to device [ 311.561418][T14590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.603338][T14590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.669084][T14590] team0: Port device team_slave_0 added [ 311.706711][T14590] team0: Port device team_slave_1 added [ 311.778874][T14590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.788229][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.815339][T14590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.842672][T14590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.856792][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.898291][T14590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.987820][ T5621] Bluetooth: hci6: command tx timeout [ 312.193673][T14736] netlink: 'syz.3.2211': attribute type 2 has an invalid length. [ 312.226208][T14736] __nla_validate_parse: 37 callbacks suppressed [ 312.226228][T14736] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2211'. [ 312.262293][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 312.585005][T14590] hsr_slave_0: entered promiscuous mode [ 312.598500][T14590] hsr_slave_1: entered promiscuous mode [ 312.611637][T14590] debugfs: 'hsr0' already exists in 'hsr' [ 312.625279][T14590] Cannot create hsr debugfs directory [ 312.632691][ T5621] Bluetooth: hci7: command tx timeout [ 312.743521][T14558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.783305][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.800473][T14558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.828411][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.937261][T14558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 312.988594][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.007146][T14558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.032325][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.685311][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.759636][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.773553][T14590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.786528][T14590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.801475][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.808602][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.832229][T14722] Set syz1 is full, maxelem 65536 reached [ 313.850628][T14590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.862465][T14590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.871328][T14590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.893474][T14590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.915481][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.922706][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.934417][T14590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.949535][T14772] netlink: 'syz.1.2219': attribute type 32 has an invalid length. [ 313.951575][T14590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.076241][ T5621] Bluetooth: hci6: command tx timeout [ 314.222327][T14590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.255233][T14590] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.271547][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.278813][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.322122][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.329404][ T8952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.615258][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2222'. [ 314.706638][ T5621] Bluetooth: hci7: command tx timeout [ 314.932679][T14558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.232244][T14829] pimreg: entered allmulticast mode [ 315.260430][T14590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.322733][T14826] pimreg: left allmulticast mode [ 315.613767][T14558] veth0_vlan: entered promiscuous mode [ 315.647708][T14558] veth1_vlan: entered promiscuous mode [ 315.774889][T14558] veth0_macvtap: entered promiscuous mode [ 315.812727][T14558] veth1_macvtap: entered promiscuous mode [ 315.888119][T14558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.933006][T14558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.030852][ T7769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.044900][ T7769] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.083182][ T7769] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.107773][ T7769] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.146276][ T5621] Bluetooth: hci6: command tx timeout [ 316.541690][T14864] syzkaller0: entered promiscuous mode [ 316.548919][T14864] syzkaller0: entered allmulticast mode [ 316.644088][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'. [ 316.796465][ T5621] Bluetooth: hci7: command tx timeout [ 317.033200][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.052331][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.887218][T14891] veth11: entered allmulticast mode [ 318.934761][T14891] bond9: (slave veth11): Enslaving as an active interface with an up link [ 318.959980][T14893] bond9 (unregistering): (slave veth11): Releasing backup interface [ 318.979890][T14893] bond9 (unregistering): Released all slaves [ 319.019435][T14897] syzkaller0: entered promiscuous mode [ 319.025651][T14897] syzkaller0: entered allmulticast mode [ 319.203576][ T776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.227510][T14590] veth0_vlan: entered promiscuous mode [ 319.257392][ T776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.483013][T14590] veth1_vlan: entered promiscuous mode [ 319.498039][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.544962][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.649208][T14590] veth0_macvtap: entered promiscuous mode [ 319.661380][T14590] veth1_macvtap: entered promiscuous mode [ 319.728859][T14590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.782358][T14590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.857714][ T7769] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.903097][ T7769] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.922906][ T7769] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.943225][ T7769] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.055462][T14966] macsec1: entered promiscuous mode [ 320.107119][T14971] netlink: 'syz.1.2246': attribute type 30 has an invalid length. [ 320.323751][T14968] syzkaller0: entered promiscuous mode [ 320.329795][T14968] syzkaller0: entered allmulticast mode [ 320.494059][T14977] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 320.581921][T14984] netlink: 'syz.2.2249': attribute type 21 has an invalid length. [ 321.063048][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2251'. [ 322.637670][ T8958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.638903][T14984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2249'. [ 322.645936][ T8958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.669219][T14984] netlink: 'syz.2.2249': attribute type 1 has an invalid length. [ 322.828314][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2254'. [ 322.937319][T15014] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2257'. [ 323.428071][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.989185][T14992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.093423][ T7769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.103009][ T7769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.361055][T15039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 324.561267][T15046] nbd: must specify at least one socket [ 324.882292][T15058] can: request_module (can-proto-0) failed. [ 324.904283][T15064] batman_adv: batadv0: Adding interface: dummy0 [ 324.916084][T15064] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.943635][T15064] batman_adv: batadv0: Interface activated: dummy0 [ 324.970107][T15067] sctp: [Deprecated]: syz.3.2270 (pid 15067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.970107][T15067] Use struct sctp_sack_info instead [ 325.020613][T15058] batadv0: mtu less than device minimum [ 325.031016][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.044577][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.056381][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.068183][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.079991][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.091760][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.103282][T15067] sctp: [Deprecated]: syz.3.2270 (pid 15067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.103282][T15067] Use struct sctp_sack_info instead [ 325.103427][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.131430][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.143272][T15058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.150555][T15067] sctp: [Deprecated]: syz.3.2270 (pid 15067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.150555][T15067] Use struct sctp_sack_info instead [ 325.477700][T15089] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2275'. [ 325.518228][T15086] syzkaller0: entered promiscuous mode [ 325.525385][T15086] syzkaller0: entered allmulticast mode [ 325.527542][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2274'. [ 325.899017][T15103] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2278'. [ 