last executing test programs: 4m56.133944485s ago: executing program 0 (id=1962): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000500000100000000ff"], 0x0) 4m55.191535467s ago: executing program 0 (id=1973): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 4m54.881486465s ago: executing program 0 (id=1978): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000a000000080026000816"], 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@gettaction={0xd0, 0x32, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc27}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4m54.323526433s ago: executing program 0 (id=1984): r0 = socket$inet(0x2, 0x3, 0xb7) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @local}, {0x1, @local}, 0x4e, {0x2, 0x4e21, @remote}, 'ip6erspan0\x00'}) (async) r1 = socket$inet6(0xa, 0x6, 0xfffffffe) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) (async) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x0) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0500330022"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x18) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x0, 'wlan0\x00', {0x4}, 0x40}) 4m54.021469872s ago: executing program 0 (id=1988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r1, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xec22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6b}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x30000042) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc98f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m53.914512798s ago: executing program 0 (id=1989): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0xc080) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f", 0x7) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048015}, 0x400c4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002040)={{r1, &(0x7f0000001640)='wlan1\x00', 0x400, &(0x7f0000001680)={@align=0x4, {0x2867, 0x6, 0x12f8, 0x8}}, 0x8, &(0x7f00000016c0), &(0x7f0000001700)=0x38241c8d}, 0xa, &(0x7f0000001f00)=[{0x2, 0x6, &(0x7f0000001740)='wlan1\x00', &(0x7f00000021c0)="705bb5a25a3ceee5d8f90662fde3f3eedd249d100d26b4", 0x17}, {0x3, 0x4, &(0x7f00000017c0)='ns/cgroup\x00', &(0x7f0000001800)="eef8e8fea522e7063449799b01329eacf5b1f257a070bf898ff526dafc2e9598f56bd88286d76052393a57ad123d2843555a6f25d2a40571670d9f297568f69b24cb5d9960a165456b8122956bd0eba624e8bf1dd022b2137d8c4ea7ba9f63492ce11f411863d0291e66fddea4e40900f9719c683c6502ac22548cab09980fbcb0", 0x81}, {0x2, 0x1, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="0c4785fc716eaf972c7d76049b28bb", 0xf, 0x12}, {0x1, 0x8, &(0x7f0000001940)='wlan1\x00', &(0x7f0000001980)="23005f2955277f6e", 0x8}, {0x3, 0x7, &(0x7f00000019c0)='wlan1\x00', &(0x7f0000001a00)="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", 0xfc, 0x28}, {0x1, 0x69d61416, &(0x7f0000001b00)='wlan1\x00', &(0x7f0000001b40)="69e76ad0af608afc2dd4766689cb6cdeb94539af3019937673b9c3e6aa2d685f4b96dcef8a6f5f60c5d20bb1050a4597138c89edb3b53cd73aa3c567526090ac3cf804a0c04b534d09f6b6079b9a4d44079fb56ddd2ea209a7b20e36135ff7b63db2cb6ca52ca52a0b59c948e8e37751bfa17b8af5d893abe53c7686a56a06946e18b1c46919c0e74bcba330bf4f5355fbe19824dfa06e747b9f10f6d88b046f6627ff502d51146ad706a1f749267c2aa1e875ba1610d27622f3222c54cb33daade02f650ef3464323c67fd02eb4ef3b0234be862f77b933", 0xd8, 0x20}, {0x2, 0x4, &(0x7f0000001c40)='ns/cgroup\x00', &(0x7f0000001c80)="dcf98c2b71b2f0bca3a389480b57bfa2e6df444a8460590cc6b398a87c83ddbc75995de7ddaf709565e1d54b89461c923e71256f4b0a399325fd4454d158d83f8c1c4162be2f15a89e00f0ea98b48844414d6f0d17", 0x55, 0x12}, {0x3, 0x1, &(0x7f0000001d00)='wlan1\x00', &(0x7f0000001d40)="2aa4f4c10995642e39552c2f455e87452b3e11bfe274aab94732f7ddc1e54a30913b26307e401b0d1fc83cebcf7fc9c120bb5d04c3d3d334f142929038a1821422cc94c62be46b6364b12f42f3f86212258e0a329dd9b9698b90e4c34cf5a88fe54b36b987be6c0652e0fe", 0x6b, 0xa}, {0x1, 0x3, &(0x7f0000001dc0)='ns/cgroup\x00', &(0x7f0000001e00)="4860f3fce55e64fa20dbad4c162f5f0bfdec6a8fd156f3f55f5665b904186e90974c5691cc5e6f45654b87825d4c7f6446331c539610add98ce36d29afe90d36a75a42911a07d5856c", 0x49}, {0x3, 0x280, &(0x7f0000001e80)='g#%]&@,:$\\*:!.)]%\x00', &(0x7f0000001ec0)="dccc", 0x2, 0x8}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000020c0)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000002140)={0x0, 0x0}) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) (rerun: 64) sendmsg$can_bcm(r7, &(0x7f0000002280)={&(0x7f0000002100)={0x1d, r9}, 0x10, &(0x7f0000002240)={&(0x7f00000022c0)=ANY=[@ANYBLOB="010000000a080000123c000000000000", @ANYRES64=r10, @ANYRES64=r11/1000+10000, @ANYRES64=r12, @ANYRES64=r13/1000+10000, @ANYBLOB="000000e001000000040000c0160000004b75751bc39ab1304831942c962ca5d7adb8501bbc4671f6cfcd69798b7a85aa44288d1062d8ff2f6a82fb6f52f8881584ec700634203c74d3dc876d98675e5d51da69273e80eadce552c405c21aa2f6ef4c57ddf89c9cd72855fbbdb4d4f0e8215e45b06d799b7b5200000000"], 0x80}, 0x1, 0x0, 0x0, 0x84001}, 0x8094) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 32) r14 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOGETOWN(r14, 0x8903, &(0x7f00000015c0)) (async, rerun: 64) r15 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r16 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) bind$packet(r15, &(0x7f0000000200)={0x11, 0x10, r17, 0x1, 0x0, 0x6, @random}, 0x14) setsockopt$packet_tx_ring(r15, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r15, 0x0) 4m38.832171646s ago: executing program 32 (id=1989): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0xc080) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f", 0x7) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048015}, 0x400c4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002040)={{r1, &(0x7f0000001640)='wlan1\x00', 0x400, &(0x7f0000001680)={@align=0x4, {0x2867, 0x6, 0x12f8, 0x8}}, 0x8, &(0x7f00000016c0), &(0x7f0000001700)=0x38241c8d}, 0xa, &(0x7f0000001f00)=[{0x2, 0x6, &(0x7f0000001740)='wlan1\x00', &(0x7f00000021c0)="705bb5a25a3ceee5d8f90662fde3f3eedd249d100d26b4", 0x17}, {0x3, 0x4, &(0x7f00000017c0)='ns/cgroup\x00', &(0x7f0000001800)="eef8e8fea522e7063449799b01329eacf5b1f257a070bf898ff526dafc2e9598f56bd88286d76052393a57ad123d2843555a6f25d2a40571670d9f297568f69b24cb5d9960a165456b8122956bd0eba624e8bf1dd022b2137d8c4ea7ba9f63492ce11f411863d0291e66fddea4e40900f9719c683c6502ac22548cab09980fbcb0", 0x81}, {0x2, 0x1, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="0c4785fc716eaf972c7d76049b28bb", 0xf, 0x12}, {0x1, 0x8, &(0x7f0000001940)='wlan1\x00', &(0x7f0000001980)="23005f2955277f6e", 0x8}, {0x3, 0x7, &(0x7f00000019c0)='wlan1\x00', &(0x7f0000001a00)="ed3a414199bea3f5356789e3a96dbb8b6e7732ba91e20056e790bd60e31cf1cdf7aa101f98e60ba898642596fa8a5335c144d6b058737dbf284695c6857117ee96bd6a9d2889a4326a635e627a0543989fc033f1e0ef9dfd817900af6ac3295e195894b859bedd8e808f951de5a51de665645b96d814359f1193e929f7448e8800481f8d3acf382968e7223b556bec724ae271d8db8633377351b3a31c2ceca8a31b13eb2682ab32d1768276b939dad591a0a8dbdafe27c493f329cd95425e0cd0a2225a9dfeddbfb35e923c2785a86fdf75d755e9ef9f830ec0cf9892898208a4c6309624c6e43f9050c56e05ce6816f780b0fc9a00000000000000", 0xfc, 0x28}, {0x1, 0x69d61416, &(0x7f0000001b00)='wlan1\x00', &(0x7f0000001b40)="69e76ad0af608afc2dd4766689cb6cdeb94539af3019937673b9c3e6aa2d685f4b96dcef8a6f5f60c5d20bb1050a4597138c89edb3b53cd73aa3c567526090ac3cf804a0c04b534d09f6b6079b9a4d44079fb56ddd2ea209a7b20e36135ff7b63db2cb6ca52ca52a0b59c948e8e37751bfa17b8af5d893abe53c7686a56a06946e18b1c46919c0e74bcba330bf4f5355fbe19824dfa06e747b9f10f6d88b046f6627ff502d51146ad706a1f749267c2aa1e875ba1610d27622f3222c54cb33daade02f650ef3464323c67fd02eb4ef3b0234be862f77b933", 0xd8, 0x20}, {0x2, 0x4, &(0x7f0000001c40)='ns/cgroup\x00', &(0x7f0000001c80)="dcf98c2b71b2f0bca3a389480b57bfa2e6df444a8460590cc6b398a87c83ddbc75995de7ddaf709565e1d54b89461c923e71256f4b0a399325fd4454d158d83f8c1c4162be2f15a89e00f0ea98b48844414d6f0d17", 0x55, 0x12}, {0x3, 0x1, &(0x7f0000001d00)='wlan1\x00', &(0x7f0000001d40)="2aa4f4c10995642e39552c2f455e87452b3e11bfe274aab94732f7ddc1e54a30913b26307e401b0d1fc83cebcf7fc9c120bb5d04c3d3d334f142929038a1821422cc94c62be46b6364b12f42f3f86212258e0a329dd9b9698b90e4c34cf5a88fe54b36b987be6c0652e0fe", 0x6b, 0xa}, {0x1, 0x3, &(0x7f0000001dc0)='ns/cgroup\x00', &(0x7f0000001e00)="4860f3fce55e64fa20dbad4c162f5f0bfdec6a8fd156f3f55f5665b904186e90974c5691cc5e6f45654b87825d4c7f6446331c539610add98ce36d29afe90d36a75a42911a07d5856c", 0x49}, {0x3, 0x280, &(0x7f0000001e80)='g#%]&@,:$\\*:!.)]%\x00', &(0x7f0000001ec0)="dccc", 0x2, 0x8}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000020c0)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000002140)={0x0, 0x0}) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) (rerun: 64) sendmsg$can_bcm(r7, &(0x7f0000002280)={&(0x7f0000002100)={0x1d, r9}, 0x10, &(0x7f0000002240)={&(0x7f00000022c0)=ANY=[@ANYBLOB="010000000a080000123c000000000000", @ANYRES64=r10, @ANYRES64=r11/1000+10000, @ANYRES64=r12, @ANYRES64=r13/1000+10000, @ANYBLOB="000000e001000000040000c0160000004b75751bc39ab1304831942c962ca5d7adb8501bbc4671f6cfcd69798b7a85aa44288d1062d8ff2f6a82fb6f52f8881584ec700634203c74d3dc876d98675e5d51da69273e80eadce552c405c21aa2f6ef4c57ddf89c9cd72855fbbdb4d4f0e8215e45b06d799b7b5200000000"], 0x80}, 0x1, 0x0, 0x0, 0x84001}, 0x8094) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 32) r14 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOGETOWN(r14, 0x8903, &(0x7f00000015c0)) (async, rerun: 64) r15 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r16 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) bind$packet(r15, &(0x7f0000000200)={0x11, 0x10, r17, 0x1, 0x0, 0x6, @random}, 0x14) setsockopt$packet_tx_ring(r15, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r15, 0x0) 2m52.481761539s ago: executing program 1 (id=3050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc, 0x18}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004000000000700000000000000ffffffffff0800074001000001240006801400040000000000000000000000000000000001"], 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 2m52.046238518s ago: executing program 1 (id=3052): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x44044) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[], 0xe1c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21130005000700ff0000000c0001800800014000ffffff0c00028008000140e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) (async, rerun: 64) syz_emit_ethernet(0x7e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) (rerun: 64) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) 2m44.525896992s ago: executing program 1 (id=3077): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) socketpair(0x21, 0x800, 0xffffde77, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1c8, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x3b}}}}, [@NL80211_ATTR_FRAME_MATCH={0xf1, 0x5b, "1e6c7d76a5e389f9e03e8909631e8b21e87055c17ce46fbc6c25ef1c8d1316ce67eb8c062f19bff69d071595615f482642e5c7943011c1829a843bffb6c753b82fbc351fc7a6d43d1af1084c853a63388d4139ba545b0109acac9e9eba036f6ed809cad7e28ccc8c5bc31334f39d014f4f80ad041e3bd2bd95b4d777989e6687c7a7e12c4bc2f0fc95b6d7a84e4fdd129c74e1884ccaf75d28c4ea586a58582c67f567b3675f68964d150184bd7d4a26c761e324add80432ab2f912cddcbb8673cb8c5a363242f4311b1ac8e811815d77442a5bd35a6982406cb9f236df58201302930b64bcca93b5ade4f316b"}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "5ff8e7d25232f90c19eba802a87fed96bef01b3123947b988af47960b3641dbe3776b1de6195bcd71b813b91d0e3314481a7bb8ff5654f76f066895754107b18933620903080f570153574cc8fa48847a9e61ac3fd41bfb844f4195fc48808cd2f7c3147f4facaf62233c07698ede5d69ff554"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_MATCH={0x19, 0x5b, "b63eec2e2eeaa2c69e04f4c4473058993c9e6415c5"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf801}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) splice(r0, &(0x7f00000003c0)=0x9, r2, &(0x7f0000000400)=0x1, 0xde93, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000480)=0xc052, 0x4) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xf2, 0xdb, &(0x7f0000000540)="c0adb4d2439eb95905b9f98d9b106a2846948a857565365b715b290dafc8462f186aa673be3bf5828de4d34d4032f5afed97e8b4547c29d86cf4067d30067f7313062b273284d45941bee15f0842a653846510c2561db75b1d730ad730231922950b667a09f25bc4cbf94e4dfa7ed31c40ef6d3c4ad903aa8b9ae9875571bd2bbc99e9e26351f9084f966050934d5c8458bfdee5359f17a5c19cef415f10742b72613b473d975ea4861ac1eefc7f862c69e3c9ecbbc49abc7c39ca7254ebc9cd34064c061f9982cb98bad7b950d243a4f7678f1ecad06bba5e75c7325a0f0c2b075b509d5c9cb69e2e8438e431e3ca17672b", &(0x7f0000000640)=""/219, 0x1f7e871f, 0x0, 0x4d, 0xf5, &(0x7f0000000740)="1d626bbe936c944184548cc23370991b9859d1bb9ee3c1274f87ba2ab6ccc6b6f4efd0e463c596a16972b4740323273f16eabdd96dcb54e12b908d533ad6f0e5ca1fba7d2fed071d52cca76b9a", &(0x7f00000007c0)="25f168c1e409a05595d28ec5914dc34d0f135b7611cc0d1de574c71b5349b75043253be6707a0790399889f2d64228b93603edaffb031ef8c4eb5f729022a13a5d048de4ad59732cc9c52e4e356aed52d8afef0c8003a973e232e08654528cc09a4f63190da0030fcb9130782de8adb4170ba967f1af88e2ecd4d20711b8018e78fc7894b3a3adb5f35b0dec5b80cf017830f09096b68e983bc8cc0ccfa3f5a1daf2d6d4c70d84d010ce000a653e11db23be3311abff198ce3ed19acda16b1d49d8ecb2d990fb67106a1307e7d8b9c094c8e5fb7ceeee9dfc219ed62837a73b97045366a164376d0b48541b41a6db34f32f3966766", 