last executing test programs: 2m41.213946399s ago: executing program 1 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4c000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) recvfrom(r2, &(0x7f00000007c0)=""/4038, 0xfc6, 0x40020100, 0x0, 0x0) writev(r2, &(0x7f00000017c0)=[{&(0x7f0000001800)='x', 0x1}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000652b0000c50000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) 2m40.156283366s ago: executing program 1 (id=1098): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x5, 0x9e38, 0x53, 0xc63, 0x7, 0x8, 0xe09, 0x2, 0x78, 0x40}, {0x9}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f00000001c0)={r1, @in6={{0xa, 0x3, 0x4, @mcast1, 0x4}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r1, 0x8}, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cd6bc2369178a11def2dc4bde4000000000000", @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009", @ANYRES16=r3, @ANYRES16=r1, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20048874) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m39.854634543s ago: executing program 1 (id=1102): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x52, &(0x7f0000000780)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xc, [@empty, @multicast1, @private=0xa010100, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x12}}}}}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000015002927000000000000008b050021"], 0x38}}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) (async) pipe(0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(r3, &(0x7f0000000080)={0x2, 0xce21, @remote}, 0x10) connect$inet(r3, 0x0, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) (async) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000402000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) (async) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) (async) sendfile(r7, r4, 0x0, 0x10000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m38.789126051s ago: executing program 1 (id=1107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000070000000000000000000000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000000000051229dc9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x27, 0x0, &(0x7f00000004c0)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001800012300000000faffffff02200120000000080000000008000100ac1414"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x7}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x102c0fd2}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) 2m38.30713212s ago: executing program 1 (id=1112): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x8, 0x8000}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000300)={0xa, 0x4e20, 0x180000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000029000000360000000c0000000000000018"], 0x30, 0xfe800000}, 0x8040) socket$inet6_udp(0xa, 0x2, 0x0) 2m38.167067391s ago: executing program 1 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000340)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x2000000000000190, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002900010027bd7000fedbdf25060000005389ae80a55806249056739bc1e40295bbff3263637198431c27d88ecce404a2984562a21f832592b6024c61b3144515d4a45b4f25097f128e582a21ade6e8756dac46bf2fc30e8e9d800ff47c866c239317778ebcc3285797203df4e802b37a09a8dde86f3247c00a1f0382f03b3ef99aa52caa28b5074411a09bd93596b30a38ae53f49689e0a32f7d63e294259587f67efeb1c0855a9bed4ce793ec4cdbe1fe77c47766eb42d0d67842efa2d2a45383fdc43c3fab2ae928ddfdc8757011ccbbdb0dd3afdc7c52082feb411e8a3de005aeecfe061f12cc3586b6608b"], 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m35.537654902s ago: executing program 4 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070200000000000000000100000008000880040000002c00048005000300010000000500030080ff000005000300050000000500030001000000050003000100000008000100030000000800020001"], 0x58}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '?'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x400c091}, 0x8010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendmsg$NFC_CMD_SE_IO(r1, 0xffffffffffffffff, 0x80c0) 2m35.325076543s ago: executing program 4 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000b40)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000b80)=ANY=[@ANYBLOB="03031b003000320006006300000000442f"], 0x76) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f0000000580), 0x10) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/177, 0x1f}, {0x0}], 0x2}, 0x6}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000400)=0x40, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r9 = socket$packet(0x11, 0x4, 0x300) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendto$packet(r9, &(0x7f00000007c0)="150120ab9dd930074f6716ac7c3c6e09c67b32664b28e037ff36e6af9fb87a9f7cf28884d91e583c2966967bcff6f24b0076ea15f6a42828e4201eb22a66e8e92211be526498151fbbc9b36af38fce1aeeea2ca56393c317a776fff8d6bd795b86d8c228834d11c74d61aa2a5a1d1ae0c759392303", 0x75, 0x40000, &(0x7f0000000080)={0x11, 0xe3, r10, 0x1, 0xe, 0x6, @random="b500"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 2m34.692599832s ago: executing program 4 (id=1140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80cc85}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000800)=[{&(0x7f0000000840)="05faa1d13aeb87e8c95d3ae29c4589f75608cf4f96f66c23ae2a2e5200909984738c875ae7c648fa34b6c134239aa3a71086aeeab8d0e33bb78ee36adb1ff9ecb91db75ee6048b581b0fa9273005916e6c3bd9f4cb3d44291d503540a24fd7f44566f6969512e8f28be370e9", 0x6c}], 0x1000000000000255, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="230000000900000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r5, &(0x7f0000000a00), 0x0}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001540)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001580)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0xfffffff9, 0x10}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001080)={{r0, &(0x7f0000000a80)='syzkaller\x00', 0x400000, &(0x7f0000000ac0)={@_ha_fsid={[0x80000000, 0x6]}, {0x2bd, 0x8, 0x7}}, 0x705bd275, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0x1}, 0x5, &(0x7f0000000fc0)=[{0x1, 0x7, &(0x7f0000000b80)='(\x00', &(0x7f0000000bc0)="d4f8bd41452418a4143193ade36f0903614c4962e6a027ab94fe266c66f71c0635966605c532f3b10122389e0dbb64fa736167dfaa4e0b3853cf1cabd3dec3114d40a8137ee01a248b3714994f92adb18f7711c096add10cd54e474cbae2c4950b8f71ea5fadb49d3b584d2693c2156386d87816cb5203772689ab8f", 0x7c, 0x8}, {0x2, 0x8000, &(0x7f0000000c40)='[\x00', &(0x7f0000000c80)="089f6e222b05454539d8bfeb", 0xc, 0x71af14f874f71f73}, {0x2, 0x2, &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)="7369fe830d0fa0c14dfcdd8acd87eb3fe75724203dba8e9561fcca86a37bba73ce8b26ff09308f349a80aa022c3dc52a6c0907e95fc37e7b35e3f64f06e0aca2744f588f964e78d19b033783d0b6c5e05d771a3a73a5f5c8ef709191b97aa50516fa39b7c3b174e39684cd9997f4b957083930691fd3643d6bd2368d1cf17c29a4800afee1ad03eda00f464259c3dbabce9ef260624612a28671b1711821e1b5fe83606650f2f52e651b3d34214b36f4c4e89ce5a775a697f482729456a797d31b302cc9e148042cbfaa2c76d753701c959b15bcb195c75fe6037457287e0922925b3f9c9bf0e8aee116f7b0e1702442dbeb", 0xf2, 0x50}, {0x1, 0x31a, &(0x7f0000000e00)='\x00', &(0x7f0000000e40)="15d1ac7313fcacd0269dc68b97bd3d28409e540eac201af0e762da9e0484ec35e1510e70882e801df599a23095cef15052d04c19625d4bed60129812d047f3a2af32b86750d7a6b73ead490e1fac0f2d51416145a86ce3b00458c45fddb01b68442bef0975be9a2dbd1964a7c2d7e421adc35b5994c6fc620bb38f38bf807fa4fb55f9994be18acbc8515053075e8af740a2ab740a994296aeea1790553a551031ffcc479d522cf3a9dffa4dc49e09b196328f133cb62de1e3ca8493b8", 0xbd, 0x20}, {0x1, 0x0, &(0x7f0000000f00)='syzkaller\x00', &(0x7f0000000f40)="d304521b7b0b0c39182b9100741ed5d253fd3588a85a11f4de5928d2ecda274418fb5b52e94c576891fb329752cda6dfeb5a1b4dca51483a98e30ff38816044317004320a683ad8786b7cd1610ffa7f062bf4da6f37dce4b1f362c9cb25def09e4a6c98a9447676eb9e182dab3220838", 0x70, 0x12}]}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@bloom_filter={0x1e, 0x5, 0x1, 0x4, 0x12200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xee, 0x0, 0x9}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@deltaction={0x24, 0x31, 0x101, 0x80, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)='%+9llu \x00'}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001340)={r13, &(0x7f0000001380), &(0x7f00000013c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x12, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd1cf}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x5, 0x4, 0x30, 0x4}, @ldst={0x2, 0x0, 0x4, 0x7, 0x4497033bd961a021, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x33, r3, 0x8, &(0x7f00000008c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001440)=[r4, r5, r7, r8, r9, r10, 0x1, r12, r13], 0x0, 0x10, 0x1000}, 0x94) 2m34.38126942s ago: executing program 4 (id=1141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@can_newroute={0x34, 0x18, 0x1, 0x70bd27, 0x25dfdbfa, {0x1d, 0x1, 0x3}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "df8a5686a0fab704"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0x4, 0xfffffffffffffffa, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x400c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0xb, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001a00)="b907ef23f66ad4f05c13e542703f", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m34.371190904s ago: executing program 4 (id=1143): syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000050000000100000000010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00o'], 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000240)=0x10, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x0, 0xc, 0xd, 0x2}], 0x10, 0xffffffff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x6c, r4, 0x1, 0x74bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73355f2d2d5d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}, @TIPC_NLA_LINK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18, 0x110}]}, &(0x7f00000003c0)='syzkaller\x00', 0x80005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 2m34.129887738s ago: executing program 4 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}}}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74dacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0e056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_LINK={0x8}]}, 0x64}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0x7001}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', @multicast}) socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2m23.080827054s ago: executing program 32 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000340)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x2000000000000190, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002900010027bd7000fedbdf25060000005389ae80a55806249056739bc1e40295bbff3263637198431c27d88ecce404a2984562a21f832592b6024c61b3144515d4a45b4f25097f128e582a21ade6e8756dac46bf2fc30e8e9d800ff47c866c239317778ebcc3285797203df4e802b37a09a8dde86f3247c00a1f0382f03b3ef99aa52caa28b5074411a09bd93596b30a38ae53f49689e0a32f7d63e294259587f67efeb1c0855a9bed4ce793ec4cdbe1fe77c47766eb42d0d67842efa2d2a45383fdc43c3fab2ae928ddfdc8757011ccbbdb0dd3afdc7c52082feb411e8a3de005aeecfe061f12cc3586b6608b"], 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m19.125489953s ago: executing program 33 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}}}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74dacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0e056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_LINK={0x8}]}, 0x64}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0x7001}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', @multicast}) socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2m3.894983135s ago: executing program 0 (id=1276): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfefc, 0x4}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x84, 0x3b, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 2m2.993903018s ago: executing program 0 (id=1280): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000005c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r3, @ANYBLOB="d24c64f3746bd4b7a680f316861f6bc469b0376bf058a557762c894a101aeb9636098c1a0b180de011959f51b0ed6e0a59c0843abc203852965522c26a96235af6c71868f188b809a64d6fda407865027e76da351074c861c57e56541a9708dab208bc388483ef0913038f1bec6b752e37652016d6b4f4ca49c84a5672de5ae07db176a2387b4c78187f3f1adb56830065160857d765"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000100000f0300000002000000010000000300f0ff44942d000000000000000f010000009a002e2e00"], 0x0, 0x44, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010001fff00000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2c41040000000000280012800b00010062726964676500001800128125852613933c8b2c02800a001400ffffffffffff00000800090000000000"], 0x48}}, 0x4040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r12, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00012dbd7000fcdbdf25120000000c0099000600000000120103000000"], 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={r13, 0x7, 0x3}, 0x8) accept4(r2, &(0x7f0000000640)=@nl=@proc, &(0x7f00000006c0)=0x80, 0x80800) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) 1m59.755767455s ago: executing program 0 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r0}, &(0x7f0000001680), 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001780)={0x0, &(0x7f0000000540)=""/73, &(0x7f00000005c0)="ff023241", &(0x7f0000000600)="29f0bc73cf56620ca201fc0f566ac1071807cc3fc87d1962c4edc508e5a6c10ff4ff2268c8aced5007b0b4c957cf4bcbe1fc6bee108b0941f68ad6c9e4ed94c3926a8792c4bffcba5dc3a2b1974d724fb23a2b026bd1775758405d492a6ca640ed5952f586b208d8d33d44f0621cb0e88b4437f7d02112f2e2fb739e77d09d5adf37da9829c9180b216b069f09a2afeb8eb1b3c110eff8238aad07ea1ff65569711de9312186c20b227663502742e73abb9a9975d2e65cb1872f4d6c10cf4564199a5e2ed1b0ad4b4cff8c8bcf775e39e3186b4af260e684ecfdbf28be5ce63a062e15304515a22ff791c1ac20dd1a851487caa91277dc6cccdf96546828b6a7312bbccc31932b6e68bb01902bfb1c95220903d0c11120c29405ce650606e283ea1c3dcf6dcf3b61ba61fbcff4a5ca88c5f9c5ee2c3314654f022c9bddcf9a4ed4eeec9854e86a8a6429e6b239204308e1b884d7ade3fb8cb135221d5cc9ce5022929c745c6dd21bb4230a163c424f1a44301c5564847409dfe2a01e5a05a1470dd144a7c89be4edd67419d7b2a8fd7b85f9bf975ae2824031472e2de1cca300986295568607758a2af5012a7f998dd569cf9e659ee115f9604975473bde35d8a575d80a271055faa5698910044d49fbb9dd21716a8d8d8b896e328557981d939c8b0734233ae2d3a168fae9bf41d0341bdfa64a7058dd264e689492f9d78ca942e3aca83866a9e9ae3ccb6096a08a8482f5d05686a7f08ad96f989e8f057180b280615571b30073849f2c0458428fd27fac99f0f8004e67cbaf86664802be817d5ed222343e12d41c0e6a17379bc2f8a9b547359903ed6a8d976b6daf5d026df89e2c542e0ff09d8eae4578881dd0e758eed165f175d097097a2cf0bdfe52441a6699e50252d47bb994abf8eda5d0824479c05532d1dcda77ad3efec4466c90e60c8c8457569cdf04d4f8c57b541c553ac4640127fd5ececa873f2b9625d97b2ebbc42418a7bae937a43ad864ebc7c11cdc6ca92b3a0237f6180700e1a1a8283394754b3b8399aef6900e3b270783ac45504d18241b5e6c80a9531ae015ab41510411c8d03263009cb2b9bbd5e0124743dc597f8e94183018fba9db30db05a31ee123a10733f23c8a65fb6815ee3f55991ecb54b55737ed7143c8eb613e7c960095dcdf059b3045f98d5ca6446287d2084708e49910abdfb4b263d240ed42f324658279c9c47256258e279769cbf32476fc6fed654ed184a25d134b7e6aa0bb0396be3e342dd78af8044921968787173ddf55c61816b7247ee52f88c788f4a5713012153e9d5c41035e5f781f084e4e496be4396752e34e1526f2558f49a53ee8d738c06efa1913f2d59d7b6ee63f1eab4a1128a98db09acbd7c394dd0633d593618435450f27d9ac10f0baa9de1c2e22f32bd02ebec4cbf625bdf007cb081c0edba6d3209aa5886282d3d2b36eea1510f06aafa9e62cc44a12faf49a0ab9b7bd1ce6818fe38fbd9aa10cad297ad7be8140528e2f94be7babbcea53003382dbe1a052ef8f972ad9556b2d872c31729776a7df4c37e3c17fae8d20557ed00bc9b6b5f0414b43f9591c7f13f973ca71c5e9f5bc0820b94f4bc6bd2cb69cdb4ca5a5d851e0a066c25624cf616b8d0d3c20679c87b63f8294a23a7f6b9123540904760f0289042bebd332e8fc67248a819d5ab866ab182b07ead86fcb0ed6217647ed75bf124857ef71fc5a9f7b725f30fd2db93d2a363e91228d1ec65b79c02a5a844530137a7e08692e77cfb03aad88774e53b7b60722e99e86ea0eb500166f033bae778326ca9ec99feeea3944232143e073dcced17e687010a1ae6af78de919d1d415835664cf636984eb5fe062ccd69429c512bb921b86d5a2a2ed4ed2a30b52f78b8e12c842b50bb9f7125a84dfc72c2eb9770bee04ab83a8850e9cd872c49b876fb07f9be45e316749f53591184fa60f357fd663731255c55b44d5786e90a60d97c33b12f5dab1c12642a5db30e5c4712d0638d8533399edbac2aa09a33db6437c8c516fc78d309626aff4aa27114c7ff49c99b00b9f8696bb3c54667da603dc312f708b822c78000634dac946ed435c6225611adc92cf10a61ee6131b3493ecf871570dc98a27d63f5ce201d8683ada0b492931a2874e5e0097392f52f9a86068f5536363edfce5622ebe4f65b86e1fe8dfd60a19b3f092437a82e962091a19334bc8ea915a46ae1d1c5137ab9564e2fdbe1007fe9b3a2c19c86513375f37185f0a21e26bc796c65c4ccc6b00c5ff7ec7ba4cd79339dac9a9ffde63a0eea2d302d911b176672e567b397c87ed83b506371997ab5f2f712c5ce300ee48d56c8c90c46265210db3617284beac37efd0f99cc657f98ea0969c14277527b712861761bc9e62b2a99ec774e7f41ca119e49690b37013ef761b50eba4800074ddc73dc040df9309271e998f2f06c62c669bbfe451e9c0d648eaa5b7a20f266fecc6953d038b23700161307c342b233482d11aa237f4ecb00409926863b1eb054f773c6310741404d5704bc52421bbccadb20f0c81215b4d3c5cc8f4384f3496522e2d323036c67c150e8f0db6dab3e790c257436a8a5a0d1f790c0997dd7b9130db94f5773c19702d120add5476ed8a86b2efcf662c0b81f1b2a57b5c633c6e3b747601ed85eaa03327c502ee23ffa681617fa1d3587a218709dcc172c666a0bf57ca898e7d660ec8b45c8b3d46ccc5ddff319e4b567eecf7af564fc05762b88ae65c87ae8f9aae9a5a8eaf6fac55eee341408e6caaa30e355224d511bf67e13da15446104e557121dd6446213598501aedfcbc96a452a55fec7ade64a87457d27332831f64de9a880910e75c7e400c335df39c75dcdf570aee1bf3263ecf60eac54da7f4a7bb7ae09a2f425d0ed9fd52ce6cd8fdc080b38a6b2b881a8b9e61d089e33f7c0da387c63c63fdcf029621daae9053934a13584b26b5adf3caf5e77a7cbbc99b7754e434f5b969ec98b6e4cb0ae6dd1ea9dfa0bf8c13a11783c9e733e71be423ca90f97ed714d339acc8f5dc5b5c55d8f89e9e90c66b3f85d78509c09a95cb6abeead5683526f912aa72fc04a1548999957b0249f5cd25f0507d2bfdf65e3cc02ec24583bd0ba31c2b5727b708ad16d48523d38964048e8dd24c4391b64319a01d210a3c8ccd5d5299adea9643d96ddebbae84e24d3a4746107e6dbca77ec11ffcc56059c05efe9d11df6428cb0ff9db19f27f31241e385d833552924abeb03bd88e88f5d16302e743dfe94580550018079632953186d4c25d82b7c58f8facb791caa7d224fb5b8ee1b705fc906e35283ce3eb716cf3060df57182e870eb94deb7bb14ba7ba2e9d916fe77b9951ff2bd882858edc75e1c1bd79e055c086ef75233adb4100a5137c3d250779942f39d057e18cc5646cc4d236e431a230a8d8d8c9e74b4ac20d3221938be16cb18deff56c4cb094e753ebed68e3ba2d79996ccc5b306a81553d2229cdedb04deecc5c569ccafb3f7293968065899939b2e0a9b9bbe2556fb4e66f2b18c78cea5115817721a3fa813184d4024b8396c4161cd67ea45ca76383fd8778d12d55c6ded45ca179de8bc0faf101f56ffc96a4a8453be8975c88ddac0d38de4b2721994d2d92a5bdee6c4da1aa775c24e241c8b99c7664f6d79b710fa77a70a5aad9da4c14c25500a3629944c035f0303388a792f138d9a07d76bf5825450844d01a5dfdb0c6170be0ec502d66fc827a977e93c063d149a790309f31d09bb2bf4d5f1d4c8e06cb7d2e738203c936cc3623321007d8170aaa905df09b9439b4fb9901dc9b45d21d89ff6bfda62cdc7ec0e20399287e27977aaa800ff08de2a568c7206adbe76b575a553c53428f5e9a666c50febf9d1e890f9c62d8b0cfc7215cf4d76eef884e2933a5db61c678eecc9379639683adcc3d55cefa7de3a1160ea96b53e0d96ea67fd6547146c0664c8c80b3ed252cc2a06f8dae26c7a1b522c4bad278173f89b2743ac4951f1de4e605f31f604d0d7ec79487de92350a778f90e7039bb606407a522fdf25c044a42beb888c86a4422826b22166a8feaf34ba070e36760558929eea78c87089013bab1d4baa094ef9e8c4739ff46049665d9570b0693bd699207561c31ab993a79f1cb19adab9b81637598fd827ab95d1b97224e7a6830b26eb2aaad8e95774bfdbf5090c03b788eb5483cd993b3b13b7c4ba7deea86dacfb2799f029f0296c75e25fa02f492ce0e1cb5c8e8235a64d08660b8bbf7dd5f51de97d666a8c61d74575920e058e970807c85108107ee0ad6f089a725884d6152463a3287a1663d1d1cf8e8ee25398cd7a462b01a030d5c673e2901a6a40f1cbe179194d3a88dda95b3845885e440c3af7d9337e6690245a057d1ffedd8ff9b1529ef5e938726fc3b9ee79db247dc7a1c2eccf1eaec742b9bdcc2d0d08de435588aed9a080bd37a3ffb12a19f3a4db2e5a948b2646f1a61c863a19f6446d43466c9c9e8251fc3201f3edb9ba62f231e5731f857c495e9bb93b221fb25c74a505ccd89c6a334ac0e06607a9b258705e160c5fc4db184fa8afaa04d449e92651b549a16b9fae758b687ab44725056d3c3e00dc6141905a8f6b4d01950efd8e56697ef886c9bcf5c7aa063f3231bef19ddddd34e42806c88d0d7b8f2a9da7076b324de9d5eb077c7c86ca4b875b646c2e0e934c0b1dc30a16546fb464e75612ce64a4d59d8556ec942845d28d0676cb3fa168f00228e99d619e792259928d25a2ebb3360267243201fac2e449b36831167d5f1ecc4bb822f04374dfed1336785ea110795ca563201e03200a58bdb0f6037018291e574eb774d9691275d4fc6bbc0aa81d08c5eaec10b4016c400d05a4aa40c524211650f4214c89737e90bdfeb84835ed71b55b6f2ed06d570d984ee318f73df38abdd0ec396025200eb7e8de75a6b89b4a3da388d8a9eb55121fe3f2755bae0e24fb840ecef1c60024f79e4133d55e863e245c59ee36fa59b33fd9a7367ca0d8886ef1589b9963885419e831fcb4c907efcd015e3d3cd9708836a16e904696d1a76f164290244b74c975f3c20919263d4c351dfc768c36bf64943072f3b02", 0x6454, r0}, 0x38) 1m59.105666584s ago: executing program 0 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="18200000410001000000000000000000030100000f0000001200010000112233445566778899aabb86dd000004000280e51f03800c00e9800800fb005d9760f61863345c9734547ab648339ecb55c2246b57b2781cf8e8df53e8f789741d5d6db2e34a6788661bb832f4c8527fa2e0a6aed2dbe22cee6539a1ef1a517bffffffff4d1b9fbf4cfdf72262994dba8d5fa7f77186857ee08b168adf9e19838abb33828e739fa7b8c35dbba9278f0050253cdb47a111259c92a5bbd0e8ec4778f4354afd83fc040d4ae9ab57ca2bea79516809a8d59393557b27f8f74e24a58ea91b1e202997e9d222010d5bbd77680da2d9e44f01c418d6ebb809d0d4fbe415fcaf5c4e89cd574da2787ed40aaa285a3d6f0286bd00c25d6e7320143a1995c9463e7f9061680860009c29f751053abe8210f62b6b0d4cdcb7d9d43d05", @ANYRES32=r0, @ANYBLOB="6513d4808101dc8004008f800800bd000000000014001f00fe8800000000000000000000000000019d0f7bae5cfd0f02e580be717810324b39316906f2fd58b5f169454b16b0bfc6f5fc374bab1078b3ef1936e49db33a093aa8b8adf08f5b564b96911cfa7e32a4a7702097457413103960f707462876e2042dd14f9de51da3bf730cfb701b81bddc1865cabc52734a7f694dc830e6a72fc4bfa930b6efed2cf53d0ff9ac50e21bab079d2b009c80b488ea7be55596aae4e14a3359a16c6e44168d5f9f41d7b529cfea700a0a6f873914a1afa351a7bb5644515940afb329d635e97585ac19a28db2449cf3996e10c7ecb692d7b4134eff191878bdb8ded6ea2a0c67fa57719555e1e5b93e1cba0a7a5e48c1382eeee12e32e57add7f63865486836e7bb1b709104ab3c54c7800c3f793b363f1ab5748c68e3ec2584d97b94a4a128b2108738c87dec1654af5fa0a003b09f8a49a5ef933c0149606eeb97af08557f1bb92ac1664d169b39e13657430d014003b00fc01000000000000000000000000000100000008001900", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="1110288004007900d0cc76805d17b29ee6bcb808259d4daaf88dafd41fbcee4db94baa1922dde52afad146a59dd8849782ec8a7db53068b28162556d1fdd216b9b180032ab387d49653fbe988402d144d0f55221c5c3375fd1949c05d310ae9e34d9e8dea50f62889027e06fa46621415d0f99f5b69abbdf4b698b8f5f9ea2eea94aa202160c381826db7be7c6c38b255684438b8ad94437a14ad261e99dcb40652633a0b579021167851b5d9a6dfed5cc4d277a99ff60c03a4766671d2581694bbd29e07bb43f644115300d25f7040e197188c4d5b50fa0b6aa539666725b5475334b73493ca4256e4a899b6b2498a3e3b96f6061a36b23a0b4012e1a0547b003e66204d9a42959c27209cd6fa6d3c84cbec603d0df255fa6cb3c92021af4cb04b1790b7b6f1db7f8c1bd957c4f80adf6ea029a074fd3223af37d9788b8848c35aded27fe6ab8532e67b8eb1704be6b9ef4ba6da0ef4e0ba80481954eadd1bcb4daffc1a8fed8d90f75e543c02955fff775899c087b454bfd16d3fa11311965dd500a3a7e5009cba638201d6713b1f0eec2631bbfcfeb0e0251e8e2e21d34217a3769fdcaa7944fb20093939a188cad6e970cae7e34dc8866ed0989d94c2407e51701ecc612ff24b7cdfbca59c97cca2fdafbec38c84bf8ae8c28bc2f2e6b9096f733ed0fcbb01aa0f1b44c3b01d055883647e27937f61e16f4a17a56fed0ae07b52322ff7508df537041621374d4567de752135ebd28cd12bf65b5984b563e5e143bc621074f859c8c72e8f85b58dc6b668202c088a782a3e1f2d8f2777a8d2cc8ef4fba955e6b2aeadbdf36c89bd3a8c4748217f7342316d3607bbbb27f2d94bda8f6d38c891fd71f85deac014cb8786de3245ff6a9d066be4905ffae760f4ba28eac79eda63f1c44bb71d296c99b5268cebf6be6038a2efca540fb887f4d09eef50e533d18504ec0e96ce5b3620417cd582ec1010765e34e0566a448b7c1875676b1bee0bc6daf465cadeffb8d82177f0cb88681f14a8d435d5a68fbb72514d2dc12f971e072d42a73ee7fbb53c114da83bec75403516473529ee90741367cbcd7fd5b7b495da431523be855d39dfb2e2fbd2260354227bad85e8794de1f14a7c7cdc89e2269e343cd8aac9c5a70b0e7d8117b30a80530ef23d95a54b0ce0fb7d9cc3f65ad15cc2d7c5efc8b1a5e479c2850f225b8fe202b19f5e47e789fb90ac94d274051f7951fa1cf228e7acbec5ac079d5f9eb30ea13b287f9a1cc5069f2785f947caea1922454c654805b6df94d3d96fb4d10e0339adc44295722fe49408fcc2a233a31f2e6e8bc45baf41e42c35b95fda249c155cf55381ab76f16de168e012d99da16dac892c690f948af3611f27e2d032cba8383406edf08616ad221ba8b08904d9882ae60c46d1aeba6e877ed9ce1e47fe2c3bc0d550cb4ddcef97ed74d655ba3b552f807edb776b4afcd886a55313804b04aadba2c880d5cb9b5fd1af5cf2284ec1022843128035f0ef90f9300951396d0f60b00fdb8182df067e3d5e8dc2b4b49f7e43b5fda2ba93804579953043583c40a6ea8d35ccd3922136abf28c5fb050c6f618e2c6ab9d4f5860c1e270b4f0e63b6fbd43a1b79cdd8df2720e180257e87bd5dfbabe3527d38b7ecf539e73bff528284fc473dcf0d8835e99df72b59b93acb0e79130cc52acbc2bdc3a6c45e4751055262a36fc4e888dbeab92f2287c120e1daae0239666fe884c23beef8d66a41d524cd917407089351c4bd6c6cd34349ff3ff41304a8a4b3d3a0e125720b1b7b9428ee5c4dec67f494dd8541d9fa35cda3ad29f2096fb8f49b51ac984f6cc18704585eab356e373c0643392836eea5b3f6a75baa27158f7338c2b5a176c06c122f6e7ded2ce02973e0d6228c7276866afb6afa80b80cda41caeba19d3cdf7db0bc4a8325661b6125f4dc54f4cf4e9328f65caa90282f6b35514227e188fb3e2cc748c015c148d9e89c4ed9e6c52db9f1a7848681d775e97ec0b8389c12292bae77e03656ff93218def90b8349e9451cc7fffe2f9d2582d54245e3a901ce458d966e4045e918464e4d68b0beae71555dd70a7218432e990d4e39c638e280db7ac349462a8a306b7d9dbfc21cf6aa778fc652aea2211d07502e18f5ab9b97db476e4db831e6a26a6edf4626d0b49ac3d0d617de53317420ba9b7f07283e322bc8a9df8e543a97986970a2a53da322a839c4f961eefa47d1d6d4df9c2662b62a9293637153ab388806295f34dbd31c358efc09033eb07188611ebce720471f1594a2708bf063496dad3bfa23807f9df95cfa8c3373a9c1acb2fad5e31862cd3feded5b088329e85e920326c37f6030ce84f4f4c79e8192056d3f8304f6ffa5cfeb0fda7823f9a0465516196a014c75d722293b23f1081a9cc26e488