326.045124][T15110] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2280'. [ 326.204406][T15116] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2283'. [ 359.266522][ C1] net_ratelimit: 12 callbacks suppressed [ 359.266545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.798011][ T5621] Bluetooth: hci5: link tx timeout [ 367.803166][ T5621] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 369.826016][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 372.430606][T15261] dummy0: entered allmulticast mode [ 372.505351][ T5621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 372.526527][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 372.537408][ T5621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 372.547110][ T5621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 372.563121][ T5621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 372.773350][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2296'. [ 372.965113][T15292] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2298'. [ 373.198110][T15269] lo speed is unknown, defaulting to 1000 [ 373.213412][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2299'. [ 373.248047][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 373.261590][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 373.467926][T15303] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 373.507150][T15303] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 373.512405][T15305] netlink: zone id is out of range [ 373.526372][T15305] netlink: zone id is out of range [ 373.576450][T15305] netlink: zone id is out of range [ 373.588212][T15305] netlink: zone id is out of range [ 373.803041][T15319] 8021q: VLANs not supported on xfrm0 [ 373.818326][T15269] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.825531][T15269] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.833228][T15269] bridge_slave_0: entered allmulticast mode [ 373.840238][T15269] bridge_slave_0: entered promiscuous mode [ 373.850313][T15269] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.857783][T15269] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.866631][T15269] bridge_slave_1: entered allmulticast mode [ 373.874282][T15269] bridge_slave_1: entered promiscuous mode [ 373.907704][T15269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.919338][T15269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.948204][T15269] team0: Port device team_slave_0 added [ 373.956201][T15269] team0: Port device team_slave_1 added [ 373.980094][T15269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.989221][T15269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.016956][T15269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.029490][T15269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.036653][T15269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.062818][T15269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.108217][T15269] hsr_slave_0: entered promiscuous mode [ 374.114615][T15269] hsr_slave_1: entered promiscuous mode [ 374.121110][T15269] debugfs: 'hsr0' already exists in 'hsr' [ 374.127166][T15269] Cannot create hsr debugfs directory [ 374.626765][ T5621] Bluetooth: hci8: command tx timeout [ 375.604253][T15274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.634654][T15269] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 375.700101][T15269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.739200][T15269] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 375.791983][T15269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.802496][T15329] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 375.811927][T15269] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 375.828843][T15269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.841529][T15269] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 375.867142][T15269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.937611][T15337] netlink: 'syz.1.2306': attribute type 7 has an invalid length. [ 376.003012][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 376.017243][T15338] ipvlan2: entered promiscuous mode [ 376.025935][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 376.028982][T15338] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 376.081901][T15344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2310'. [ 376.093195][T15338] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 376.104184][T15338] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 376.129083][T15347] GUP no longer grows the stack in syz.1.2311 (15347): 200000003000-20000000a000 (200000001000) [ 376.136172][T15344] netlink: 'syz.3.2310': attribute type 9 has an invalid length. [ 376.152402][T15347] CPU: 1 UID: 0 PID: 15347 Comm: syz.1.2311 Not tainted syzkaller #0 PREEMPT(full) [ 376.152430][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.152458][T15347] Call Trace: [ 376.152467][T15347] [ 376.152475][T15347] dump_stack_lvl+0xe8/0x150 [ 376.152511][T15347] __get_user_pages+0x238c/0x2720 [ 376.152545][T15347] ? __gup_longterm_locked+0xc3b/0x15c0 [ 376.152596][T15347] __gup_longterm_locked+0xd52/0x15c0 [ 376.152621][T15347] ? lock_acquire+0x106/0x350 [ 376.152666][T15347] gup_fast_fallback+0x1d8c/0x20e0 [ 376.152685][T15347] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.152748][T15347] ? __pfx_gup_fast_fallback+0x10/0x10 [ 376.152771][T15347] ? is_valid_gup_args+0x11f/0x200 [ 376.152793][T15347] ? get_user_pages_fast+0x4d/0xb0 [ 376.152816][T15347] __iov_iter_get_pages_alloc+0x378/0xa40 [ 376.152851][T15347] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 376.152886][T15347] iov_iter_get_pages2+0x5e/0xa0 [ 376.152917][T15347] __se_sys_vmsplice+0x7b5/0x1660 [ 376.152965][T15347] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 376.152996][T15347] ? __pfx_futex_wake+0x10/0x10 [ 376.153085][T15347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.153108][T15347] do_syscall_64+0x174/0x580 [ 376.153135][T15347] ? trace_irq_disable+0x3b/0x140 [ 376.153160][T15347] ? clear_bhb_loop+0x40/0x90 [ 376.153184][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.153204][T15347] RIP: 0033:0x7ff76b39de99 [ 376.153224][T15347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.153241][T15347] RSP: 002b:00007ff76c17f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 376.153269][T15347] RAX: ffffffffffffffda RBX: 00007ff76b625fa0 RCX: 00007ff76b39de99 [ 376.153284][T15347] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 376.153297][T15347] RBP: 00007ff76b433eaf R08: 0000000000000000 R09: 0000000000000000 [ 376.153309][T15347] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 376.153321][T15347] R13: 00007ff76b626038 R14: 00007ff76b625fa0 R15: 00007ffff8235d78 [ 376.153355][T15347] [ 376.163825][T15344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2310'. [ 376.168313][T15347] lo: Caught tx_queue_len zero misconfig [ 376.641383][T15269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.706993][ T5621] Bluetooth: hci8: command tx timeout [ 376.716657][T15269] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.781361][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.788662][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.852322][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.859575][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.900615][T15373] gtp0: entered allmulticast mode [ 377.029668][T15379] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 377.055081][T15377] syzkaller0: entered promiscuous mode [ 377.068621][T15377] syzkaller0: entered allmulticast mode [ 377.129300][T15377] tipc: Enabled bearer , priority 0 [ 377.181317][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2320'. [ 377.320637][T15375] tipc: Resetting bearer [ 377.341655][T15375] tipc: Disabling bearer [ 377.679587][T15269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.785639][T15407] netlink: 'syz.2.2324': attribute type 13 has an invalid length. [ 377.802953][T15409] __nla_validate_parse: 2 callbacks suppressed [ 377.802972][T15409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2326'. [ 377.818839][T15409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2326'. [ 377.944366][T15269] veth0_vlan: entered promiscuous mode [ 377.957462][T15269] veth1_vlan: entered promiscuous mode [ 377.998985][T15269] veth0_macvtap: entered promiscuous mode [ 378.009427][T15269] veth1_macvtap: entered promiscuous mode [ 378.026662][T15269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.040796][T15269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.054239][ T8952] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.063868][ T8952] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.078918][ T8952] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.088623][ T8952] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.233230][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.241519][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.307965][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.317524][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.354983][T15415] syzkaller0: entered promiscuous mode [ 378.364369][T15415] syzkaller0: entered allmulticast mode [ 