0x1, 0x0, 0x7ff}, 0x50) connect$pppl2tp(r2, &(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x3a) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000a00)=""/230, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0xb, 0x8, 0x8}, 0x10, 0x6505, r5, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, 0x1, 0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000c80)=r6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x4e21, 0xfe, @remote, 0x98}, 0x1c) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r3, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x4000014) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r7, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x22}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x804) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000f40)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001600)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000fc0)={0x5f0, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa99}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x264}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x5b3, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="ce14067e8562", {0x8, 0x8}}, 0x20, 0x30, @random=0x9, @void, @void, [{0xdd, 0xf8, "4c5b31805d340b5ba8d25f69d4e9d8ea686dc1fce1ce48cbed76ae0ee80dc41fe6b233bec997c1c54af68cce8a9f072a8c265bccf3cad16a81d13cb11a3d3e977a4640eaea254407ce5c9491f873a77ec7c12d3f0a575abec23063f43a711e2256da036e054883feda889cf03c66070f194cb25fb9cf3395a8ff01cf51978ac32f5281bb1c257e95859c3f6e2c527462d0fa04e9fadedbf80e3e6eec7eebb715da4c2ea1ab135bc5b5e2b49df9bf561117629ecc35e56be292c3246222b2998b80a57b82776ad562fec3824b088bf023c09350fab75ac13869c96c39066615763105e95f22dc0c1e29cde3cd73e0dcb08efc9be2616458bd"}, {0xdd, 0x5d, "afb6caa8fcd641c1f7d062eaf165e8c87ee80bcf730d6dfa4831196817f7900292ac02406c206dee77029c74f116fd41b7e530943e8f9b3887e8961dd325ce08c423cedab633ea81bc8bab11d852bbb850acb9a4d1a42fb35fa52616d4"}, {0xdd, 0x7c, "f37e177284c7b40d48474c1a10044f65bccdae3499c538e62a78e220336271b376127ae91cc178ca5b65238698c5f0b47005cf33a60d1938b95b9fabe6e9213a9e98d4bc0d1741209d1b56c12f7656cde3be4d95f0df904d4e6353d8bd31f8c2cb70decf77a7324d06fdb55257783c63b0001425ef834f5725412044"}, {0xdd, 0x2e, "343ef9bdfb7d8e05aa48fac6d515df396c08c43de5e054128169490ce5c34b8c1e5bcefbacf6ddca8c0538831389"}, {0xdd, 0x73, "86f354e0dbdf74341052dbe53bd1901fcffb4c60627ddbb26982f04c9d9d18668a0cc2d155739ef3502cab31df46c1ac6e66cc067ae3d54c32e6f3fc3bb6619a427bf22296dc1fe154ec044df2da5b5c9bf91c65f12cd6b01093b181bfa79a7b28dd5601dbf288b1ee1690180887b35d4dca91"}, {0xdd, 0xc6, "f8f7afc239a86a2aee3f3d1519a576431d45be26368d076a01a2cead4467aeec4e0422dea0a67a437eb233113f5284cf45802bf57614835fda4a0755dc70eccbe2ff5397e752b246cee9ff3277eee8c45a9207d5304bfb57790cb5478ad85542040b734ac0b6c9200b9461916d20cc7892efa526d5bfe4534e25ebf47b52bf2d83b32c7ca5d19aa50029181b250dc3597c96c2eaa466a54cffda7e398ce060805af6ac7b283de3ff53db285aec6f20f5cdd669c44429b66709516df12138025a5dfe152c38c9"}, {0xdd, 0x9e, "8f204f437d95777eb7ae963fb1e0563010510c23eef8d89e17b1b7d7f6b3dba2d944a7c98f725e271ee229fcc9794faa2d272b1ec32249e0ffb38b8b822f06c86b437d5ed05db68480df46df0dce3933b3630cf0d0d860c5d9d069380ee0c323514e8852150cde9fadaa49f574e18c9772314a84c41939dc8dc8770f8619d2c59718b589763525b10d7735b71bb423f944fb791c94af618fb6f72b5cc911"}, {0xdd, 0xad, "11857b30e66f7abe6713f6a6a0eb5ba92d354e7b370d98300bfbe804363a2031e339896b324f7bd117805562039368cc99f6eb9db5f5a78294783dfbdee2b0afda935e7c63b0d77f38cdbfac09093392d4e6566afe26a016d030995909f0d41216aad6028d14dbc6472112fc15e7ca865e1bfc395a600483f032aac88c59b2b703a5ecfecd6d0daf698c9c13c743fb72d590082b0c4e1190a1d376996691b5353ae9fc7337c13c312b5ebc6bc9"}, {0xdd, 0x97, "d20f84d9b33302b766d3431bc32fd4752e552e86adf8411ac6d4b72be93b1fbf4b6bed4341e28eb0415bcab51c7b07c050874c60b7a2eacaa45990180ecc301261a983a3c22d1c61cfb0dd2245a363375a151e92d8cda64ddc2db96434138eda9755ec291d34749d9d07b970e91f9e8ebb6c88d24a7d8ec32681106b6410852786c0a97636144ece68fed207a8d17c67fe11e4d3610f88"}, {0xdd, 0x63, "c4385258ee66f7656bb4bf68bc4bcaf88389cc159e9423420622e29116453da5ef7dad5716bf0691fd953010c80743ecf3ada21510e2a18329bf93d6f7c66e949850158c3331f090864d7f2863b92a92ca80121a1f24cdc1ff2821da247b55e6fc2d01"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x5f0}, 0x1, 0x0, 0x0, 0x20008004}, 0x8014) r8 = socket$inet6(0xa, 0x1, 0x53f8e51a) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000001640)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, r9, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x3f}}}}}, 0x28}}, 0x40) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000001800)=""/184, &(0x7f00000018c0)=0xb8) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x98ebe3883dda75f3}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x800) r12 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000001a40), 0x80000) close(r12) 2m44.498198746s ago: executing program 1 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x30}}, 0x0) 2m40.949944677s ago: executing program 1 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000001600)="2700000014000707030e0000120f0a000000008a151f7508003900000000000000000000000200", 0x27) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r2, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r1, &(0x7f0000001600)="2700000014000707030e0000120f0a000000008a151f7508003900000000000000000000000200", 0x27) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r2, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) (async) 2m40.798271588s ago: executing program 1 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000e20c4de5fcce0000000d00009f4b8ae300120000000500180001000000060008000000000006000a0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x34}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) write(r0, &(0x7f00000001c0)="8bff3be1f54efdba3c9efe5a18c43a49f6875ec3cea38eefbddfc7", 0x1b) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m25.712533478s ago: executing program 33 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000e20c4de5fcce0000000d00009f4b8ae300120000000500180001000000060008000000000006000a0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x34}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) write(r0, &(0x7f00000001c0)="8bff3be1f54efdba3c9efe5a18c43a49f6875ec3cea38eefbddfc7", 0x1b) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m59.41083652s ago: executing program 5 (id=3464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x5) (async) socket$kcm(0x29, 0x7, 0x0) (async) read$alg(r3, &(0x7f0000000dc0)=""/134, 0x86) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x25, 0x1e, @void}, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000280)={0x3, 0x4427, 0x16, &(0x7f00000001c0)=""/22}) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000740)) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r8, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000007b000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m58.937055087s ago: executing program 5 (id=3469): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xf4, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xec22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6b}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x30000042) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc98f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m58.424634935s ago: executing program 5 (id=3470): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000150001000000"], 0x1c}}, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5, 0x151, 0x10000101}, 0x20) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 1m57.724190863s ago: executing program 5 (id=3475): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newsa={0x158, 0x10, 0x413, 0x4, 0x25dfdbfa, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@rand_addr=0x64010102, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xfffffffffffffffc, 0x2, 0x20000000007}, {0x0, 0xe0b, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "a76af6c73c4a03bbca93d47bfc5f576ef2c8a50b9dfede4143fa41"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) 1m57.43801664s ago: executing program 5 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x7, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x6}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xf}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m57.066083639s ago: executing program 5 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_VENDOR_DATA={0x52, 0xc5, "e880a4123e55ccfd40d17145cac1e545a425f1feff054fbe0eee62a4d21923cbd7e8e64468afc05ac61cc6320a892df6ccda8f6d3e14190b543d50970f6f02ed90fea23e4562f65e35bb2e77c801"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "d8636d9695d3aa28f82c356a4c4444dd513791e7320d1702fda52d6459107b05a29ca5c163d3f6f54bae1d69ffa83bf42cf4030745fc21ec81cf5ace68c68d882ddbd11b7393382292def91fd1a1bf3a4f224f042c4c6a6cf16b7536eb6e5394e29e43951d07ee6aec063130d082ad844cbc02e33e97ea07847ff51f613165d421c7695dfc7ff4732410597e4d45e1b53a9bfccdeaa125359293e3a9af187cb9bad61369123afe25b83aa21401e5068aa12ce0a3469630a656b20601fa214833935302e8b251eae39bbdff30f424b02229b9a50dcd492c1daf7e0a34a52e6217ef5629a0dbc9aed2f236235270509b15302f93"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xa4, 0xc5, "1b68df421342be02a2e2cb8e4fa69904da3fe55288411f9d888d6c64ad9d46f085f7e7fa954ec7bfffa9b6915ac66b267e93cdc2ccdfb800643112f8e8b1e447d12497198303841f09e9bbbc2d691ed7047a771ef19682a7dcfcfdf2de0fe8db4f3d177ced74efad50d3dfb5e51620d1de133724f26bb24f804936472dcd251a71665b71f72291ca4eedf8943b86b91bc72b219d946ebacc5011e8e321356fb7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8c1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x250}}, 0x45) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_VENDOR_DATA={0x52, 0xc5, "e880a4123e55ccfd40d17145cac1e545a425f1feff054fbe0eee62a4d21923cbd7e8e64468afc05ac61cc6320a892df6ccda8f6d3e14190b543d50970f6f02ed90fea23e4562f65e35bb2e77c801"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "d8636d9695d3aa28f82c356a4c4444dd513791e7320d1702fda52d6459107b05a29ca5c163d3f6f54bae1d69ffa83bf42cf4030745fc21ec81cf5ace68c68d882ddbd11b7393382292def91fd1a1bf3a4f224f042c4c6a6cf16b7536eb6e5394e29e43951d07ee6aec063130d082ad844cbc02e33e97ea07847ff51f613165d421c7695dfc7ff4732410597e4d45e1b53a9bfccdeaa125359293e3a9af187cb9bad61369123afe25b83aa21401e5068aa12ce0a3469630a656b20601fa214833935302e8b251eae39bbdff30f424b02229b9a50dcd492c1daf7e0a34a52e6217ef5629a0dbc9aed2f236235270509b15302f93"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xa4, 0xc5, "1b68df421342be02a2e2cb8e4fa69904da3fe55288411f9d888d6c64ad9d46f085f7e7fa954ec7bfffa9b6915ac66b267e93cdc2ccdfb800643112f8e8b1e447d12497198303841f09e9bbbc2d691ed7047a771ef19682a7dcfcfdf2de0fe8db4f3d177ced74efad50d3dfb5e51620d1de133724f26bb24f804936472dcd251a71665b71f72291ca4eedf8943b86b91bc72b219d946ebacc5011e8e321356fb7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8c1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x250}}, 0x45) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) (async) 1m44.37064958s ago: executing program 4 (id=3553): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r2, 0x200000000000000}, 0x38) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1m43.732421747s ago: executing program 4 (id=3560): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1409, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x44810}, 0x0) 1m43.533424189s ago: executing program 4 (id=3563): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/72, 0x48}, {0x0}], 0x2}, 0x8001}], 0x2, 0x31, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000504006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x63}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000003c0)={0x1, 0x4, {0x6, @struct={0xa, 0x2}, 0x0, 0x6, 0x4, 0x7, 0x100000000, 0x9, 0x0, @struct={0x7, 0x2}, 0x401, 0x1c4b, [0x4100000000000, 0x5, 0x3ff, 0x1, 0x9, 0x3]}, {0x0, @struct={0x6, 0xab}, 0x0, 0x62ab, 0x3, 0x2, 0x4, 0x8, 0x80, @struct={0x5, 0x8}, 0x0, 0x81, [0xa7, 0x4, 0x9, 0xa7c, 0x72, 0x1ff]}, {0x1, @struct={0x3, 0xd360}, 0x0, 0xadc, 0x7f, 0x6, 0x5, 0x7fffffffffffffff, 0x2d, @struct={0x3ff, 0x5}, 0x0, 0x6, [0x0, 0x5, 0x9, 0x7fffffff, 0x9]}, {0x492, 0x6, 0x4}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000007c0)={r7, 0x7, 0x9}) 1m42.759350234s ago: executing program 4 (id=3568): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 1m42.419865763s ago: executing program 4 (id=3571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000000)=0x20115) 1m42.259141292s ago: executing program 4 (id=3574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb8b, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d7}, 0x94) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) (async) ppoll(&(0x7f0000000040)=[{r0, 0x5010}, {r0, 0xc}, {r0, 0x2}, {r0, 0x80}], 0x4, &(0x7f00000001c0), &(0x7f00000002c0)={[0x401]}, 