e4bd6a22595b3a27d33fc60c7a40bfe486008b22f1c83af5116e18657aebf0f4b3163af6780cd845e13cfe00c26ffc037de4b4a6957409303f45fa213e6ec5d035080b6af9fb80627128f11f58aaeb7f86861372b87f855dee90e395f168aab709316990fd425fc32054f800cae693711f940aa4439e644bfb1fa919620a5946184cb19c6b59c11d2892f6ad116f320b652f3a6faba8682b4a19e2573c53027618bfc94d3fed18afed80d86e0d1aee710f4cffa6bffcf751fac975ed8a75256c3b8773ba669a27076f6ca8d357d172e7866874d287f485315baf472ef922e2e70daeb7701e17bdcd39a6c8429437a91bbdc1e581c7f91af7273b4b7446303c0333dcf4450d2f6c16d8a62ce2cec002387db30bfd4a4fb8e4b8fb6f3241cc83e7c60efbca4eb810fa0bd2b7f14e173acadb7944f4e71f915fc7b8b1e87e822835a0900ddf550c553f863fd81baf2dff7e04d49d5d3679fa635b44801f747d08250fa36a6c4c1f6389bc8015487ac7f4b6a2f146bf6e6ee98148533d88d5ae82f60048a2c1517732c7f39f2560f23d077b1683f32998d183ac3f3a636caff2fe8dc51faceee58f83ec49b540884530b67081616c075aa06afde305c2e317c50b61f4f36ebb315cf4dd94a443fc8495a078476db2f657b63045f613e9c641a4ca354eb2ca1dfbbe2c9a6b0e37c8908e1530a53f721060dfa8f0b841bf4f547f051c1f2eb33ecbee01dafe5cd1264706d2750a2cbc8915b5f3a45174c1f7117c1f34bfa98709dc20004017568158527438bbddca1ae31a9e058ae324f30dc44747893ad6d542a4e4c7139e61bd1739e019c94968ee8001e9bf954f07e8a44293b6e33b6ff6f6b970a0cda22250fb6033618f269bc55c34861475f8d4e590346bbca8ccdce7bfcc47b4cbbd4753fff8d1b100dab4ee38365aa7710ceec064cfb80d3d8322eded241933f4d43159bb169b728413d892646e6bed727d2d4b32f1f0e8c0a1ebf26a4ab9648b51db058dc9ab362bf6fe97b25995a8effc3ebda506dedbb8c5f8091e4f18d359d8edc1fb3573b03064892276c663e977b44e66741b93042def6f8cb1fd788e967190b0cc6a42f015681ed4733bc23ffca374495b9c6c730dfd7ee722233cbd6210fa4818c98463a69c337b0efe61515bf05f857b7a355c4669953a39fbd86b3e31ac6787446e62044a20579c3bbedcee4ee9d6034776e44ca63eadfbb06e00983b7beab66544cc3397466d4046715558c9115492c7e31a279d2165141444811f47afc634a76e35982110d1cfde5da67c836f2fd28220065291e89344458b992eb1e50a7091ce361211217f23661f7d8f395550cd391fc181287e44de84d1f5aaf29276c5f9e6a68ab1e8aa60d9333aadde8f63da3b4ca1367399c0e92a8c5d9b8f229fb0e30d59f23bb921a2efd3c413933b5970ed3300754f117708064a50322cf5d6aba4d203868f5c76e7526875719b3474c89275a4e508d7da06cf2f9fd4a1e670cef03ce5ba7baf753fd95482b376fac089bc93bab259675176cc2afcbd6a2827160990650186dca59b18a4c92480f0fbbc064a8a8132fe5e238b3d98da4b1f0f1d091aecee7962c7c2b1a312510dfc73fc3384798bdd1e4f496146b16daf4b6aa706ff9ef8f1b80580b219ce65443abd8b7beef7706ff65275b4a67044dd418669b39be950ba7f69952d0420e936998a4c0448b271820717389407ed1fb18950b0019baee71cedda78659846ed7ed822aa30b68e726798a776a88dfff8f4328e5babed4d7ceb62d1f643d1fe69894f866e68f14add1428a646bc23c89945edf7700c60b8144ee176e573f4bdcd5f7727c89b8d92a57181c6c0a0b7f3c74da0c13e73c8a19be4a089349b771f9c125e8c76acccf4abb384cdc557acad5ba137f6f6fd6dc31e3b7bde18dab5a1b10bd09c43a90ebd5571138ea313a63a3ab530bd65fff75ff2a007719ae5ca3a3c4f947aab8a7d28e96d6185ebff6e06234b55143c81972b15bf582c4eabb2a2a1cc35c6e4dd6246088e2cf100581e58ff11acc102f9ddf24290c7938e349094be2eb344cee097e78f8e677b19042d9d5c652050f091d07b49b8ef485da9ea60b731061c18941cc34c088201efbde6b78e9d450cc919664faf83386786d44e0983682405107cb23fde657ea71682dd00af4f93c0183d9e035cfe944c0d6639b201ee96bb308fcde1e09392bffab7689eaf5fd63d21af4118438d1ce29ff4db64d256b17afd8a15ff1534a489b3c0f913aebfb20f6f8406be3064d527bd981cc04196fba8e329fee2132fb383e5622ae8cea6e27b4115ad944db2e7fae00b8918d56e29f850dba3dc67c97a0d40ca859fdb23bf636be87037a399e2a05e3f81227d1e0cdfd1d03b49847d11cff878a7700cc9f44bd0744364cce433c80aa42143d9f00c68c84c845f2540efea1ecccd6be0de3ed14ee9cc8561f2562a2cbd177eaa59d91d83740a5c59670739a9a45b5710029bae22183214b5040d02b4098c4bfbc95ad088b810d6bfa6d6ae1b2c4492e7c4ef8db8ab6602f95dce14d41ba3c73648d9e0c460ef10866416cce0145359648a3e47bccc3eb4fecd6d0b2592fe561d8882806ed83db47fdb34938a2df3d45905e50c26ead792eb77059bcc85be629cfe45217761cfe3d2590a1be3e060b6062e8e6bb444e11230f4a599f6d91ff74846cdaa17cea85205cf78a89b98ff51657530676c187c3ec00753afa9b8e922b23ab0360f38dc1beb2867a7f80bedddc4b41402dc3f935a85ff5b29a9ae1a587bdc6537f4de3299d5df72d7dcb1de5bf809ae7267bfab76ff2cb289d0e90609ba7459ea5ccb11b6f3c27741299bc33acaff6d159e1aa0201cb19356e45c46fd2345c9808b855e3aa3e1f60e5bd3618b5da88a5cca65aa5366863a64e2abc103c19b08bd6d4f93f69161d8e71801b8ff2d5799c97195dc38c875ac7376ca740a8a6ba656dbd98f8abd81cf5dc90b498df363954b99d427ed37b843ba67d937763c7d0bf589d82ab6f76a1f1c1daa856eb130be5e5f16642be266a518821c9361a49ce9bffb8125c2a6c3b4a0515f78cf571e83ee5958e6ebe021b1189d76fdd2a816f02df1811891736591066fa2cc98e164491fba16f60d80c050243f15cb2e74bf5df82cda21a78a3882408bd496e8fe5d58a74da2727f4bbdd953e266cab4ca2102fe4d0b9c1340793af2535689e12c79d7c5d2cd03b54fd563d681abbe4059d7df3fe5d964249d2e818ccf8bcc52c6179099f5cee92a1fd6aa01b27c163b7c6a1053a84ec4d09455715931af17a1e1ff6c57a73ad5f5e8e78b05a42f80635806741c3e7bf135a0d0af5618d221850d2619c96e0eee448fcb838304005380040086800400848000000090f833862cd575f8ece3e3a68b3a36239013cfd9324fb59657d99ff2c6970d66c715b43c46904b56d78d231718c913030978015e8c2e0568972786c1808afac9668adc3305a0cbd25d022b123c0eed529c30d2791aabcbde2fcc076f76f5f5784fc36575ebe2b72f2afb896e17c9495d1b9428e4ab3d783b1bdcb0e7fdaee8eedeb67c5be16e8883f56ed9bb7e7933e923f9572b3ae9e4482f2c4e85772868bf0a91ad86b291d80f442adc771354c5c3fc46df414237b9d1163be9c922b8f0c8b86028b4a1686a4b63c61c1337de9b0ee7342693b35ecf45cad6a7a54ecd49912686d9df57c8e1b5ede1aafe126dce72490aa7af2dba43e9781335e56c85ebad97f5f0c09f13505581189b87ef603c6caa51a1e00063933abf7f1ac5f3a45f7198e57cdda9f9ec2539c7ee84441f0bd01c167d0787d4e283adf0437f0b6e28951f08119cb7995685e5d7e5b6dc300ca35e5098016f6e47c2279462d0931650d023d9927a22fdb2ba61c85ce1d59a01dc02ece9b460461b297bef305bbcc3ac9b988677d65aa064fc6bfef4bc69ae2edabc70ad9dfc42526706be21a63ae3ffd1d2e2a588d39c27eaa8b37ce4e590ec7c45a23146292982af680000002900bd006e3f9e1b36aa5f5fa9c423420601ec9b03383c68c1f51f80b1955c5b6f9c7438f76867d08700000034534b477e9268de27a3f92149912c279a90b2e82ace5310f152c6765318a5886d94fc09d127bf0f93847c7326ee267d5ca9cd6d5f54be28e3d7ed3dc233f72c0929e472d418528669b7c8829c42b2dfa6249ccb6793d1ec1ccde07ace5342aad94434fed046d56492cf33c591ee5352ee4d61ca8660a7e52a02738f29d1fb9ca581f8d5c3a8eb4f3d239337408ced6a32414403346435c40a27c78ce06d8226257df5f8be22f38a62e05c3b7ffbff6e65a41482f3bceef420548ecaaf01aeadf849911d62f777e159d172a4ac6f9ebab440f3cc0d839a661be56f100733c3fbd5fd6a7f154cf51a761718e8e29e33fdfd857b208526329494fcde03c8e1c2abe0e7c4dcf702f915563a1d337d4788fc7547a8100b7bd9471f6adbb2f35fcc16f0bd48a3b1e22e7cc592ba31c2b7dfc19ba4729818b85ce5a346e34bb8f1c5cd22ab7616ff85db97073a9fcef3b014a12a8cd7e28542e6c5d0745f78af57869c58b95a8237ed7f7f8311bda01ae1a3982bf1dfbbed3183410ee37114c6f5818d116d6826bd2abf187d107e503822be21d56c6f7d1ae3b3bb6b53a19bbe146f70172285c40ea28dcbe4133963437ac4070cfd63abd5ee2e97e9b2795eabed42c195f906e415090dbe17f9e708edacb4690ec1a673f3fdf853e445ba2704f38ac735a4704f89d03035ffa25c456ba798c066d4f126e8c47bd0d7e7c4b6e525f19a0392259bdea7cd6c7793cdb1e66d69964808d16c8f73e6dfa642b763d6af8eb226f8f7101649b3127ab736f3993e4dcdd287e4b7e24ffe652625f263f6e5f9e5c3884075d155211ddbc2c794e1154c346a96e36e7e6655632363a8a32c12ae48f476d45675ed200e69ca96a80adc7e212c0ba284508bfe70d14a8811b9bf6a112c28fbb0e3ac4116c68b579802ed72de36dfdbc77b7c53a3ef6b4e41832f4fc74ab9de44956c6a1d7234d63ede71f41595b4eeed57e08ea998c48d07b786249e4c40fb34f2ab53c1661d780a4cfe40300ef7c38c45bdee38c08b8810dae94959ea07966a1bde4c3677777cfab3f15ebd087aa7a4b4bf953b5cc62e3db3edcebe3e5ccdaf49dc4fddb1342344b1e494563e17151858cd9bedc0055e7db2951a61e0d925346406553fb018e764d3746942f219c50594b0b0cef8e9c83d275c3a23ca3d06f903d86a747c3f0dd40229e2f76a3ea9c59c03e9b519bac58f75a3c02d1c2f72db70787cac9d419726ebb50e24909d86e0d24f354078447d8a07d6f26fdf75ae54677f08c3028c7b4ac9988105b59fc114694092e45da9d60f89c8bb9489adf5da4d56145bdd8f3a41f198d17954229c64867c323a92d1ac8595650d4ccfef3626dad65f12bb5565a8e95b1e4f902cfce86675ec62a5d8313effcd8c529e771d81b704d56c493fdbc132980a1ec55a84b14ecf99b88a18133b0f226276e08e3eb547418a794e952a71b778f5dabba108a29e7773388f2a92ce32f4a52a4f45fb2b21668bb3e7a70e4b2a66fe2922874c19315c5a39856a40eb585e3b9fe663694ed5c5e6af71552f33e5bf1ca1f7bc63efbd7fa9425c41f6f2faf3c3e58a90da886c6a6f6048e66babfcdf390935ed9c024e565722ef55a46dd67967341c87ad9d298561aff8ae3816c955a3c5f6c42c90a365e42fe8f4f07230c27e458ef61592698a5d6da7243eb724d6fd252b6d1b7441a3b938bf863366549fe0c6ef28781252a78b9b042979b66213863a57727487b2d847315c43671f68536c4a788cdddf95a88cb3eefc71342b71abc2317a3f98fd0ba8c5d798805ff0826054d8a49f1a1eb8ed0bec6056f1ad0338f72ace7b9695d5eb223edc9de2f8dc16411bb6d6fa4df238da550734dfcd7225b42113d241e8109f4c3e70b7e83473c0e931b9f168f77d93d1b10265f3dcb71b44198e081d0e6b004276a092e320b37e5afec46cadcc0c5c5a767f85a7d68f4a02fc9fa9335508583066a6641d4017401ae25b210008a496083bd6ba78e23fbc594ee18d424ed9545a99c0ec5f7204786e02fdbd30690eda616ff5c9f39b12b9e88438bcb295524077286cb4b45be50319559e498cedbe4f577956ad1e1b62c3716376084b6187e703e081b3818d548266af05c6dc07ba9b49bed88e30b7e95922ea39a0461f278dea5dc40cfafce706356f27558cee1266855512d971f7c1fbb4777408259750f380dd98e6eb56bb4f08e761f5566df5e7a678a384863d162ba76e179f3c703a55deb3864634ac59c4c42b3e948946bd7ce88c1a31ea813e928544b56a403890351de9c53d74163f2dfcd358444f5e98e44ed8a0124a5b168e39fc06670a253f45eb84084db89c7cb99a48f8cacb9ae1bb40d875f28e843f4063a12f74535d62de1b727bc112d61edfa3bdb83062073488c6afc8f4d11f8fa5702a66ec7baf125036a365e8c4e75ff844795ec0291c05b3885e9318b09395ee3907f1a098e245e13fac1ec483988297dff9111432d0c337dfb218987dd6311a792adb966a41ecea843eae4abef3362fe818ffcb09d17d95340e9b7c31d0f90c31a38b9c9730a84a250c88782d11d888ebddef875acc22ebf7aa574f48ffddf5a77a5ce9a72fb42644eae0c2ecdaa961a4334bf634e4fced43da24bb72a5581bf63e6bd79294ee8354800c7a226ce1936a29e3d088f8269c217e40b6eb784e3657ca4eefda254abb232a76820a267257a9f0d201b5fd5e1a9af3b9e81a2ac130daad1a39b3db392df9b08f5e26014429711d93986cd0f0348f1dd76f9ec9f163f831c5d53ece0777fe6641ac14859de9a4359613b9880b6cc6b5290dbf533161f4e3229216317535192fc2b159c8d4afd19529f2a83c794d1d166796a7c354dce6c18653620b251dd09f9e770a814fa01c76e80cff781c4d597a08a2e5d1ad1fb320d4b1615c11f4bea1c24fd816d41362cfec178a5580ffc47bb9a79490d44aeb62e63be8e1b426cc795dd8dd9d8243a4ad4038f062cafee41c79117ad634cc4bded492165c71e64a07e61fb859ac8e8b1d94f8c5a4fb73d8675a7e72e468950adf320968d9eba67aba642c0da6c8571eb9bfa55ccf0cf134c6affdc021521ac5c08f0f71f0523ccd2139ed9473ef855c1942a37f705822b913e17adf6594ca6d2788d3d1fd060e1d545b4c85def7ed3651751534d7b356509f788c082a13d7e6aa9da138f8cdf7f1cf03e1a93b0dccaaedaeed2cf7ecb50d8e21503699093750010a7c4f0b1a94c098d87a6cc5a2f89a9ef1e95b9794ebcc999370979927bfca826364bb11c952f1bf62cc8944c9f19812e0fdcd670f9a5251ba73e36d050d1a537084facf37bface2403d3f1728b443fc76180bab1993d8e411dbae0eb7fb6e8043ab7adc4c4f3d93673804b0051ce44aaade6493f1a6f5e68417efb166de3117ba2b286def208061df878f4a6c5473fa668cd58bc5e350d10aac2bea9b6fd17aa267d411f651dc15899bd76982f74d11b7c3f46ede9516f2dcac93ed8fe5c4c7f0d4386df4ada3c68e03e7c0f9fff350f811ccf799288c5e0b46c4d4154eb885404f3a7e92d680c62282b27a82bcc7b9ac529e961367ebaab71d0b6a6ce879c42761c96524e5659dec48527bc27b55e39a764d403faab1970876445e289b295f742fb7620f93510e45a8f53583cbf561951cecc77e90081acc2220bba6bed5bba4f62f439c29ca1403133cb71cd7a2434518c0731d54d51379e70193f40f75c94fd92430c9e933775c1c5cfdaed372568c4224962aa6c945354d09b1cfb93cb9fb0b3a7688af47b8365c2ec3c5c8ae1e2f4481a86db39c39087418639557b65a354f6e89b1915daea9e74aae2e3f1c12b392c99f10da6e552603710b36cdd521a3ce1f6654289dfd1194053f7c1b0358c0b67933e1cc14fd4400e74f5604de255960eab79e14e2f08a18ec8c2c3308782a9d1f476fc79c30c3e2a30594487d56c91d42f1d2e18925974c91fbf0c902bc68a7d22188def94718ccaee64530a3ddb76c73534e5dfe0de48e543b4c5fed9f75a8076ab95f33c99a4dd3080c6a759203ce15babf6f600bfb755e2e8750ac83a8d1ee1bf8aab7eb6539ad45ef6dd9acbf9524db07ddedad8ee6aca38b8eae67b2ab71b91b9583c7e7f3b683bd7955d5ba4854ede91c652c12bf92d3a368cc1cb7c9734a10da01012c19ca34d1df1c1ea22913b8681995dd77478b4018d8532d7241fb871d8a756f8958f501a99dc060bd2d6f16ee4d6ed58e2ab477271a187fff0862110d4a0f211400466b1dae33be83e8246854612df485d44b53a4cafe45b22fecaf9befe5ec9db60387fcfdaeaadffeaf15984bdc26cb9b4c26fce2593419bd8c2086e9d365d12a3a21e1b491f291a114c6cf2ba4884aff8ca7e639819bee83640d7bdabb0a53a863698a04e42eefaf2699403a26554c4dc856c5d32322000000"], 0x2018}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x3c}, {0x6}]}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000680)=r2) syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa35810007a24f4f0e06a124090008000000000000486b23879a0b8221c5d84beec8234b3e97d6cc035dd47f256f237c1d7662c3c59e920e4112b88d711bf067a8194a49a9d0b9e451e9c5476689d9a8d1a66262e035e747e5d1781d44d49429ff8e11dd3eee530dc08576ba93b6cef4a057c245bffc1aea39abd6856c521d6a"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r5}, 0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r6, 0x0, 0x3, 0x90, &(0x7f0000000880)="fcf613", &(0x7f00000008c0)=""/144, 0x5b8, 0x0, 0xbe, 0x1000, &(0x7f0000000980)="21913917376f230d3ae57f4c7d48e2a4d0ad39e2c96cb539f4ed9a607863ef87a9576011866535664ab7515f49c1955ae1060c14fab463be334a16038c8e27a8bff9b5d8841e4eadfcae196b3cf36eda0e6145b30bb6ecfe97e2a3a081f8bcdc597ef9b24b37ca43f41d81ef5bb8539622bb0126182ffce7a18e96e5b5891b611a7c31bb7c4792aa720be5e058194c70620da166344f1c24af56b81c6add2834711308251ca9c1a8e6527af19c95994987c16d99f8fc0730972bd611c757", &(0x7f0000000a40)="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", 0x5, 0x0, 0x8}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20810}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f0000002740)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) connect$bt_l2cap(r8, &(0x7f0000002780)={0x1f, 0x2, @any, 0x0, 0x1}, 0xe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x15, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000001c00)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000001c40)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) r10 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f0000001d40)=r9, 0x4) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0xc31bd6b831447f99, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x40084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2, 0x2, 0xf73, 0x9}, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000440)={'vlan1\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8020ffa1}, {0xfffffff9, 0x80500}]}}) 1m58.725074949s ago: executing program 0 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) unshare(0x28000600) r3 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) accept4(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="6a3f9ab8d42d2ffd508da778faa9357279d3a8", 0x13}], 0x1}, 0x4000) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000080)={'geneve1\x00', @ifru_addrs=@ethernet={0x0, @local}}) 1m57.908785998s ago: executing program 0 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0xffffffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002900050000000000000000e90e"], 0x14}}, 0x20) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="c40000001900010500000000fcffffffe0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000cd59fc8e8384cd83cfbd000000fcffffffffffffff0100000000000080000008000000000000b135a0903b1600000000000000000000000000000000000000000000000000000000000004000000000010000000000000008064ed4aa2fda055000000000000000000000000000000000c001c0053caaf7effce961368a30c0a1ff850d0b2806a9184edda726c17c10305c08d8d08a83120195aa00afcb62764715d2134a1d798ddbf445c817f345cdd87c97ca82dfece4116d7c5607d37700aeac413dac100"/213, @ANYRES32=r3, @ANYBLOB="04000000"], 0xc4}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) r7 = socket(0xb, 0x80002, 0x1) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000600), &(0x7f0000000840)=0x8) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x5, 0xe, 0x0, &(0x7f0000000800)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x1b) socket$netlink(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000004c0)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x2, 0x2) close(r10) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000880)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r10, 0x11, 0x68, &(0x7f00000008c0)=0xa40, 0x4) recvmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000082, 0x0) 1m42.804513093s ago: executing program 34 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0xffffffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002900050000000000000000e90e"], 0x14}}, 0x20) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="c40000001900010500000000fcffffffe0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000cd59fc8e8384cd83cfbd000000fcffffffffffffff0100000000000080000008000000000000b135a0903b1600000000000000000000000000000000000000000000000000000000000004000000000010000000000000008064ed4aa2fda055000000000000000000000000000000000c001c0053caaf7effce961368a30c0a1ff850d0b2806a9184edda726c17c10305c08d8d08a83120195aa00afcb62764715d2134a1d798ddbf445c817f345cdd87c97ca82dfece4116d7c5607d37700aeac413dac100"/213, @ANYRES32=r3, @ANYBLOB="04000000"], 0xc4}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) r7 = socket(0xb, 0x80002, 0x1) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000600), &(0x7f0000000840)=0x8) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x5, 0xe, 0x0, &(0x7f0000000800)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x1b) socket$netlink(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000004c0)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x2, 0x2) close(r10) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000880)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r10, 0x11, 0x68, &(0x7f00000008c0)=0xa40, 0x4) recvmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000082, 0x0) 9.399456167s ago: executing program 5 (id=1777): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6, 0x3}, &(0x7f0000000340)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000ac0)={0x1c, 0x26, 0x101, 0x70bd28, 0xfffffffc, {0x2e}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x489d6}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0xff01, 0x0) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r13, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010036bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080001000b000000080004005f0d0054"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) sendmsg$TIPC_NL_KEY_FLUSH(r11, &(0x7f0000000740)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x2d, r13, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "91b711ad63600f18ed3b332a342fcd904e8d107ea1794cd97ca7f928f7a9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x805) (async) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000380)={r6, 0x1}, &(0x7f00000003c0)=0x8) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010029bd7000fedbdf251d01050008000a00", @ANYRES32=r9, @ANYBLOB="0c16673c2ff9ffffff00000000000000", @ANYRES64=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48054}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) (async) socket(0x10, 0x3, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000008c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 7.552589661s ago: executing program 5 (id=1786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x74, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000006000001aa0b00009004"], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000f40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x1d4, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x42, 0x6, "a0eca9b6fa6f7a6a762dee1bba4fa8df3c7995cff7765d16a6afcac9dad1dcafe062e154e4bf8ff7d3d83ddf6880afe909d5b3b98522ad7fbafe2d1dbeed"}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "e04dacfefad93454dd39310af1af9055445cbaefbf0328ae1e8ad0b5da7bd38696740793b1106cafd55244fedad9653dda5479f3f527ed3eb5c48ea9a214ad3f7dd45e420f74c0da410c67067de08b0e1d0bd8f07e73067308fd4d2d089171c51ceff19d3a9eb7aeab5671d744097e6be00c190a5d79b95dfafbf297fceb6196b05081c1c2efaf63269d9acc56db07b0aafd96fcf83dfb6506d2613c201e110a1dbb5abefdf0d60aa1abcc63ae5802c5fe4f13f9764a8c6407d2ddd44d10aea3d70d390b675dc5b3e819eb61a667039e22703335f6b3243391771e3d0a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x66, 0x6, "d2292a54ebdf2aa0e1eb1a1f1172254a28e886edb3304a48a1d6d05e205ab66c68d36000080f13eef39d23ee53a30d4463a2a05edd8a78e84e0d373a12c64ea2a94e22d7adfcd59421c94b54ec42102f52808913ae0f3de1e3dfc6ce8c3a5d7acdd8"}, @NFTA_TABLE_USERDATA={0x26, 0x6, "e8f60583a58dd4c10766eb9cbf57418ca4506e03d2ec8791315940ad7a2b3bd5d8f4"}]}, @NFT_MSG_DELTABLE={0x2c0, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0xe2, 0x6, "a61e8b56b95f5c95d7ba5a18414b6a3d6b87b65bef52f7215f988b8a2d09fdb06abee980e13a073ed708d59320b69aaa49db9d4c580d238cdb336baa4470b6dbd4b74e00f99cd35dd8b937e6f08d7343f5b3c8d43a07f8893fc6b1dd910261d1ff9a0d4e920892f5f1bf30130895ee69e1571efac77624ccc7c8b4b25ece01225701582a5d39635b26783d5dd44c3b604abd17aebedeb7cd6eff9d3406ee9947613055b063b5c8b68ee7231b9c015c2e71d05668fb03b2e0b7c55d2e3679a7e361d7c0ad09161637bc00ff972c0c0b231d5debcd972d8bc30780d5387f08"}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "68ad3c79a2b201adc6eccf0caeb9a0705328148eb870cefe4c0477b64afec19932e21d8caec9d692f802f86bb2f77bd52d65cf9ed5078821d3bd30595a7854968e0aa6cdb50a63cf3688699177d8f3dd5af36438d2fb6d900b17315a9a5c5f0e47bc86b378cd38011f776785d14d4bf936973964aa1a73060f9f7e61b10e87d12ade032aeb92158be90526cf4eae06c4dd95f7fdc49d056019449241ef902961243bd7b5e1b31558c6d19f45c8348e21115d97ec9d977b67e1ebc129a5c868f5c712bab4a2f7be1f5b42869d381b3b15b33f9b8f0dbe217a6e2a86825caf8108dcefccffc93782785e612ed115070af5abede696dd5bb60494"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xac, 0x6, "48a67b666b18bf76e5768b6900a456150fa6baaa8f34921d73687afb81fd51cc8d8b65593ba27c11a9eb18e9265160d10429498a21dfe9155cd5217b945ce2da231bf619d09522325a14d088f6ea6168e1a93ef2032fb333e7475d2f33c4c8448dd0d9241a8151925fe8838ee5b0eb6d1d85102807ab56cc6ff3bec35bbf714c0a05170dfddac94c3d9cb676bf1f899a6fe4b9ce8f40cc1b6c00d257bdbcfac38d6edf3be93784b1"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x75, 0x7, 0x1, 0x0, "644b136352b9b4ceaaebb016335c83ee611517214f6bad1ddcaa59fb9d042a79ff0e268a38435eacfdc7d235bcd730749063de625657c7c1a0b72b2d7fc840fad7cf9abd4d636e1e0eb15921ddb2e3d8d07d8cfd3411256b45fa47e42e7ca1a6647d6ba38be46f19f3a61945f6a7f32be7"}]}, @NFT_MSG_NEWSET={0x130, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x104, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7159}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x760}, 0x1, 0x0, 0x0, 0x44}, 0x48881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x1b, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB="a740a6b875f52580d066a3520598bf577c7baf4c27dbd4cc6d1131785f3a852a6144be3b4e1408ce393c5f805bf2fda8787daa93729f6ee05922626358dc545445df0f4a1f5a7c98a09494fa31888eeadf61a64f5867f9eb31cd4191f34aa3cec142e14c9a9a37c53e1e02bc2f157f8390590e1073d1182c8fc6", @ANYRESOCT=r0], &(0x7f00000004c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3425c, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 7.269221093s ago: executing program 5 (id=1787): ioctl(0xffffffffffffffff, 0x8b2c, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x1c001) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000740)="b8f37e75b6", 0x5}, {&(0x7f0000000800)="a1168ba5eb49f24e59058d9c2152da356ada16b3b30b5dd653ba9c462ca44987a40928a9fbe8575333006598b64fa96da898793b586ae20a25abaf68885e7cdd01f3279c83d4bfd1582d9e66201a148800f0aed52a59ba5893d745fe29d69519a6da421d28e758b7cd7505bbd3d8a2de64ad49a519477f80dc82f12cbb3a764adb2c52bece116387e5d960e714b1115baec146c59080c1a4ea116cce04f0dac26a7015ab683db64b54304d4b757d3cd7f5353f57ec18b43392e0910c85e27b69ca95b8f84f", 0xc5}], 0x2) 6.791951655s ago: executing program 5 (id=1791): r0 = socket$inet_udp(0x2, 0x2, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="151e1ee6124c0b6f09e30926ea592089c1a9353969648d1ca428d271df589d4ec0795563f85acf7374b3660e11f8e5ce3fc5257841c65430e2d84b1161ebce066e11e7f1c9dbc73a742b2ffaf51ea98c5b909c69178254266e66762a8e616d20d28f71a68bb64873b11d14eece8de3a2be03102d9ad4f38dab421cfb30e9c968d1f89cc56719232c6cefedd2b2b2b7c0a72c9347ca8d1c728184909f96c267fcf141bf7b6d0d178cf9e66a00d2739e", 0xaf}], 0x1, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000640)={0x2, &(0x7f0000000680)=[{0x30, 0x1, 0x3, 0xf7fff024}, {0x6, 0x0, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f00000006c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000740), 0x9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100870080000000", @ANYRES32, @ANYBLOB="4000000004e7ffffffffffffff0000402f6d859c13fde796733d06cc7a6dfa42d4b11b4681461322bdf2ff69", @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000400000000000000000000000c061abe94bd3f22bfa8ab8b6cd77f282e5d46bf6d50d72aecf31d044db15169972b3c56f2e453992a26d53a240d92957cca5f6ef6bf67c12663e18723a3ae9f102b093317299aeea12f47ae83b2e7b2331c448dccf6ba493df418ceb911d7be2d671d2ed37b54e06f82eec5d3f1c7bf0ea1ed94a79326f133086d5a59d9112301ab4a2f55ba491f073c620c6d56f2084659522"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1, 0x0}, 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r6, 0x4) socket$inet6(0xa, 0x2, 0x5) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000070a01030100000000000000020000000900010073797a30000000000900020073797a3000000000"], 0x2c}}, 0x0) recvfrom(r8, &(0x7f00000008c0), 0x1000, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='memory.current\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000940)={'virt_wifi0\x00', @random="030000000018"}) openat$cgroup_ro(r9, &(0x7f00000008c0)='cgroup.kill\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0xc, 0xc, 0x2}], 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x20, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff7ffa}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.692285562s ago: executing program 6 (id=1796): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f0000000b00)='\x00', 0x414180, &(0x7f0000000b40)={@align=0x8a, {0x3ff, 0x5, 0x5, 0xf}}, 0x9, &(0x7f0000000b80)={@_ha_fsid}, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x28, &(0x7f0000000cc0), 