378.475033][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.486234][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.592383][T15419] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 378.643077][T15419] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 378.787131][ T5621] Bluetooth: hci8: command tx timeout [ 378.848438][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'. [ 379.305429][T15443] netlink: 'syz.8.2335': attribute type 1 has an invalid length. [ 379.319879][T15454] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2338'. [ 379.323591][T15443] netlink: 'syz.8.2335': attribute type 2 has an invalid length. [ 379.572909][T15460] netlink: 'syz.3.2339': attribute type 13 has an invalid length. [ 379.779226][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 379.797365][T15465] syzkaller0: entered promiscuous mode [ 379.806033][T15465] syzkaller0: entered allmulticast mode [ 379.912360][T15469] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2343'. [ 379.934981][T15469] macvlan0: Caught tx_queue_len zero misconfig [ 380.004778][T15479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2346'. [ 380.080662][T15482] ipvlan0: left allmulticast mode [ 380.097336][T15482] netlink: 'syz.1.2347': attribute type 49 has an invalid length. [ 380.130717][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2346'. [ 380.221857][T15487] netlink: 'syz.2.2349': attribute type 6 has an invalid length. [ 380.280981][T15488] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2348'. [ 380.306930][T15497] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2348'. [ 380.338201][T15496] bond0: entered promiscuous mode [ 380.362601][T15496] bond_slave_0: entered promiscuous mode [ 380.376412][T15496] bond_slave_1: entered promiscuous mode [ 380.416229][T15496] bond0: left promiscuous mode [ 380.425514][T15496] bond_slave_0: left promiscuous mode [ 380.441243][T15496] bond_slave_1: left promiscuous mode [ 380.484473][T15488] gretap0: entered promiscuous mode [ 380.866414][ T5621] Bluetooth: hci8: command tx timeout [ 380.924376][T15526] syzkaller0: entered promiscuous mode [ 380.959765][T15526] syzkaller0: entered allmulticast mode [ 381.683455][T15571] netlink: 'syz.8.2369': attribute type 3 has an invalid length. [ 382.155419][T15591] syzkaller0: entered promiscuous mode [ 382.177246][T15591] syzkaller0: entered allmulticast mode [ 382.299602][T15594] tc_dump_action: action bad kind [ 382.547697][T15610] lo speed is unknown, defaulting to 1000 [ 382.743010][T11659] hid-generic 0005:16C0:0007.0004: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 382.767406][T15609] Cannot find add_set index 1 as target [ 383.203778][T15649] __nla_validate_parse: 11 callbacks suppressed [ 383.203796][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2388'. [ 383.268489][T15646] syzkaller0: entered promiscuous mode [ 383.294365][T15646] syzkaller0: entered allmulticast mode [ 383.585940][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.731459][T15661] lo speed is unknown, defaulting to 1000 [ 384.208859][T15700] syzkaller0: entered promiscuous mode [ 384.271079][T15700] syzkaller0: entered allmulticast mode [ 384.323181][T15700] tipc: Enabled bearer , priority 0 [ 384.360831][T15692] tipc: Resetting bearer [ 384.380403][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2398'. [ 384.477230][T15692] tipc: Disabling bearer [ 384.548112][ T5621] Bluetooth: hci8: command tx timeout [ 384.550834][T15683] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2395'. [ 384.700585][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2398'. [ 385.000560][T15727] sctp: [Deprecated]: syz.8.2402 (pid 15727) Use of int in max_burst socket option. [ 385.000560][T15727] Use struct sctp_assoc_value instead [ 385.087517][T15732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 385.089220][T15729] syzkaller0: entered promiscuous mode [ 385.147334][T15729] syzkaller0: entered allmulticast mode [ 385.328353][T15744] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 385.522126][T15755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2408'. [ 385.709300][T15755] bond5: (slave bridge3): making interface the new active one [ 385.725013][T15755] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 385.764765][T15765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2412'. [ 385.779828][T15765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2412'. [ 385.804827][T15767] IPv6: addrconf: prefix option has invalid lifetime [ 386.018793][T15775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2415'. [ 386.054105][T15775] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2415'. [ 386.250060][T15792] bridge0: port 2(syz_tun) entered blocking state [ 386.273431][T15792] bridge0: port 2(syz_tun) entered disabled state [ 386.384620][T15792] syz_tun: entered promiscuous mode [ 386.855672][T15823] netlink: 'syz.2.2425': attribute type 4 has an invalid length. [ 386.978007][T15830] veth1_to_bond: entered allmulticast mode [ 387.007744][T15830] veth1_to_bond: entered promiscuous mode [ 387.022568][T15831] siw: device registration error -23 [ 387.029330][T15829] veth1_to_bond: left promiscuous mode [ 387.046879][T15829] veth1_to_bond: left allmulticast mode [ 387.583461][T15861] bridge1: entered allmulticast mode [ 387.812258][T15888] geneve1: Caught tx_queue_len zero misconfig [ 388.000946][T15902] sock: sock_set_timeout: `syz.6.2448' (pid 15902) tries to set negative timeout [ 388.272763][T15920] __nla_validate_parse: 8 callbacks suppressed [ 388.272781][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'. [ 388.425645][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2455'. [ 388.591196][T15933] bridge1: port 1(erspan0) entered blocking state [ 388.604896][T15933] bridge1: port 1(erspan0) entered disabled state [ 388.618632][T15933] erspan0: entered allmulticast mode [ 388.628932][T15933] erspan0: entered promiscuous mode [ 388.635886][T15933] bridge1: port 1(erspan0) entered blocking state [ 388.642471][T15933] bridge1: port 1(erspan0) entered forwarding state [ 388.655310][T15935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.896067][T15945] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2459'. [ 388.913468][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 389.067602][T15958] syz_tun: entered allmulticast mode [ 389.201580][T15958] syz_tun: left allmulticast mode [ 389.326307][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 389.574310][T15985] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 390.083767][T15999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2478'. [ 390.502456][T16025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.547346][T16017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.591241][T16023] xt_hashlimit: size too large, truncated to 1048576 [ 391.139335][T16048] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 391.159306][T16048] bond3: (slave veth0_to_bond): Releasing active interface [ 391.177408][T16048] veth0_to_bond: left promiscuous mode [ 391.209292][T16048] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 391.290262][T16057] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 391.305420][T16057] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 391.318498][T16057] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 391.440255][T16063] bridge6: entered promiscuous mode [ 391.448124][T16063] bridge6: entered allmulticast mode [ 391.458904][T16063] team0: Port device bridge6 added [ 391.782623][T16082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2498'. [ 391.821971][T16077] lo speed is unknown, defaulting to 1000 [ 391.857957][T16092] netlink: 'syz.2.2498': attribute type 1 has an invalid length. [ 392.004806][T16102] netlink: 'syz.3.2501': attribute type 1 has an invalid length. [ 392.022310][T16080] dvmrp0: entered allmulticast mode [ 392.029647][T16102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2501'. [ 392.049087][T16101] netlink: 'syz.3.2501': attribute type 1 has an invalid length. [ 392.058146][T16101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2501'. [ 392.098249][T16092] 8021q: adding VLAN 0 to HW filter on device bond11 [ 392.120969][T16092] bond10: (slave bond11): making interface the new active one [ 392.129912][T16092] bond10: (slave bond11): Enslaving as an active interface with an up link [ 392.151102][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 392.167960][T16095] syzkaller0: entered promiscuous mode [ 392.183868][T16095] syzkaller0: entered allmulticast mode [ 392.271159][T16117] ip6tnl2: entered allmulticast mode [ 392.290185][T16095] netlink: 'syz.6.2500': attribute type 1 has an invalid length. [ 392.451126][T16127] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.568874][T16127] veth1_macvtap: left promiscuous mode [ 392.700583][T16132] netlink: 'syz.3.2509': attribute type 58 has an invalid length. [ 392.720619][T16123] lo speed is unknown, defaulting to 1000 [ 392.740774][T16134] xt_hashlimit: size too large, truncated to 1048576 [ 392.807991][T16135] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.872557][T16135] bridge_slave_0 (unregistering): left allmulticast mode [ 392.911134][T16135] bridge_slave_0 (unregistering): left promiscuous mode [ 