0x8) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x485b, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f00000005c0), 0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="2100000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1m42.048686489s ago: executing program 34 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_VENDOR_DATA={0x52, 0xc5, "e880a4123e55ccfd40d17145cac1e545a425f1feff054fbe0eee62a4d21923cbd7e8e64468afc05ac61cc6320a892df6ccda8f6d3e14190b543d50970f6f02ed90fea23e4562f65e35bb2e77c801"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "d8636d9695d3aa28f82c356a4c4444dd513791e7320d1702fda52d6459107b05a29ca5c163d3f6f54bae1d69ffa83bf42cf4030745fc21ec81cf5ace68c68d882ddbd11b7393382292def91fd1a1bf3a4f224f042c4c6a6cf16b7536eb6e5394e29e43951d07ee6aec063130d082ad844cbc02e33e97ea07847ff51f613165d421c7695dfc7ff4732410597e4d45e1b53a9bfccdeaa125359293e3a9af187cb9bad61369123afe25b83aa21401e5068aa12ce0a3469630a656b20601fa214833935302e8b251eae39bbdff30f424b02229b9a50dcd492c1daf7e0a34a52e6217ef5629a0dbc9aed2f236235270509b15302f93"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xa4, 0xc5, "1b68df421342be02a2e2cb8e4fa69904da3fe55288411f9d888d6c64ad9d46f085f7e7fa954ec7bfffa9b6915ac66b267e93cdc2ccdfb800643112f8e8b1e447d12497198303841f09e9bbbc2d691ed7047a771ef19682a7dcfcfdf2de0fe8db4f3d177ced74efad50d3dfb5e51620d1de133724f26bb24f804936472dcd251a71665b71f72291ca4eedf8943b86b91bc72b219d946ebacc5011e8e321356fb7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8c1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x250}}, 0x45) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_VENDOR_DATA={0x52, 0xc5, "e880a4123e55ccfd40d17145cac1e545a425f1feff054fbe0eee62a4d21923cbd7e8e64468afc05ac61cc6320a892df6ccda8f6d3e14190b543d50970f6f02ed90fea23e4562f65e35bb2e77c801"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "d8636d9695d3aa28f82c356a4c4444dd513791e7320d1702fda52d6459107b05a29ca5c163d3f6f54bae1d69ffa83bf42cf4030745fc21ec81cf5ace68c68d882ddbd11b7393382292def91fd1a1bf3a4f224f042c4c6a6cf16b7536eb6e5394e29e43951d07ee6aec063130d082ad844cbc02e33e97ea07847ff51f613165d421c7695dfc7ff4732410597e4d45e1b53a9bfccdeaa125359293e3a9af187cb9bad61369123afe25b83aa21401e5068aa12ce0a3469630a656b20601fa214833935302e8b251eae39bbdff30f424b02229b9a50dcd492c1daf7e0a34a52e6217ef5629a0dbc9aed2f236235270509b15302f93"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xa4, 0xc5, "1b68df421342be02a2e2cb8e4fa69904da3fe55288411f9d888d6c64ad9d46f085f7e7fa954ec7bfffa9b6915ac66b267e93cdc2ccdfb800643112f8e8b1e447d12497198303841f09e9bbbc2d691ed7047a771ef19682a7dcfcfdf2de0fe8db4f3d177ced74efad50d3dfb5e51620d1de133724f26bb24f804936472dcd251a71665b71f72291ca4eedf8943b86b91bc72b219d946ebacc5011e8e321356fb7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8c1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x250}}, 0x45) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) (async) 1m27.121416215s ago: executing program 35 (id=3574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb8b, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d7}, 0x94) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) (async) ppoll(&(0x7f0000000040)=[{r0, 0x5010}, {r0, 0xc}, {r0, 0x2}, {r0, 0x80}], 0x4, &(0x7f00000001c0), &(0x7f00000002c0)={[0x401]}, 0x8) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x485b, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f00000005c0), 0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="2100000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0) 49.108861151s ago: executing program 7 (id=3837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) (async) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async, rerun: 64) listen(r8, 0xf5f) (rerun: 64) accept(r8, 0x0, 0x0) (async) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r10, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 47.216496243s ago: executing program 7 (id=3852): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 47.072772647s ago: executing program 7 (id=3855): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xe, @local}}, 0x1, 0x368, 0x7, 0x9, 0xad, 0x2, 0x9e}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r2, 0x7}, &(0x7f00000002c0)=0x8) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@sco, 0x80, &(0x7f00000028c0)}, 0x34049805) 46.690364914s ago: executing program 7 (id=3859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'cpu'}, {0x2d, 'rdma'}]}, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580003000206050000000000000000000000000005000400000000000900020073797a32000000000c000780050015003e0000000500050002000000050001000600666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) 46.512547053s ago: executing program 7 (id=3861): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x1000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r3, &(0x7f0000000280)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @local}, "c7050804000000000200000001001504"}}, 0x2e) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 45.505422706s ago: executing program 7 (id=3866): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffea5, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 30.423521883s ago: executing program 36 (id=3866): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffea5, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 5.149945986s ago: executing program 8 (id=4090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10005, 0xfffffffe}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$kcm(0x2, 0x3, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000003008000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xb}, 0x94) 5.132354614s ago: executing program 9 (id=4092): r0 = socket(0x11, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025b57000fbdbdf252800000008000300", @ANYRES32=r4, @ANYBLOB="0a000600000000e9ffffffff03002a000600360004000000"], 0x34}, 0x1, 0x0, 0x0, 0x32ff5f671ead9f00}, 0x4008874) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000100060000071a80010061cc", 0x10) close(r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 4.938118435s ago: executing program 8 (id=4094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x5c}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000019000100b3b97000ffdbdf25022006ccff02fe060004000008001e0001"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @loopback}, &(0x7f0000000200)=0xc) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x1, 0x80, 0x7, 0x9, {{0x25, 0x4, 0x0, 0x30, 0x94, 0x7fff, 0x0, 0x7, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x45, 0x2, [{0x0, 0x5, "d31df5"}, {0x6, 0xa, "a3f4ecaf54c9bf34"}, {0x1, 0x4, "835b"}, {0x6, 0x3, "b5"}, {0x7, 0x2}, {0x6, 0xe, "39054b2f2aecdbdceb51be4b"}, {0x2, 0xb, "a821bccb7e722324e8"}, {0x5, 0xe, "8cc2b81ceca2ffd1582bc934"}]}, @rr={0x7, 0xb, 0x99, [@empty, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010100, 0x3b8cee8e}, {@private=0xa010101, 0x6}]}, @lsrr={0x83, 0x7, 0xce, [@empty]}, @generic={0x7, 0x8, "f91f8e6df28d"}, @end, @ra={0x94, 0x4}]}}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg2\x00'}) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r10) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r11, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r12], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) (async) getpeername$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="e8000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="540001801400020076657468315f766c616e00000000000008000100a122df0b289708a5c16f6470bbc3af9f69a502bdd969d08f5f134b716a460a4c609ad790494be83205f1283b424c2e055eb0", @ANYRESDEC=r13, @ANYRES32=r3, @ANYRES32, @ANYRES64, @ANYRES32=r12, @ANYRES64=r11, @ANYRES32=r6, @ANYRES8, @ANYRES64=r8, @ANYBLOB="0800030003000000140002006e65747063693000000000000000000008000100", @ANYRESOCT=0x0, @ANYBLOB, @ANYRES8=r6], 0xe8}}, 0x4000800) 4.610264631s ago: executing program 2 (id=4096): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000140085030001000200000000028048004e947cd84771bed44d79142a6dc880d6afdd41e0594da01d64a4234053d16ea6ee41cf787a3c1d11e18b821e82f7d739481778039b4dc9c485f3355f6cff977fb90eac6ad036a65e1c185fc191c191a92b313c88aeca5566beccd6def3928a45c6969b0f817143cab1bd390ddd08728946630b205a7c15b664aebfcd726de708ba931f11575ec22c93155c1a26285a9e12716e7fefa1d5d9a93fdf97f79b09135f", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 4.459244896s ago: executing program 8 (id=4099): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e8, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffc00}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7aa}, {0x5}, {0x6, 0x11, 0xa}, {0x8, 0xb, 0xc4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xc0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x7}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8001, @mcast2, 0x766}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x29}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x51}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f8999150804c34310314857baccf206992d3a2f5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xac2e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff8fe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff505}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b06ab2b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5b}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xdd}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x140a, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c4}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000bc0)=0x10000, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000c40)={0x0, 0xa2, "68012981b5af857fe4da68ecabd370256e073c8d1a141fea680f1a69603bf9f13ffbfcda8e317967786141a9eb702cdda776ab3b036b8a3157f3aaf80d02232d69123c0f19b46a325ee6b541ce4ae23e10c0446623497d3394cf7cb52cb14fda5720a78939300689c34fec6339b154157cb92d3cf009648c3fb7a81ff7410db7a3297fd92e01e4ff72fb1602362d65d7aae02a39f477fee7e627df3f30c72c82b849"}, &(0x7f0000000d00)=0xaa) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000d40)={r5, 0x2, 0x30}, &(0x7f0000000d80)=0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4004081) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000f00)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001080)={&(0x7f0000000f40), 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2c25}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_ID={0x8}]}, 0xb8}}, 0x2f9adf2834e11d5a) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001140), r4) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r9, 0x20, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000001240)={0x3d, {{0xa, 0x4e24, 0xcb, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001300)={{{@in=@multicast2, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000001400)=0xe8) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000001440)={r3, 0x0, 0x8, 0x5, 0x4, 0x1, [0x6, 0x7, 0xb5, 0x10000, 0x100000000, 0x3]}) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), r8) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000001580)=@buf={0x5d, &(0x7f0000001500)="9f5a2c6b5bb907fd2e1096d0b3db98db2d4838c0672535c3370a763e9f580f857f33be084a0f37dab69e33465a0357c4d6d718727a63b5e44a8a1a79e6631e1f77b6ba68a5fd66ad02d13c1d52c3e2c027253b369de9211f0b318afebe"}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000015c0)={0x8, {{0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @remote}, 0xc}}, 0x0, 0x6, [{{0xa, 0x4e24, 0x1ff, @mcast1, 0x5}}, {{0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, {{0xa, 0x4e24, 0x2, @mcast2, 0x7}}, {{0xa, 0x4e20, 0x2, @private1, 0x9b41}}, {{0xa, 0x4e21, 0x4, @mcast2, 0x7fffffff}}, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}}]}, 0x390) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x368}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe6a}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x40040) 4.130400401s ago: executing program 9 (id=4100): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1686dd6a01000000641100fc020000000000000000000000000000ff0200000000000000000000000000014e214e20006490"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x1, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001008, 0x2, 0x6, 0x1bf7, 0xc, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x20100aa, 0x7f, 0x10000002, 0x0, 0x6, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0xfffffffe, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.036441413s ago: executing program 8 (id=4102): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7d39, @private0, 0x303}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x10}, 0x4018) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x30bd28, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) 3.933993483s ago: executing program 2 (id=4103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x88890) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x54}}, 0x4040000) 3.550344224s ago: executing program 8 (id=4104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 3.505017327s ago: executing program 9 (id=4105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe2, 