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x3c, r3, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r1) getsockname$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e40)=0x44) sendmsg$nl_route(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r0, &(0x7f0000000f80)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f0000000fc0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000a00000000000000feffffff85000000940000009500000000000000f1ba062272efaf992f4b7f16717f82673064f044a4fbe664312c647b6cb09eca537135256787f2e8b114cc13a6108312e384eb765bf4780bee5e8c1474015e924083dbf585a4185d51fbfc12482927373063d24e16305ecea989345e4e1e244132d3479508cefb45849df3be36c2998d78ddcfb9a473434153e419ddf0993a8fd71a91969c943cdc1ce93fa5228d528880a3cd088765292c720d00380491812c46790680b29763c6d442b19c021300628eacac2e528bf24e6e8e04f2ebdba678c5caf569d4c765dd4bc317e5"], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x89, &(0x7f0000000480)=""/137, 0x41000, 0xab1734f2c9b2fc3d}, 0x94) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r6, @ANYBLOB="30000e0080000002ffffffffffff0802110000000802110000000000000800000000250d7797814632dc"], 0x5c}}, 0x20000014) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYRESOCT=r6], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x1, 0xe145, 0x42, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x40, 0x8, 0x4}}) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f00000009c0)={r9, &(0x7f00000008c0)='nl80211\x00', 0x0, &(0x7f0000000900)={@align, {0xfffb, 0x3, 0x8000, 0x4f3f}}, 0x4, &(0x7f0000000940), &(0x7f0000000980)=0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xbe5, '\x00', r11, r12, 0x5, 0x5, 0x2}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001014d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x1, 0x4c, &(0x7f0000000100), 0x4) sendmsg$inet(r13, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.620924268s ago: executing program 5 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff42, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff42, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000240)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0x2, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) connect$inet6(r3, &(0x7f00000002c0)={0x2, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000680)='^', 0x34000, 0x0, &(0x7f00000006c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000700), &(0x7f0000000740)=0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x9fd1a8dc3de17770, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x97}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x9fd1a8dc3de17770, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x97}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x4076cbba9945d516, &(0x7f0000000480)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r8, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f0000000640)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 5.33967354s ago: executing program 3 (id=1798): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="a6", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="16", 0x1}], 0x1}}], 0x2, 0x4000800) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000f00), 0x4924b68, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x16, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call, @generic={0x0, 0x3, 0x4, 0x77, 0x9}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0xcaf, 0x39, &(0x7f0000000980)=""/57, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x0, 0x4, 0xf, 0x6}, {0x1, 0x5, 0xd, 0x1}, {0x1, 0x3, 0x0, 0x5}, {0x3, 0x3, 0xffffffff, 0xa}], 0x10, 0xff}, 0x94) pipe(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000680)=@raw=[@alu={0x4, 0x0, 0x5, 0x1, 0xd, 0x30, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5fe}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000800)='GPL\x00', 0x0, 0x1000, &(0x7f0000001480)=""/4096, 0x41100, 0x7a, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002480)={0x1, 0xd, 0x2, 0x80000000}, 0x10, 0x26842, r6, 0x0, &(0x7f00000024c0)=[r7], 0x0, 0x10, 0x401}, 0x94) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0xcde, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '\xff\xff\xff\xff\xff\xff'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) listen(0xffffffffffffffff, 0x28) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000310009002abd700000000000040000000840fa5b6b11800400f080"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 5.090541609s ago: executing program 7 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4021}, 0x20040454) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x400add0, &(0x7f0000000140)={0xa, 0x4e24, 0x10789e, @empty}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf, 0xfffff034}, {0x48, 0xe7, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r9 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000780)={'wpan3\x00'}) syz_emit_ethernet(0x26, &(0x7f0000000180)={@broadcast, @random="d8902d7b3f2a", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x1, 0x14, 0x67, 0x0, 0x5, 0x88, 0x0, @multicast1, @remote}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r2, 0x8000000, 0xe, 0x0, &(0x7f00000001c0)="e68886dd00ffba0400ffffdd0806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.837151466s ago: executing program 2 (id=1802): socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800b0001006272696467650000200002800500160001000000080002000101"], 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x2000}, {r2, 0x8104}], 0x2, 0x0, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x18}, 0x18) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000280)={r4, &(0x7f0000000180)='\x00', 0x424600, &(0x7f00000001c0)={@align=0x10, {0x5, 0x800, 0x6, 0x8a4}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}) bind$802154_dgram(r5, &(0x7f00000002c0)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff36d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4814) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000e40)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000f80)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(0x4) socket(0x400000000010, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800b0001006272696467650000200002800500160001000000080002000101"], 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) (async) socket(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) ppoll(&(0x7f0000000140)=[{r2, 0x2000}, {r2, 0x8104}], 0x2, 0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x18}, 0x18) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000280)={r4, &(0x7f0000000180)='\x00', 0x424600, &(0x7f00000001c0)={@align=0x10, {0x5, 0x800, 0x6, 0x8a4}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}) (async) bind$802154_dgram(r5, &(0x7f00000002c0)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff36d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4814) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000e40)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000f80)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) (async) close(0x4) (async) 4.51233248s ago: executing program 6 (id=1803): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_getvlan={0x30, 0x72, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000480)={0x98}) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x2000005, 0x11, r1, 0x9cc21000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@generic={0x1, 0x3, 0x3, 0x10, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x691, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x10, 0xe3f, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x2, 0xf, 0x8}, {0x2, 0x4, 0x1, 0x1}, {0x1, 0x1, 0x10, 0x5}], 0x10, 0x80}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, &(0x7f00000004c0), &(0x7f00000007c0)=r2}, 0x20) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="06000080", @ANYRES16=r7, @ANYBLOB="00022dbd7000fddbdf2501000000050007001900000006000a0001000000050007001100000005001100060000000c0009000200aaaaaaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x4000844) 4.321476367s ago: executing program 5 (id=1804): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900000020000000", @ANYRES32=0x0, @ANYBLOB="7e93c467df0bb2730cea74b42e"], 0x6f) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x40, 0x2}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000002900050000000000000000200c"], 0x14}}, 0x20040000) 3.999254973s ago: executing program 2 (id=1805): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000a00010203041c00028005000100060000000600020000140000060003009c400000340003"], 0xc8}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r5, &(0x7f00000002c0)={&(0x7f0000000300)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='FY', 0x2}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0x9, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x20, 0x8, 0x100, 0x462f}}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000400)={0x4, 0x7, 0x7, 0x871, 0xabf0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000540)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000580)={0x0, 0xad}, &(0x7f0000000640)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a0000000800090003"], 0x94}}, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={0x4000000, {0x2, 0x4e22, @rand_addr=0x3}, {0x2, 0x4e24, @local}, {0x2, 0x0, @broadcast}, 0x105, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b5, 0xd}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) 3.881445106s ago: executing program 3 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@deltaction={0x1f4, 0x31, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffdb8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fc0}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd665}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, 0x0, 0x1, 0x7, 0x8, 0xe1, "c171f8af6648de303e39a1ce5b8d47245e30da43201337de55407ebb63f4111c9cafbe52c23106f5123564ec0f7e4dd628792cadab28844962baa427375c65", 0xa}, 0x60) r3 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r3, 0x1, 0x48, &(0x7f0000000400)=0x3, 0x4) listen(r3, 0xfffffffc) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000500)={0x0, @llc={0x1a, 0x512, 0x8, 0x6, 0x0, 0x6, @broadcast}, @rc={0x1f, @none, 0x6}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='macsec0\x00', 0x1, 0x8, 0xc000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 3.597860576s ago: executing program 6 (id=1807): bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640), 0x0, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "2dd1703e7338c789", "6376f6f553f658f0db8a40136d010cb9", "10a1143b", "6c60fee0be5a354d"}, 0x28) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = accept4(r1, 0x0, &(0x7f0000000100), 0x800) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-neon\x00'}, 0x78) (async) r4 = accept4(r2, 0x0, 0x0, 0x800) accept$alg(r0, 0x0, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000680)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000002680)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000026c0)=0x10, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002780)={'veth0_to_bond\x00', 0x0}) bind$xdp(r5, &(0x7f00000027c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) (async) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0x80000000) (async) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getlink={0x54, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8040, 0x2928}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_NET_NS_PID={0x8}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="010000000000000000006504b35e5b9b3a200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) pselect6(0x40, &(0x7f0000002880)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000028c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) 1.801578631s ago: executing program 3 (id=1808): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)={0xdc, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x4e, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a521da0}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70bf969a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c1072af}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f0000000c80)=0x7) write$cgroup_int(r2, &(0x7f0000000cc0), 0xfffffdef) write$cgroup_subtree(r2, 0x0, 0xfffffeb0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="90cb135fd619bd0000000000004ec007f257a9b5090305cc7f78"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0xfc, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000002c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmmsg$sock(r2, &(0x7f0000002080)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000d00)="e3d222a394a63da83d05cd77bed5fc89a9e4367149968e7320d0f3415bba6eeac75aeea05cee70e94b4b98669f6a7bf63c7b93bbd5d0aca8888d7dc1b61cbf4ef23cecff63977cc40913d604d565b41d6da1ad46e97f7fd0274db513f3dc5a7a67c0e52d7800bb38f777d64bded27679ac834c54f60475a5320d467fd630a1c55127dfaa531261fb6e21e9cc91811715eda6d83ac49756ae6719f197258d16d4c12ab5e313e7797080001635c75d6d13a00d5a85f11e6472749234670bdbb221645f661e75e14fc6ee5ced21dd1ad4", 0xcf}, {&(0x7f0000000e00)="19a64351ef30bbc94073be42b37c0d26e271d3544fd0874f59afd49d046111da36596758682b697b23ca25ddd457b35993d483a0db18e57c5da9de8753ba43bdfe1a04d7b24a7c", 0x47}, {&(0x7f0000000e80)="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", 0xfb}, {&(0x7f0000000f80)="0e9c7e1a5575aa96114003b10d51da4859d0d133738a262da3d7c6323fb7866a8b62dd60f1bb2d3c77dad74b55bf99079aa903b69d1bac8a335f2a968def", 0x3e}, {&(0x7f0000000fc0)="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", 0x1000}], 0x5, &(0x7f0000002040)}}], 0x1, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1000010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0xbc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0xba7b58845f147b4d, 0x2, 0x4, 0x40}, @ldst={0x1, 0x2, 0x3, 0x7, 0x9, 0x4, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x7, 0x7, 0xb, 0x2, 0x4}, @generic={0x10, 0xe, 0x8, 0xb, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x7b, &(0x7f00000004c0)=""/123, 0x41100, 0x1d, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x3, 0xedd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r3, r3, r3, r3, r3], 0x0, 0x10, 0xd25}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'lo\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8000000}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.755174281s ago: executing program 7 (id=1809): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000240)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000400)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407feff82001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 1.549186968s ago: executing program 6 (id=1810): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 1.532414724s ago: executing program 2 (id=1811): pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001b1fe06234c13160196eaba28436aa5777b22095a9387bc52e13ba18d9c1dc1cb7bc25a89d88468b2d085717a13e096741c16833981fb835bdc86616b04367f4a773c8f27230ebbe963383f26839358188da2bf040854868728ee7f7b1183e8bf1ccdb2299fc18b2437dc595b19b5ea65f31d40b41aec365e282176ce278696ca1e56cbb6c5a67bddc4398c7"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001b1fe06234c13160196eaba28436aa5777b22095a9387bc52e13ba18d9c1dc1cb7bc25a89d88468b2d085717a13e096741c16833981fb835bdc86616b04367f4a773c8f27230ebbe963383f26839358188da2bf040854868728ee7f7b1183e8bf1ccdb2299fc18b2437dc595b19b5ea65f31d40b41aec365e282176ce278696ca1e56cbb6c5a67bddc4398c7"], 0x50) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) (async) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1.459553309s ago: executing program 7 (id=1812): ioctl(0xffffffffffffffff, 0x8b2c, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x1c001) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000740)="b8f37e75b6", 0x5}, {&(0x7f0000000800)="a1168ba5eb49f24e59058d9c2152da356ada16b3b30b5dd653ba9c462ca44987a40928a9fbe8575333006598b64fa96da898793b586ae20a25abaf68885e7cdd01f3279c83d4bfd1582d9e66201a148800f0aed52a59ba5893d745fe29d69519a6da421d28e758b7cd7505bbd3d8a2de64ad49a519477f80dc82f12cbb3a764adb2c52bece116387e5d960e714b1115baec146c59080c1a4ea116cce04f0dac26a7015ab683db64b54304d4b757d3cd7f5353f57ec18b43392e0910c85e27b69ca95b8f84f", 0xc5}], 0x2) 1.249220863s ago: executing program 7 (id=1813): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x260, 0x260, 0x100, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000640), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0xffff]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x60, 0x3, [0x5, 0x27, 0x6, 0x1c, 0x11, 0x24, 0x38, 0x2b, 0x2b, 0x3d, 0x1d, 0x1f, 0x10, 0x2f, 0x31, 0xa], 0x2, 0x7, 0x3}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffff00, 0xffffff00, 'veth1_to_team\x00', 'pim6reg1\x00', {}, {0xff}, 0x73, 0x2, 0x40}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1, 0x2}}, @common=@set={{0x40}, {{0x2, [0x2, 0x2, 0x5, 0x5, 0x5, 0x6], 0x4, 0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x6, 0x1, 0x1, 0x1, 0x2], 0x6, 0x4}, {0x4, [0x2, 0x6, 0x4, 0x1, 0x0, 0x2], 0x5, 0x4}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0xffffff00, 'bond0\x00', 'bridge0\x00', {}, {0xff}, 0x1d, 0x2, 0x8}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x4, 0x2, 0xd}}}, @common=@set={{0x40}, {{0x3, [0x2, 0x3, 0x1, 0x4, 0x1, 0x5f47450b3a4ad7fa], 0x5}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "54673903496a718e9435638788499985762c85398efdb43f1aa1979a34c1"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) r3 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40002022) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000300)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000340)=0x4) pwritev(r4, &(0x7f0000000380)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)="00214500002c00000000400600000a0000010a000002005000500000000200000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') openat$cgroup(r5, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xfffffffffffffeed, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000600)={'sit0\x00', &(0x7f00000005c0)={@multicast2, 0x0, 0x0, 0x10, 0x0, [{}]}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) 1.2301285s ago: executing program 2 (id=1814): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20004080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000000ea"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r4, 0x25, 0x0, @val=@tcx}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000800)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000840)={r5}, 0x8) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000008c0), 0x0) close(0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000900), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket(0x400000000010, 0x3, 0x0) 1.217917354s ago: executing program 3 (id=1815): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000040)=0x5f5e0f6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.169799097s ago: executing program 6 (id=1816): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000240)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5}, [@CTA_TUPLE_REPLY={0x4, 0x1b}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1, 0xfffffffd}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x488, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x460, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x418, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x408, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0xfc, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x84, 0x1, "0a58e42440bee6ac7759b555e58763fccb70b7ff14827b10fcda277ea91021de3ae35262c342b2b3a45f6bb7ad62b06dd64b9b39400d939569b1f525ce48529e108afa07a1c8eaf61509755cf156da84f86c32350d8561bb5b376a90bcf612fd4d98d48d0be893ab84dd75fc8c4bd7b8e68593e29d24f58d531f580b6a611cb9"}]}, @NFTA_BITWISE_MASK={0x2f8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "c79e7afe584ac78873eb075fda3210d1b9e37dd514db658fa4e24beae8941bfdb426c37a4122e65dff30cd2bf1d40612824f7463b77958b31f9487171b42499c8683cb19247c8da8a55fea2a9e4e85eebecc5ccfa394f2d299352b904b8e8014687fdeb4ca3ca1ef5dd319e30a391761d65dfe09925f060fc60093bb145277b76106b31122e85e5156619f6cf0843ccc166c1ea6dca52651c503bca1b33c4fdc749c8a43cd547f906b31ad9805f074ea1335052fe3a20793c2c78f53091548a70c05"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "da56fa138a17741791276ed3733756c9a4b1329ab9f7813d5e3f1fabf0f37721c68fce54ee32cfad237155efb19d0ede39d0cdd9dc34a9c1d3b43d35ae649ca8be836893a1f44f03edecfed921a2b07c33e954e43de993ff3269a9c6f00faf6df140d5c13df3c357bb09024af93aa9ae9a2ac888e94d955fe1773e6091318fa0ceecaf796b40ee1d65a07f57249d9eecb98d28b7f8ca7005c6e299292d4b40eb5498cf755eec2f30f40558c1c0b086016ef01f1439274d98db4420b675875e2934e36e5d8fcc4e9441a7c2a351fcbcc87790d342d2e7372d56078eb97d47821558a5d3536a30d17507205c7fb654ebfbf53c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "932529b64be3a0db06275e08debca1cba287065db80b0501748e130b6a84a885c061c78c5ff7aacb88cdbda712209f226df3b826e6883fb5c2eb734ffec0e03b57879fdfc1fa0723c5495976f5642bdd211825d32874ec801f0d160e3d3e0c1373d2e1b15d969d02dbd35376fdcd1d7da55d15f530e7eff4bbdc17f6a0d921b0cf130cb9a14d65654351c7ce93f9f7baa0fc3bb51fb2d2b490644578d408254ba485b6cead43c4fe6b40c4001892b78740990565f61704"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xbb2c}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4dc}}, 0x0) 1.066360829s ago: executing program 3 (id=1817): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000000020085000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x30}, 0x94) r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000840)=0xfffff800, 0x4) (async) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000840)=0xfffff800, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x9, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x9, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000180)={0x0, 0x14}}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x3e8, 0x4, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008051) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000280)={0x1d, r8}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x10, &(0x7f00000009c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000a00)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000a40)={0x1, [0x0]}, &(0x7f0000000a80)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000a40)={0x1, [0x0]}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000ac0)={r12, @in={{0xa, 0x4, @private=0xa010101}}, 0x2, 0x4}, 0x90) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0x111, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r8, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0x111, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r8, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r8, 0x7860, 0x8, 0x800, 0x101, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x67, 0x0, 0xaf, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@end, @end, @rr={0x7, 0x7, 0x38, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0x5, [{@multicast1, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@private=0xa010100, 0xa492}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x5}]}, @end, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x0, [{@broadcast, 0x3}, {@private=0xa010102, 0xbd70}]}]}}}}}) 1.036191487s ago: executing program 7 (id=1818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c010000100001000000000000010000fe8800000000000000000000000000016401010000000000000007000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00000000c0)='7', 0x1, 0x40800, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x10}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000200)=0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 445.462146ms ago: executing program 3 (id=1819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f80)=ANY=[@ANYBLOB='h\x00\x00'], 0x68}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001880), &(0x7f0000001880), 0xcff5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r0}, 0x38) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) 327.293968ms ago: executing program 2 (id=1820): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0xbffffffe, 0x1}}, 0x20) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x4, 0x0, 0xdad1124f55525050}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 200.951442ms ago: executing program 6 (id=1821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040080000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000002d"], 0xbc}, 0x1, 0x0, 0x0, 0x44000055}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000002c0)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000340)={&(0x7f0000000380)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a2307795", 0x1f}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x6, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x9, 0x9}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f0000000240)=@can, 0x80) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140000c9bbc7a46e363e4a79e37988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0f56a20ff27fdf00", 0x89}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x5001}) ioctl$int_in(r4, 0x5452, &(0x7f0000000640)=0x3) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000540)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000580)=0x33, 0x8) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000600)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000740)="0715084855620c2bcdfc6b4abbeb6903628468b9db32d7dc1fdc3280be0134f18f401f767d4405d54b0d42bd716fff9832e517b3bed746c584f7abcf4eaed37c7100f2c2893628d1c835925c77e6f1a1a9d80e82c55dc8165c0d83840ed9c096d108308151418fd8aca1cd3b5f6ee33c411178e0536e57dcbc428eca5d2445f22f2d9b3ab846365afbafa73345b417749068180b2f0504c16ab691dd5d4f5678dd51270b65f45a0299698219e1b4c8a2896d31d26d30a6b86e1ac19fecdc8165ebc66f8510efbb6d606ca5e92fc7", 