392.930144][T16135] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.072786][T16153] ì: renamed from bond_slave_0 (while UP) [ 393.367013][T16166] pim6reg: entered allmulticast mode [ 393.374221][T16157] pim6reg: left allmulticast mode [ 393.564112][T16172] syz_tun: entered promiscuous mode [ 393.652545][T16177] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma? [ 393.676544][T16175] __nla_validate_parse: 8 callbacks suppressed [ 393.676563][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 393.707260][T16176] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma? [ 393.932914][T16186] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2523'. [ 393.971220][T16186] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2523'. [ 394.240101][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2531'. [ 394.281323][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2528'. [ 394.506368][T16225] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2528'. [ 394.700692][T15153] udevd[15153]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 395.208993][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2535'. [ 395.615366][T16254] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 395.840271][T16270] netlink: 'syz.8.2542': attribute type 1 has an invalid length. [ 396.051942][T16277] veth3: entered allmulticast mode [ 396.068112][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2542'. [ 396.099988][T16277] bond1: (slave veth3): Enslaving as an active interface with a down link [ 396.185466][T16278] bond1: (slave veth0_to_bond): making interface the new active one [ 396.221446][T16278] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 396.438343][T16289] geneve1: entered promiscuous mode [ 396.464704][T16289] geneve1: entered allmulticast mode [ 396.482346][T16289] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 396.526788][T16289] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2545'. [ 396.528989][T16292] netlink: 'syz.2.2546': attribute type 23 has an invalid length. [ 396.545145][T16292] netlink: 'syz.2.2546': attribute type 21 has an invalid length. [ 396.564818][T16281] netlink: 'syz.6.2543': attribute type 4 has an invalid length. [ 396.594454][T16281] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2543'. [ 398.209908][T16356] netlink: 'syz.6.2556': attribute type 1 has an invalid length. [ 398.443905][T16376] netlink: 'syz.2.2560': attribute type 1 has an invalid length. [ 398.468666][T16361] veth3: entered allmulticast mode [ 398.477752][T16376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.506063][T16361] bond2: (slave veth3): Enslaving as an active interface with a down link [ 398.579997][T16368] bond2: (slave veth0_to_bond): making interface the new active one [ 398.622027][T16368] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 398.728777][T16377] vlan3: entered promiscuous mode [ 398.733994][T16377] dummy0: entered promiscuous mode [ 398.827498][T16370] syzkaller0: entered promiscuous mode [ 398.838887][T16370] syzkaller0: entered allmulticast mode [ 399.085144][T16403] pim6reg99999999: entered allmulticast mode [ 399.155265][T16406] syzkaller0: entered promiscuous mode [ 399.218754][T16406] syzkaller0: entered allmulticast mode [ 399.297610][T16420] __nla_validate_parse: 6 callbacks suppressed [ 399.297630][T16420] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.2570'. [ 399.651345][T16434] tipc: Enabling of bearer rejected, failed to enable media [ 400.048385][T16447] netlink: 'syz.6.2573': attribute type 8 has an invalid length. [ 400.323096][T16452] syzkaller0: entered promiscuous mode [ 400.359062][T16452] syzkaller0: entered allmulticast mode [ 400.440449][T16457] bond6 (unregistering): Released all slaves [ 401.281388][ T5721] IPVS: starting estimator thread 0... [ 401.296204][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 401.335481][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 401.374728][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 401.387588][T16521] IPVS: using max 34 ests per chain, 81600 per kthread [ 401.669188][T16550] netlink: 'syz.8.2596': attribute type 1 has an invalid length. [ 401.904465][T16560] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2596'. [ 402.004184][T16538] syzkaller0: entered promiscuous mode [ 402.010018][T16538] syzkaller0: entered allmulticast mode [ 402.050181][T16553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.058792][T16553] bond2: (slave bond3): making interface the new active one [ 402.068247][T16553] bond2: (slave bond3): Enslaving as an active interface with an up link [ 402.120569][T16560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.373245][T16564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2597'. [ 402.776487][T16603] vlan3: entered promiscuous mode [ 402.782453][T16603] hsr0: entered promiscuous mode [ 402.794654][T16603] vlan3: entered allmulticast mode [ 403.025524][T16616] tipc: Enabled bearer , priority 0 [ 403.055483][T16579] No such timeout policy "syz1" [ 403.121920][T16616] tipc: Disabling bearer [ 403.165347][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 403.254783][T16613] lo speed is unknown, defaulting to 1000 [ 403.263319][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 403.395521][T16629] netlink: 'syz.2.2607': attribute type 2 has an invalid length. [ 403.582927][T16635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.598684][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.599031][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.599275][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.599553][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.599801][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.600042][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.600288][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.600526][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.600762][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.187 [ 403.834263][T16633] syzkaller0: entered promiscuous mode [ 403.879173][T16633] syzkaller0: entered allmulticast mode [ 403.928618][T16629] syzkaller1: entered promiscuous mode [ 403.943111][T16629] syzkaller1: entered allmulticast mode [ 404.473901][T16686] sctp: [Deprecated]: syz.1.2616 (pid 16686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.473901][T16686] Use struct sctp_sack_info instead [ 404.491129][T16686] sctp: [Deprecated]: syz.1.2616 (pid 16686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.491129][T16686] Use struct sctp_sack_info instead [ 404.513555][T16686] sctp: [Deprecated]: syz.1.2616 (pid 16686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.513555][T16686] Use struct sctp_sack_info instead [ 404.552109][T16687] x_tables: duplicate underflow at hook 2 [ 405.061031][T16713] macsec1: entered promiscuous mode [ 405.101067][T16713] bridge0: entered promiscuous mode [ 405.502728][T16728] syzkaller0: entered promiscuous mode [ 405.518395][T16728] syzkaller0: entered allmulticast mode [ 405.532610][T16733] xt_hashlimit: size too large, truncated to 1048576 [ 405.536980][T16728] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 405.785202][T16741] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2628'. [ 405.954761][T16745] netlink: 'syz.1.2630': attribute type 7 has an invalid length. [ 406.335460][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2635'. [ 406.382943][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2635'. [ 406.430944][T16776] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2637'. [ 406.442827][T16777] syzkaller0: entered promiscuous mode [ 406.449446][T16777] syzkaller0: entered allmulticast mode [ 406.670123][T16786] syzkaller0: entered promiscuous mode [ 406.676392][T16786] syzkaller0: entered allmulticast mode [ 406.685457][T16786] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 407.049435][T16801] syzkaller1: entered promiscuous mode [ 407.054267][T16805] Cannot find map_set index 65532 as target [ 407.067267][T16801] syzkaller1: entered allmulticast mode [ 407.563117][T16817] lo speed is unknown, defaulting to 1000 [ 407.613133][T16825] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 407.721496][T16825] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.774749][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2651'. [ 407.807323][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2651'. [ 407.836225][T16826] netlink: 'syz.6.2651': attribute type 1 has an invalid length. [ 407.844808][T16829] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 407.859912][T16829] bond12: entered allmulticast mode [ 407.917910][T16831] veth7: entered allmulticast mode [ 408.277661][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2654'. [ 408.305217][T16853] netlink: 'syz.1.2657': attribute type 4 has an invalid length. [ 408.352766][T16850] netlink: 279 bytes leftover after parsing attributes in process `syz.1.2657'. [ 408.384892][T16850] veth0_to_bond: default FDB implementation only supports local addresses [ 408.414309][T16856] --map-set only usable from mangle table [ 408.439511][T16851] syzkaller0: entered promiscuous mode [ 408.445314][T16861] netlink: 'syz.1.2657': attribute type 4 has an invalid length. [ 408.460903][T16851] syzkaller0: entered allmulticast mode [ 