0x8f, &(0x7f00000001c0)="da1d71af534488694a2e856a9d2da7cffcb66161c04cfc297faffa833933edf53ccd92a026ef9f0e7ad7e30dc54de0c06ed2e1d2a8767dd88d1c94228a1311ed6f6619c6973b8cc0c32d0983efab1f190bd2508fe4fb5d34000bbe340aee8043aef734192a0cf81d49e28306db32687076a08f87d93024f60363165b96af9e61e8ba84ef592ee076675dfe8d6c4d310c5d2d412ccff9989c955182f7e986ed62d4c36e737bff82d2e7d3065695215e2e3c4ee7e9baab697ecac64a4e9b8081fecfcb016ba91d129ffce772d4ea704889e62ae715df6bbc420cd7fe7d505a5d528008", &(0x7f00000002c0)=""/143, 0x4, 0x0, 0xe9, 0xa8, &(0x7f0000000380)="1118159f3e65850d80e1ea96ae5b7e1560f8fe902b5382d02e3faad09c3a9d5c878fbfb5b51a0518506168eb00ec0fa9f1d2adee74e87643868130c30d50a43788111c9c11061a4c862ce8a356e4b4d57114ac9898d6ee2bfa10a745578fc698a133fd19b5ae6737c08761c219af52e0b1de489ba2e3de7d346c23e990334580981d70ee623a40d50993b8ce58d8fb97670d62ac20c9f8e8ed858dcdcd030634ca8f783f915730870180029b2bee2df78badd9a2186f4f91bea1464ef5f9fa9344b9ee434faa71115abf0bd30be6c8a3ab44a2c575cfc3371cee893c4c8f3fab910d86e6a477a0a83c", &(0x7f0000000480)="0a4ab0210a71cdaf70f98313e74984777c5efd51b244dd59dffb459c4d8c4a143027b44968b62ff7d30ef5c660f2e0c2c19855b6e295de9f2c70c2233e31f262c05a00885540a11a961eb3238b38e58cc19ff133ecdd9912a8475c1dd1d06afd77a1946002daa8f701ce56f6b0f3121d92cb5081dff6eb616b86d4c26f5d06ba8e954634169215d737265ebb7c48f1acf19e19f00e58ad455103449fca3096a2988ab77eb38612ad", 0x2, 0x0, 0x4}, 0x50) 3.345950476s ago: executing program 2 (id=4106): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x40400}, &(0x7f00000000c0)=0xc) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0x8}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 3.345336436s ago: executing program 8 (id=4107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x40, 0x10, 0x1ff, 0x9, {{0x12, 0x4, 0x3, 0x24, 0x48, 0x68, 0x0, 0x2f, 0x4, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0xd, [{@private=0xa010101, 0x4d59}]}, @noop, @lsrr={0x83, 0xb, 0x7a, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x67, [@multicast1, @multicast2, @multicast2, @rand_addr=0x64010101]}, @lsrr={0x83, 0x7, 0x2b, [@multicast2]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r1, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r1, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r2, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) (async) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$key(0xf, 0x3, 0x2) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020200031000000003070000fcdbdf25060009001001000053bb467d04f14562c5d163273ef4a720564f485a5a703fd40c3075e50a5d8c36195600000000000003000600000000000200100000000000000000570000000002000100000000000000020d00000000030005003300000002"], 0x80}, 0x1, 0x7}, 0x800) (async) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020200031000000003070000fcdbdf25060009001001000053bb467d04f14562c5d163273ef4a720564f485a5a703fd40c3075e50a5d8c36195600000000000003000600000000000200100000000000000000570000000002000100000000000000020d00000000030005003300000002"], 0x80}, 0x1, 0x7}, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x3, 'batadv_slave_1\x00', {0x8}, 0x7}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x11, r8, 0x3fcb7000) 3.209903499s ago: executing program 9 (id=4110): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c50904000410ffd0c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.155720198s ago: executing program 2 (id=4111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0xe0022467, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000c080002400000000208000440000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}}, 0x0) 2.869262998s ago: executing program 2 (id=4113): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="53c38e072524723f7662bd1d4e92816910b02d810000", @ANYRES16=r2, @ANYRES32=r2], 0x38}}, 0x0) unshare(0x20000400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000011800)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011840)=@base={0x2, 0x4, 0x8, 0x1, 0x500, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x90000002}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000006c0)={0xb5e, 0xf, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8018) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x440, 0x100000c, 0x2c0, 0x1f0, 0x2c0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x0, 0x4, 0x63, 0x100081, 0xfffffffb, 0x3, 0x84, 0xfff, 0x20}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0xff, 'syz_tun\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x9, 0x2e, 0xb, 0x3c, 0x2d, 0x20, 0x21, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x24, 0x5, 0x33, 0x1d], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x800, 0x8, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x2, 0x6, 0x1, 0x7f, 0x1, 0x6]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r8, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x20000040) ioctl$sock_bt_hci(r7, 0x400448bd, 0x0) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000117c0)={&(0x7f0000000000)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.868873383s ago: executing program 3 (id=4114): r0 = socket(0x10, 0x3, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd, 0x1000000}}, {0x4}}]}]}, 0x68}}, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0306000000000002aaaaaaaaaabb5331c284cde8affd4da17e7cf7d82d2ccf9928bf65dc3c818108fe5552a37711f626bd7b503e4a4cf7248dd63061472e3d1ef637746d04b8d0704ba5260f929466b66c68b824d936c44607961376826405d650b3132895484242707cd822fbde1735e2160b53f166061f5f7c"], 0x1b) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) socket$packet(0x11, 0x2, 0x300) 2.865930421s ago: executing program 9 (id=4115): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/243, 0xf3}], 0x1, &(0x7f0000000240)=""/134, 0x86}, 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd28, 0x25dfdbfd, {0x80, 0x20, 0x80, 0x3, 0xfd, 0x0, 0x0, 0xb, 0x1580}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240400c0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000440)={0x0, 0xffffffffffffffff}, &(0x7f0000000480)=0xc) sendmsg(r3, &(0x7f0000000a00)={&(0x7f00000004c0)=@rc={0x1f, @none, 0xd}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000540)="ab05d040671216a5dbdac0f9485d0a8d130f8bf255a308639e6f820775c34e6039f5a18f2aa71905fb08508a86684896a04dd1ea86269531be9c26de09a97091d9377cafdcc85b082b7c089ef52fb76e14f4a28266b0df4b0d19e2497022762155c31dd1a2b116f6f60524ac4baef694b22de29ec87c0e597f5cab8b054c4ed372dca3c0ecfe9568772d79be5f8b1986740940670a4f223fe1ec45a022b1fc1221c6eab04bede8f942d816b86c3c48a91b26b8ce1a435e07f48505990dc7e6b8ee", 0xc1}, {&(0x7f0000000640)="a211103e1a76684aea4d3441bf8211191f917d3ba596ae2494f2b359740428b35413b513948c04268f086bd5ab920e2dbc9b09d13740d4dc464535d62011b4fad4e50ce89bca468d1d147e36045c8f15dce86d600b509f8083aaf91426734123fd2f15537db29dea6cbe49d06b20de4f7d3a29cf60604ea608a36ff2da0ede7d13d4e25f1e93bb87820b2b0c8ffab97446a84caa49d6276bb785acf13fb57f603b56fd8355b2f183139af45c482c1124c3b78da2b0d386e6be2275e4ad6261ff95616bb86d0350f937b44d81e6c09f9a", 0xd0}, {&(0x7f0000000740)="837edad8bbb283474e0c2431a9cc909cb335c7b69913bb3ef46c7dbf753e5190ea2e35ccd626f4f5e476d1353da82d7f4491162106c70bbbf7", 0x39}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="64751671405a8f9da3116135d07bb0980dfbae4bf3007e37a8e08d98e864f44ff9004c1cb0bd7820ada387b885305ad8f19afed680f7fd00ca8117d27692320a21ee02", 0x43}, {&(0x7f0000000840)}], 0x6, &(0x7f0000000900)=[{0xf0, 0x3a, 0x40000000, "844724f9ec583ce53e608b1e4c6ded5ea1a1d002fab2ac8e46388bbb280cd43442fd079761761909590346676191e9ad4fcdd611603b21865c4d28850acf6fc8c112c000caa7d50344b99cf3d7b9664761fa2e51e9bc3cccddbd89aa005d0d4e07b916327f4de8252b93295594e259a2a74626b9626f7b636a1065008678ceeb6af25c43afa7975aabdcaacd181026bb8add93b7894e6127554887ef53e218841c88a8125870fdbab787ffa03ca1265316de2dd32aa35f60c6abdca3902fa0e5a924171ba19ddacbd3d8eee8f4ec15b17b4acaa777483352dc493bd9"}], 0xf0}, 0x10c40) sendmsg$inet(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="646acf224e3c94295de788b573f158f8458016cdd790ddbb2821a0ad4f9b51f4182272fcf5ca774c6310276e47971770cc8f0452196a191d184b5b", 0x3b}, {&(0x7f0000000a80)="429e11aeeeaefe2b86d233a1751709f3bd5978258b52", 0x16}], 0x2, &(0x7f0000000b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x95, 0x0, 0x6, [0x0, 0x4b2c, 0x400000, 0x0, 0xfffff681, 0x8, 0x5]}, @ra={0x94, 0x4, 0x1}]}}}], 0x68}, 0x4008855) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x11, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x37e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0xcd0, 0x99, &(0x7f0000000cc0)=""/153, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x3, 0x4, 0x7, 0x100}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000dc0)=[0xffffffffffffffff, 0x1, r0, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x4, 0x5, 0x10, 0xc}, {0x1, 0x3, 0xe, 0x1}], 0x10, 0x7fffffff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000f00)=r4, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000f80)={r2, 0xffffffffffffffff, 0x800}, &(0x7f0000000fc0)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000001000)=[@in6={0xa, 0x4e22, 0xbda, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}], 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x12c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xcc, 0x7, 0x1, 0x0, "1d0ff1c639cd6f345abdd8f6b974ea3f14c443876f235f98204ef84b4ae746c1cbdfdc4fe7291cfc5d60a002fdf8f43a04d866ab739d51cfcb51c0f05eb17ec79f8b9eea5e9c2bbedf42b3cb3d4b73b7212c6848b67c709cf3299ba01d3347a2873746b2b81886bba50dd6a44aafa734f7e8c3ff1212d832d43b71a4609dcea7489afef0c6d2fd44796f13c0ea85f970d444f1eea8e2c8d5c5c42c04f4f9b818d0a32bf2105c5e5649f58ee5774200e53e95212ef24bcbe4329bd73bbf6ad7001645b7e365739693"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r7, 0x84, 0x25, &(0x7f0000001240)={r6, @in6={{0xa, 0x4e20, 0x81, @mcast1, 0x7}}, 0x4, 0xf, 0x7}, &(0x7f0000001300)=0x90) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x54, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}]}, @NFQA_EXP={0x34, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001480)='syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000014c0)={0x30, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001500)={r4, r9, 0x6, 0x0, @val=@target_btf_id=r10}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540), 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x5c}}, 0x8000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8920, &(0x7f00000016c0)={'sit0\x00', @ifru_data=&(0x7f0000001680)="adec10cbbb9ad56f35364eba59c96039e62460d8b7f4aff54f028e2aa5b9dd19"}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r12, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r16, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xe0, 0xa, 0xa, 0xd02, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_USERDATA={0xae, 0xd, 0x1, 0x0, "2cc7496d60eda45367055982dbcc42b068c9beeef434fe1fbe324d3cc996ea13e430563caf9ecb39e6517ddc5fc5e172f0d504f02777ccaaad17c2e2246ab22788f350c42ba7df10d34ca7e77ec168b80f4fd0e9dbea7726b89e34be48fea4d288ab909d6ae3b3501b66c81bdac17c5dea00ba245fe10316c56b3eeb2aa54c5892f1a03b7971341421d4db9cb24257951e663f92cdc8138c83fb4ceeaf608a311f6c4cb635c432efc5d9"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_SET_DATA_TYPE={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000001a80)={0x9, 0x9, 0x0, 0x3ff}, 0x10) close(r3) 2.554157646s ago: executing program 6 (id=4116): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x64044) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000f0000000000000000400000000000000001170", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c0001006d6163766c616e00040002800500110002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) r6 = socket(0x1d, 0x2, 0x6) bind$unix(r6, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000051401000000000000000000080001"], 0x18}}, 0x0) 2.144663925s ago: executing program 3 (id=4117): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80000) sendto$x25(r1, &(0x7f0000000180)="d3e9cd9c1650689b706eec292eedf4ac33acd0f2c1ee27cbd57eccddd512f23e1cab2b04d0dbbfb6d75a36faf7b4407081edae51852771b96bc2885c32c28a0ae7c783a612508eb2578b0bcf2197a576bd521b3be1ce6946b3fc0a3c6e2f8dfe718b5fcee753bde6407f1304f62288a65d50715a44327876be53b1ecbc7ded4eff103878080b2975ef12a9b097316a9ef1aaf3cc8947e034aae51fd0a3c1ba5138f54a8c99bef6f02b3b48d53686ab4abaa3d213b8d6bb22228572b0a58479b4cf3706187fb5424a41072aac245df7844eaaad", 0xd3, 0x4010, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) 1.970274972s ago: executing program 6 (id=4118): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000280)={'dvmrp1\x00', 0x7f}) 1.929002665s ago: executing program 3 (id=4119): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000400300000100000000ff"], 0x0) 1.655708959s ago: executing program 6 (id=4120): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x4844) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0xc845}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 1.50830101s ago: executing program 6 (id=4121): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r2], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.309442729s ago: executing program 6 (id=4122): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xec22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6b}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x30000042) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc98f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 996.633353ms ago: executing program 3 (id=4123): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00'}, 0x94) 825.437774ms ago: executing program 3 (id=4124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x86, &(0x7f00000000c0)=""/134, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0x7, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x1, 0x1, 0x1], &(0x7f0000000200)=[{0x2, 0x3, 0x4, 0x1}, {0x2, 0x2, 0x10, 0xc}, {0x2, 0x1, 0x0, 0x5}, {0x2, 0x1, 0x2, 0x8}], 0x10, 0x5}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000300)='{*&:[,%*/\xf4&!