0xce, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f0000000680)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000006c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000700)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r8, 0x1, 0xc, 0x0, &(0x7f00000005c0)) 69.051703ms ago: executing program 2 (id=1822): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'vlan1\x00', 0x0}) (async) r2 = socket$inet_sctp(0x2, 0x7, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000540)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000580)=0xc) (async) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x2, 0x4) (async) sendto$packet(r0, &(0x7f00000004c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000500)={0xc9, 0x18, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r4) (async, rerun: 64) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000800), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000640)={r9, 0x1, 0x6, @random="334dff8a1ba7"}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000300000585100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b403000005000000850000007a00000018010000646cb12500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff0402000008000000b703000059e70000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xa}, 0x94) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000680)={0x3, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}, 0x1, 0x7}, 0x0) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, r11, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x76, &(0x7f0000000a00)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x64, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x3d, [@multicast1]}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x104, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) (rerun: 64) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000200)={&(0x7f0000000140)=""/183, 0xb7, 0x80, 0x2}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000002000000000000000200000d0a0000000100000003000000050000000200"], &(0x7f0000000f40)=""/4079, 0x72, 0xfef, 0x1, 0x410}, 0x28) 0s ago: executing program 7 (id=1823): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2, 0xf2, 0x4}}, 0x1c}, 0x1, 0x1000000}, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x8, 0xe, 0x4, 0x5, 0xc7, 0x40, 0xff, 0x40, 0x3, 0xf7, 0x4, 0x5, 0x40, 0x2}, 0xe) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), 0xffffffffffffffff) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001980)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001800000008000300", @ANYRESHEX=r1, @ANYBLOB="18003080140001800800040059400000080001000200000068013080840001800c00050008000000000000000c000500000800000000000028000380080002000000000008000200020000000c0004000201aaaaaaaaaaaa06000100ffff000014000380060001000000000008000200000080000800040006000000050002000300000005000200020000000c0005000000000070700d0008000400000000002400030082274fe44bb67498c523a9b0ec7c0f031a2f385e167dc28e729e665ca05b3b846400018008000400050000000c0005000600000000000000100003800c0004000203aaaaaaaaaaaa0500020000000000080001"], 0x1a4}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) bind(r0, &(0x7f0000000040)=@ax25={{0x3, @default, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (rerun: 64) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000001380)=0xfe, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x0, 0xc, &(0x7f0000001c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1, 0xc, &(0x7f0000001d80)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001e40)=r5, 0x4) (async, rerun: 32) sendmsg$inet(r7, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001440)={'wg0\x00', 0x10}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000015c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=@newtfilter={0x7c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0xe4ff, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1b}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x342, 0x10000000, 0x9, 0x9ab5, 0xe9c8, {0x6, 0x2, 0x401, 0x0, 0x1}, {0xe, 0x2, 0x51, 0x0, 0x5, 0x7fffffff}, 0x4, 0x6, 0x6}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000340)={'xfrm0\x00', 0x100}) kernel console output (not intermixed with test programs): tooth: hci0: Opcode 0x0c03 failed: -110 [ 197.270467][ T9154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.543025][ T9202] __nla_validate_parse: 2 callbacks suppressed [ 197.543043][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 197.791744][ T9216] Bluetooth: MGMT ver 1.23 [ 198.318314][ T9239] syzkaller1: entered promiscuous mode [ 198.318558][ T9239] syzkaller1: entered allmulticast mode [ 199.402132][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 199.402170][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 199.452201][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 199.452238][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 199.468478][ T4381] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.468527][ T4381] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.468559][ T4381] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.474841][ T4381] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.538025][ T9292] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 199.538051][ T9292] netlink: 152 bytes leftover after parsing attributes in process `syz.3.715'. [ 199.563763][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 199.563807][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'. [ 199.649385][ T9298] ip_tables: iptables: counters copy to user failed while replacing table [ 199.855817][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 199.894633][ T9304] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 199.894657][ T9304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.717'. [ 199.894919][ T9304] NCSI netlink: No device for ifindex 0 [ 200.346443][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 201.186452][ T9349] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 202.800385][ T9363] netlink: 'syz.1.725': attribute type 3 has an invalid length. [ 202.800659][ T9362] netlink: 'syz.1.725': attribute type 3 has an invalid length. [ 202.842062][ T9307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.842091][ T9307] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 203.009854][ T9307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.009881][ T9307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 203.093798][ T9307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.093824][ T9307] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 203.154951][ T9307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.154975][ T9307] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 203.695542][ T6079] IPVS: starting estimator thread 0... [ 203.785581][ T9395] IPVS: using max 34 ests per chain, 81600 per kthread [ 204.618530][ T9396] netlink: 220 bytes leftover after parsing attributes in process `syz.2.731'. [ 204.618556][ T9396] tc_dump_action: action bad kind [ 204.929169][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'. [ 205.178720][ T9422] syzkaller1: entered promiscuous mode [ 205.178746][ T9422] syzkaller1: entered allmulticast mode [ 205.422657][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 205.512325][ T9452] ip_tables: iptables: counters copy to user failed while replacing table [ 205.745628][ T9451] sctp: [Deprecated]: syz.0.740 (pid 9451) Use of int in max_burst socket option. [ 205.745628][ T9451] Use struct sctp_assoc_value instead [ 206.273977][ T9432] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 206.330582][ T9432] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 206.476563][ T9484] pim6reg: entered allmulticast mode [ 207.491841][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 207.661282][ T9513] bond5 (unregistering): Released all slaves [ 207.685524][ T9534] x_tables: duplicate underflow at hook 2 [ 207.932991][ T9521] bond5 (unregistering): Released all slaves [ 208.010326][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.757'. [ 208.291750][ T9546] netlink: 'syz.1.760': attribute type 12 has an invalid length. [ 209.598536][ T9587] IPv6: Can't replace route, no match found [ 209.671499][ T9583] sit1: entered allmulticast mode [ 209.768014][ T9587] batman_adv: batadv0: Adding interface: macsec1 [ 209.768035][ T9587] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.768067][ T9587] batman_adv: batadv0: Interface activated: macsec1 [ 210.026658][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 210.072516][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 210.072547][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 210.505128][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.505165][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.505872][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.505893][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.563901][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.563943][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.583698][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.732738][ T9631] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 210.873250][ T9631] bond6: entered promiscuous mode [ 210.879535][ T9631] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.271940][ T9656] gretap0: entered promiscuous mode [ 211.466573][ T9662] ip6t_rt: unknown flags 1F [ 211.571882][ T9672] Cannot find add_set index 2 as target [ 211.639436][ T9665] IPv6: sit2: Disabled Multicast RS [ 214.181895][ T9759] batadv0: entered promiscuous mode [ 214.194348][ T9762] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 214.209754][ T9759] macvlan2: entered promiscuous mode [ 214.211517][ T9759] macvlan2: entered allmulticast mode [ 214.211537][ T9759] batadv0: entered allmulticast mode [ 214.243418][ T9759] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.251200][ T9759] batadv0: left allmulticast mode [ 214.252672][ T9759] batadv0: left promiscuous mode [ 214.469775][ T9762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.694129][ T9768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.713011][ T9772] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.724511][ T9772] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 214.806217][ T9774] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 214.810479][ T9774] bond3 (unregistering): Released all slaves [ 215.142448][ T9790] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 215.272177][ T9790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.373345][ T9799] bond2: (slave geneve2): making interface the new active one [ 215.383342][ T9799] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 215.511354][ T9801] bond3 (unregistering): Released all slaves [ 215.619565][ T29] audit: type=1804 audit(1792986752.275:10): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.812" name="/newroot/165/cgroup.controllers" dev="tmpfs" ino=870 res=1 errno=0 [ 215.619610][ T29] audit: type=1800 audit(1792986752.275:11): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.812" name="cgroup.controllers" dev="tmpfs" ino=870 res=0 errno=-22 [ 215.837118][ T29] audit: type=1107 audit(1792986752.495:12): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¦â·%„%UùG»QÏkÅš»±È%€&yªåBCùªgŽæŽ‚”f†,°uw Îc wåa¥í'å`œÌª "ߧäR³sè_æµÿ¨@â' [ 215.953631][ T9821] __nla_validate_parse: 37 callbacks suppressed [ 215.953655][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'. [ 216.433757][ T9835] netlink: 'syz.3.820': attribute type 2 has an invalid length. [ 216.433780][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 216.704097][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 217.161908][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 217.973656][ T9890] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 217.973773][ T9890] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 217.973948][ T9890] veth1_virt_wifi: entered allmulticast mode [ 218.021334][ T9890] veth1_virt_wifi: left allmulticast mode [ 218.200454][ T9902] netlink: 72 bytes leftover after parsing attributes in process `syz.0.839'. [ 218.235423][ T9912] netlink: 72 bytes leftover after parsing attributes in process `syz.0.839'. [ 218.569102][ T9924] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.761823][ T9928] ip_tables: iptables: counters copy to user failed while replacing table [ 219.713577][ T9952] netlink: 332 bytes leftover after parsing attributes in process `syz.2.844'. [ 219.713654][ T9952] netlink: 'syz.2.844': attribute type 9 has an invalid length. [ 219.713670][ T9952] netlink: 108 bytes leftover after parsing attributes in process `syz.2.844'. [ 219.713684][ T9952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.844'. [ 219.853996][ T9959] netlink: 'syz.3.846': attribute type 4 has an invalid length. [ 219.854022][ T9959] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.846'. [ 219.906036][ T9960] syzkaller0: entered promiscuous mode [ 219.906061][ T9960] syzkaller0: entered allmulticast mode [ 219.998083][ T9950] tipc: Enabled bearer , priority 0 [ 220.107548][ T9950] tipc: Resetting bearer [ 220.800956][ T9987] sctp: [Deprecated]: syz.1.852 (pid 9987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.800956][ T9987] Use struct sctp_sack_info instead [ 220.801909][ T9987] sctp: [Deprecated]: syz.1.852 (pid 9987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.801909][ T9987] Use struct sctp_sack_info instead [ 221.085120][ T8298] tipc: Node number set to 4117658710 [ 221.796569][T10014] __nla_validate_parse: 7 callbacks suppressed [ 221.796589][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'. [ 222.397893][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.864'. [ 222.531147][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 222.542344][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 222.560298][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 222.564119][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 222.568291][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 222.576512][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 224.240692][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 224.273301][T10105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.878'. [ 224.422298][T10109] vlan4: entered allmulticast mode [ 224.422321][T10109] dummy0: entered allmulticast mode [ 224.729757][T10122] x_tables: duplicate underflow at hook 2 [ 224.734470][T10127] ip_tables: iptables: counters copy to user failed while replacing table [ 226.049477][ T8406] IPVS: starting estimator thread 0... [ 226.102413][T10128] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 226.146058][T10156] IPVS: using max 27 ests per chain, 64800 per kthread [ 226.876258][T10167] ip6gretap0: entered promiscuous mode [ 226.882634][T10167] __nla_validate_parse: 5 callbacks suppressed [ 226.882654][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 226.883907][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 227.079063][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 227.145593][T10181] Bluetooth: hci0: unsupported parameter 5134 [ 227.145616][T10181] Bluetooth: hci0: unsupported parameter 8192 [ 227.145628][T10181] Bluetooth: hci0: unsupported parameter 5134 [ 227.145640][T10181] Bluetooth: hci0: unsupported parameter 8192 [ 227.186289][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 227.187832][T10183] netlink: 'syz.4.892': attribute type 21 has an invalid length. [ 227.187853][T10183] netlink: 128 bytes leftover after parsing attributes in process `syz.4.892'. [ 227.387286][T10183] netlink: 'syz.4.892': attribute type 4 has an invalid length. [ 227.387309][T10183] netlink: 3 bytes leftover after parsing attributes in process `syz.4.892'. [ 227.672088][T10203] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 227.767747][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 227.912896][T10216] ip_tables: iptables: counters copy to user failed while replacing table [ 228.174735][T10223] netlink: zone id is out of range [ 228.569988][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 228.635977][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 229.279076][T10277] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.304497][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 229.788224][T10289] netlink: 'syz.0.917': attribute type 11 has an invalid length. [ 229.806555][T10293] IPv6: addrconf: prefix option has invalid lifetime [ 229.894781][T10289] batadv_slave_1: entered promiscuous mode [ 230.020187][T10289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.040422][T10294] sctp: [Deprecated]: syz.4.918 (pid 10294) Use of int in max_burst socket option. [ 230.040422][T10294] Use struct sctp_assoc_value instead [ 230.094091][T10289] batadv_slave_1 (unregistering): left promiscuous mode [ 230.094178][T10289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.462455][T10316] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 230.792620][T10322] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 230.792688][T10316] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.874150][T10312] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 231.148429][T10326] netlink: 'syz.2.924': attribute type 21 has an invalid length. [ 231.201675][T10326] netlink: 'syz.2.924': attribute type 5 has an invalid length. [ 231.548798][T10351] Bluetooth: hci0: unsupported parameter 5135 [ 231.548823][T10351] Bluetooth: hci0: unsupported parameter 8192 [ 231.548835][T10351] Bluetooth: hci0: unsupported parameter 5135 [ 231.548846][T10351] Bluetooth: hci0: unsupported parameter 8192 [ 231.779668][T10358] syzkaller0: entered promiscuous mode [ 231.779689][T10358] syzkaller0: entered allmulticast mode [ 231.799087][T10358] tipc: Started in network mode [ 231.799114][T10358] tipc: Node identity 5e0c49b550c5, cluster identity 1 [ 231.799421][T10358] tipc: Enabled bearer , priority 0 [ 231.943133][T10367] veth1_to_team: entered promiscuous mode [ 231.972043][T10367] veth1_to_team: left promiscuous mode [ 232.050917][T10363] vlan5: entered allmulticast mode [ 232.050938][T10363] bond0: entered allmulticast mode [ 232.050950][T10363] bond_slave_0: entered allmulticast mode [ 232.124783][T10357] tipc: Resetting bearer [ 232.212161][T10357] tipc: Disabling bearer [ 232.260640][T10380] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.278766][T10367] veth1_to_team: entered promiscuous mode [ 232.282937][T10367] veth1_to_team: left promiscuous mode [ 232.406568][T10367] veth1_to_team: entered promiscuous mode [ 232.413030][T10367] veth1_to_team: left promiscuous mode [ 232.550076][T10367] veth1_to_team: entered promiscuous mode [ 232.571335][T10367] veth1_to_team: left promiscuous mode [ 232.654437][T10400] veth1_macvtap: left promiscuous mode [ 232.877707][T10408] __nla_validate_parse: 7 callbacks suppressed [ 232.877732][T10408] netlink: 64 bytes leftover after parsing attributes in process `syz.4.941'. [ 233.234173][T10423] netlink: 'syz.3.944': attribute type 8 has an invalid length. [ 233.249215][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'. [ 233.265169][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 233.340034][T10425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.726674][T10438] netlink: 80 bytes leftover after parsing attributes in process `syz.1.949'. [ 233.871088][T10447] IPVS: Unknown mcast interface: rose0 [ 233.932205][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 233.967354][T10452] IPVS: Unknown mcast interface: rose0 [ 233.984217][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 234.252428][T10459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.252464][T10459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.284764][T10465] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.289513][T10465] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 234.444336][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.956'. [ 234.513724][T10465] bond7: entered promiscuous mode [ 234.521892][T10465] 8021q: adding VLAN 0 to HW filter on device bond7 [ 234.533692][T10474] bond7: entered allmulticast mode [ 234.649092][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 234.649115][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 234.651118][T10459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.651153][T10459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.832332][T10482] bond5: (slave syz_tun): Removing an active aggregator [ 234.845918][T10482] bond5: (slave syz_tun): Releasing backup interface [ 235.039995][T10482] bridge_slave_0: left allmulticast mode [ 235.040023][T10482] bridge_slave_0: left promiscuous mode [ 235.040260][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.083859][T10482] bridge_slave_1: left allmulticast mode [ 235.083887][T10482] bridge_slave_1: left promiscuous mode [ 235.084101][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.167441][T10482] bond0: (slave bond_slave_0): Releasing backup interface [ 235.191670][T10482] bond0: (slave bond_slave_1): Releasing backup interface [ 235.217587][T10482] team0: Port device team_slave_0 removed [ 235.231970][T10482] team0: Port device team_slave_1 removed [ 235.233310][T10482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.252732][T10482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.267284][T10482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.307829][T10499] netlink: 'syz.3.962': attribute type 61 has an invalid length. [ 235.307855][T10499] netlink: 'syz.3.962': attribute type 268 has an invalid length. [ 235.394130][T10459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.394169][T10459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.534279][T10503] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 235.599980][T10459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.600018][T10459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.730532][T10503] bond6: entered promiscuous mode [ 235.732634][T10503] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.779916][T10510] tipc: Enabling of bearer rejected, failed to enable media [ 235.884614][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 236.163826][T10503] veth7: entered allmulticast mode [ 236.210649][ T42] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.210682][ T42] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.255082][ T8417] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.255116][ T8417] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.267026][ T42] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.267057][ T42] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.340288][ T8409] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.340322][ T8409] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.421983][ T9569] lwtunnel_output(): recursion limit reached on datapath [ 236.806833][ T8292] lwtunnel_output(): recursion limit reached on datapath [ 237.519409][T10571] ip_tables: iptables: counters copy to user failed while replacing table [ 237.609827][ T8409] IPVS: starting estimator thread 0... [ 237.659617][T10577] netlink: 'syz.1.982': attribute type 4 has an invalid length. [ 237.679437][T10577] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 237.697352][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 237.703049][T10583] IPVS: using max 27 ests per chain, 64800 per kthread [ 237.846072][ T8292] lwtunnel_output(): recursion limit reached on datapath [ 238.423226][T10613] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 238.423248][T10613] __nla_validate_parse: 7 callbacks suppressed [ 238.423259][T10613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.992'. [ 238.452491][T10611] dvmrp8: entered allmulticast mode [ 238.466072][T10613] batadv0: entered promiscuous mode [ 238.466096][T10613] batadv0: entered allmulticast mode [ 238.469049][T10613] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.488033][ T194] lwtunnel_output(): recursion limit reached on datapath [ 238.761860][T10621] Bluetooth: hci0: unsupported parameter 5135 [ 238.761884][T10621] Bluetooth: hci0: unsupported parameter 8192 [ 238.761895][T10621] Bluetooth: hci0: unsupported parameter 5135 [ 238.761906][T10621] Bluetooth: hci0: unsupported parameter 8192 [ 238.882105][T10620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.995'. [ 238.894927][ T8297] lwtunnel_output(): recursion limit reached on datapath [ 239.269077][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 239.573924][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1002'. [ 240.971645][ T8298] net_ratelimit: 2 callbacks suppressed [ 240.971669][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 241.531777][ T194] lwtunnel_output(): recursion limit reached on datapath [ 242.019397][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 242.165755][ T9572] lwtunnel_output(): recursion limit reached on datapath [ 242.333424][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 242.746705][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 242.746731][T10682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1008'. [ 242.818456][T10678] netlink: ct family unspecified [ 242.818488][T10678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.853058][T10685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1010'. [ 242.870526][ T29] audit: type=1107 audit(1792986779.525:13): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Éß\¤ß7Uj:I€Å  oÁµõ±“í-PpkˆÞ4:à<È"´ݘ‚‚]qS ŠM–gÆ;(Ëeô³_<q¡m…ºù·ï‰³ÁÅŒ¾”fô.m½¥Nëh¡$7KŠ3¿²"ÑG•zpÍVO4¢,¤Þ' [ 242.922197][T10685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1010'. [ 242.938898][ T29] audit: type=1107 audit(1792986779.595:14): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Éß\¤ß7Uj:I€Å  oÁµõ±“í-PpkˆÞ4:à<È"´ݘ‚‚]qS ŠM–gÆ;(Ëeô³_<q¡m…ºù·ï‰³ÁÅŒ¾”fô.m½¥Nëh¡$7KŠ3¿²"ÑG•zpÍVO4¢,¤Þ' [ 243.042192][T10700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1011'. [ 243.047736][ T8297] lwtunnel_output(): recursion limit reached on datapath [ 243.294985][T10702] tipc: Enabling of bearer rejected, already enabled [ 243.447598][ T42] lwtunnel_output(): recursion limit reached on datapath [ 243.473867][T10713] __nla_validate_parse: 2 callbacks suppressed [ 243.473889][T10713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1015'. [ 244.090060][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 244.183601][T10732] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1021'. [ 244.184116][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 244.256150][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 244.579362][ T194] lwtunnel_output(): recursion limit reached on datapath [ 244.710440][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 244.710513][T10753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1027'. [ 244.793734][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 244.793773][T10758] netlink: 'syz.4.1028': attribute type 7 has an invalid length. [ 244.793786][T10758] netlink: 'syz.4.1028': attribute type 8 has an invalid length. [ 244.793795][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 244.937508][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 244.937544][T10772] netlink: 'syz.4.1028': attribute type 7 has an invalid length. [ 244.937556][T10772] netlink: 'syz.4.1028': attribute type 8 has an invalid length. [ 244.937567][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 245.345262][T10773] batman_adv: batadv0: Interface deactivated: veth0 [ 245.354090][T10773] batman_adv: batadv0: Removing interface: veth0 [ 245.477764][T10773] bond0: (slave bond_slave_0): Releasing backup interface [ 245.517669][T10773] bond0: (slave bond_slave_1): Releasing backup interface [ 245.566713][T10773] team0: Port device team_slave_0 removed [ 245.600407][T10773] team0: Port device team_slave_1 removed [ 245.614523][T10773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.627788][T10773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.735882][T10764] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 245.930178][ T8292] wg2 speed is unknown, defaulting to 1000 [ 245.930241][ T8292] syz2: Port: 1 Link DOWN [ 246.383130][T10808] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 246.485212][ T8298] net_ratelimit: 2 callbacks suppressed [ 246.485235][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 247.142501][T10839] ¬0Ù: renamed from bond_slave_1 (while UP) [ 247.394818][T10843] netlink: 'syz.4.1045': attribute type 13 has an invalid length. [ 247.525577][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 247.605611][ T194] lwtunnel_output(): recursion limit reached on datapath [ 247.761911][T10843] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 247.958688][ T9572] lwtunnel_output(): recursion limit reached on datapath [ 248.415974][T10884] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.418715][T10884] team0: Port device bond9 added [ 248.542513][T10896] __nla_validate_parse: 5 callbacks suppressed [ 248.542535][T10896] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1055'. [ 248.566294][ T8292] lwtunnel_output(): recursion limit reached on datapath [ 249.205514][ T8417] lwtunnel_output(): recursion limit reached on datapath [ 249.275296][T10910] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 249.305940][T10910] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 249.444008][T10915] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1062'. [ 249.605601][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 249.689154][T10929] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 249.753130][T10929] gretap2: entered allmulticast mode [ 249.782391][T10929] bond3: (slave gretap2): making interface the new active one [ 249.793827][T10929] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 250.167782][T10940] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1069'. [ 250.167807][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 250.304186][T10952] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1072'. [ 250.492701][T10950] 8021q: adding VLAN 0 to HW filter on device bond8 [ 250.545960][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 250.545998][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 250.549265][T10950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.551267][T10950] bond8: (slave bond0): Enslaving as an active interface with a down link [ 250.646033][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 250.647474][ T5744] lwtunnel_output(): recursion limit reached on datapath [ 250.745708][T10969] sctp: [Deprecated]: syz.3.1076 (pid 10969) Use of int in max_burst socket option. [ 250.745708][T10969] Use struct sctp_assoc_value instead [ 251.046179][T10983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 251.046217][T10983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 251.178568][T10990] xt_hashlimit: size too large, truncated to 1048576 [ 251.316838][T10983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 251.685779][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 252.726639][ T8292] lwtunnel_output(): recursion limit reached on datapath [ 253.091726][T11048] tun0: tun_chr_ioctl cmd 1074025673 [ 253.091867][T11054] tun0: tun_chr_ioctl cmd 1074025680 [ 253.689444][ T8417] lwtunnel_output(): recursion limit reached on datapath [ 253.769236][ T8298] lwtunnel_output(): recursion limit reached on datapath [ 253.778127][ T10] lwtunnel_output(): recursion limit reached on datapath [ 253.793640][T11076] __nla_validate_parse: 14 callbacks suppressed [ 253.793663][T11076] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1095'. [ 254.365623][T11090] xt_limit: Overflow, try lower: 0/0 [ 254.390216][T11090] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1098'. [ 254.564154][T11096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 254.564251][T11096] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1101'. [ 254.564268][T11096] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1101'. [ 254.564282][T11096] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1101'. [ 254.610865][T11096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1101'. [ 254.840830][T11105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1102'. [ 254.955783][ T8293] lwtunnel_output(): recursion limit reached on datapath [ 254.966340][ T62] lwtunnel_output(): recursion limit reached on datapath [ 255.021662][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1104'. [ 255.285484][T11096] batman_adv: batadv0: Interface deactivated: macsec1 [ 255.330854][T11100] tc_dump_action: action bad kind [ 255.342554][T11113] netlink: 'syz.4.1105': attribute type 11 has an invalid length. [ 255.355470][ T42] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.355505][ T42] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.355540][ T42] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.355563][ T42] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.355594][ T42] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.355617][ T42] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.355647][ T42] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.355669][ T42] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.608478][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761475][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 256.005664][ T8283] lwtunnel_output(): recursion limit reached on datapath [ 256.806353][ T194] lwtunnel_output(): recursion limit reached on datapath [ 257.045826][ T8294] lwtunnel_output(): recursion limit reached on datapath [ 258.087564][ T8294] lwtunnel_output(): recursion limit reached on datapath [ 258.114732][T11190] netlink: 'syz.4.1128': attribute type 8 has an invalid length. [ 258.370044][T11200] netlink: 'syz.4.1131': attribute type 15 has an invalid length. [ 258.483376][T11202] bond10: entered promiscuous mode [ 258.483953][T11202] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.560436][T11205] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.560978][T11205] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 258.582268][T11205] bond10: (slave xfrm1): Error -95 calling set_mac_address [ 258.700610][T11200] syzkaller0: left promiscuous mode [ 258.700635][T11200] syzkaller0: left allmulticast mode [ 259.125715][ T8283] lwtunnel_output(): recursion limit reached on datapath [ 259.449432][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 259.847904][ T5744] lwtunnel_output(): recursion limit reached on datapath [ 260.168452][ T8417] lwtunnel_output(): recursion limit reached on datapath [ 260.234607][T11256] ip6tnl3: entered promiscuous mode [ 260.234630][T11256] ip6tnl3: entered allmulticast mode [ 260.380392][T11259] syzkaller0: entered promiscuous mode [ 260.380706][T11259] syzkaller0: entered allmulticast mode [ 260.488205][T11263] __nla_validate_parse: 10 callbacks suppressed [ 260.488228][T11263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1147'. [ 260.490720][T11263] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1147'. [ 260.731997][ T9572] lwtunnel_output(): recursion limit reached on datapath [ 260.770458][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888029adf000: rx timeout, send abort [ 261.103190][T11271] netlink: 'syz.0.1149': attribute type 1 has an invalid length. [ 261.223008][T11271] 8021q: adding VLAN 0 to HW filter on device bond11 [ 261.248726][T11277] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 261.271566][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888029adf000: abort rx timeout. Force session deactivation [ 261.302127][T11271] bond11: entered promiscuous mode [ 261.302355][T11271] bond11: entered allmulticast mode [ 261.388455][T11273] macvlan2: entered promiscuous mode [ 261.388480][T11273] macvlan2: entered allmulticast mode [ 261.392541][T11273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.503480][T11280] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.936389][T11289] syzkaller0: entered promiscuous mode [ 261.936413][T11289] syzkaller0: entered allmulticast mode [ 262.199667][T11304] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.199703][T11304] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.885778][ T9572] lwtunnel_output(): recursion limit reached on datapath [ 262.975980][T11305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.976018][T11305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.166642][T11305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.166679][T11305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.401849][T11330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.414144][T11330] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.434609][T11330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.504463][T11330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.504492][T11330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.534497][T11330] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 263.584870][ T8298] wg2 speed is unknown, defaulting to 1000 [ 263.584912][ T8298] syz2: Port: 1 Link ACTIVE [ 263.641071][T11340] ip_tables: iptables: counters copy to user failed while replacing table [ 263.653844][T11340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 263.732811][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 263.782336][T11340] ip6gre1: entered promiscuous mode [ 263.793846][T11340] ip6gre1: entered allmulticast mode [ 263.810299][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1159'. [ 264.226792][T11305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.226851][T11305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.421383][T11358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 264.578082][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 264.655385][ T8417] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.655421][ T8417] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.669488][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 264.707292][T11363] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 264.710034][T11363] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 264.786005][ T8417] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.786040][ T8417] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.786074][ T8417] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.786097][ T8417] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.812168][ T8417] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.812203][ T8417] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.006010][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 265.219329][ T62] lwtunnel_output(): recursion limit reached on datapath [ 265.797545][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 265.817593][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 266.431490][T11409] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1176'. [ 266.488326][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 268.407055][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 269.355588][T11460] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20001 [ 269.625242][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 269.625458][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 269.625634][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 269.625808][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 269.625984][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 269.626158][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 269.626542][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 269.686651][ T42] lwtunnel_output(): recursion limit reached on datapath [ 270.643879][T11487] bond0: entered promiscuous mode [ 270.643902][T11487] bond_slave_0: entered promiscuous mode [ 270.663337][T11487] bond0: left promiscuous mode [ 270.663359][T11487] bond_slave_0: left promiscuous mode [ 270.918223][T11489] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 270.976514][ T9569] lwtunnel_output(): recursion limit reached on datapath [ 271.017308][T11494] __nla_validate_parse: 26 callbacks suppressed [ 271.017329][T11494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1189'. [ 271.474871][T11500] netlink: 'syz.3.1192': attribute type 21 has an invalid length. [ 271.517121][T11500] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 271.517147][T11500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1192'. [ 271.550974][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.552500][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.560598][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.643669][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.686115][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.745740][ T4948] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.746677][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 271.753919][ T4948] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.754261][ T4948] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.762613][ T4948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.763288][ T4948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.891105][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 271.891140][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1193'. [ 272.188567][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 272.188625][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1193'. [ 272.221717][T11519] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1195'. [ 272.247080][ T9569] lwtunnel_output(): recursion limit reached on datapath [ 272.381670][T11519] ip_tables: iptables: counters copy to user failed while replacing table [ 272.404342][T11519] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 272.404366][T11519] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1195'. [ 273.100395][T11530] tipc: Enabling of bearer rejected, already enabled [ 273.149066][T11530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1197'. [ 273.522749][T11534] smbdirect: ib_dev[s`z1] removed [ 273.825950][ T8298] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 273.845142][ T5632] Bluetooth: hci5: command tx timeout [ 273.851916][T11559] macsec2: entered promiscuous mode [ 273.880676][T11559] macsec2: entered allmulticast mode [ 273.882036][T11559] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 274.037323][ T8298] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 274.118661][ T5744] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 274.126635][T11559] macsec2: entered promiscuous mode [ 274.127587][T11559] macsec2: entered allmulticast mode [ 274.138512][T11559] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 274.276085][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 274.284232][ T5744] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 274.338908][ T8298] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 274.340583][T11559] macsec2: entered promiscuous mode [ 274.340745][T11559] macsec2: entered allmulticast mode [ 274.351699][T11564] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 274.366274][T11559] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 274.410057][ T8298] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 274.501868][T11501] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.762133][T11576] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 274.851352][T11501] wg2 speed is unknown, defaulting to 1000 [ 275.213904][T11586] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 275.454550][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 275.682409][ T4948] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.695215][ T4948] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.701060][ T4948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.702353][ T4948] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.704588][ T4948] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.772885][T11603] bridge0: port 3(ip6gretap0) entered blocking state [ 275.773382][T11603] bridge0: port 3(ip6gretap0) entered disabled state [ 275.773761][T11603] ip6gretap0: entered allmulticast mode [ 275.782821][T11603] ip6gretap0: entered promiscuous mode [ 275.792348][T11603] bridge0: port 3(ip6gretap0) entered blocking state [ 275.792444][T11603] bridge0: port 3(ip6gretap0) entered forwarding state [ 275.918010][T11501] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.918545][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.918722][T11501] bridge_slave_0: entered allmulticast mode [ 275.922375][T11501] bridge_slave_0: entered promiscuous mode [ 275.931230][ T4948] Bluetooth: hci5: command tx timeout [ 275.963847][T11501] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.964119][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.972173][T11501] bridge_slave_1: entered allmulticast mode [ 275.997617][T11501] bridge_slave_1: entered promiscuous mode [ 276.222352][T11501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.243248][T11501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.393072][T11501] team0: Port device team_slave_0 added [ 276.410064][T11501] team0: Port device team_slave_1 added [ 276.458487][T11501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.458506][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.458530][T11501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.460487][T11501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.460501][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.460526][T11501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.727277][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 276.732781][T11644] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.821804][T11501] hsr_slave_0: entered promiscuous mode [ 276.824562][T11501] hsr_slave_1: entered promiscuous mode [ 276.839225][T11501] debugfs: 'hsr0' already exists in 'hsr' [ 276.839247][T11501] Cannot create hsr debugfs directory [ 276.939881][T11638] __nla_validate_parse: 3 callbacks suppressed [ 276.939899][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 277.008135][T11641] rxe_eth0 speed is unknown, defaulting to 1000 [ 277.287959][ T42] lwtunnel_output(): recursion limit reached on datapath [ 277.450563][T11501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.470621][T11501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.475050][T11501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.508871][T11501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.510320][T11501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.556146][T11501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.557630][T11606] rxe_eth0 speed is unknown, defaulting to 1000 [ 277.560370][T11641] wg2 speed is unknown, defaulting to 1000 [ 277.562849][T11651] veth1_to_bond: entered promiscuous mode [ 277.563406][T11501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.606157][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 277.609051][T11501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.845792][ T4948] Bluetooth: hci6: command tx timeout [ 277.938192][T11651] veth1_to_bond (unregistering): left promiscuous mode [ 278.007305][ T4948] Bluetooth: hci5: command tx timeout [ 278.028929][T11606] wg2 speed is unknown, defaulting to 1000 [ 278.391694][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 278.441874][T11675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1222'. [ 278.442378][T11675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.453269][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'. [ 278.907586][T11501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.945238][T11501] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.962862][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.962960][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.991067][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.991198][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.569568][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.572273][T11606] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.572570][T11606] bridge_slave_0: entered allmulticast mode [ 279.598865][T11606] bridge_slave_0: entered promiscuous mode [ 279.643032][T11606] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.643496][T11606] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.643835][T11606] bridge_slave_1: entered allmulticast mode [ 279.669974][T11606] bridge_slave_1: entered promiscuous mode [ 279.925405][T11606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.931650][ T42] lwtunnel_output(): recursion limit reached on datapath [ 279.936129][ T4948] Bluetooth: hci6: command tx timeout [ 279.963683][T11706] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 280.035205][T11606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.089746][ T4948] Bluetooth: hci5: command tx timeout [ 280.109727][T11712] syzkaller0: entered promiscuous mode [ 280.109750][T11712] syzkaller0: entered allmulticast mode [ 280.323105][T11712] tipc: Enabled bearer , priority 0 [ 280.351303][T11606] team0: Port device team_slave_0 added [ 280.354507][T11708] tipc: Resetting bearer [ 280.400753][T11708] tipc: Disabling bearer [ 280.431461][T11606] team0: Port device team_slave_1 added [ 280.508507][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1230'. [ 280.570963][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1230'. [ 280.580382][T11606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.580399][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.580423][T11606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.593072][T11606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.593089][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.593114][T11606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.618347][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1230'. [ 280.629102][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1230'. [ 280.680610][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1230'. [ 280.882158][T11606] hsr_slave_0: entered promiscuous mode [ 280.887166][T11606] hsr_slave_1: entered promiscuous mode [ 280.889774][T11606] debugfs: 'hsr0' already exists in 'hsr' [ 280.889807][T11606] Cannot create hsr debugfs directory [ 281.206366][ T8417] lwtunnel_output(): recursion limit reached on datapath [ 281.739222][T11501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.850706][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 282.005513][ T4948] Bluetooth: hci6: command tx timeout [ 282.421737][T11606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.443450][T11606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.452529][T11606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.483360][T11606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.485678][ T9572] lwtunnel_output(): recursion limit reached on datapath [ 282.518774][T11606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.565625][T11606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.584171][T11606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.689098][T11606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.960136][T11501] veth0_vlan: entered promiscuous mode [ 282.992598][T11501] veth1_vlan: entered promiscuous mode [ 283.163085][T11501] veth0_macvtap: entered promiscuous mode [ 283.222176][T11501] veth1_macvtap: entered promiscuous mode [ 283.364399][T11501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.449763][T11501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.497177][T11606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.629649][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.632997][ T8409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.660415][T11606] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.665375][ T84] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.674849][ T84] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.869407][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.869518][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.871828][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.871959][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.933661][T11798] __nla_validate_parse: 16 callbacks suppressed [ 283.933681][T11798] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1244'. [ 284.080567][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.080589][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.093649][ T4948] Bluetooth: hci6: command tx timeout [ 284.207652][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.207675][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.520487][T11606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.687728][ T9569] lwtunnel_output(): recursion limit reached on datapath [ 285.878449][T11875] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 285.983544][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 286.060866][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.061106][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.061307][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.061505][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.061737][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.061943][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.062173][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.062370][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.062565][T11887] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 286.301874][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 286.508591][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 286.771119][T11606] veth0_vlan: entered promiscuous mode [ 286.786957][T11606] veth1_vlan: entered promiscuous mode [ 286.846591][ T8409] nci: nci_rx_work: unknown MT 0x5 [ 286.854041][T11606] veth0_macvtap: entered promiscuous mode [ 286.902538][T11606] veth1_macvtap: entered promiscuous mode [ 286.967621][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 286.991084][T11606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.044179][T11606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.145127][ T9572] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.146840][ T9572] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.173215][ T84] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.178728][ T6073] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.608616][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 288.248462][ T6073] lwtunnel_output(): recursion limit reached on datapath [ 289.751760][T11904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.938735][ T9572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.938757][ T9572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.059688][T11933] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1271'. [ 290.097158][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.097178][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.252477][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1274'. [ 290.579622][T11956] hsr0: entered promiscuous mode [ 290.822399][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1277'. [ 291.026285][T11949] hsr0: left promiscuous mode [ 291.459763][ T8417] lwtunnel_output(): recursion limit reached on datapath [ 291.484538][T11515] udevd[11515]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 291.595671][ T42] nci: nci_rx_work: unknown MT 0x5 [ 291.676214][T11986] validate_nla: 6 callbacks suppressed [ 291.676233][T11986] netlink: 'syz.5.1282': attribute type 6 has an invalid length. [ 291.720207][T11987] bridge3: entered promiscuous mode [ 292.088031][ T8417] lwtunnel_output(): recursion limit reached on datapath [ 292.375498][T12002] sctp: [Deprecated]: syz.6.1285 (pid 12002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.375498][T12002] Use struct sctp_sack_info instead [ 292.663020][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 292.801516][T12014] netlink: 'syz.6.1288': attribute type 219 has an invalid length. [ 292.955005][T12019] xt_ecn: cannot match TCP bits for non-tcp packets [ 294.009304][ T8417] lwtunnel_output(): recursion limit reached on datapath [ 294.388001][T11970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.536739][T12028] netlink: 'syz.5.1292': attribute type 3 has an invalid length. [ 294.724442][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'. [ 295.124183][T12059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.140187][T12059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.552709][T12078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.001000][ T29] audit: type=1804 audit(1792986832.655:15): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1307" name="/newroot/285/cgroup.controllers" dev="tmpfs" ino=1491 res=1 errno=0 [ 296.003789][ T29] audit: type=1804 audit(1792986832.655:16): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1307" name="/newroot/285/cgroup.controllers" dev="tmpfs" ino=1491 res=1 errno=0 [ 296.004886][ T29] audit: type=1800 audit(1792986832.665:17): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1307" name="cgroup.controllers" dev="tmpfs" ino=1491 res=0 errno=-22 [ 296.423399][T12108] lwtunnel_output(): recursion limit reached on datapath [ 296.517810][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 296.520574][T12111] netlink: 'syz.0.1309': attribute type 1 has an invalid length. [ 296.520586][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 296.964800][ T5632] Bluetooth: hci6: command 0x0405 tx timeout [ 297.208623][ T42] lwtunnel_output(): recursion limit reached on datapath [ 297.211876][ T42] lwtunnel_output(): recursion limit reached on datapath [ 298.282526][T12065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.335887][T12076] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (€h\E3~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð< [ 298.486408][ T42] lwtunnel_output(): recursion limit reached on datapath [ 298.671785][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1310'. [ 298.675160][T12119] netlink: 'syz.5.1310': attribute type 1 has an invalid length. [ 299.150639][T12142] ip6tnl1: entered allmulticast mode [ 299.315989][T12146] syzkaller1: entered promiscuous mode [ 299.316011][T12146] syzkaller1: entered allmulticast mode [ 299.319079][T12151] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1317'. [ 299.650193][ T8417] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.650424][ T8417] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.676967][ T8296] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.734860][ T8283] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.766561][ T42] lwtunnel_output(): recursion limit reached on datapath [ 299.982368][ T6078] nci: nci_rx_work: unknown MT 0x5 [ 300.055117][ T8296] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.572582][T12180] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 300.572609][T12180] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 300.572803][T12180] bond1: entered allmulticast mode [ 300.589939][T12180] netlink: zone id is out of range [ 300.589952][T12180] netlink: zone id is out of range [ 300.589959][T12180] netlink: zone id is out of range [ 300.589966][T12180] netlink: zone id is out of range [ 300.589973][T12180] netlink: zone id is out of range [ 300.589980][T12180] netlink: zone id is out of range [ 300.665444][T12182] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 300.665471][T12182] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 300.677644][T12182] bond2: entered allmulticast mode [ 300.705433][T12192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1326'. [ 301.109211][T12212] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.126166][T12212] team0: Port device bond9 added [ 301.211608][T12213] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.222579][T12213] team0: Port device bond10 added [ 301.279647][T12223] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1328'. [ 301.279705][T12223] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1328'. [ 301.349870][T12223] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1328'. [ 301.349928][T12223] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1328'. [ 301.474140][T12223] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1328'. [ 302.022275][T12231] __nla_validate_parse: 1 callbacks suppressed [ 302.022295][T12231] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1332'. [ 302.733134][T12161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.966847][ T6078] net_ratelimit: 10 callbacks suppressed [ 302.966864][ T6078] lwtunnel_output(): recursion limit reached on datapath [ 302.968214][ T62] lwtunnel_output(): recursion limit reached on datapath [ 303.083795][T12245] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 303.125835][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 304.079763][T12265] netlink: 'syz.6.1341': attribute type 10 has an invalid length. [ 304.084862][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.257111][ T62] lwtunnel_output(): recursion limit reached on datapath [ 304.886722][ T6078] lwtunnel_output(): recursion limit reached on datapath [ 305.295002][T12265] team0: Port device dummy0 added [ 305.483313][ T6073] nci: nci_rx_work: unknown MT 0x5 [ 305.771158][T12287] netlink: 'syz.2.1346': attribute type 3 has an invalid length. [ 305.771179][T12287] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1346'. [ 305.826021][T12287] syzkaller1: entered promiscuous mode [ 305.826243][T12287] syzkaller1: entered allmulticast mode [ 305.827484][T12290] xt_nat: multiple ranges no longer supported [ 306.588511][T12283] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 306.588537][T12283] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 306.594353][T12283] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 306.594371][T12283] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 306.859896][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1350'. [ 306.859916][T12297] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1350'. [ 308.091015][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 308.286183][T12269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.728016][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 308.897928][T12314] netlink: 'syz.3.1354': attribute type 1 has an invalid length. [ 308.989107][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1355'. [ 309.013971][T12325] ip6gretap0: entered promiscuous mode [ 309.014466][T12325] macvtap1: entered promiscuous mode [ 309.026829][T12325] macvtap1: entered allmulticast mode [ 309.026846][T12325] ip6gretap0: entered allmulticast mode [ 309.129563][T12325] ip6gretap0: left allmulticast mode [ 309.129726][T12325] ip6gretap0: left promiscuous mode [ 309.158121][T12325] macvtap1: left promiscuous mode [ 309.158331][T12325] macvtap1: left allmulticast mode [ 309.749538][T12344] syzkaller0: entered promiscuous mode [ 309.749559][T12344] syzkaller0: entered allmulticast mode [ 310.008324][ T8409] lwtunnel_output(): recursion limit reached on datapath [ 310.283075][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 310.433402][T12365] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1364'. [ 310.491401][T12372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1365'. [ 310.531231][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 310.531266][T12372] netlink: 'syz.3.1365': attribute type 5 has an invalid length. [ 310.531278][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 310.531890][T12375] ip_tables: iptables: counters copy to user failed while replacing table [ 310.543820][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 310.543847][T12372] netlink: 'syz.3.1365': attribute type 5 has an invalid length. [ 310.543859][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 310.573967][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1365'. [ 310.617119][T12375] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 310.635000][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 310.635029][T12381] netlink: 'syz.3.1365': attribute type 5 has an invalid length. [ 310.636600][T12376] netlink: 'syz.3.1365': attribute type 5 has an invalid length. [ 310.648238][ T9572] lwtunnel_output(): recursion limit reached on datapath [ 310.779762][T12378] batadv_slave_1: entered promiscuous mode [ 310.800868][ T5292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.919167][T12391] ip_tables: iptables: counters copy to user failed while replacing table [ 311.614249][T12373] batadv_slave_1: left promiscuous mode [ 311.983589][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.985628][ T5632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.987000][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.989226][ T5632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.993171][ T5632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.091944][ T4948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.098925][ T4948] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.113766][ T4948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.124415][ T4948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.130774][ T4948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.219045][ T8409] nci: nci_rx_work: unknown MT 0x5 [ 312.345353][T12444] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 312.992371][T12474] lwtunnel_output(): recursion limit reached on datapath [ 313.182891][T12431] rxe_eth0 speed is unknown, defaulting to 1000 [ 313.204928][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.591050][T12431] wg2 speed is unknown, defaulting to 1000 [ 313.980083][T12431] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.980257][T12431] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.980659][T12431] bridge_slave_0: entered allmulticast mode [ 313.982645][T12431] bridge_slave_0: entered promiscuous mode [ 314.015363][T12431] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.015528][T12431] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.015657][T12431] bridge_slave_1: entered allmulticast mode [ 314.017586][T12431] bridge_slave_1: entered promiscuous mode [ 314.079820][T12431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.082864][T12431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.132629][T12431] team0: Port device team_slave_0 added [ 314.141850][T12431] team0: Port device team_slave_1 added [ 314.175314][ T5632] Bluetooth: hci7: command tx timeout [ 314.179587][T12431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.179601][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.179624][T12431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.181882][T12431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.181895][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.181920][T12431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.301376][T12483] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 314.301399][T12483] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 314.367252][T12431] hsr_slave_0: entered promiscuous mode [ 314.368305][T12431] hsr_slave_1: entered promiscuous mode [ 314.369094][T12431] debugfs: 'hsr0' already exists in 'hsr' [ 314.369113][T12431] Cannot create hsr debugfs directory [ 314.488210][ T9568] lwtunnel_output(): recursion limit reached on datapath [ 314.920803][T12430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.043795][T12431] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.052957][ T9568] lwtunnel_output(): recursion limit reached on datapath [ 315.082833][T12431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.083740][T12431] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 315.112200][T12431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.123785][T12431] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 315.182388][T12431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.280627][T12431] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.311631][T12431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.830637][T12431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.848009][T12521] __nla_validate_parse: 4 callbacks suppressed [ 315.848025][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 315.918639][T12431] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.952332][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.952439][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.033391][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.033507][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.193578][T12524] tipc: Started in network mode [ 316.193608][T12524] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 316.194196][T12524] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 316.229767][T12524] tipc: Enabled bearer , priority 10 [ 316.356890][T12533] netlink: 'syz.3.1393': attribute type 16 has an invalid length. [ 316.356912][T12533] netlink: 'syz.3.1393': attribute type 17 has an invalid length. [ 316.510550][T12533] sit0: left promiscuous mode [ 316.617740][T12545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1396'. [ 316.731251][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.731791][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.050864][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.054202][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.098259][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.098311][T12533] batadv_slave_1: left promiscuous mode [ 317.391598][T12562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.407890][T12533] bridge2: left allmulticast mode [ 317.410715][T12533] bond1: left promiscuous mode [ 317.410732][T12533] gre1: left promiscuous mode [ 317.457392][T12533] bond2: left promiscuous mode [ 317.457411][T12533] bridge3: left promiscuous mode [ 317.461787][T12533] bridge4: left promiscuous mode [ 317.461805][T12533] bridge4: left allmulticast mode [ 317.461928][T12533] vlan4: left allmulticast mode [ 317.461946][T12533] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 317.500918][T12533] vlan5: left allmulticast mode [ 317.500936][T12533] bond0: left allmulticast mode [ 317.500949][T12533] bond_slave_0: left allmulticast mode [ 317.523779][T12533] gretap2: left allmulticast mode [ 317.566158][ T8298] tipc: Node number set to 1 [ 317.567472][ T62] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.631555][ T84] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.639449][ T84] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.826546][ T84] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.893278][T12571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.784362][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1405'. [ 319.107825][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1408'. [ 321.863858][T12633] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.881635][T12633] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.312165][T12431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.963366][T12685] netlink: 'syz.2.1425': attribute type 30 has an invalid length. [ 322.988151][T12677] netlink: 'syz.3.1423': attribute type 30 has an invalid length. [ 323.176482][T12695] netlink: 'syz.3.1423': attribute type 30 has an invalid length. [ 323.667693][T12431] veth0_vlan: entered promiscuous mode [ 323.715652][T12431] veth1_vlan: entered promiscuous mode [ 323.829032][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 323.873419][T12431] veth0_macvtap: entered promiscuous mode [ 323.912604][T12431] veth1_macvtap: entered promiscuous mode [ 324.055941][T12729] netlink: 'syz.2.1430': attribute type 1 has an invalid length. [ 324.067201][T12431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.170523][T12729] 8021q: adding VLAN 0 to HW filter on device bond14 [ 324.199192][T12431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.305146][ T84] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.305202][ T84] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.305234][ T84] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.305264][ T84] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.412501][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'. [ 324.412565][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 324.412587][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 324.412663][T12742] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1432'. [ 324.412677][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'. [ 324.493125][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 324.831898][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.831921][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.001131][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 325.041423][ T9572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.041442][ T9572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.086345][T12754] syzkaller0: entered promiscuous mode [ 325.086365][T12754] syzkaller0: entered allmulticast mode [ 325.142361][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.329093][T12758] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1436'. [ 325.549440][ T5292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.770909][T12773] rxe_eth0 speed is unknown, defaulting to 1000 [ 325.807537][T12766] syzkaller0: entered promiscuous mode [ 325.807751][T12766] syzkaller0: entered allmulticast mode [ 325.844543][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1373'. [ 326.290692][ T6073] nci: nci_rx_work: unknown MT 0x5 [ 326.364088][T12773] wg2 speed is unknown, defaulting to 1000 [ 326.797615][T12761] infiniband syz0: set down [ 326.802333][T12761] infiniband syz0: added bond0 [ 326.848661][T12796] veth0: entered promiscuous mode [ 326.852769][T12761] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 326.852801][T12761] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 326.852838][T12761] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 326.944382][T12761] RDS/IB: syz0: added [ 326.944436][T12761] smc: adding ib device syz0 with port count 1 [ 326.944453][T12761] smc: ib device syz0 port 1 has no pnetid [ 327.532354][T12791] veth0: left promiscuous mode [ 329.006077][T12781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.444469][T12817] netlink: 'syz.6.1444': attribute type 62 has an invalid length. [ 329.977199][T12820] __nla_validate_parse: 3 callbacks suppressed [ 329.977218][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 330.062861][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 330.076378][T12828] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 330.980123][T12853] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1450'. [ 331.283278][T12860] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1453'. [ 331.284057][T12860] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1453'. [ 331.319482][T12860] xt_TCPMSS: Only works on TCP SYN packets [ 331.337083][T12860] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.337761][T12860] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.051126][ T6073] nci: nci_rx_work: unknown MT 0x5 [ 332.256995][T12883] ip6erspan1: entered allmulticast mode [ 332.416747][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.506000][T12884] syzkaller0: entered promiscuous mode [ 332.506022][T12884] syzkaller0: entered allmulticast mode [ 333.087883][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1458'. [ 333.110946][T12896] batadv0: entered promiscuous mode [ 333.111199][T12896] macvtap1: entered promiscuous mode [ 333.111507][T12896] macvtap1: entered allmulticast mode [ 333.111521][T12896] batadv0: entered allmulticast mode [ 333.113830][T12896] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 333.157473][T12897] batadv0: left allmulticast mode [ 333.157674][T12897] batadv0: left promiscuous mode [ 333.157763][T12897] macvtap1: left promiscuous mode [ 333.157777][T12897] macvtap1: left allmulticast mode [ 333.355545][T12904] netlink: 'syz.5.1459': attribute type 17 has an invalid length. [ 333.422167][T12903] netlink: 'syz.7.1460': attribute type 1 has an invalid length. [ 333.422190][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1460'. [ 334.794121][T12874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.315567][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.316402][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.317306][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.329457][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.334124][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.342255][T12932] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1466'. [ 335.342960][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.343833][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.348023][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.349822][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 335.350536][T12930] ip_tables: iptables: counters copy to user failed while replacing table [ 336.219181][T12957] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 336.361432][ T9569] nci: nci_rx_work: unknown MT 0x5 [ 336.891153][T12983] ipvlan2: entered promiscuous mode [ 336.907440][T12983] team0: Device ipvlan2 failed to register rx_handler [ 339.203260][T12958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.359546][T13006] pimreg: entered allmulticast mode [ 339.450867][T13005] pimreg: left allmulticast mode [ 339.464441][T13008] netlink: 'syz.6.1482': attribute type 1 has an invalid length. [ 339.597552][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 339.612439][T13008] bond3: entered promiscuous mode [ 339.612850][T13008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.637623][ T5632] block nbd2: Receive control failed (result -107) [ 339.681946][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 339.685723][ T5632] block nbd3: Receive control failed (result -107) [ 339.893212][T13015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.894314][T13015] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 339.894335][T13015] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 339.934708][T13015] bond3: (slave xfrm1): making interface the new active one [ 339.934731][T13015] xfrm1: entered promiscuous mode [ 339.962213][T13015] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 340.147880][T13029] netlink: 'syz.5.1488': attribute type 1 has an invalid length. [ 340.204346][T13029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.272744][T13033] bond1: (slave veth3): Enslaving as an active interface with a down link [ 340.329848][T13029] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 340.351116][T13029] bond1: (slave batadv1): making interface the new active one [ 340.368698][T13029] batadv1: entered promiscuous mode [ 340.370827][T13029] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 340.399399][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 340.435094][T13033] bond1 (unregistering): (slave veth3): Releasing active interface [ 340.439488][T13035] netlink: 'syz.5.1488': attribute type 1 has an invalid length. [ 340.503896][T13033] bond1 (unregistering): (slave batadv1): Releasing active interface [ 340.503923][T13033] batadv1: left promiscuous mode [ 340.524546][T13033] bond1 (unregistering): Released all slaves [ 340.815863][T13035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.881782][ T6073] nci: nci_rx_work: unknown MT 0x5 [ 340.920293][T13037] bond1: (slave veth5): Enslaving as an active interface with a down link [ 340.936134][T13029] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 340.943763][T13029] bond1: (slave batadv2): making interface the new active one [ 340.946847][T13029] batadv2: entered promiscuous mode [ 340.951500][T13029] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 340.985092][T13042] bond1 (unregistering): (slave veth5): Releasing active interface [ 340.994374][T13042] bond1 (unregistering): (slave batadv2): Releasing active interface [ 340.994403][T13042] batadv2: left promiscuous mode [ 341.004931][T13042] bond1 (unregistering): Released all slaves [ 341.037160][T13046] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 341.064947][T13049] syzkaller1: entered promiscuous mode [ 341.064967][T13049] syzkaller1: entered allmulticast mode [ 341.067743][T13069] tap0: tun_chr_ioctl cmd 21731 [ 341.461211][T13081] siw: device registration error -23 [ 341.570299][T13092] syzkaller0: entered promiscuous mode [ 341.570320][T13092] syzkaller0: entered allmulticast mode [ 341.721186][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1498'. [ 341.801373][T13096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.834509][T13098] bond6: (slave batadv2): Opening slave failed [ 341.900423][T13101] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1499'. [ 342.166529][T13100] net_ratelimit: 55 callbacks suppressed [ 342.166550][T13100] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 342.769125][T13122] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 343.697696][T13060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.974667][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1505'. [ 344.016082][ T62] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.016122][ T62] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.016161][ T62] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.016191][ T62] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.016895][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1505'. [ 344.125122][T13146] netlink: 'syz.5.1504': attribute type 1 has an invalid length. [ 344.259310][T13146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.358478][T13143] bond1: (slave gretap1): making interface the new active one [ 344.381012][T13143] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 345.392912][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1511'. [ 345.432637][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1511'. [ 346.148412][ T84] nci: nci_rx_work: unknown MT 0x5 [ 347.444009][T13238] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1519'. [ 347.539520][T13238] bond15: entered promiscuous mode [ 347.539580][T13238] bond15: entered allmulticast mode [ 347.540044][T13238] 8021q: adding VLAN 0 to HW filter on device bond15 [ 347.941426][T13250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.521855][T13257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.806503][T13215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.645859][T13277] ip6gretap1: entered allmulticast mode [ 349.674369][T13277] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 349.697447][T13277] batman_adv: batadv0: Adding interface: ip6gretap1 [ 349.697465][T13277] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.697496][T13277] batman_adv: batadv0: Interface activated: ip6gretap1 [ 349.881826][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 349.981376][T13285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1531'. [ 350.693238][ T42] nci: nci_rx_work: unknown MT 0x5 [ 351.580938][T13306] syzkaller0: entered promiscuous mode [ 351.580961][T13306] syzkaller0: entered allmulticast mode [ 351.757029][T13310] netlink: 380 bytes leftover after parsing attributes in process `syz.7.1541'. [ 351.757060][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1541'. [ 351.757074][T13310] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1541'. [ 352.055577][T13313] Bluetooth: MGMT ver 1.23 [ 352.137900][T13316] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.138035][T13316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.138588][T13316] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.138708][T13316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.517254][T13316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.555463][ T8298] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.582856][T13316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.585663][T13316] ip6gretap0: entered promiscuous mode [ 352.675110][ T8298] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.178082][T13333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.498891][T13338] TC_ACT_REPEAT abuse ? [ 353.519476][T13295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.598703][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.603393][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.632325][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.650545][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.665792][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.671939][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.698770][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.704293][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.732307][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.109057][T13343] ip_tables: iptables: counters copy to user failed while replacing table [ 355.291681][T13391] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 356.524545][T13350] tipc: Enabling of bearer rejected, failed to enable media [ 356.653477][T13399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1560'. [ 357.335125][T13421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1565'. [ 357.387167][T13421] tipc: New replicast peer: 172.20.20.187 [ 357.387402][T13421] tipc: Enabled bearer , priority 10 [ 357.714355][T13427] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1566'. [ 357.943633][T13430] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1566'. [ 357.972069][T13436] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1566'. [ 358.550189][ T8293] tipc: Node number set to 248072629 [ 359.153785][T13453] xt_hashlimit: size too large, truncated to 1048576 [ 359.237748][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1572'. [ 359.237777][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1572'. [ 359.274217][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1571'. [ 360.527654][T13475] netlink: 'syz.5.1578': attribute type 1 has an invalid length. [ 360.527676][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1578'. [ 360.792695][ T8417] nci: nci_rx_work: unknown MT 0x5 [ 361.136462][T13490] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1581'. [ 363.402717][T13474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.812815][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.812837][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.812850][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.812862][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813070][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813082][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813092][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813104][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813322][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813335][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813346][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813356][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813566][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813578][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813588][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813599][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813800][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813812][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.813822][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.813833][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.814032][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.814043][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.814054][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.814065][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.814258][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.814270][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 363.814280][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 363.814290][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.001610][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.001630][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.001642][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.001654][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.001855][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.001867][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.001878][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.001888][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002082][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002094][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002104][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002115][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002312][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002324][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002334][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002345][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002628][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002641][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002651][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002661][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002855][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002867][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.002878][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.002888][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003088][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003100][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003111][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003121][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003327][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003339][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003349][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003360][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003563][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003575][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003585][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003595][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003855][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003868][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.003878][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.003888][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.004084][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.004095][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.004106][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.004116][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.004318][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.004330][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.004341][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.004351][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.004546][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.004557][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.004568][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.004578][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.251758][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.251777][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.251788][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.251800][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.407932][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.407953][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.407965][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.407977][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.446631][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.446650][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.446662][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.446674][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.446874][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.446886][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.446896][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.446908][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447102][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.447114][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447125][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.447135][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447407][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.447419][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447429][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.447440][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447642][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.447654][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447665][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.447676][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447885][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.447896][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.447907][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.469288][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.469523][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.469536][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.469546][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.469557][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.469790][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.469802][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.469812][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.469823][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.470018][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.470029][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.470039][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.470050][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.470246][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.470257][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.470268][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.470278][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.470481][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.470493][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.470503][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.470514][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.470716][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.470727][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.876797][T13513] Bluetooth: hci0: unsupported parameter 5161 [ 364.876816][T13513] Bluetooth: hci0: unsupported parameter 8192 [ 364.933294][T13523] ip_tables: iptables: counters copy to user failed while replacing table [ 365.263714][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 365.376230][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 365.407966][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 365.698665][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1594'. [ 366.009667][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1596'. [ 366.076433][T13547] xfrm1: entered promiscuous mode [ 366.076455][T13547] xfrm1: entered allmulticast mode [ 366.080627][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1596'. [ 366.167378][T13548] syzkaller0: entered promiscuous mode [ 366.167600][T13548] syzkaller0: entered allmulticast mode [ 366.371301][T13556] bridge0: port 3(ip6gretap0) entered disabled state [ 366.393989][ T84] nci: nci_rx_work: unknown MT 0x5 [ 366.422502][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.434160][T13556] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.553507][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1600'. [ 366.589519][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'. [ 367.041865][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1603'. [ 367.160794][T13575] openvswitch: netlink: Actions may not be safe on all matching packets [ 367.319258][T13579] syzkaller0: entered promiscuous mode [ 367.319283][T13579] syzkaller0: entered allmulticast mode [ 368.124488][T13611] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1609'. [ 369.249689][T13560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.524929][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 373.181964][T13645] batadv1: entered promiscuous mode [ 373.181990][T13645] batadv1: entered allmulticast mode [ 374.233836][T13678] can: request_module (can-proto-0) failed. [ 374.622305][T13698] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 374.622328][T13698] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 374.622349][T13698] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 376.115570][T13647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.427876][T13704] ip_tables: iptables: counters copy to user failed while replacing table [ 376.484914][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 376.907760][T13712] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1632'. [ 376.907805][T13712] netlink: 'syz.6.1632': attribute type 7 has an invalid length. [ 376.907818][T13712] netlink: 'syz.6.1632': attribute type 8 has an invalid length. [ 376.907830][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1632'. [ 377.049916][T13712] veth0: entered promiscuous mode [ 377.111246][T13712] veth0: left promiscuous mode [ 377.400033][T13726] macsec2: entered promiscuous mode [ 377.401803][T13726] syz_tun: entered promiscuous mode [ 377.431423][T13726] syz_tun: left promiscuous mode [ 377.645433][T13727] macsec2: entered promiscuous mode [ 377.645454][T13727] syz_tun: entered promiscuous mode [ 377.667298][T13727] syz_tun: left promiscuous mode [ 377.800651][ T6073] nci: nci_rx_work: unknown MT 0x5 [ 378.062852][T13752] ip6t_rpfilter: unknown options [ 378.489643][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.753173][T13770] xt_LOG: prefix is not null-terminated [ 379.343121][T13783] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1650'. [ 379.371069][T13786] ip_tables: iptables: counters copy to user failed while replacing table [ 379.628307][T13790] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1652'. [ 379.745387][T13793] xt_hashlimit: size too large, truncated to 1048576 [ 380.620765][T13741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.879469][T13817] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1659'. [ 380.879973][T13818] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1659'. [ 380.985846][T13825] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up [ 381.038446][T13832] tipc: Failed to remove unknown binding: 66,0,0/0:2889193006/2889193007 [ 381.061471][T13832] tipc: Failed to remove unknown binding: 66,0,0/0:2889193006/2889193007 [ 381.498708][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 381.917602][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 382.022888][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 382.022982][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1666'. [ 382.228804][T13843] syzkaller1: entered promiscuous mode [ 382.228830][T13843] syzkaller1: entered allmulticast mode [ 382.549626][T13860] netlink: 'syz.3.1667': attribute type 8 has an invalid length. [ 383.022978][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.023134][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.023267][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.023400][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.023554][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.023681][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.023809][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 383.162817][T13881] lo: entered allmulticast mode [ 383.265345][T13882] lo: left allmulticast mode [ 383.855168][T13902] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 384.093923][T13889] bond16: option ad_user_port_key: invalid value (65535) [ 384.093947][T13889] bond16: option ad_user_port_key: allowed values 0 - 1023 [ 384.152579][T13889] bond16 (unregistering): Released all slaves [ 384.381516][T13911] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 384.901059][T13924] bond0: (slave bond_slave_1): Releasing backup interface [ 384.953927][T13932] ip_tables: iptables: counters copy to user failed while replacing table [ 385.006421][T13936] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 385.213531][T13936] bond2 (unregistering): Released all slaves [ 385.635776][T13928] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 385.666345][T13928] bond2 (unregistering): Released all slaves [ 385.831595][T13953] netlink: 'syz.5.1693': attribute type 1 has an invalid length. [ 386.293755][T13955] 8021q: adding VLAN 0 to HW filter on device bond16 [ 386.358369][T13956] bond16: entered allmulticast mode [ 386.481982][T13964] xt_hashlimit: size too large, truncated to 1048576 [ 386.551377][T13962] batadv0: entered promiscuous mode [ 386.552380][T13962] macvtap2: entered promiscuous mode [ 386.571788][T13962] macvtap2: entered allmulticast mode [ 386.571816][T13962] batadv0: entered allmulticast mode [ 386.593970][T13962] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 386.702364][T13967] batadv0: left allmulticast mode [ 386.716845][T13967] batadv0: left promiscuous mode [ 386.717007][T13967] macvtap2: left promiscuous mode [ 386.717023][T13967] macvtap2: left allmulticast mode [ 387.866291][ T8406] nci: nci_rx_work: unknown MT 0x5 [ 388.350634][T14004] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 388.392382][T14004] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.450718][T14004] bond7: (slave geneve3): making interface the new active one [ 388.452627][T14004] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 388.495173][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.496661][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.523922][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.523981][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.552720][T13986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.115254][T14031] __nla_validate_parse: 67 callbacks suppressed [ 391.115278][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 391.115304][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 391.117091][T14027] batman_adv: batadv0: Adding interface: syzkaller0 [ 391.117106][T14027] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.117136][T14027] batman_adv: batadv0: Interface activated: syzkaller0 [ 392.073139][T14032] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 392.077341][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 392.077371][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 392.204911][ T9568] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.222702][ T9568] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.238108][ T9568] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.238205][ T9568] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.421352][T14040] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1715'. [ 392.441744][T14040] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1715'. [ 392.768987][T14039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 392.855594][T14052] ip_tables: iptables: counters