408.480456][T16854] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 408.537347][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'. [ 408.970326][T16887] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2663'. [ 409.037362][T16887] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 409.422122][T16902] net_ratelimit: 213 callbacks suppressed [ 409.422140][T16902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.483493][T16889] lo speed is unknown, defaulting to 1000 [ 409.546737][T16881] lo speed is unknown, defaulting to 1000 [ 409.667458][T16911] syzkaller0: entered promiscuous mode [ 409.673083][T16911] syzkaller0: entered allmulticast mode [ 410.201729][T16923] syzkaller0: entered promiscuous mode [ 410.221888][T16923] syzkaller0: entered allmulticast mode [ 410.252176][T16923] tc_dump_action: action bad kind [ 410.900158][T16951] syzkaller0: entered promiscuous mode [ 410.931866][T16951] syzkaller0: entered allmulticast mode [ 410.984772][T16951] netlink: 'syz.6.2680': attribute type 3 has an invalid length. [ 411.012645][T16951] netlink: 'syz.6.2680': attribute type 6 has an invalid length. [ 411.160554][T16960] Unsupported ieee802154 address type: 0 [ 411.192655][T16960] tunl0: Caught tx_queue_len zero misconfig [ 411.234634][T16960] __nla_validate_parse: 5 callbacks suppressed [ 411.234653][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2683'. [ 411.454166][T16965] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2685'. [ 411.474676][T16969] syzkaller0: entered promiscuous mode [ 411.493308][T16969] syzkaller0: entered allmulticast mode [ 411.623047][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 411.913644][T16976] bond6: entered promiscuous mode [ 411.924405][T16986] netlink: 'syz.3.2693': attribute type 11 has an invalid length. [ 411.948644][T16976] bond6: entered allmulticast mode [ 411.983530][T16986] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.2693'. [ 412.026862][T16990] netlink: 'syz.6.2691': attribute type 1 has an invalid length. [ 412.044989][T16990] netlink: 756 bytes leftover after parsing attributes in process `syz.6.2691'. [ 412.075168][T16974] syzkaller0: entered promiscuous mode [ 412.094451][T16974] syzkaller0: entered allmulticast mode [ 412.210119][T17001] netlink: 'syz.8.2695': attribute type 1 has an invalid length. [ 412.311538][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2696'. [ 415.079048][T16999] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2696'. [ 415.244184][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2699'. [ 415.247411][T17017] sctp: [Deprecated]: syz.2.2700 (pid 17017) Use of int in maxseg socket option. [ 415.247411][T17017] Use struct sctp_assoc_value instead [ 415.632216][T17035] syzkaller0: entered promiscuous mode [ 415.654623][T17035] syzkaller0: entered allmulticast mode [ 415.832773][T17050] lo speed is unknown, defaulting to 1000 [ 416.502852][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'. [ 416.535376][T17082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'. [ 416.738043][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2717'. [ 416.841666][T17097] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2717'. [ 417.274508][T17112] syzkaller0: entered promiscuous mode [ 417.296229][T17112] syzkaller0: entered allmulticast mode [ 418.081103][ T5622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 418.103982][ T5622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 418.112753][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 418.135185][T17154] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2732'. [ 418.138095][ T5622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 418.158324][ T5622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 418.172840][ T5622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 418.406628][T17154] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input7 [ 418.670412][T17166] lo speed is unknown, defaulting to 1000 [ 419.216395][T17188] syzkaller0: entered promiscuous mode [ 419.245158][T17188] syzkaller0: entered allmulticast mode [ 419.304292][T17190] netlink: 'syz.8.2738': attribute type 6 has an invalid length. [ 419.346845][T17190] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2738'. [ 419.349039][T17149] lo speed is unknown, defaulting to 1000 [ 419.362727][T17190] netlink: 192 bytes leftover after parsing attributes in process `syz.8.2738'. [ 419.373089][T17190] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2738'. [ 419.614142][ T8956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.743952][T17192] tipc: Enabled bearer , priority 0 [ 419.759106][T17210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.773618][T17210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.892811][T17191] tipc: Disabling bearer [ 419.990919][ T8956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.228041][ T5622] Bluetooth: hci9: command tx timeout [ 420.246727][ T8956] bond0: (slave netdevsim1): Releasing backup interface [ 420.289574][ T8956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.470363][T17236] syzkaller0: entered promiscuous mode [ 420.486515][T17247] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 420.508901][T17236] syzkaller0: entered allmulticast mode [ 420.581941][ T8956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.611528][T17251] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2751'. [ 420.660655][T17244] syzkaller0: entered promiscuous mode [ 420.667043][T17244] syzkaller0: entered allmulticast mode [ 421.272046][T17149] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.292335][T17149] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.307584][T17149] bridge_slave_0: entered allmulticast mode [ 421.315450][T17149] bridge_slave_0: entered promiscuous mode [ 421.359697][T17290] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 421.457633][T17284] bridge6: entered allmulticast mode [ 421.487790][T17149] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.529498][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.560768][T17149] bridge_slave_1: entered allmulticast mode [ 421.599569][T17149] bridge_slave_1: entered promiscuous mode [ 421.656447][T17299] openvswitch: netlink: Missing valid actions attribute. [ 421.681448][T17299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.717944][T17298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 421.744239][T17301] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 421.745456][T17302] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 421.845093][T17149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.847435][T17299] block nbd1: server does not support multiple connections per device. [ 421.892790][ T8956] bridge_slave_1: left allmulticast mode [ 421.914447][ T8956] bridge_slave_1: left promiscuous mode [ 421.920792][T17299] block nbd1: shutting down sockets [ 421.923259][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.312666][ T5622] Bluetooth: hci9: command tx timeout [ 422.402283][ T8956] team0: Port device bridge2 removed [ 422.444127][ T8956] team0: Port device bridge6 removed [ 422.471452][ T8956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.491543][ T8956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.503513][ T8956] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 422.514284][ T8956] bond0 (unregistering): Released all slaves [ 422.525789][ T8956] bond1 (unregistering): Released all slaves [ 422.541846][ T8956] bond2 (unregistering): Released all slaves [ 422.557475][ T8956] bond3 (unregistering): Released all slaves [ 422.577321][ T8956] bond4 (unregistering): Released all slaves [ 422.591501][ T8956] bond5 (unregistering): (slave veth7): Releasing active interface [ 422.600645][ T8956] bond5 (unregistering): Released all slaves [ 422.614555][ T8956] bond7 (unregistering): Released all slaves [ 422.631419][ T8956] bond6 (unregistering): Released all slaves [ 422.645146][ T8956] bond8 (unregistering): Released all slaves [ 422.669860][ T8956] bond9 (unregistering): Released all slaves [ 422.683674][ T8956] bond10 (unregistering): (slave bond11): Releasing backup interface [ 422.692675][ T8956] bond10 (unregistering): Released all slaves [ 422.708499][ T8956] bond11 (unregistering): Released all slaves [ 422.722888][ T8956] bond12 (unregistering): Released all slaves [ 422.737062][T17304] syzkaller0: entered promiscuous mode [ 422.742694][T17304] syzkaller0: entered allmulticast mode [ 422.774663][T17149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.802628][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.885381][T17333] netlink: 'syz.1.2766': attribute type 9 has an invalid length. [ 423.108593][T17149] team0: Port device team_slave_0 added [ 423.185109][ T8956] : left promiscuous mode [ 423.241802][T17345] __nla_validate_parse: 4 callbacks suppressed [ 423.241820][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 423.296567][T17345] netlink: 'syz.1.2769': attribute type 10 has an invalid length. [ 423.326715][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2769'. [ 423.451586][T17149] team0: Port device team_slave_1 added [ 423.504049][T17345] geneve4: entered promiscuous mode [ 423.516525][T17345] geneve4: entered allmulticast mode [ 