\\(\x00', 0x80000, &(0x7f0000000340)={@_ha_fsid={[0x6, 0x25]}, {0x3, 0x8, 0x9, 0x5}}, 0x8000, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x1d, 0x0, 0x7ff, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=0x1, r1, 0x2c, 0x6, r2, @void, @value, @void, @void, r4}, 0x20) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000005c0)={0x100, 0x7, 0x2, 0x0, 0x0, [{{r1}, 0x5}, {{r3}, 0x3}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x8b, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000640)=@raw=[@cb_func={0x18, 0xb}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffc0, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x6, 0x1, 0x8, 0x18, 0x1}, @jmp={0x5, 0x0, 0xa, 0x4, 0x6, 0xffffffffffffffe0, 0x8}], &(0x7f0000000680)='GPL\x00', 0x80, 0xf5, &(0x7f00000006c0)=""/245, 0x40f00, 0x0, '\x00', r5, 0x1c, r2, 0x8, &(0x7f0000000ac0)={0x1, 0xb0}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0xf, 0x1, 0x4}, 0x10, 0x13427, r1, 0x7, 0x0, &(0x7f0000000b40)=[{0x4, 0x4, 0x1, 0x5}, {0x4, 0x1, 0xb, 0xa}, {0x5, 0x3, 0xe, 0x6}, {0x0, 0x1, 0x1, 0xb}, {0x5, 0x1, 0xd, 0xa}, {0x4, 0x5, 0xd}, {0x5, 0x4, 0xd, 0x2}], 0x10, 0x1}, 0x94) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001100)={&(0x7f0000000c80), 0xc, &(0x7f00000010c0)={&(0x7f0000000cc0)={0x3cc, 0x12, 0x800, 0x70bd29, 0x25dfdbff, {0x11, 0x3, 0x0, 0x1, {0x4e24, 0x4e24, [0x7, 0x2, 0x9], [0xe292, 0x6, 0x66, 0x7], r5, [0x1, 0xc]}, 0x1ff, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "1dd490abb4130237258df5a1bf14c047671d63cc63ccbf35d862c98bbe0b804b740702928dcbc93338d7084e135737dfab11a2e9e3946b9faa14b3336ecf5a530abc7ef75bbd47801a20afc626921cd98e63cd2a838820d3c83676e63a03773e859e069547c33d"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "aead4f1008835bca989d92ed937b02434f70fecf936030f05737f55a20dcbc796ab0490cb52f69122adb1b1f67df5f9b99cbda35d2b8fdaaebef269392ab144c6018d2234f8cbb99a41e0ef32ab0970e24340d672f8ca2a9ef1f605936e4fe6c5fb0f7edeb8b94da9b10199c619fe594"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "cd6206df3a2fd52f5eb3a5f508432043cad1a8e33240eabb8a70f0385714479c541bc2c7bad4ed49659dbf935f1ed833af2deeb60946b16e8eac490802f197abd20248c0d8e341dec7e651d2cebc99bfe33393bc2f4cbc1af0ced3b917614a9e7e0720ed3f140eb4692fda01dfedd1e9e00e69985d2c7744fffaa28e3d0765724ae572374024f51530e591ec805c6b1a31426182dfa296320b902470126b3f45010e8621e1bd1a84e186f1ff6840cce1684b09ebabf970d2da2fc9380c6b1b554f8ff0d12893aa1d790aad74604566515d918f6a7820879c9832"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "f012a4ed54257201589a2b310f0336492fb5a96462a46e6e19bcbc96108d226a5137cc7b0543804eabe980c6ee6d780fbd8f9ee00ea1bbef7877c279f9b67ea34c56e372d97b2589806c1eb89598549f90bceb8bc3c07af90f0b60625b7d8d489f642646113eab7eef813681c19dfb1cefb4dc7270c0859ff054245b58dc92f7e1d8211922e5"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "2410e69d3f"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "ef91768c421fb37d7c9df410a0bdea22190413bbe9f55a6b32d617a4a70fa3ee81d33c66dc60875ffea7fc0c95bbb6abe44563c7031b230e2929957a25cbf6714ef3b1e0440a25bfc33c25928906cca937f86c4ca3c76f3946d9d8afc3995f0a90587d81ecf9fe4bfb9820ceb930fe9d6a0c47df93a6e1071351"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "7544a80a2900a363663987ed9fbe82802be8836c06a2c5bc8b7c7c12e89a6d23dfe944b45bfcc12676baa97fc573a14ccf3bd890959d48423a3cf074f265032cbc98a4a12c20c525f6487fdc4be4faa478656fbb5850470922233a7440e273dd90129df5f987a777c87ef59416a145efe453954a2c9e78205cc989bb54590ca1d2a3bb42bb1a6bad3ab8016bc425b0c0df8d5109ec60f7e72caa8bab1ae66f59b0"}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x40001}, 0x4004000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001140)={0x0, 0x4, 0x1, 0xa11}) r7 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001180)={{{@in6=@loopback, @in=@remote, 0x4e20, 0x9, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x6c, r5, r7}, {0x4, 0x100000000, 0xf8, 0xe, 0x1, 0x2, 0x7, 0x8}, {0x8, 0x2, 0x6, 0x8001}, 0x99, 0x6e6bb0, 0x2, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d2, 0x3d}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x5f75e8db58d461ab, 0x2, 0xf9, 0x24e, 0x7, 0x9}}, 0xe8) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000001280)=0xf, 0x4) sendmsg(r0, &(0x7f0000004a40)={&(0x7f00000012c0)=@can={0x1d, r5}, 0x80, &(0x7f0000003700)=[{&(0x7f0000001340)="445f35dc7ab2992990c1f244cb796541664ec7a75583e8ab04f5e4ca30e79a86d5e4196b83b213ec5daba5d60244f683664a2ce213144b206921bbfd18b9afb94e492c62edd65493bd48dc9a91a2c1707e5041a128a792a2fe2ed66cd850e8a641accd2fee60", 0x66}, {&(0x7f00000013c0)="70ded7e34943052d7040ecabac8c2657585d269e6098fb3c2fc7e0ee949e796453bdd3f0722a28190f3fa64604ac731063c10511b4303622ffe528f55684d29e28ea8627328d2df4430754b81edf3286bab1d7a7aee8c3fb4d57e9d239ac9c86bc039dfec1f7f294578e5af670c85bdb033840fd2deb33885d63d8ab5f7eea5493d7734d7e6f148b786d86115fc5d0eb96fb328671d636a35e9028a19939d79a409b2257384f3441c22ce79cac8ea8c96267b03482f676ea98e9c23100b0cb2f3041f3bb18770ec04cce836dcc172c699ba649845f0b272b607ae4d412fa72298bf965900db01b3c497fd5d657a3d85f6f8b4f332ad116cad902fe1a9966aeae199b24a7549574432b4385448fc3b8137ebaf2cfc94581ea2ff0ad56c4025c59a4393befb6399d8093f29d911eeaadce1146a112dfc593e64e3144732b785ece6a53777f9516f2be9c92490c5d563b07f645c029e08fc294505a17989c3bfb9e3967ac6c762d7ee53b0fccc227a7b7d97d6090cc8361a1c27f4542c0605e08e16cd40afd55bfd87bbb5932b5063528df46a467bb8b8f60869605eded238ab6f807e94f0da89a81d24a75af6991e53dd9cc7b376889ed197093cc3cb9105be6545e45ae2c0e5a8e8ca6856db415160f83cb0034124eee88573829944ef6747bede3e636a8e866b79e3723afb7e91f0ac3c828f7db1973f47b7126f9877080339a51b357c8986c37649280578103446aa392e4cc0c41da6b585d97c737577b2063b854bd37c64dabcb171103c2a1e46b7d15a251f59f6f87e6adf6df74e5b1a7f6aaabd843d35043e428ef59ec05cd768ca5d62bc8683c589e8bcb80a9b2ecccace5ce280a6ce5bc33d43d05c424c29253fb60050d057269aead1bfe6060a10c0b96515002f6ab7ab101268b476cd36e6ba372e6be2d8be1d761e34f893ad8d450cacdcc9949b884a48eeabe0bcc551171a9de90fdf66b96ce2a3448e8162e6bf9dc697af85f7b8270ffedc2ad816b37e98c9f42db1741e3ebef7f31cd32006aa25a3e4eb282637900c4be3af313c76011e8156ca77e1f0a162f60c448f0c1ba4a5eea80302a4db5b7a759c3a515184a960201e8d9bf0f56d04e54b15732ce749ae485a0e483509bb726e105934f84e5bc0a01d81c43ed790c46fce515bc130ef7777b325ea5bbacd16682cc3717be111681f9de0214ea1b1ce6260af352b37b9028c97e805ddc7f84e2110f106d6aff4b66d89df24fedd0ec238293c9c6811b378d374fbc46a2f2fda04aac1c4b0d6f1d52386330c78a92c8e2459ab7bfcaa1d8bf1bf17bd51f4a7e6aabf0acdf76dfcb968bf6ac290b4dd4fea5825a46c8f44ad8564b072b7451d1def6f7708fce07e95a6c36fd59013e02b641ae230b8a4da4be969c979aefbd9e44223537025be0b147c2fada42e2ea0f05b1ab5e7ec9bf67fb38231442fff1558bdeca562e2e9b86c59553091d43bd4883e412d300fc6ca9dbb02ef6334d9bfd56bb08c76e41513f9b1897eed20ba7d3e0bb2ffb08cb72c8a340a9c183fa8cb02ff5b3cf35c6d7d61f6f564bd29a361ef75f093cb74b5863cad9c2776f4c4fad9d3ea70d38bd560e75f4d5c05ac934dd1ca949678c8eceb89f230f633ffab9e8fe264434ae31fe31d9df2cee2cce899ff480be92cef2041ac92a7b37810b6ebab83c329f84365747afebe35ab72ebed649eb55a299ac22c599bf956292e53f21110369a71dd91cefaade63507a9522feeddd5657119bd99e3aaa6f2ca9d3b23f2941881af779f6f116a455c9237cc71e8293ab700fd7acab7e135c4392c68678fac3bc78b38f3b69458b361980d8ce1b89d4c6e184992777f0408eb284a0b4bd364592943f38e5f9481d8c453816388a7d87893bc8d9e4ac7eeacb19524c0c6b911baf42c268dc5add10e828e08d10bc11f43ea491f01136c19f9f80988751de78ba051f5502e15b65b3b28186c51d9d014e96dadbac573b9315d85811f5805bbe213d99ec714bd8b978405351b806ffe4e33c0148bc2876ac0c3dd1a9d9a0ef21c1b7d650e0098514a72d90219c2854e0c330845300c67f102e6b403637b2a0e859fbc20c98f7889e36b2e45062d262a4a5cd2f283910a926fa9aaaf36c92c34999f9a16581b92cd69edb37b63b9c9585c3f848e59952b50c081f2be86efa32c972408be6efa2423674c0854fdf9a851d7c1e0240a7da13bf9093618ed2aaad11804555af8c8281e4263de7b4c2a26afee4699d1f8ddca390e4b52634f6b57dadb2be8c97a88a2b6e78c40dfb3c5c121c3d7a2d0c82cfd79300242a27d2e29c9adc4a6cd22c77d7cc14a9bdc456cfd4c38a8e061bc2acbd0b93a9e6ce21c373590a16051b2decf3532a04aa64b8c86116ed1c45645e3aee19633ac34dde6936f597b372c81f9348e502580f6be0f7984f2bfd6f22a944d45fd61f9cdd7149c59388d06841aa0e3c74e6eec5096a14ce4a31c18850db5097acae9af1df094ad089e9d97c61276aea8852e9c7797d0c8644082cc894699b825652d55c4225f655d2b7627d7e3ce002a1ef62d759a744441d1f14d93708b53b02ccd7526a8e01ac8986243bdb5d9784f123e00df6b0d0978a68d856f1892abd2c5453e6bb6602cbab87fe6017157ef248e6aed9a3fc1537105922ce634354083ecabc57d382b456d5d9b62dbc47ec1563c91aa503f6ed6c7160bdce06faa467175ac72e5d7814051a551fce3e01bbf4db97d8e2fd07ac40fbe246dedeffda6add1e4456f770245a7dc62fdfae40b918fe018b1b515d9a7b2b343c4462d95555e88582f197bdbe7052544a53720304a9871157a562fa0e4b142a63ac1599e5a2524d3fffbb8ac6d2ef87cbadf99bb40a10ed01ebaae6092eb3c5ea22398a9d16f6c62493a0196d2e48fcde7ca89eefaf2a83e3f7f86b7ad718023cb67e45bcf0300c30980e0b482c9d19e121712f915372b4b128b43cf1a55256b64c74ec06be7f8ccdd47a89741a3184093ed7aab5015b088b0a2258fc888ea4cfe4f969cb8afa671196479d2edfa951e408be05868b7cff4f0c376e07d2d3f4dcf7d5975aaca5f62ba877ada3ffedb6b66d5a897b888d54417bf1ffe212e983f23e5b1aa44cd990be0dd8b28459f3ba6edd87682a48e3a22c3f9353824198f7f33c627d184c19232bb3ed34fa345775a10e70d9b1216991424748669181fae15a66151ec1103d31f826c7256e68562a2f7eda018d39cc57f8a3b883ecddbf0ccd2f0b3489cd6d4ab04eca141dfec66737b342ccd283184fd6907398b1bc5a456c0026ec724e864920c06841300d60e96a7d608d8131d71fd23a0322da925e5fa131fcc2c63d010ca69032ff0d7a8e2bd31873ded68f11685346518610b9225d4c9ea7732c0c543165ce2f18adce40f1224d21d96c6c7a5c3e6a3e8be24bfebe2a1c11734189575451ba9a381b9058f72fb8546d1b4ccf8604215948452d67c60da7f68547a8dde03bfde1f3cb8e9ae8e40953da0ced32876a6109edea94b21588d221db7069139ff9ffc247a9581a4f25b0834e937c1633c82ea9dba06b951544a7081540c87b30bf9fbf5c6bacd61aaf9967d0139ca81613f52d7366694a9c080d7eb46c6b5811aeef13dcde69a3efec7c70c44c87cef96601ac6590483303ab9a8d9722bb089b416d4d31080411a499de042b96f960deef82bb778d4437c3958017452fd47e161e8dc4caf4ca1a290c9bccb0ccd72a02f851773b2dc03f794e0ca211f5cd5535fbf35fbeb558b501daf53c9723569037285d39a9efc5d07ca7a092deca9d79aaf54d7686b88064dfe09c4ba2c7b33d087c05f78cde6de70f44a4a45b2b9bd89d5b7eabcd6276b27104e552ac87a3b168ea5d55de7c593369ccdd731f640754431eb1ff37cc94e5971e47d7a766ed6863ab306dc9197c4cf646fa47defa397341db3fdc4dda8e224c829f31849dce1dbdabb19ea26f5530c8580bb30c1ded2d6723eba8b1cd5923b97a8f75a9fd4f0d84504142961e7760972b4efa891165abf9ac5435a699e7bed4111c733eb98b4d4ae389d3dfb203e56c0baefdc53bd32a5904b6a829dfe36f66417082a47ffc2b76bad711b0a7b3d7e85917cf567e3a22db51c266943af428772c90d975950e1c2bc66e8b107b0f9e210200e1aee6a9a0b0f8909f6ab650af3bfa082d140fa2bc4be4f96f511916df0610dd5e12e0c8bfe499ae0504066d99ba27b8837aea3d032be3ac05bb8785d4fe0fac587eb8dcd41636197602acbc4b55b7eeb7df8bde6493ae5c3de183ca5310b32fbb1831be41ba1e4669895a72747caf9b67632ac9c077633487217b42542ff47925782d7bae59ba8da46a30093d14d2ace5c0f94f7597c92dd99346806eac8b9b6be51210ee07831389ebee39c68547af9d8d05289873285630d6122ffd037c1a31b40735bc0deaa2e53f8c891d9505727f1162e4e93e4f322a0e92297f7773c024ee0fd70dd965ceb3f01a4aa3c364c9dc1bdd4c3388ddfd27f6dd6df7d311b928fb309ea95d9913a094158cb43700072c78a847888f32b3082dafee1345bb124e5de98eb9dbd8a9c3631c3440eba1dc8e2bea0bcbb83611ea32c545e7e7c6caca78484072ff1e436bbb133c86aef34c437bd54914fc7470c366c87d39f3f54acc827d04895ae025e3f661e8a933adffd182cc6fc7bec015d248f64282b82053f693fe02661bf50e02ea982db359144626ad1bdee399b60f6b21c464730af246cb4ac74d939349c864a5282c188df36343d2d37b749a38f1dda2683b300d808f8e97c6786973b304a30b64347c7fa3ad9fcf8325f368be89455594bc5275a1b87e9cfe8f4b0d2af8e4f767b6e3fa07e869213e1d5b5e1ba864d2677ae2cf125e52ee818945e0dd12a4c1de9b4209f085f8e1867ee98ce76cf35297faf8bfe5fdcd684bd3a08c45dbdce7101e5555b53eb6cd5a140473b2e95a6a17f31c990370320c660ce61c7b9ca62527edbd13789f3f5f86656b386eaa54e6cab15e89afd5fb2a2576f90c8d14da79b677b833fb235edc2439506d535076fc0d40eeba100b12b14b8c53616dc51ad8b58ffcaa71a3cee1d0022e4ac8fbc9896f6c2cc3056cc5df8aeff51ab22c1218dd0fb92af9aa2657292ce141f087aae7707b3dcbbcae7c7590143592e0a17a3715ddb7dfa9e8f3b86186efcda83b251e4db96370f8c926cd4a317eadf563f3765ed2d12422867877ec7426143a038b2b78d6626e9672ce7b322d24de71a493530b2eff2a7eafec581619fc6d360de9b6f1db9ebe242139ff17428bd32fcdac7fdbb490fe32650f2f4c3511efbf6fe96f118f96c815d92cc6a468ee6a4166d974b5bab78163e08c10589994c31aa39383931fc1cecda09a70fd30c2054c0e3e69737fe95e90dc4ea371ad052cbf95418a68c9bd74454981476add14281716b392304d2c8f979e37fcbc17448a7257f8df1e9d77c3743b1c162143024d8e33b6ddc5f61b1f0f49e89b289eec698a7592da951702ae74c52ca35cb286c266d47d0bd01aaeeacb8d3148e458d3f5a8b3ea71799896d8329f7bf2bbc8a2e5dcaa25be4c011277b71f7642ac2dcb34bd6184b7dad2ddc36aeed140c57f0870dd9fa9b357906356d1da45a1f7a6c75dd04e47fc8e3c3c80b90c47b3d0808db072da184eea6d5a426cc4f0bd240aaa495c7422403c2d2a31b6b0010dbe98433be7a4675125f48a9db17efb6ae3ffc60912a63841ee9789c9e0b5ce0d999d7971d6be65711ed529b153c58221eee6bdaa713f61d6646c3fce5c5d449a7612", 