copy to user failed while replacing table [ 393.096813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.294903][ T8283] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.304184][T14035] bond3: left promiscuous mode [ 393.304207][T14035] xfrm1: left promiscuous mode [ 393.365415][T14046] dvmrp0: entered allmulticast mode [ 393.376470][ T8283] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.376973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.431443][T14047] dvmrp0: left allmulticast mode [ 393.746947][T14035] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 393.812108][T14035] batman_adv: batadv0: Removing interface: syzkaller0 [ 394.113626][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 394.113669][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1724'. [ 394.214443][T14071] netlink: 'syz.5.1724': attribute type 15 has an invalid length. [ 394.214468][T14071] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1724'. [ 394.698251][ T8409] nci: nci_rx_work: unknown MT 0x5 [ 395.175833][T14092] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.176501][T14092] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.221619][T14092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.243343][T14092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.728138][T14092] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 396.775175][ T8406] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.775210][ T8406] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.794480][ T8406] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.794513][ T8406] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.794551][ T8406] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.794655][ T8406] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.794688][ T8406] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.794711][ T8406] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.048460][T14124] macvtap0: entered promiscuous mode [ 397.134144][T14126] netlink: 'syz.7.1732': attribute type 3 has an invalid length. [ 397.209594][T14077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.745339][T14131] netlink: 'syz.3.1733': attribute type 3 has an invalid length. [ 397.789499][T14140] netlink: 'syz.7.1737': attribute type 12 has an invalid length. [ 397.860582][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1737'. [ 398.185729][T14149] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1738'. [ 398.186049][T14149] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 398.230366][T14149] 0ªX¹¦Dö»: entered allmulticast mode [ 398.260391][T14154] netlink: 'syz.5.1741': attribute type 19 has an invalid length. [ 399.126127][T14177] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1749'. [ 399.126158][T14177] netlink: 'syz.5.1749': attribute type 3 has an invalid length. [ 399.314462][T14174] netlink: 'syz.7.1748': attribute type 1 has an invalid length. [ 399.613351][T14189] netlink: 'syz.7.1748': attribute type 3 has an invalid length. [ 399.613376][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1748'. [ 399.719079][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1752'. [ 399.799884][T14174] bond2: entered promiscuous mode [ 399.819929][T14174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.788918][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1755'. [ 400.872512][T14225] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1755'. [ 401.672052][T14235] lo speed is unknown, defaulting to 1000 [ 401.672138][T14235] lo speed is unknown, defaulting to 1000 [ 401.673004][T14235] lo speed is unknown, defaulting to 1000 [ 401.695731][T14235] smbdirect: ib_dev[!!0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 401.695766][T14235] smbdirect: ib_dev[!!0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 401.695804][T14235] smbdirect: ib_dev[!!0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 401.997546][T14235] lo speed is unknown, defaulting to 1000 [ 402.036154][T14235] lo speed is unknown, defaulting to 1000 [ 402.054531][T14235] lo speed is unknown, defaulting to 1000 [ 402.070981][T14235] lo speed is unknown, defaulting to 1000 [ 402.105732][T14235] lo speed is unknown, defaulting to 1000 [ 402.127927][T14235] lo speed is unknown, defaulting to 1000 [ 402.201974][T14235] lo speed is unknown, defaulting to 1000 [ 402.246321][T14235] lo speed is unknown, defaulting to 1000 [ 403.374084][T14282] syzkaller1: entered promiscuous mode [ 403.374107][T14282] syzkaller1: entered allmulticast mode [ 403.456048][T14287] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1769'. [ 403.456919][T14286] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1769'. [ 403.460469][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'. [ 403.835924][T14301] xt_hashlimit: size too large, truncated to 1048576 [ 404.498510][T14312] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 405.133494][T14312] bond8: entered promiscuous mode [ 405.143336][T14312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 405.169364][T14324] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1777'. [ 405.378557][T14320] bond8: (slave bridge7): making interface the new active one [ 405.378582][T14320] bridge7: entered promiscuous mode [ 405.383543][T14320] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 405.632970][T14330] syzkaller0: entered promiscuous mode [ 405.632993][T14330] syzkaller0: entered allmulticast mode [ 405.654788][T14342] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1779'. [ 405.773718][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 405.787883][T14342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.851226][T14340] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1780'. [ 405.851262][T14340] ksmbd: Unknown IPC event: 0, ignore. [ 406.083706][T14355] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 406.860121][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1786'. [ 407.900368][T14396] netlink: 'syz.7.1790': attribute type 1 has an invalid length. [ 407.925218][T14403] ip_tables: iptables: counters copy to user failed while replacing table [ 408.036606][T14409] netlink: 'syz.6.1793': attribute type 1 has an invalid length. [ 408.063149][T14411] netlink: 'syz.3.1792': attribute type 3 has an invalid length. [ 408.063167][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 408.124412][T14396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.239022][T14409] bond4: entered promiscuous mode [ 408.241769][T14409] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.380018][T14420] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.383304][T14420] bond4: (slave xfrm2): The slave device specified does not support setting the MAC address [ 408.383325][T14420] bond4: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 408.443524][T14420] bond4: (slave xfrm2): making interface the new active one [ 408.443547][T14420] xfrm2: entered promiscuous mode [ 408.471019][T14420] bond4: (slave xfrm2): Enslaving as an active interface with an up link [ 409.139168][T14435] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1796'. [ 409.418783][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 409.551769][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 409.552151][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'. [ 409.618748][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 409.618779][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'. [ 410.020698][T14452] bridge6: entered promiscuous mode [ 410.020722][T14452] bridge6: entered allmulticast mode [ 410.115160][T14458] bridge7: entered promiscuous mode [ 410.115181][T14458] bridge7: entered allmulticast mode [ 410.517613][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 410.519102][T14475] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1805'. [ 410.582220][T14477] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1806'. [ 410.582242][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 410.836758][T14479] bond17: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 412.403796][T14479] bond17 (unregistering): Released all slaves [ 412.775851][T14494] lo: entered allmulticast mode [ 412.805911][T14492] lo: left allmulticast mode [ 413.342678][T14519] block nbd0: reconnected socket [ 413.342770][T14519] block nbd0: Unsupported socket: should be TCP or UNIX. [ 413.376222][T14525] tipc: Trying to set illegal importance in message [ 413.380684][T14522] tipc: Trying to set illegal importance in message [ 413.433920][T14526] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 413.460885][T14519] syzkaller0: entered promiscuous mode [ 413.460904][T14519] syzkaller0: entered allmulticast mode [ 413.640783][ T5632] block nbd0: Receive control failed (result -32) [ 414.261223][T14536] __nla_validate_parse: 9 callbacks suppressed [ 414.261243][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1821'. [ 414.473250][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.473887][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.521584][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.522078][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.573409][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.586572][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.587045][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.587516][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.592588][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 414.971373][ T31] INFO: task syz.4.1145:11256 blocked for more than 143 seconds. [ 414.971397][ T31] Not tainted syzkaller #0 [ 414.971407][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.971416][ T31] task:syz.4.1145 state:D stack:23272 pid:11256 tgid:11255 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 414.971542][ T31] Call Trace: [ 414.971550][ T31] [ 414.971564][ T31] __schedule+0x17dd/0x5820 [ 414.971630][ T31] ? __pfx___schedule+0x10/0x10 [ 414.971668][ T31] ? schedule+0x90/0x2b0 [ 414.971698][ T31] schedule+0x164/0x2b0 [ 414.971727][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.971753][ T31] __mutex_lock+0x7c4/0x15a0 [ 414.971778][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 414.971802][ T31] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 414.971827][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.971844][ T31] ? net_generic+0x1e/0x240 [ 414.971871][ T31] ? net_generic+0x1e/0x240 [ 414.971889][ T31] ? net_generic+0x1e/0x240 [ 414.971905][ T31] ? net_generic+0x1e/0x240 [ 414.971930][ T31] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 414.971953][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 414.971991][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.972034][ T31] ? bpf_lsm_capable+0x9/0x20 [ 414.972055][ T31] ? security_capable+0x7e/0x2c0 [ 414.972085][ T31] genl_rcv_msg+0x614/0x7a0 [ 414.972120][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.972147][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 414.972185][ T31] netlink_rcv_skb+0x226/0x4a0 [ 414.972209][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.972239][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.972280][ T31] ? down_read+0x2b9/0x320 [ 414.972305][ T31] genl_rcv+0x28/0x40 [ 414.972330][ T31] netlink_unicast+0x8ef/0xa80 [ 414.972371][ T31] netlink_sendmsg+0x7f0/0xb20 [ 414.972402][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.972436][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 414.972466][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 414.972490][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.972513][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 414.972540][ T31] ____sys_sendmsg+0x54e/0x850 [ 414.972575][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.972614][ T31] ? import_iovec+0x73/0xa0 [ 414.972645][ T31] ___sys_sendmsg+0x2a5/0x360 [ 414.972671][ T31] ? __lock_acquire+0x747/0x2de0 [ 414.972698][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.972730][ T31] ? futex_wait+0x2a2/0x390 [ 414.972786][ T31] ? __fget_files+0x3a2/0x420 [ 414.972806][ T31] ? __fget_files+0x2a/0x420 [ 414.972837][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 414.972859][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.972912][ T31] do_syscall_64+0x166/0x520 [ 414.972929][ T31] ? trace_irq_disable+0x3b/0x140 [ 414.972951][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.972970][ T31] ? clear_bhb_loop+0x70/0xc0 [ 414.972994][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.973013][ T31] RIP: 0033:0x7f1973b9f559 [ 414.973031][ T31] RSP: 002b:00007f1971df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.973050][ T31] RAX: ffffffffffffffda RBX: 00007f1973e25fa0 RCX: 00007f1973b9f559 [ 414.973065][ T31] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000007 [ 414.973077][ T31] RBP: 00007f1973c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 414.973090][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.973102][ T31] R13: 00007f1973e26038 R14: 00007f1973e25fa0 R15: 00007ffe9e9fc058 [ 415.032699][ T31] [ 415.032771][ T31] [ 415.032771][ T31] Showing all locks held in the system: [ 415.032781][ T31] locks held by kworker/0:0/9: 3, on CPU#0: [ 415.032799][ T31] #0: ffff88801c69ad48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.032863][ T31] #1: ffffc900000e7c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.032912][ T31] #2: ffffffff8fd5ab68 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: srcu_advance_state+0x4f/0x16d0 [ 415.032969][ T31] locks held by pr/ttyS0/30: 2, last CPU#1: [ 415.032982][ T31] #0: ffffffff8fc33858 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 415.033028][ T31] #1: ffffffff9bda1af8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 415.033076][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 415.033088][ T31] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 415.037283][ T31] locks held by kworker/u8:4/62: 3, last CPU#0: [ 415.037298][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.037348][ T31] #1: ffffc9000204fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.037397][ T31] #2: ffff88802d8b1258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 415.037454][ T31] locks held by kworker/u8:5/84: 2, on CPU#1: [ 415.037466][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.037514][ T31] #1: ffffc9000206fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.037581][ T31] locks held by klogd/4986: 1, last CPU#0: [ 415.037594][ T31] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 415.037640][ T31] locks held by getty/5383: 2, on CPU#0: [ 415.037652][ T31] #0: ffff88803704a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 415.037700][ T31] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 415.037754][ T31] locks held by kworker/1:13/8296: 3, on CPU#1: [ 415.037766][ T31] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.037814][ T31] #1: ffffc9000fa5fc40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.037860][ T31] #2: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 415.037913][ T31] locks held by kworker/u8:22/8409: 2, on CPU#1: [ 415.037932][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.037981][ T31] #1: ffffc9000ffc7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.038028][ T31] locks held by kworker/u8:30/8417: 2, on CPU#0: [ 415.038041][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.038089][ T31] #1: ffffc9000ff77c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.038137][ T31] locks held by kworker/u8:35/9568: 2, last CPU#0: [ 415.038150][ T31] #0: ffff88803325c148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.038198][ T31] #1: ffffc9000208fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.267479][ T31] locks held by kworker/u8:36/9569: 4, last CPU#1: [ 415.267495][ T31] #0: ffff888078e9a148 ((wq_completion)krds_cp_wq#8/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.267546][ T31] #1: ffffc9000207fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.267596][ T31] #2: ffff888067d8b980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 415.267649][ T31] #3: ffff888065e8aba0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 415.267702][ T31] locks held by kworker/u8:37/9571: 2, on CPU#1: [ 415.267716][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.267766][ T31] #1: ffffc90002f9fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.267821][ T31] locks held by syz.1.1113/11148: 2, on CPU#1: [ 415.267834][ T31] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.267885][ T31] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 415.267931][ T31] locks held by syz.4.1145/11256: 2, on CPU#0: [ 415.267944][ T31] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.267994][ T31] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 415.268043][ T31] locks held by syz.0.1309/12110: 2, on CPU#1: [ 415.268056][ T31] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.268106][ T31] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 415.268155][ T31] locks held by syz.5.1804/14470: 2, on CPU#1: [ 415.268168][ T31] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.268218][ T31] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1470 [ 415.268264][ T31] locks held by syz.3.1819/14532: 1, last CPU#1: [ 415.268277][ T31] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: bpf_map_update_value+0x644/0x920 [ 415.268322][ T31] locks held by syz.6.1821/14543: 1, last CPU#1: [ 415.268335][ T31] #0: ffff888034f1d120 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_setsockopt+0x21c/0x12c0 [ 415.268383][ T31] locks held by syz.2.1822/14544: 2, last CPU#1: [ 415.268396][ T31] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.342958][ T31] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x2e/0x1b0 [ 415.343012][ T31] locks held by syz.2.1822/14545: 3, last CPU#1: [ 415.343027][ T31] #0: ffffffff9bf4a770 (nfnl_subsys_ctnetlink){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 415.343076][ T31] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: nf_conntrack_find_get+0x105/0x670 [ 415.343122][ T31] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 415.343171][ T31] locks held by syz.2.1822/14547: 3, last CPU#0: [ 415.343185][ T31] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.343235][ T31] #1: ffffffff912daf60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.448872][ T31] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x2e/0x1b0 [ 415.448936][ T31] locks held by syz.7.1823/14549: 2, last CPU#1: [ 415.448950][ T31] #0: ffff888053ef8dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 415.449003][ T31] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 415.449053][ T31] locks held by syz.7.1823/14552: 2, on CPU#1: [ 415.449067][ T31] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.449117][ T31] #1: ffffffff912daf60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.449170][ T31] locks held by modprobe/14554: 1, last CPU#1: [ 415.449183][ T31] #0: ffff88801c090340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 415.449234][ T31] locks held by modprobe/14560: 2, last CPU#1: [ 415.449247][ T31] #0: ffff8880345f0f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 415.449293][ T31] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 415.449337][ T31] locks held by modprobe/14563: 1, last CPU#0: [ 415.449350][ T31] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 415.449415][ T31] locks held by modprobe/14564: 2, last CPU#1: [ 415.449429][ T31] #0: ffff888073c866c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 415.449476][ T31] #1: ffff88807eae6540 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x70 [ 415.449527][ T31] [ 415.449532][ T31] ============================================= [ 415.449532][ T31] [ 415.449557][ T31] NMI backtrace for cpu 1 [ 415.449575][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.449595][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.449607][ T31] Call Trace: [ 415.449614][ T31] [ 415.449622][ T31] dump_stack_lvl+0xe8/0x150 [ 415.449652][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 415.449678][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 415.449701][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 415.449730][ T31] sys_info+0x135/0x170 [ 415.449751][ T31] watchdog+0xfd2/0x1030 [ 415.449782][ T31] ? watchdog+0x1c7/0x1030 [ 415.449811][ T31] kthread+0x38b/0x480 [ 415.449830][ T31] ? __pfx_watchdog+0x10/0x10 [ 415.449849][ T31] ? __pfx_kthread+0x10/0x10 [ 415.449870][ T31] ret_from_fork+0x514/0xb70 [ 415.449892][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 415.449912][ T31] ? __switch_to+0xc78/0x1410 [ 415.449941][ T31] ? __pfx_kthread+0x10/0x10 [ 415.449960][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.449996][ T31] [ 415.450004][ T31] Sending NMI from CPU 1 to CPUs 0: [ 415.450036][ C0] NMI backtrace for cpu 0 [ 415.450049][ C0] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 415.450071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.450084][ C0] Workqueue: krds_cp_wq#8/2 rds_connect_worker [ 415.450109][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 415.450138][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 66 53 aa 03 66 0f 1f 44 00 [ 415.450156][ C0] RSP: 0000:ffffc90000007d30 EFLAGS: 00000046 [ 415.450172][ C0] RAX: 0000000000029b7d RBX: ffff8880b8423f40 RCX: 0000000000000838 [ 415.450187][ C0] RDX: 0000000000000000 RSI: 0000000000029b7d RDI: 0000000000000838 [ 415.450199][ C0] RBP: ffffc90000007df0 R08: 0000000000000100 R09: 0000000000000001 [ 415.450212][ C0] R10: 0000000000000003 R11: ffffffff8175b510 R12: 0000000000029b7d [ 415.450226][ C0] R13: dffffc0000000000 R14: 0000000010004b7f R15: 0000000000000020 [ 415.450240][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 415.450256][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.450269][ C0] CR2: 0000555b1e77d008 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 415.450286][ C0] Call Trace: [ 415.450293][ C0] [ 415.450299][ C0] lapic_next_event+0x11/0x20 [ 415.450322][ C0] clockevents_program_event+0x385/0x630 [ 415.450355][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 415.450388][ C0] ? tick_program_event+0x8f/0x120 [ 415.450413][ C0] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 415.450447][ C0] irqentry_exit+0x961/0x9b0 [ 415.450470][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.450492][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 415.450521][ C0] Code: f7 e8 fd 1f ad f5 f7 c3 00 02 00 00 74 05 e8 d0 b2 d9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 19 9e f5 65 48 8b 05 1c 4d a4 08 48 85 c0 74 18 5b 41 5e c3 [ 415.450537][ C0] RSP: 0000:ffffc90000007f48 EFLAGS: 00000206 [ 415.450552][ C0] RAX: 0000000000000002 RBX: 0000000000000287 RCX: 8000000000000102 [ 415.450564][ C0] RDX: 0000000000000002 RSI: ffffffff8e486f08 RDI: 0000000000000001 [ 415.450576][ C0] RBP: 8000000000000101 R08: ffffffff917c12bf R09: 1ffffffff22f8257 [ 415.450591][ C0] R10: dffffc0000000000 R11: fffffbfff22f8258 R12: 0000000000000008 [ 415.450605][ C0] R13: 0000000000000009 R14: ffff8880b8428600 R15: 0000000000000000 [ 415.450629][ C0] handle_softirqs+0x265/0x8d0 [ 415.450660][ C0] ? __inet6_bind+0x301/0xf30 [ 415.450688][ C0] do_softirq+0x77/0xd0 [ 415.450709][ C0] [ 415.450716][ C0] [ 415.450722][ C0] __local_bh_enable_ip+0x100/0x140 [ 415.450746][ C0] __inet6_bind+0x301/0xf30 [ 415.450781][ C0] kernel_bind+0x13e/0x1c0 [ 415.450803][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 415.450833][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 415.450866][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 415.450908][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 415.450941][ C0] ? lock_acquire+0x115/0x350 [ 415.450969][ C0] rds_connect_worker+0x1d8/0x290 [ 415.450992][ C0] ? process_scheduled_works+0x97a/0x1630 [ 415.451019][ C0] process_scheduled_works+0xc3d/0x1630 [ 415.451063][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 415.451093][ C0] ? assign_work+0x3cf/0x5d0 [ 415.451121][ C0] worker_thread+0xa47/0xfb0 [ 415.451156][ C0] ? __kthread_parkme+0x71/0x1f0 [ 415.451191][ C0] kthread+0x38b/0x480 [ 415.451209][ C0] ? __pfx_worker_thread+0x10/0x10 [ 415.451234][ C0] ? __pfx_kthread+0x10/0x10 [ 415.451253][ C0] ret_from_fork+0x514/0xb70 [ 415.451274][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 415.451294][ C0] ? __switch_to+0xc78/0x1410 [ 415.451323][ C0] ? __pfx_kthread+0x10/0x10 [ 415.451342][ C0] ret_from_fork_asm+0x1a/0x30 [ 415.451371][ C0] [ 415.788313][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 416.727572][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 416.736695][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 416.746758][ T31] Call Trace: [ 416.750043][ T31] [ 416.752983][ T31] vpanic+0x56d/0xa60 [ 416.756984][ T31] ? __pfx___schedule+0x10/0x10 [ 416.761850][ T31] ? __pfx_vpanic+0x10/0x10 [ 416.766372][ T31] panic+0xc5/0xd0 [ 416.770105][ T31] ? __pfx_panic+0x10/0x10 [ 416.774528][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 416.779996][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 416.785372][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 416.791544][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 416.797716][ T31] watchdog+0x102b/0x1030 [ 416.802065][ T31] ? watchdog+0x1c7/0x1030 [ 416.806494][ T31] kthread+0x38b/0x480 [ 416.810568][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.815248][ T31] ? __pfx_kthread+0x10/0x10 [ 416.819841][ T31] ret_from_fork+0x514/0xb70 [ 416.824436][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.829557][ T31] ? __switch_to+0xc78/0x1410 [ 416.834244][ T31] ? __pfx_kthread+0x10/0x10 [ 416.838842][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.843625][ T31] [ 416.846905][ T31] Kernel Offset: disabled [ 416.851228][ T31] Rebooting in 86400 seconds..