423.531034][ T8956] : left promiscuous mode [ 423.710927][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.747965][ T3324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.783447][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.810477][T17352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2771'. [ 423.830033][ T8956] tipc: Left network mode [ 423.831856][T17359] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2771'. [ 423.886310][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'. [ 423.931996][T17352] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 424.004133][T17352] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 424.092402][T17149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.128336][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.170100][T17149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.197514][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.235145][T17375] wg2: Caught tx_queue_len zero misconfig [ 424.297904][T17149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.318513][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.381867][T17149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.397169][ T5622] Bluetooth: hci9: command tx timeout [ 424.531339][T17149] hsr_slave_0: entered promiscuous mode [ 424.537956][ T8956] IPVS: stopping backup sync thread 13058 ... [ 424.545384][T17149] hsr_slave_1: entered promiscuous mode [ 424.549413][T17149] debugfs: 'hsr0' already exists in 'hsr' [ 424.569982][T17149] Cannot create hsr debugfs directory [ 424.750072][T17389] syzkaller0: entered promiscuous mode [ 424.757245][T17389] syzkaller0: entered allmulticast mode [ 424.913637][T17406] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2781'. [ 425.170170][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 425.804259][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2784'. [ 425.869048][T17420] syzkaller0: entered promiscuous mode [ 425.886792][T17420] syzkaller0: entered allmulticast mode [ 425.996399][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2789'. [ 426.335351][T17469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.467345][ T5622] Bluetooth: hci9: command tx timeout [ 429.107647][T17456] gretap0: entered promiscuous mode [ 429.123606][T17456] bridge0: port 2(syz_tun) entered blocking state [ 429.130191][T17456] bridge0: port 2(syz_tun) entered listening state [ 429.140232][T17456] bridge0: port 1(ip6gretap0) entered blocking state [ 429.147094][T17456] bridge0: port 1(ip6gretap0) entered listening state [ 429.158082][T17456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.171922][T17456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.237458][T17456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.249788][T17456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.263938][T17456] veth1_vlan: left promiscuous mode [ 429.271154][T17456] veth0_vlan: entered promiscuous mode [ 429.278424][T17456] veth1_vlan: entered promiscuous mode [ 429.294167][T17456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.304361][T17456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.313036][T17456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.324441][T17456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.335283][T17456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.347696][T17456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.360037][T17456] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 429.556989][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 429.636485][ T3324] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.665511][ T3324] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.093650][ T3324] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.116490][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.468670][T17517] netlink: 'syz.1.2802': attribute type 2 has an invalid length. [ 430.503911][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 430.591125][T17522] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 430.631241][T17517] ¿: entered promiscuous mode [ 431.040240][T17532] bond3: option lp_interval: invalid value (0) [ 431.086568][T17532] bond3: option lp_interval: allowed values 1 - 2147483647 [ 431.139752][T17532] bond3 (unregistering): Released all slaves [ 431.302082][T17558] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2810'. [ 431.341509][ T8956] hsr_slave_0: left promiscuous mode [ 431.349904][T17564] netlink: 'syz.3.2811': attribute type 7 has an invalid length. [ 431.365325][ T8956] hsr_slave_1: left promiscuous mode [ 431.388931][T17564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.533622][T17573] xt_hashlimit: max too large, truncated to 1048576 [ 431.600683][ T8956] veth1_vlan: left promiscuous mode [ 431.652677][ T8956] veth0_vlan: left promiscuous mode [ 431.697966][T17577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2814'. [ 431.757254][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 432.437951][ T8956] team0 (unregistering): Port device team_slave_1 removed [ 432.464001][ T8956] team0 (unregistering): Port device team_slave_0 removed [ 432.595233][ T8956] team0 (unregistering): Port device dummy0 removed [ 433.051604][T17619] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 433.372353][T17616] lo speed is unknown, defaulting to 1000 [ 433.470074][T17634] syzkaller0: entered promiscuous mode [ 433.481047][T17634] syzkaller0: entered allmulticast mode [ 433.514160][ T8956] IPVS: stop unused estimator thread 0... [ 433.683290][T17643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2818'. [ 433.885115][T17149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.935629][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.958167][T17149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 433.972067][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.185668][T17149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.215505][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.224772][T17149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.253038][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.502160][T17149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.540690][T17688] netlink: 91 bytes leftover after parsing attributes in process `syz.1.2832'. [ 434.594007][T17688] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2832'. [ 434.595447][T17149] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.681293][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.688508][ T8956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.763811][T17692] lo speed is unknown, defaulting to 1000 [ 434.765559][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.776855][ T8956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.931017][T17698] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2834'. [ 434.964142][T17698] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2834'. [ 434.985163][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'. [ 435.193516][T17711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2837'. [ 435.234056][T17711] xt_hashlimit: max too large, truncated to 1048576 [ 435.249529][T17711] No such timeout policy "syz1" [ 435.323549][T17716] geneve0: entered promiscuous mode [ 435.336955][T17716] geneve0: left promiscuous mode [ 435.539140][T17727] __nla_validate_parse: 1 callbacks suppressed [ 435.539158][T17727] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2849'. [ 435.601590][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 435.653039][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2840'. [ 435.674342][T17683] netlink: 'syz.8.2831': attribute type 58 has an invalid length. [ 435.869349][T17744] netlink: 'syz.6.2842': attribute type 1 has an invalid length. [ 435.897837][T17744] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2842'. [ 436.307895][T17775] sctp: [Deprecated]: syz.1.2847 (pid 17775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.307895][T17775] Use struct sctp_sack_info instead [ 436.426652][T17149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.509697][T17740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2841'. [ 436.709157][T17149] veth0_vlan: entered promiscuous mode [ 436.786982][T17149] veth1_vlan: entered promiscuous mode [ 436.917806][T17149] veth0_macvtap: entered promiscuous mode [ 436.943546][T17149] veth1_macvtap: entered promiscuous mode [ 436.995238][T17149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.035397][T17149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.072694][ T8956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.097345][ T8956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.129684][ T8956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.152138][ T8956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.284916][T17811] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2856'. [ 437.590002][ T8956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.625249][ T8956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.691874][ T8956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.708784][ T8956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.981418][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2860'. [ 