0x1000}, {&(0x7f00000023c0)="9c7c51a9bd1f72b2fc16db5c6f51c6127180cb854de72f00c9aa9d08a333bf27187d1fcddbb0ef62b49ba27b8d7c70f7e219818f237fcbf50b730d1121aa797d65ef49524d4bfed2d3a251dcac20d912dcd18a4cbed4bef6dd3f7cd437b940bac28ca0017642077c01814cf4e9136ae0a633952a78c518e47cfe0132a1477e61cf7a62c693fcd66e9146fa6da7c0f8f78787192e955c20044d4fd5b62d38a8fe4b865cda461be568acc5a839c04e35eb98f865074ede530b93913beea2b8a0ac4fea81130d524db82f28ed82e5ac7e3f73cfe0288863201080fa2d9708de38ada6f94470eec10879cc0de527960bb07ebf74564dbd944dd28dc5996479b9ec771dbf3d8af56a71336b8c90cf8802f9bbf10c8ee13f86344cdfc3bb444bda932cece535863dce4a0f8dda02379d674e62ba9b103f8eaa7e8ffd2598d23e92c87f364c8c0078820fa743aee4bb174e6a0fbfef58130fc29148531b0c2ff1d537efc66f01d8784e6b5d2dd9fc9319c22b98b3a2ab3d7839b7439817a38ff736a19d9783f98b4697d561cd18269f1e0bd2f4f4aa0f79c941719c9b34a2adf36927cd74925733dd7f27ae3595332d8923e05be9bc00f4701e4e85e39f8070dba52ae0115644671ac6957282d53d69bad775023006c453f0d1bd3b8970ee6d8a558a1ee82627708cde34fa5522f2d45f65ae87f5a38780ac6e7b15c07fde65b5467e8a960d5fc4a8000111c34ae9a40fc316619a5efb6bb527202235794b2813c4ea9e234331826bdd38b34749a6ba0b54ed39642ed4cd1006af00de9a74a0b10f3e0cc72cbae66840fe44121f137f8fe80408e10cb1f93f47de6decdd25f7f56256078b1099153282748d5f2f787c80b7e7a97091f54fbfa74e3507cbe2a0c7d9e94315d27087ee689c6bde3a93300c672e84b718121d0a128de0d4da2a484a988937e33efd5dc4c814453eed114fcdcd7c049effde16079b7504edb16a6be7cadea3e889bd7637789b4f0630936a844686d013a681bc2c32ab12718308dfb03839457c92cd584fc63f4e8184de952d834d11a50155bccdace282492bd81f0d0764fa0e527dcd9b91d628da68b99eb4ea321683fc15ada2fc0b94a3fe398c5caf6f654c1b7109bd02df504a23fb30d592035d6d036bbae68cedb8ad75e1af9843029333a99ec28e187f7c0ec3c20bac618dfd811e79787ab5128b09ab838d397c6022c81e97a663b17a4afa7cadaef9ef1d47131af2d89b66ce53501a73c35614e4d48ea618321e0ab7dc100a027f07153ba3df2512ff316cf79990760dd2c3d5e765d044188a9f1ab9d18eb9964196b5a748273c510d1f551067604b1c022405bd4373a0d7576473f9a3deea45832d1262914693c636afeebb3367a9bf8ba125e31d530c31c7540193782a972227ea832c2eef8b0c9699c162da832431d2ff5550c2a4fd35323bf45a18187c596243ed634db60e46eeecea16bac75bd99544deca436dc8633074376f8d6ae167f364d1b2a06b116e62da7b3e69c1399085865fb0eb849474f7981a8643da9f49401547cbf737ba294a310a2d3ffced2977522aec240be1e221787cc7d6d6f35092514fddfa81c4894ccd84d4b0c345a5c172e38d408a459d5db6d319169df7d47e18434d490262732838cd0a957784aab48e452203cf9a0c7a3f2fb10ab9a4f69cbbc7dec871823d58d27e88a6afb4b08ba3ecbc3358c051838f94e36f97d8c79db90caf2ed569ef97feb3a8006fc08a0c5c16567764b61ab49e4b5a996efadacbf3cfaa9a35662a3cd9e2e1685354df6dbf73ba106cede8d05eae06a1c79474ff9f7b59eec183133dceb1f948ca82e8402c21914bd774847e6687391cea5bc55ddbcbaedee9ee858f621f4ae01072c1182b9e162e333869be291acac0ee9fcebe08d47156edd95141a47b9cd06fb3bf56487a41d949b488c5db083208a8b68cdd6284416f21218f851d84106bd50f80ac42c0b42a16f2cd474fadd41ed3bf767b537540fa44f6ff83e9a38cc78b7ea76dc21ad780f2a0250240b8491959399057151c43a3224912863051bbbbb63c3230191beaa6e60928a00a4dc882225d62aa7bc134cf4d4b99edea5ee733890a9b1eb19ee13dd4ed9b0da1b58fb80a7240912298b9369d76b54b2196e5ea107bcc9da1da347bde4ef1c95693b47021e996762267bbe24cbdfa08266f1567ece49699055dbfcd8e98da77b0c754d7320f0615528fb3d7de9daa336c21bba1c6aae66783bfe902eb1bb6da91f69774773399ab9b58cc06ba3fcf03808bf54de42071cd1359961553230c8c36fe94b44dc8160244abc7f8e790a275aff1c2f963814bd0bc2dc7ae38855103bd8c117b4c3c03e57ef461203b8555a7c38d1796586445fddb0361c58fb8ee989d70e76667d5bfbcb58d120e3b1beb560d6ef8460683b0e28101414f85056a8b03f82891af06cf837ff6166b6a7055f524defd8cc8c81ed48d0902bf14eaa84fc10474852b5e89b362ffe7e4a04815d4daac4b063db526ced7449c89d0a9f0f47bd2a09e8f061887657fa3a6fd1ca7c348de396324d2753a63de9a14a29d408a9c09dfad3fb38250a5b48b94367e2fd82a59c8c498bd1c632ba907178df951487ec7ba299ca076d9372d5a1f6915578fbc725eeac957a0591f566838f3a3102eb1862dbde1591f11496d4758986761db3e2f475e3735084224d6f69f6c6c0f09fde90ead5429df279c6b0bb19cbd15b422076d22ee0d552f8395239459a4447ec18d4d053526224dd24c594f9ee0fa92133a41561a262c0736f7675cc3c4e1c65e3f76a0fc92611366c3716270148a880f1363fda12fb3124434202d5e37b8a4a2f9fdd14b3f44724ace0446b5146e92f34dcb0004d2cc4bce3980d985c64b568c24c5a53fcd0c3cea1be8bfd2e3302046368d56dbc13631a34f258aaf25bcb11011615cc0867cf0fb97ade85f3b8b2be9843d69b7dbd234ee87f26081d28bd18eba12d336d84f3efce5dfa48d434572de64b2cba5693e17b46ca8396d5adfae2371e280d35fcec2c0db38b4f6eeab379dc7ed19a178f2256e083bd6f172de12a293077a6e3e4a5bd2d7add53c169f7c2ab88bd4583b9063e7856df7cc5297a6aab97be55688b9f1874f9cded428a7c40ab6da3225a7f436a76862ad72ab6d3091a8ef8e1e302971b2feef4fed663a91b82139da2248631d402e71a9e7c2174715218fb03aa5153207a5555bb2b3df7b32b98f5535903c1f76ac9393ffa3ac0c03dab432d6c48f81d9e148bbf5701d58c5846acc28f0af8e3e2b6a6dc43d6f33196ec83c5cab45b628baba90fa051be18f0e9d2925df5b09f9fe56c2d3088a4c2f5e0968c7418f3433d56b93a896a6667ddac04f885ca62683996eaf4e7e37c0457e0341d2bdf1a3965712a655141e278c5dd40652489a31a15bf0da52377848407c742dcd24c898d9fa9d7254214b096b6b579f378aa17604d9ee3bce8e5e1e43e5e22775ce14c79141a5d70c24e2541809a3453df6e1d948ef888f82e556584b3773bc8b45b83ea3efc0fa14d386ab60d80627c427734d47a99d5cbbfc6f377ac6ce8e03026f00884cdf0d67fc76394e82447dbe8fd498c72a3aae00f631a1097fbfc57b57de0f6ccffb3274fa36c0464431ce5902cbc679413d0b80d6367b973b25665f89031651af8eda814fc67e477c6b6a6c10bd89eb49e718c7b3aabeda8cdfe9686951a6d8fd450cd6419b7d99fa5e0e3b948c5e6db4aff059f3ed328a437f001d959891416b5841937f9f7df7d2d4de0308ef94f2bce1c2cb11c52e38eeba958dcf3995c94e435016dd6261cc7ee52c099f58b71fcc5a1e44e0f2dac37d3e8d7886c99e5be47d7c7e14013d82f5b08790b3e6c833397a1231ecd206c5fb8977a50bb9a2b480a47e7d2d1cf41f395015347d6a2647dec5b16df3e5293f675375650e834524f47fda725b789aef059b27c994655785f643ac60fea320f3ca679a0577815be863090ed7a7bb3c58e3b2e46c708d8677ce7d6edde12bc76836d350ff82747ec468902b72ba67ef9dd11547aec2a64444c259769d9997dba0d62ca50f8142c42f40a599cba72fdc786ae1147aa589c7526b9145b0824d9f584e2d35d2ca16663fb670a460764cb2b7f50fa8f0cc23d6bdacd91d7e02b2b8ecc00f318a49bf174eac4cdcc7e7f3553cd617df74e9d8329420111659a02a91bfd6e7ad6d98d38c8d8b5f02b5ea466fb483cdc6ea1fad4c37c994ccfab6d446bb8636824581567d2046e0cf2750145f639a02dcc03f3d5bfda55bf6b6f6765d7194661e39fd164421e4511ad2b8fc519496078a000785881f13304e68d17abb7fd22d11f6de5cf6982bcd50d14353bb2a9710a491e650c94b70f38bf42d000673cca03d2a25ae317538c99141648d8ba06e5d977773cfbb2862c54c27e2f2e2b66c5f19491ec22f9023d0c07313d3e55ee453ea35e41a09ef69efa590fd48385b37305d6c59b4f6974e9e053fe64294e4891d86389e908fa77dc2f07b97f2e4eedd5c6e31f4e274864c865b6d4481fa34572b7c4147d2ab6036c4148f71a5cde11cc08049c690b130d92de757f41ec48c1ee52242faf641403c7bb9f6a21dd1b33484ea5c83b0efb8900a274b9933cc1990643a8b3416483a0108ace1ed7e4c4d1d3090abf9d507aa40f571d4185843db57c06fbd92b535107b0295fac593c0cfd3247f11c9a5e06c9d8fae62690ffcb03059bdc5dca79030133eff3ca34a19b7b30eb5b04b88054aefef71b910221f40c4e2d4bb944cf5103bea3685278dccf2f3e4c3a6fbb9f4b0a83c38a7a07ce2e8529328adaf754825d3d031bf1634c6b0c57f5962b740026df978c64c4c39a11c0d1c9dcdf9df2cc514bc7be76aaeaacab7d91c08ac1c55f838a834abe3878fb504240a31d8392737dfc224f4042021d161fd3bfe840c02eb05d090bcbf4d1e38c3303a25d38de31dc11fdd69a4937612b954b7ed586036f7b0e1dc304355d5c6c2dc75b77f596e9b91ae8929fe521f8c28c2ef834b4b64f586decf93d443bb2365fda479842c6927bb574e12feaa181ac3052e08901e42c0707eb87f413547449c9a0e9ebe16dda900698a6437afcb83e7b39f3f1b5ac7d610e3654f5003adb4b98fcef5eda685aaa5e5a5672f6e93b4a6e21cd2d1d86dda6156bcef81782263fa7ee4ca2b83d807e0f6a50a225cfcb4156389060aa50e73f224a17512d25e5dc06a1040b3808c7360846df44d53ad6dbc4b46c27b2b54648ea6fee074f54f19284f5190d86745b8bd85d0169dc63dfc141d6e29f407c94a08a03637c7e97e06254c331f188dfc6cdbaa618d05f7a95568209c94daca2431bbc75ec4ac3977ff2f408c567ee808b3b9a15d73232743b222310e6a9af4e0ba22ec1bceaaf88777b7a5043656f6ac9bb99b6e4139a224d7e3e5476b09355c4355a2ae4331c23636ffe54728ffd25f7f3c2a755b9d12e87cc887f6914fadce6eb427b5249803c85be7213fd3556494c9dfbcc553ce9d51cbe4493ac8cbf550c6a017babec0734aea7416a0ae8707e9e8dcf65082824248f588798fad700cf075978f590e191e0d2d0ed32866ad9ad522b1f26045bf2c89126c761a5bc8b9ca7b63d23d7d166d93724f9107db0e713b904ec52b256d41e843fdecf64c49cd17edf4f52d70937fae8f8f3dcb1d9f3c2d9d1b395f4c6c8d9a43857eaeea601bfbf5e5a1f7adc6a614b77205ed9673068f39ed37aec97357032fd84c493872d3e0415bee4c40fab3dd47d72d62e6a3c12cbf7d46e1", 0x1000}, {&(0x7f00000033c0)="c9e875f2a3884358e2b26b49572d8e57dbe7081e0b1af8ec521e62330c53d7a7d5ef8ab7d39f8935c90f61185ab8b072d8ab593d3f75ebbd49601c3e51b376b890f11ed7a58b1fba5a1ba7af4f9a9689c1b6c989c3bef4351d0b1dee2ab868d88d0defa21f30cdcac85a66957692b7ca86e58f96184ec44db6f1de21f490bee4a2f4e0ad1244c07571e6051741b1486de042a13b6c08014e637061093a6decaa213a546b63d9b37b4b9ce60bb4ad9e90a5e2c1e2b622d021d4f8e399ff4fcc8f34c4f31944d5c3adb020c1", 0xcb}, {&(0x7f00000034c0)="1ecaeb5bae96be626bec8e5c7a529545007414d002b8c769c2c86b1ee0ec1723bec3712c7e29dc21a0b78b9ec62c05ea0638aff265455657ee6c0c3460b37da8096cd2ef35a812bb1640c4bd5cccd75d2537ac4308a5b3e5e41d1e0de5c1f8b98c4fa7052f170d518792e983b0be8c7edff3", 0x72}, {&(0x7f0000003540)="67a7da6acb786b4d380cfbacfd304796230efb81cc5513b615f0883cbb61a59b10f4ccf4517872aecc315b7b9e0f8df337cb1e032c490484dbf013a49f464f6c852867fb93bc6b1994458c9386408916208167a9553e50a2ca6b0f4f9938c48bdc0337fd521503881bc7fae036959551f41aeae19d642893378d37efe7852d5c518f272ec0976b873ca8186ed9bc42971c7ff17099d0621221026e9ea8dd57d1c8f2871b3668f22eb7cfacb293e664610a94d6dbfd58bae30b128564a7076f18757626efb8a48093f39c986ab5c73f2f3063f6931b09276ebf00ea36", 0xdc}, {&(0x7f0000003640)="6de39372d71235a95f54799e0339ee1f49f63c26ec74570c44948a6c10907e7f517950802468d34571fdfe8731bd3bfc283f4d4a9b968bf6b12e57fac776e6a53a3aab5154647ec05d0e427ee017a36ac3a62aedb9466fdb", 0x58}, {&(0x7f00000036c0)="0903508e9a45c6d75454cc3bab1ddf94a0867d4a9f8cacfb142544f3d8a96a47", 0x20}], 0x8, &(0x7f0000003780)=[{0x108, 0x112, 0x9, "6402991050024d4e9bf86c1a5e33f2b2d42fd36e4385387025e7b4a9f7cbbd0ac9440176cc15c4749f5474e4b2768d7bcc66fd10ce9df0a9614067e17fd57a53d34bdb7eea7e923dd1f3d67fa7c9fb6925bc56d3ce3bcfc5e34752269a3ec598b9b015098ac951cf974648c3b0881a934269279e79ba58730627a4443bcae41d321fb422fe5eee2b46ff5f666eaffbf4997a12170af1d8115ffeef589237f85cb7492f81bcfda92e9af038b0069a7177e705bfe0afa0427f973bb7a8caeba92fd7616699651b4e4df6c2921821db8d346b68b68d5bab10768c0f0ad854559c9d74ac58aa55beb153175fe73d50ec69a95d74"}, {0x10, 0xa, 0xe}, {0x38, 0x6, 0x8, "fbef7ba1bdfab5eb12411b9049e58d0cff240e4fcee2fb37bc038f2813feae7ba7ae1e6de448c5"}, {0x18, 0x88, 0x200, "60ed3d9ae5bd7211"}, {0x1010, 0x117, 0x80000000, "765b9675ce46eb832fe5c26306f2eb681f30eaafc4e5b64f2e7553d0a8989b36e61ae1f6c507df2f38c5c2acb143e4e110d7d86576c074a74dece78bd0c79279d026e0b36236c7589d67cba14b0ef97c6cfc6ce73bfc481276430ae11cf136f0d5721f5589a9dd319a8d0e0f51ba8720ded0a6752a57c1d039abaa190e0516f1d2ffe2bfcdd4c8c2813007d36fa1a5aca5a14c9d798362e499ea2709843dd629a73701d33cc7ba82c2e968318e31cfa7a067547f22fb6c94616f68b02c6aa01ba6492dc00b92eb3775363e6e5bb9606579923d2ed5d7b9c032c71f2d11a05c7c41fd9358e4f54fa9cb5b3b4ea4eb2fe852e5960101e0db09f835518f4e84659cfba16913320e068b311505e7fb32351690c5f78ee1e9a41e76e2baf236743670a09056d1646edc810d383f98d21e64b0fb5aba356baab955bdb39229a9c11281d2ba3818cc58404921a1bf32674fb2100c0ef8d489e1de9153068d87f81fdc344c31dfb43a619687d80ffcbbf7267b0042a409669d4d59664b2ed07737f033427852d7cd196f928cb556ddc9ce300474e0fe45e21f334377be76c981e587ac9784b6014b8dd21599ddf5a1703906fad4d3d6d2f20cedce54f339d16ef16fe06fe91ffe9037cbc6573e9047c916c6cfbc69f33ff05324b4c7c5aaa1a625e8150c75ef1f4c39ae2b0f5dd03bcc85bbf61b2d9415f23f21453c1375b8afe24f6357ef866cfbe29f901c1aae9b4549c3f0741e6a599781a9262d872191a7a5f6e82028d2e187d7c676b01d9af009c119706d2da41f7fe5621c5829bb56ad7d1ae39d4ae736551c9cf9845f90bcf216e75bf73f44cb42ae728a63ea0703e2167b92296ca283c71b74650d77166a937ae487fb6536e1a499f0b1c4fd2cdfa453925d611a239acf6d7c7d912b0eda82bb1bd2441951b74d8e8d16e0799ce2ae9160aad49bc1b1a818e68ce0df8a17158fde031893f09e3c47d5e48cdde7d7be6170f7cf47f32c5c9be91e68e201482328788fbf408f9529e7f89b0003e8aa56ce2db8a2bb4cb30cc41be735f7cc7d1147ca95baaec28d99d09b92c5f984dac0095ce59d522f6851b9f9a408267ba646e1b1f704bf44068ff74e33f18b835ec8b0eadf96be4c2b64296de19b64c58fed60065b61b36601b75e9086a9783dc701aa1d95b16bc0fc0474350be7b36409fa98ac033583e0e93735f7a6f2bab11f0a777c835699a958fd51b5febb78efefff144c9123ef633064b0bf93dbef3109a107b155288cbb0845127672befc3cc4b1c3b74258bcd459057926d23a45bd378443cd9da5fe516a84a5ced7388139ce49fd4371b6e393963b89f678e0e76c1210356c134f4972a4d89ede5cbd9bd9a3cee4dd7039745059c9aaf5506a96b37980135cbb0811175cae997a845157e0b17886d2a198a1012ed2400893a5abc14e6398f4611971b00d1a6be6356fbb9bf514c60330b8742422743f874e9741f7e997b6c121e024bed43d5abea57182d34d758e80a6488afd3c7e89dd34a645056bb5d67612d051d3b23b658a9fe