438.159616][T17843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.166991][T17843] IPv6: NLM_F_CREATE should be set when creating new route [ 438.174568][T17843] IPv6: NLM_F_CREATE should be set when creating new route [ 438.648838][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.678741][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.703050][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.724349][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.738936][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.811828][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2868'. [ 439.031092][T17873] netlink: 'syz.8.2869': attribute type 1 has an invalid length. [ 439.120956][ T5639] syz_tun (unregistering): left promiscuous mode [ 439.129714][ T5639] team0: Port device syz_tun removed [ 439.158664][T17873] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 439.408972][T17893] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 439.585140][T17858] lo speed is unknown, defaulting to 1000 [ 439.667538][T17909] syzkaller0: entered promiscuous mode [ 439.689935][T17909] syzkaller0: entered allmulticast mode [ 439.822323][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2878'. [ 439.894839][T17913] netlink: 'syz.8.2878': attribute type 1 has an invalid length. [ 439.910070][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.533705][T17858] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.556790][T17858] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.581731][T17858] bridge_slave_0: entered allmulticast mode [ 440.620507][T17858] bridge_slave_0: entered promiscuous mode [ 440.671211][T17954] IPv6: addrconf: prefix option has invalid lifetime [ 440.692335][T17858] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.726351][T17858] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.765534][T17858] bridge_slave_1: entered allmulticast mode [ 440.819971][T17858] bridge_slave_1: entered promiscuous mode [ 440.856769][T17958] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2894'. [ 440.866770][ T5622] Bluetooth: hci2: command tx timeout [ 440.933291][T17970] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2894'. [ 441.045789][T17858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.066574][T17858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.112669][T17978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 441.198925][T17858] team0: Port device team_slave_0 added [ 441.206859][T17980] syzkaller0: entered promiscuous mode [ 441.222571][T17980] syzkaller0: entered allmulticast mode [ 441.364800][T17858] team0: Port device team_slave_1 added [ 441.828988][T17993] geneve2: entered allmulticast mode [ 441.847730][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2895'. [ 441.922433][T18000] xt_hashlimit: max too large, truncated to 1048576 [ 441.945656][T18000] xt_hashlimit: overflow, try lower: 2/0 [ 441.959939][T17858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.000645][T17858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.059834][T17858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.106329][T17858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.121237][T17858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.198994][T17858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.251683][T18005] bond0: Caught tx_queue_len zero misconfig [ 442.465602][T17858] hsr_slave_0: entered promiscuous mode [ 442.476173][ T30] INFO: task syz.4.2011:13869 blocked for more than 143 seconds. [ 442.480518][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.497610][T17858] hsr_slave_1: entered promiscuous mode [ 442.502880][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.504287][ T30] Not tainted syzkaller #0 [ 442.519366][T17858] debugfs: 'hsr0' already exists in 'hsr' [ 442.523622][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.526093][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.541053][T17858] Cannot create hsr debugfs directory [ 442.546727][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.561899][ T30] task:syz.4.2011 state:D stack:27352 pid:13869 tgid:13852 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 442.565317][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.574291][ T30] Call Trace: [ 442.584615][ T30] [ 442.587850][ T30] __schedule+0x17d9/0x56c0 [ 442.592566][ T30] ? __lock_acquire+0x683/0x2cf0 [ 442.602670][ T30] ? __lock_acquire+0x683/0x2cf0 [ 442.610326][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.617368][ T30] ? __pfx___schedule+0x10/0x10 [ 442.634015][ T30] ? schedule+0x90/0x2b0 [ 442.636126][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.640645][ T30] schedule+0x164/0x2b0 [ 442.649828][ T30] schedule_preempt_disabled+0x13/0x30 [ 442.653052][T18017] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.655513][ T30] __mutex_lock+0x7bf/0x1550 [ 442.667451][ T30] ? __mutex_lock+0x5d4/0x1550 [ 442.672451][ T30] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 442.701038][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 442.722648][ T30] ? net_generic+0x1e/0x240 [ 442.748390][ T30] ? net_generic+0x1e/0x240 [ 442.761613][ T30] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 442.777475][ T30] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 442.799272][ T30] ? rcu_is_watching+0x15/0xb0 [ 442.815325][ T30] ? trace_kmalloc+0x2a/0xf0 [ 442.823461][T18034] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2904'. [ 442.838435][ T30] ? __kmalloc_noprof+0x396/0x720 [ 442.854980][ T30] ? __nla_parse+0x40/0x60 [ 442.874773][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 442.890233][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 442.905961][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 442.920377][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 442.935227][ T30] ? bpf_lsm_capable+0x9/0x20 [ 442.948463][ T5622] Bluetooth: hci2: command tx timeout [ 442.960994][ T30] ? security_capable+0x7e/0x2c0 [ 442.967011][ T30] genl_rcv_msg+0x614/0x7a0 [ 442.971784][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.978835][ T30] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 442.985605][ T30] netlink_rcv_skb+0x226/0x4a0 [ 442.991276][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.996853][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.002537][ T30] ? down_read+0x2be/0x330 [ 443.007628][ T30] genl_rcv+0x28/0x40 [ 443.012099][ T30] netlink_unicast+0x7bb/0x940 [ 443.017687][ T30] netlink_sendmsg+0x813/0xb40 [ 443.022638][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.029484][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 443.034603][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.040741][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 443.047522][ T30] ____sys_sendmsg+0x54e/0x850 [ 443.052753][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.058686][ T30] ? import_iovec+0x73/0xa0 [ 443.063716][ T30] ___sys_sendmsg+0x2a5/0x360 [ 443.071006][ T30] ? __lock_acquire+0x683/0x2cf0 [ 443.076789][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.082175][ T30] ? futex_wake+0x51b/0x5f0 [ 443.091152][ T30] ? __fget_files+0x2a/0x420 [ 443.098525][ T30] ? __fget_files+0x3a2/0x420 [ 443.103436][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 443.112793][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.118845][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.125228][ T30] do_syscall_64+0x174/0x580 [ 443.130552][ T30] ? trace_irq_disable+0x3b/0x140 [ 443.136511][ T30] ? clear_bhb_loop+0x40/0x90 [ 443.141366][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.148082][ T30] RIP: 0033:0x7fc70039de99 [ 443.152669][ T30] RSP: 002b:00007fc70124f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.161835][ T30] RAX: ffffffffffffffda RBX: 00007fc700626090 RCX: 00007fc70039de99 [ 443.170387][ T30] RDX: 000000000400c084 RSI: 0000200000000100 RDI: 0000000000000005 [ 443.179243][ T30] RBP: 00007fc700433eaf R08: 0000000000000000 R09: 0000000000000000 [ 443.188891][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.197530][ T30] R13: 00007fc700626128 R14: 00007fc700626090 R15: 00007ffed0d8e288 [ 443.206144][ T30] [ 443.209667][ T30] INFO: task syz.5.2017:13894 blocked for more than 144 seconds. [ 443.218668][ T30] Not tainted syzkaller #0 [ 443.224848][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.237044][ T30] task:syz.5.2017 state:D stack:27088 pid:13894 tgid:13893 ppid:12250 task_flags:0x400140 flags:0x00080002 [ 443.256470][ T30] Call Trace: [ 443.260386][ T30] [ 443.263411][ T30] __schedule+0x17d9/0x56c0 [ 443.269121][ T30] ? __lock_acquire+0x683/0x2cf0 [ 443.277556][ T30] ? __lock_acquire+0x683/0x2cf0 [ 443.283946][ T30] ? __kmalloc_noprof+0x1ad/0x720 [ 443.294942][ T30] ? kasan_save_track+0x4f/0x80 [ 443.302934][ T30] ? kasan_save_track+0x3e/0x80 [ 443.309373][ T30] ? __pfx___schedule+0x10/0x10 [ 443.316991][ T30] ? schedule+0x90/0x2b0 [ 443.322133][ T30] schedule+0x164/0x2b0 [ 443.327771][ T30] schedule_preempt_disabled+0x13/0x30 [ 443.353391][ T30] __mutex_lock+0x7bf/0x1550 [ 443.358505][ T30] ? __mutex_lock+0x5d4/0x1550 [ 443.372763][ T30] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 443.379080][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 443.384513][ T30] ? net_generic+0x1e/0x240 [ 443.390284][ T30] ? net_generic+0x1e/0x240 [ 443.395012][ T30] ? net_generic+0x1e/0x240 [ 443.399842][ T30] ? net_generic+0x1e/0x240 [ 443.404418][ T30] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 443.410064][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 443.416050][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 443.422356][ T30] ? bpf_lsm_capable+0x9/0x20 [ 443.427683][ T30] ? security_capable+0x7e/0x2c0 [ 443.432688][ T30] genl_rcv_msg+0x614/0x7a0 [ 443.437837][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.442900][ T30] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 443.449286][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 443.454714][ T30] netlink_rcv_skb+0x226/0x4a0 [ 443.459704][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.464771][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.470371][ T30] ? down_read+0x2be/0x330 [ 443.474906][ T30] genl_rcv+0x28/0x40 [ 443.478964][ T30] netlink_unicast+0x7bb/0x940 [ 443.483837][ T30] netlink_sendmsg+0x813/0xb40 [ 443.488774][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.494113][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 443.499207][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.504526][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 443.512546][ T30] ____sys_sendmsg+0x54e/0x850 [ 443.517424][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.522749][ T30] ? import_iovec+0x73/0xa0 [ 443.527452][ T30] ___sys_sendmsg+0x2a5/0x360 [ 443.532267][ T30] ? __lock_acquire+0x683/0x2cf0 [ 443.537374][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.542629][ T30] ? futex_wait+0x2a2/0x390 [ 443.547328][ T30] ? __fget_files+0x2a/0x420 [ 443.551955][ T30] ? __fget_files+0x3a2/0x420 [ 443.556753][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 443.561724][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.569073][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.575189][ T30] do_syscall_64+0x174/0x580 [ 443.579928][ T30] ? trace_irq_disable+0x3b/0x140 [ 443.584990][ T30] ? clear_bhb_loop+0x40/0x90 [ 443.590132][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.596318][ T30] RIP: 0033:0x7f00f2b9de99 [ 443.600782][ T30] RSP: 002b:00007f00f39a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.609387][ T30] RAX: ffffffffffffffda RBX: 00007f00f2e25fa0 RCX: 00007f00f2b9de99 [ 443.617574][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 443.625566][ T30] RBP: 00007f00f2c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 443.634327][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.642423][ T30] R13: 00007f00f2e26038 R14: 00007f00f2e25fa0 R15: 00007ffdb2858ea8 [ 443.650578][ T30] [ 443.653802][ T30] [ 443.653802][ T30] Showing all locks held in the system: [ 443.661727][ T30] 2 locks held by ksoftirqd/1/23: [ 443.667015][ T30] 1 lock held by khungtaskd/30: [ 443.671900][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 443.681864][ T30] 2 locks held by getty/5377: [ 443.687767][ T30] #0: ffff8880369780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 443.697920][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 443.741537][ T30] 4 locks held by kworker/u8:13/7755: [ 443.760018][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 443.772892][ T30] #1: ffffc90003d67c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 443.784632][ T30] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 443.794157][ T30] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 443.807360][ T30] 2 locks held by syz.0.1420/11538: [ 443.814185][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.824971][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 443.839240][ T30] 2 locks held by syz.4.2011/13869: [ 443.845223][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.856419][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 443.869306][ T30] 2 locks held by syz.5.2017/13894: [ 443.875149][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.884490][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 443.894967][ T30] 3 locks held by syz.7.2288/15134: [ 443.900878][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.910512][ T30] #1: ffff88807ab076e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 443.924888][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 443.935631][ T30] 2 locks held by syz-executor/17858: [ 443.941154][ T30] #0: ffffffff8f798fc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 443.951113][ T30] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 443.960736][ T30] 1 lock held by syz.8.2903/18023: [ 443.966515][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 443.975624][ T30] 2 locks held by syz.2.2901/18016: [ 443.981161][ T30] #0: ffff888043f1f540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 443.992107][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 444.003216][ T30] 2 locks held by syz.2.2901/18019: [ 444.008525][ T30] #0: ffffffff905912d8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 444.018198][ T30] #1: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 444.028799][ T30] 2 locks held by syz.6.2904/18020: [ 444.034369][ T30] #0: ffff888043f46400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 444.049566][ T30] #1: ffff88804d4ab660 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x2a/0x280 [ 444.064945][ T30] [ 444.080117][ T30] ============================================= [ 444.080117][ T30] [ 444.096045][ T30] NMI backtrace for cpu 0 [ 444.096067][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 444.096086][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.096095][ T30] Call Trace: [ 444.096103][ T30] [ 444.096110][ T30] dump_stack_lvl+0xe8/0x150 [ 444.096139][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 444.096159][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.096184][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 444.096206][ T30] sys_info+0x135/0x170 [ 444.096222][ T30] watchdog+0xfd7/0x1030 [ 444.096248][ T30] ? watchdog+0x1c7/0x1030 [ 444.096272][ T30] kthread+0x388/0x470 [ 444.096293][ T30] ? __pfx_watchdog+0x10/0x10 [ 444.096309][ T30] ? __pfx_kthread+0x10/0x10 [ 444.096331][ T30] ret_from_fork+0x514/0xb70 [ 444.096355][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 444.096376][ T30] ? __switch_to+0xc89/0x1420 [ 444.096397][ T30] ? __pfx_kthread+0x10/0x10 [ 444.096419][ T30] ret_from_fork_asm+0x1a/0x30 [ 444.096448][ T30] [ 444.096454][ T30] Sending NMI from CPU 0 to CPUs 1: [ 444.221346][ C1] NMI backtrace for cpu 1 [ 444.221365][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 444.221384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.221395][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 444.221426][ C1] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 444.221440][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 444.221456][ C1] RAX: 0000000000127bfd RBX: ffffffff819ab450 RCX: 0000000080000001 [ 444.221468][ C1] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380 [ 444.221480][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 444.221493][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 444.221505][ C1] R13: 1ffff11003c50000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 444.221518][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 444.221532][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.221544][ C1] CR2: 00007ff76b5ed2f8 CR3: 0000000074470000 CR4: 00000000003526f0 [ 444.221560][ C1] Call Trace: [ 444.221567][ C1] [ 444.221573][ C1] default_idle+0x9/0x20 [ 444.221590][ C1] default_idle_call+0x72/0xb0 [ 444.221608][ C1] do_idle+0x2e0/0x540 [ 444.221632][ C1] ? __pfx_do_idle+0x10/0x10 [ 444.221655][ C1] ? do_idle+0x4d1/0x540 [ 444.221677][ C1] cpu_startup_entry+0x43/0x60 [ 444.221699][ C1] start_secondary+0x101/0x110 [ 444.221722][ C1] common_startup_64+0x13e/0x157 [ 444.221750][ C1] [ 444.388306][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 444.395184][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 444.404311][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.414379][ T30] Call Trace: [ 444.417653][ T30] [ 444.420575][ T30] vpanic+0x56c/0xa60 [ 444.424992][ T30] ? __pfx___schedule+0x10/0x10 [ 444.429835][ T30] ? __pfx_vpanic+0x10/0x10 [ 444.434599][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 444.440751][ T30] panic+0xc5/0xd0 [ 444.444471][ T30] ? __pfx_panic+0x10/0x10 [ 444.448894][ T30] ? preempt_schedule_common+0x82/0xd0 [ 444.454392][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 444.459771][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 444.465921][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 444.472071][ T30] watchdog+0x1030/0x1030 [ 444.476404][ T30] ? watchdog+0x1c7/0x1030 [ 444.480816][ T30] kthread+0x388/0x470 [ 444.484883][ T30] ? __pfx_watchdog+0x10/0x10 [ 444.489554][ T30] ? __pfx_kthread+0x10/0x10 [ 444.494147][ T30] ret_from_fork+0x514/0xb70 [ 444.498738][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 444.503851][ T30] ? __switch_to+0xc89/0x1420 [ 444.508522][ T30] ? __pfx_kthread+0x10/0x10 [ 444.513112][ T30] ret_from_fork_asm+0x1a/0x30 [ 444.517876][ T30] [ 444.521056][ T30] Kernel Offset: disabled [ 444.525368][ T30] Rebooting in 86400 seconds..