479b4094dbca038c34680b33b25ba711e5d6c14ec4afb04f2bcf0dccbd7c514c1a055f769ce67f0a2c1f241d9a777e285dd099794f5fc6cbaf5d1eb072b2670b175e03bcaba781f82cdac3aeda72fcf9b7953e941cca7558d40f32a75a273ab32cb02b04d6c9fc5dde9c99418f72f31c140851be5c5906dde58665ab1afee04eff751ff8cf4bc6879862a173ec950a259e97b7ef660423e8b5d0f20c74627877b787135349be6a0d459c964eb3bb05afeed398e43d930a73d5a53a947b9cce8722fc2d7dd429c0cf50910ed54f05072135792595784bed377aca080bd5e5df031998a1a121046816170b9e7bc36f6bea9592d291ca2462362943d0a019970122b73c317b37f6b31c193de6c82d7f84f9969547412a9a13d8bf2aed26c35c9c3979a04b3f59e4100c336c37fd4190ab79f44ff1da853adfeafeeec576a478913464b6cf6f89b515e2020f6884998b1cfe9ee3de1e5e850298a43c9b0af22b3178300834d81eecfddd96d2a2a5f6d486565e4ea0d27caeff65f8742c7e5cef6ebaab12f84303156b35c4288cb0b7043caf42100f3073e49e5f4348e6f2ab43c0e9f95ae2d41aea39afb60b6159aed1862cd38aff57902398b9e26c34e0ab912e9dc37bc838c874ae68ad1f08e333d32add0df41d20c4a55ec5668aee98c324d0e0eecfa613e34f5f847c805692ab3aec786e5130a2e6ecb4e9378cd678136bb4815890ba6b0ef44dec463c3104a092c15beedc126b0a7e184a372a0f9d8680c680a345e683b16da5ab2af142311f48361048e849c69b7bf2124810b00da92bf7c3a739274ac28faf688ac2a6ae1487b30584cb622cd6eae22aff4d332eed43896499df88b9e8521136f0bf604d56a94d274ef156f987df2c29ac94af50225810906bbdb54db8ebb92b751c81c6f5db17bc8b448c4792c9e11a82d2d90f632e1f440d45ccbad7f5dccb2a06f7b175983d888f27ff0fae80430dbee8a2cb70d984b2dcfe9fd6118c7177567badc463aebd4296152a1491cf4283ff12ca13e224222a422dfcec7c9b2ce72817fecb3dcd5a7f78a6af1c28073805556e9ccb0523b2a40f81b47a6150ea0a85cddb8a33191b9354f184e7fe1978139170d0aca17f19f4580c49f684cb4d68eb45ff5ea29db1fbf9d8db6ecfaea52065230d2826fe5b5fb8fa996acaf382091de69c737d15168d6679dae16f24b5c8bc5b62b04515ba7a31c646aa138a06fb58e615509e623d1ff9d120b3540c3ac051edd63399f2d2c6c78a20a0dd97db5f85d491e0f0ddd214e05d983a8898c6a80a3a93263f870f8c635ab405fca8abf319fb67728a801cae37eb642b3fda9e70f7c501e9eca7007d80b4000dfcac6dd9e0519ea9aff72fe2f18dc10c7510e269eb82fa0aa3c25958658e582d3a0cf516ac7bd371281ec3643a415e60c10aea60300f1a9a1efea753da6b7ac9f651b6ee00b6b83bac9b40863f0ed9449e0a0acc66babe771b61a6df0f2d3a5d6c9c8215229a64048fcc4c27e8753d0e9be380a3e3c9deb283737e90cb9fecceae2f2321b0cbc5b8630376c9a0e9ad80478fecb985e46eafdf21967f2e20d4e9e5bd110c04ed60135306719946442141283bc43e1558739be154e2d065e064e220f9a765c1a41ef58bd0131bbf0140cc2cdfba237035e23b1cf891795e17985aca2801516ab0e8a7bdf28c9447d5778af0dec3ab305d1a44b613f4b67db0954c8d51119f205812688339ce4f6ee7bd87dd18c60a7e8fb1b0f1c0978ba0b6cb89f82e3c57866d49efd5cb8ee49ce1d5faf71b1787f9857b369f3762c0ba070c3666add6147727b080224c77368bc97b195a495f65c6b3723905314e2d84cee4fad11f716148148f1225d8b44ce42941cc1caf207137ecbe4628a1e69e45d561a9a9b8caa8bbe2950c7fede2f7377aac04d5e62478904d96caec15b7864b55641ed1219a6287517e91b8fab4fb70b318c2f35dc0a27cd58a01927d0ad9a5904aa61c6594bf7414b72629a350dca9414f3480c62a1c88dedc35f3d72fcc16486c1bbfaed8d80a0cb95f50238607f328f9078f7fe0bdacdd713dcd686cbe5a9e7f9b04f7da2c8145bda8a6e333ee97ae63e948c811737d068bac6b55f095c99f889b2fb8785bdf0070a28ed3e587e938f15422ced6469229938966d547e23f50e7d2a3a31e318350f805c6bbe59abc1e223c10f51ecde97901ad3722ca07fa8bc767c5b8133fc7655d223035243fab55db5a1bb3895ce4422f32d48f2119cb4c567bc911c5cced0b6dd654fc0620ef944632b494290ab7c67ca40b2731bd52b234a2568cc4353f587943663cabe6852499f228ebfdf12d45d88a036fd9c418ab10756f8572f33cd0da09cdee94e34ed2aed6899d09887952c73a99a8342c7c960ffd53b3e7dad85e973f497a90c0a5b3d8b39b9c685ecc78ac9880e692a428d812eeb4907be5ab1cf0c4444ef1b3027bdfa7c6d925ff8504e1af0d99c399cefc8084e2e02de3179bfc078c7e71af971a5ba56ad9ebf891b14b8d9b205d339f8193bb7c241030f78ad1417bf3799fc7b6dbd8a1774e4e8eada5ae19bb62535b415abf8d22844f15fbe194e6f57228ffb813a4808bb291cf79165ee2c7c0c4e676efc388581b1fba3e21f4fe5363cdfba1374d96e0a9bf426841fd1db7ccc027ebcaacd08aa890227856aef0825dbd86cddb9eebb5f29af8b1818e74a45a30a56a2f7b119a4d4615ac57fe52b7accded5a773d148ff6aaeffb2702bbb47cdac8b08c489f5445c56b1e6f47288c9f7b97289ad5d3782c88187f297354f0f0ec2619d2a9e525feffb03b0a658335d2036731ab063c8532f8bb251e83314f1897434d21fc0d6b88aa043c2b1b426e667cdb1e21115b0d0cb6b1f3c1ffdeac3a87f803261b5443b1f5f54b10abb11128406c9889132b6ce1cd1e68c8aea9e8b1c42e4741d0d08b93cf843c465c914daa0a01cf3aa377ae960145a1984cfad78b4bb87843436d08e791a2302ba532c84fa9fdd7db02925e9ebd394db798da3645a31ee373dae0a5122d104a6e18a8f35278de5a27db91ff58821934158dc1ba9a58495e3591470ee5c9f045d3b1b398e4059670c43b2e9af7318834ef3c7d83c1780a33d6404eea5ce3b64dc17c0ec1d55c6f0ee340dcb86efd9be7b26a7e5a49f23ddbdaf162a7bd6bd091b28fb000e77600b00bfb85d3271c3588c51dd55d09fabe87a70a8baf787fd9953eec71c6226779e223bb8916e401fccb76c4b3869ae302db0b74c542d7e50549231b6a7f7ce04bc0c6c1b7cc927e6e91d3918253c541287f774da3a7428cda0f2d0cedab9bb4400def18a9f67b18d465db53e664d778f682542d939581bd9d41a924bb6c872256142dbe2d48f17952edcdb6c58ffbef2b81934736b29f86481a9f339c53c61d59eacc25523ee3a0cab5f877c41b56bdca3909a50e263e6e8dfad8fc8343d38a006cf2b62d0990a53316a4b689745dca8c76445c8349baa16fba39ed9fe151cd2941816d20f899af4c084aef33cb81fd3839bbb3db85588165e286a2fcdc17c0c0096ac6a76532a61d621037240a318cd0202b2d85d3294cc89d8727c5721ae74535b4cb9a825a686af0a7ea90ee90fb17f63ab31fdedc5f105c129f5152f2221badb0eefce1caf0543ecc881c5b5b92fa1e7aabf7b6bc52b9790766d764673c82c385a3c2e6a00db1f8926e4bf632ef0171f9ec7422907f44ff712dc25cd1b2872793af2a904c33a16f4187d0f5f47f358c2f81f1df3ee6c463897ed7edc06877a4a4cea4287fbdff10b9391c4e17f454abcb9cb0e60e77ed110299b56e25687d04dc7153a42784002637c3d41e8f9c0243a06fbf14ab32e55ebbd77ed92e5ba25788d6bb1206f3ff27531423e58470b09d2c62124315b9f9aa10f3e29644504750155db3241761c58b70585d8724512ef5aaa1c59d2f32fbe113d3d0081fd80da45b59c88d04a181b7ca04ab96fa252b1b7603a5f76600b63c7ca6ac764b0ff9fb47077b7edc6836c2c680e99b453ffde69f1386ba4dab8216be7c88f3c16c530619f08f2ed2e1eb7e86dcc3d15f15b439de01534b6679a2f0e504247e5dbcd1352d82f368249d4abbc434a45d3fe49d92ac58f20275518cd47aabf74de6304ffc5dd74e945d9d88a7f51bd2ad3ee8d7eef24865f6a559bd2c1da6e4a80257f243b475932bfed2ddc874f8fe9cd72bead1226016d551c4d5b94ae3205b30d5b02001cda8a09dfe2"}, {0x70, 0x109, 0x0, "ecf994aa85f0e8e5aef67f9f2ee6b7cc27ea0f5f3e07fe221d51f49440e9951051373f182955c9e87f39c311124be11bbd7bb66425259a097ad583dd2ac4e51f0eea3732e746bbb9559f60d641366ac88a6fc4fa6b208f12ba07"}, {0x38, 0x102, 0x80000000, "acd65b35cf16c054958ad3688b9606b0d925de286ca80a19c8e33afd3a87b9b7f62965c5ed"}, {0x50, 0x0, 0x7, "16a5aeb75f2c57975b30bf84d51dfb744e96d5b1587a67f4b824e71a94abcf2d990496c86f752e0e05ebaa8558dfae70706801edc8039d9b1bc5d92b"}, {0x50, 0x118, 0xe72, "9ec30389833ab43c25ee63745d05f6e438e705cf06319032417311be914da7661dfa2039ce7975251ba21fd6f27d32ffe81f442e80908a76fc7c7672d8"}], 0x12c0}, 0x40) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000004b00)=@get={0x1, &(0x7f0000004a80)=""/122, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000004b40)={0x0, 0x8b2f}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004b80)={0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000004bc0)={{0x2, 0x4e21, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e22, @broadcast}, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000004c40)={0x0, 0x9}, &(0x7f0000004c80)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000004d80)={r9, 0x88, &(0x7f0000004cc0)=[@in6={0xa, 0x4e20, 0x6, @mcast2, 0x37c2957}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x6c57, @dev={0xfe, 0x80, '\x00', 0x16}, 0x276}]}, &(0x7f0000004dc0)=0x10) r10 = accept4$vsock_stream(r2, &(0x7f0000004e00)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x81000) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000004e40)=0xa02, 0x4) r11 = accept4$phonet_pipe(r2, &(0x7f0000004e80), &(0x7f0000004ec0)=0x10, 0x0) sendmmsg$inet(r11, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000004f00)="99773b66fc10f29200c9047bc7092bb7d534b361cd21fd5df57fab1b3f366274e314ccffb7a5bc22a188ecffffc6c351be9cbb16683ab06e0f2f2839456f9f233bd6664516087642134c1035801ba535aac0b2103c1373b7299223f525f44ef4425ca8b4abfb3d50b1544eb7ef18ba01923563e745fcd08a1a609703df4c5154de70bc3a633b1dccb7734e04aa744aa7fadb13ad398a41b0282d63c571c84728d1260a791b9636cf57db911b2cca6840cc40", 0xb2}, {&(0x7f0000004fc0)}, {&(0x7f0000005000)="ef58edaff40693d836dcbc79189f300aaf6666f0ebef3ebfe654238f94bd88dde512a22d96bd516c6b1c0ddd17f1e6f3e21981c723dcb6b84fa3534f55246c818e2d735e689086488a1e2e7bd6c2cfdbee3627af4b717d14037de3a451ab45e2c8243247d824e5dd1409dcc98a7dd03d0422b92be204f879d8c2be36289b033ba26357729ed5fa5ac5ddd14b", 0x8c}, {&(0x7f00000050c0)="c739c630c21fe64d0f3cba9a439c4d1717794f0ff4b56195a319f5cd7f780f358ad6afcca97e74f93b539a0934a9ea62c903299a5c84", 0x36}, {&(0x7f0000005100)="cfbd1358e023b576787969effe54cfc88fccef6a81e7cb94bff1801a130b6db3e0a3236ffc08993f284e24bf0fd042345b57c200cbc2c2313e615b396d2d70d5a015ea427ff5dafd3293f1c3db503e69c3f8cebaf722541ad4795b9e15a586a6768e97c9985de0e53b78f339334b7db9e597903cf5eb2989b684d02614c1891f2646b63f57c1ce96eeae9704f5c34ff02d", 0x91}, {&(0x7f00000051c0)="096fdafff7e84407d6e39a5c0448f68ff6d26acb0a3e61c5e0ff6941c8344f962a95493bf962b41ad042d23565be809265379f71a45a580d3df96384909ad34712ffaabd4dc8789b7e9598e687782097538edf18", 0x54}], 0x6, &(0x7f00000052c0)}}, {{&(0x7f0000005300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005340)="81cb0cdfe0e9dd4f20", 0x9}, {&(0x7f0000005380)="650c0452f0289a234769302d8ad37b929192c5a6a0b3ae5e9d780a9ef5120672f82adee0d0260135b840177392b45f826fbfc3d24b4449b45ec48590040c6dfc091374858c194a52282e030a03fc2f3f4f80f45dc996d00f2da51cda7f3232f614ef0b8d237d0612604d81818a3cd054d90e09129e3d65027a734edff011abd32bba816547a0fdf17d01556087bbfb2b474ebdeedb5d8c0a899c86cce97f6af4397989655ed930f715a280b128d78a4d7eb04fddac6cf783326cd45dd511668811882c557b29d7f686fb21d8b80ed5b6d1b92e9e18b8c19dc4", 0xd9}, {&(0x7f0000005480)="bf16a90ae1db99f37577c30dfba99b636a1c72439870a73d14c5a4fbe4be2d75b496e11871b2724dc3acad10d859c19f0d56c25cdda0af67a962c76f1da22e0efed52920c858cb8bd763d394abadb4c53938af538a10a32ef0c4dc63cb5c5a0d41122c6fb7fa96729ef4c2beae99181f9939b5575fd3169e20e99d62c4b9fdc01e5bdd53f4c6f86ec6b99425dff534e9c9e9b419c1a8aefc0e3d911180132d24a4f938", 0xa3}, {&(0x7f0000005540)="3657375e4d3544aecfa5a2f1dd6e965df9e3c0800d2b6152a1", 0x19}, {&(0x7f0000005580)="3bf106458050e09f39dd48f35f7e9ba4778c48534e02c1fcefd67ebb190f48f16fe82d64ebc8d1e59f4200ec526cee120751b29a3eb126a13e997fa622688ff865978567a7dc361cae84edb56ff4f4131f19e4e1d281387c4ea6a758aee35afa1245ad647be69fd9a6a364258761c44ac07762adacd401dd7cefe30dbf801f9fbbfafb4f4509c0b7a0c1d3a233c9e146e828ca86a6940372e1682d92342ce5d18c3d32a3f121f9c7c3bd7c36342764dbb4a1dce204183dabd4a3a78be839b95a131b64632506c6ba0de5", 0xca}, {&(0x7f0000005680)="889499ed6fe5b96d98227517329dea932afcd05cac43a0897f2310734a529887c0d8047ca899b0eb829c8113abfac93fd3b210eee7810ae286fc0ad33559655da4677a098b71fba24ae7b0af668265cddfb1cd9a8c7b53e17180c80f4f23ff3ca44c194649f736768a0636e71ab64ecc437d9ae6330c34ff86512393bb9ad406a9248a24ade54256823ac2263720748159745f0858926d47305a687463492809d6bbe44791f5fd422752965cd91039835d732ad3d1008f0227fed9d403ea04e6788ef5568cb32aed5dc281556403c145f2df8b50ca03637a1b0bc780dd12c9f69f49571425ae", 0xe6}, {&(0x7f0000005780)="e79dc2a77c", 0x5}, {&(0x7f00000057c0)="be45f425544f30c7c5eabcadfc692bf68f7bb6f1bc14cbcf688e292b88fa03e55ebebab6c7b14544fcf50ac3e052afcd63ab23e7bde7ce7a44ff733ea6ada5c8d2047334a22f228a765e3fc14413e9d90c67684dba97a803709a6c97ef57257b0045cefe51696a69037cd68e5cb74f97c965e75b352a50f0af11da8f635124e19d84f333632e8eade8536b2cc985f46e355a087c900517bf075f4ef50e3b3f5173607b2bf266933621739f6f2b80f21cfdebec50ace070092d4a3ff21e623852c82bcd75f5e0c5130df2d95cc562a672707b7b856b3e4028c93d7253a90c6d7570f48ddbf45a0623", 0xe8}], 0x8, &(0x7f0000005940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @private=0xa010102}}}], 0x58}}, {{&(0x7f00000059c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000005b00)=[{&(0x7f0000005a00)="c3e42c46e6853d6e4549b7de5d3756157e949eefe9568aae09c74107bcf075dbd409a486a65016a74860354b02e74d2d4ca2332083cdb0df9d6fbd7d80378cd6e0ba15eeb4b4b8bf028cde1baf7478f0e14b6725122bfbbea97400225b2c27ea11fce5192d8ce44eb02a2efcfe65f60859a67e23418986738b13c9da94a85a6be0a6cc7debec2695b07be7d0da22d5f85fa3ea977768a48d52f1d13c9962f15a07846c0e75c4ac6c6acb4af50c90ab91a6230c56ae88b96ac5924c", 0xbb}, {&(0x7f0000005ac0)="28b0b6910095a2721e4bdd40e6", 0xd}], 0x2, &(0x7f0000005b40)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1b, 0x8f, [@empty, @local, @empty, @remote, @loopback, @remote]}, @timestamp_addr={0x44, 0x2c, 0x86, 0x1, 0x5, [{@private=0xa010101, 0x2}, {@broadcast, 0x57}, {@remote, 0x4595}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x3ff}, {@rand_addr=0x64010100}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4132}}, @ip_retopts={{0x40, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x2, [{@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x8, 0xa3, 0x0, 0x6, [0x3]}, @end, @rr={0x7, 0x17, 0xdb, [@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @broadcast, @private=0xa010100]}]}}}], 0xe8}}, {{&(0x7f0000005c40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000006200)=[{&(0x7f0000005c80)="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", 0xfb}, {&(0x7f0000005d80)="670f738b", 0x4}, {&(0x7f0000005dc0)="c581148691b421dbbf9e33792d6efe59e03afdcea04f34fc581dddcea732d827bb6ff64d1bfdef6b3c697e235ed9f3e7c41221be36eb2627a36549501e1b18de6f457ffec09e5ab219e4f3a68643ac72290ecda7dd68e72a892d6acf8ea8e5cd064da2618dee04926904ce7124bdf035", 0x70}, {&(0x7f0000005e40)="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", 0xfe}, {&(0x7f0000005f40)="553a81f9106b077a3d21700672c5185db0e0ba3f69316fe075e796e2bf36a9e4fce72c16508dabe4a15ed55da1b29593fba51a999a5fd8bd89cee480da5db56f23fd6168acfe9ae02e434e3cc126a9d589f38fba4a720bf36612ad948f701f418a1dc6fe501644065a83ba476c941fd36dc9415b", 0x74}, {&(0x7f0000005fc0)="2b30036717d8283af617520b0d0497a8d654887fce1ea9303285e83a03eec48d9eac1fa6a4889a5332e2969c0d27fa61d592", 0x32}, {&(0x7f0000006000)="484dc6339ae91295a6c0d5eafd97fb9601fda4112255086079bc337ee5e2db3dbc41354662f1692e4b20200e575b3e6298f313bb25717dac950f3e7a0c1ad25a79d45be51a90987e285d8fbf981664256758d89bb757171795060ccc5b07ec3c7a537c737244a6be638e8f65533109351893844e49d7075ea5b2818efb8dc506283e356982569a46fa443431284ed1ff6b6e5a72fce3cfa3c6042f66656f9bebce7dbf435e278fcb6c7b6fbe9d1f796f4bc094b19c8d426d0a75c61d74a9d108bf5e99c8dfd04387b89a659d934f2342ea83cf2f1454e1a27f08f12c680726", 0xdf}, {&(0x7f0000006100)="ec34406c01d41c8ac7110b06b846e4f1da414eba534e09f192739739eb44c9b498b5fcb9e9c0f2ae88f5bec87434914df2c3f01369b275bdd2518b9f216e2ee462395b61ef7d5dd1afcbce0663354a65507fbe74f49a3c43a0c4775653e1a4bee52b5d6f1e63be4710aa05b29f66fa18d2f3b7b02e2344c577b0f639a3794419254cb96c89186e34ccb9035407d13de0d5d75e83fe4be9408114c606f2a4de2c0f9155f105082a946990f0908585db7ca4a42541dfc45b8b6e4c3c6c7b2c0966d77d", 0xc2}], 0x8, &(0x7f0000006280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x56}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xbe, 0x3, 0x9, [{@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010101, 0x33b7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x4}, {@empty, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x5f, [@empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010102, @remote, @empty, @loopback]}, @cipso={0x86, 0xb, 0x3, [{0x0, 0x2}, {0x1, 0x3, "d5"}]}, @generic={0x89, 0x11, "e25fc9e14ce41dfbdc7bf7f0c7c1fa"}, @generic={0x88, 0x6, "91e8b3c1"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xf, [@loopback]}, @lsrr={0x83, 0x27, 0xad, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast1, @multicast1, @private=0xa010101, @rand_addr=0x64010101, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x3, [{@private=0xa010101, 0x5}, {@loopback, 0xfffffffe}, {@rand_addr=0x64010100, 0x40}]}, @lsrr={0x83, 0x27, 0x74, [@dev={0xac, 0x14, 0x14, 0x1a}, @remote, @rand_addr=0x64010102, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x6b, [@multicast2, @multicast1]}]}}}], 0x150}}, {{&(0x7f0000006400)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000067c0)=[{&(0x7f0000006440)="12873358a2574d8dd94eb1d5f4164a70d53cd448329dbbfa6498e035b46ed4ee431cd4510a7bee6dbc839d1ce58d3c8b7edd16b30a0b94b973b9bbe690ba4781d3f13d7986d062c59014aced81abba6ff4e615dc6a3d7f2336a6853d80477cbb92b66a3a156a5ffd89d92387a9923f2ad5846d81b8ff15dc2963f2e5abbc62", 0x7f}, {&(0x7f00000064c0)="cfc62fc3e60d487d1d45a321", 0xc}, {&(0x7f0000006500)="281313284a29e5172c2b196f64e004cd989b41400619d7fca92fbcfb5fbc4126cca7bcdd6eeb61d4226ef8e6586f89c5b0daa050d08c236a8e4a075922a3e006c7b1f8e14f50ec317319f707cb0eae6c4696d114d0fa717f0acc7fce099db2a1ad91eb136290527b6f2b2c715961a4b51ff054173bbafef15747d2babe23e9f968c338642ee78cf61ce461e1dbaa5fd35443d0b1df61af7a7b63b563a2e9d7450a96d09d927c46d9ee94cfbeba3c0f42e9d36b0d4c850246391ef1c405580896b8eac2bd544b17ae86387fb039e591a6a9c98f557a1e48d55706126fef81a7637bbac0", 0xe3}, {&(0x7f0000006600)="f6676453afef1786542f7d88c1cf8d82f456c13a59df239fc2b76e58b3e42b9f61053945df3f2067957b01cbdc5eba32dda7639908e3b539c41d7c0ee4320fab90c028f1d17ec86291e3d97d439c6e32fed4fb5937c098a2da9314894aa6b95a251552c34d", 0x65}, {&(0x7f0000006680)="ba49143d5cbbcb4da92394324fb5c7d32f99b84df971a6b27f548299a223a1fa9d9f5a36f8043856dce915d3855010de906a8f69ce3d5b793ab7a4bf646d7030820a02b88d0375e3b601c8e2d0ab33bb82a969fb999e19f894fe6c8f11593557690904368067d5e8fa5d887fcc902cfb6553b7f1ea3ad6dbbf04869c0f6910846b8fc9118c1a0be225655f5c2c95faa9bacd7bf1fb2c107482e1b68cbb8144ddc5c337ccc43c1b39217a0480383d2ba30531463193cd6346f5ae12a8cb14", 0xbe}, {&(0x7f0000006740)="b3f4e8de8346f03076b127c68af98f5b7b91dd361addde68832ca01a4f5f70cc7b88b7234e920d356ae4af9b64bdf23716515a3643b14b5c62c7e105f423862fe663dab90e8dc7a3a23397666e1154a2e35c2866a7e5b165d64eaea2b396cba1c834f98e008b7eae28833e9501e0e220694617", 0x73}], 0x6, &(0x7f0000006840)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x7d, 0x0, 0x6, [0x0]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x93, 0x3, 0x2, [{@empty, 0xef0}, {@empty, 0x7}, {@remote, 0x1}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x6}]}, @timestamp={0x44, 0x24, 0x6e, 0x0, 0x9, [0x7, 0x802b82c, 0x9, 0xa, 0x6, 0x9, 0x9, 0x7fff]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xa8}}, {{&(0x7f0000006900)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000006980)=[{&(0x7f0000006940)="1009d106d3473549e4efb388749abd939fb2eb1222b49e1329c3c5a6a11d9c21c02993e53d9e3f16bee4aeefccdde712d686d5a6d0a3ae388620d9c258c870", 0x3f}], 0x1, &(0x7f00000069c0)=[@ip_ttl={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x30}}], 0x6, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000006b80)={0x9}, 0x8) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000006c80)={&(0x7f0000006bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006c40)={&(0x7f0000006c00)={0x10, 0x1401, 0x85, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 773.453614ms ago: executing program 3 (id=4125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 142.618032ms ago: executing program 2 (id=4126): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002200)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000b9ab9b28b0b659c2c8ec3f6ff61c00000000000235eb4258e129b99d3e6f27839078ac1e0001ffffffff1600907800000000c13cb851cebd2eda9d62cb9a78ac8db4e5230d6250531ba2b641889a5fdfb6"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000021c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60000520}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x60, 'syz0\x00', "52e140292bc4ac011cf5760b0ac479d265bbbb60494da73e69c8fa63169f6e83", "1b3bc6e5422991791f49e4dd04d6e6cdd7a25ddbfb6786a7fb5e5a79c1005143"}}}]}, 0x268}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000002100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_DELSETELEM={0x1bd4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3a2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b40, 0x3, 0x0, 0x1, [{0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xd9, 0x6, 0x1, 0x0, "0c167b289522bd4d3fc225eb91434681c99ab3e1d69d6d8dce304bfec95ebf556bcc3fd420c57d52c2531e36ec55ee8190fce86c72cbaee08c3e9e8bb6b01721a9cdbdcc41a0d1bf7b04405a125d579365d36bff409d29986fdfbdf889f9be3f64922b45b81533be3b037482d9bb8f39de8f59af16ba06633e9ef25faaae9cefd8c6bdec471ed55f1ada9ca4afd3954f2ec83b9150338924b8081cd0f66b6816d46eec2a1154ffb79f25fc3505bf36f67c44ce857e26305f432def85528108e54195ba67656db43fc50daba70e6925fd439ffe52c5"}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "4577b07a0f4c200fcbd48c3534da5df12486289c6eb0fc1f9ee2b2afa35d9378c472d5feff86d4a595420cc90b4039a406f266b4767df41be412f7e43f7ddae66f4b8edab3ce897a8551638fc540ed30e3310e967d1e96e38a35792a923f23153cd1b9dd5fb6e8c3c92c76d71f98a564f781127a035bad86feb1cf0bf9af7ab35da92aa88c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "89bb74bf4f84f29b15b4c17faeffc9ab95eab166e0f9c4b229a2ea1ffb7c73a9e5a7710b8e36dd7a56a1277c0ba7467c3ed1083a7217fc6a2b191de83e904818d37401c570ed228b15831c96d60282af35802fd5bfd9a5a9f878bdb010257c73c1eeb00d3f8ed92d0b75cde3d1fe2380f0722b2d7dd47ba6546839742717bb5093c26baddd8c4f3968a6239663bb83ee7870e85243aba0cedcbae356121567c9eca81399be869cdcc3f30da370e399333b186d1e131a4440eea23ceab42c959a77d4f717418932ea6a826b54d38e28f62cf1d0434bf09131e441bef9df72c55b"}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x40}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xdf, 0x6, 0x1, 0x0, "5c61ff5b068d24b3e9fb74e726f4ba7739b51893cc0d524a2f5ab74fd1c3bda2d46766afc0b32c1b6e1c6a39240a9572230f885dba8805a5ea47d5e33a2f2f0e0bcbb00a87b92693e5e84770a1af8476beea730c33dc8fd28e3c1bbe5dfbd68bd5eb5af6f3a32f27ca2121ce5b0d15920cd3634c6808c6525da5c90d158ac438ada885bb43bb9fbcb57a6779e0850b9ffe10a4429017e48063551b3e9d5c696c2149749c2bafdb1c7662abf5ca66946b080942e1e2ca68dfc078dbe25b1725dd73f14305b0afb060a9f2ed93b2be2a0b65640edfa23b8e790f0edd"}]}, {0x634, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x304, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "a00c102eaf7dfc0de74c175790027013266eb33f2cfb1a1210818201e5a29a09b476ff21c6ec0798e992ef8d42bc5a8834234c6a120a0ddb8ec77c03bfdddaca48c67344fd1847a6eb193d767d15d399198edbfd0cc8ef21c31fee83123cf88105f63e8c486acb8de4f0cd0fcbeafb5b2fd8a23bc42d11d50e23893da7fbc13862588ef88014772736da91fff3432ee915fea6bca97a6ba2652e08160d7dd4b887381656c530d836eb5444103d11ed39ec82e80e3e8a46833a6d9b903975"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x28, 0x1, "7429903a9274bfb7bb7c68a7afc25e5a6dc84b285043a26d0eb0e0a7f9b1b6c5fd835e59"}, @NFTA_DATA_VALUE={0xa6, 0x1, "4b2cf39644102c94c195c14fa4acc465fb5d6ded001c8f9dd5e2bedf36ea3a191123442eb5c8742a76291f549cfbf5c5455a36bd8d14afa3e56ac7e4169f792dab97e75974e329e53d77de9dc35b5a96e6a4ef0156d9d6391fc9d96b2bd92c742ad4e5711df7c38b404e11b93f99d59eabae72ef2b3fe563449e8524313fd3330a5004058e159fb0726bf304fe35598345e6ad509582ff462de632a60868ff7860eb"}, @NFTA_DATA_VALUE={0xbc, 0x1, "da5fa29c787e8a034adcccc85ada1e29bee216828efaae95b83171ed344e0f6561b5930157a4a15c5f2b9f21533be0491b20d87af5dd7476ad06c81a10ec208110dd52ea04c227cea2d65aefef597480d8ccab51294507186456a71b78a3cd966cf1497e85d599add76f785da84e1d08228811c50f82878fadc1d1b1eb19633588ee20345c4bbdd433a0fe423a7db896ed9518a267d9f477ca3c98c205f8e03d87d538d7af019ad55d8439231ea2f5fff360001c45be1c93"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY={0x300, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "8d391244195c23ebdf07833d734ea16530aa7b536c556017d2bfae2db384bed3"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf4, 0x1, "2d670e9d19dc2c96fe93f200a6c7613c5453654470234fa98a9753f72ef3bda41b5518175787e4b158497f00925b0459d8db977884c0cf74fdf427821a7851dc4025d0a90a38b45bcde196f0e12b52e7f8807ea050c4d709a4c62a11382a50c2cc952ff362426c3d1afc0480c790804798223fd66043f4701b62e0ec18c7267ce3635c9da84603bf3ed9bb0f7689d51fc4ed4f88037b3f9779175015d5a3e601501b7e334a36b695b5b0a4c9092317f0662d3304100726e02ed990c399891939ce56306a8fc2d9900fc3f423bc83b3e85ca053de64fffd86167df834dc70d8a408e7adf66efe999ac97dcadf980a3545"}, @NFTA_DATA_VALUE={0xa9, 0x1, "7529f13deb875a27af92b87fee3c2e4208a91fac2221cd4d5b07631d934d837d20ca1c22c531d3dad2b24159e27be42096bb9c8f968950b238a4526ceb9b169eb4cbe4fe51e7ff0bbbf053288ddac83c9b2e17996ca60c1ec22da90980aac734f696714f70919f77e38459e5b5ccb0b5258c9da51dceb3948a7c61eee86ad4ab5d8d1594f2e1f53d3d870fb2322bf7e253d1c20566a213e66afcd6d252b611281ecf6a9002"}, @NFTA_DATA_VALUE={0xca, 0x1, "e066f25599e830e0f79c25af827b5579adc4cc5152583ea77abf275099d1d9c118194c68469015016335dc816ebdb9381191ad2326b06fa9b22bcd18344def801fa64cbea187d3beed2dfacfb1cd5dde2b054feb6df2fa9ae5c288fb2b0374783db36ba629156e84ca9c5b8e70b0d70d5b9b869f953277004873e08f5a733ecc2cd1ee669fcbb9adb185085ee0fa5feb539dfcd7070b75c220cd0ad7f217694ecdc057f076b5868b922c046cbedec9c0979344a2234b8e109f911b56650ef095b7a79987f4cb"}, @NFTA_DATA_VALUE={0x5c, 0x1, "00b437d8be2925f0ff5eb024f09c4cc17139a5d27a0540f1b95db5d69594853cfa961562a72bb6ecc65650c6e988811a64c3aa22a67b5ceec583ebb00181e42c6975e7ad4580b6b62ca38cf60a09d550004547eaa8a1260e"}]}]}, {0x1068, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x1034, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "03029db5b21d785c5f5085a203a8aa3fafccac131c6aa2ab41c473cc0a4447158d35e5a8aa7e2e3dc62b497925423bf46b30634243d0df200a36ee6326e136a6e6617937850246994a0bfb70a2d5f38cff65150c386c9b4f22ebfd65a0a6c47719872b1b509749aed3c286aacc6b3b32c05e69b16c710d28052b16a7bfe717ef9523f12ab3f591ba3a0e4686bafb3fbb79edfefa158c12bd151bdea68441b4287c9490f8eae93def81f4f387f46eea328f959fdd926db4a2514390e55cf53b2193205b10eececc6211306bdcb9403214d9bc69da7ca736d31375d26b4ca6062d8df1c4f558f01c2d2de55be32f78b2de8462340ea3c1736f4bbf6113f5507f4b65d92f451a1af243c2fd43b02d19f88734b285180b2ccb3c28b1a2dde1aa226a66ff657deddd83bbf8aa0a04e10ba77df20ea3a362e28fc0ebe951fae9cef566c28464b031c3ef856cc8d77636e4cf64a0b6134794632e4ce83579ed6b3dbbb515fb901981b0a94ebac81412d4257160d2a8f8dcf35ef2e4357357b922cdb3af134fb9ddf0399edf176bcae2616c989cf8f304eb8a9e482eb7111551fc7d1b0dc651e015636359d2140692932d0fd3e12ce9526fc2ab81d13424173e16040d7c4ee6faaecd27245b3cd8375cda86598b37ec210f47c68df6880130ca8dde31cf609a2da3804e213b13052f2f21233b9bb2caec5a0abb9848e419abb234f5623a5f9ec7f8b9c667eecb3a85e5ffa65200309243a52cc75f73f9792ae63d2423015c85b3cb60f5d56c63376f33501c551ef01ed046e7e8df71348808c0b059edf6cb96b58e437f773df9df0f37e93133b7071972b7c30e93972f34c6107621f3d2663e6cc5650cbf8d9c6ed87c95157d6a81c20fac83235bea132e951e561c3afe96b850a25a229bb80f7eed7cfc5dc11fdf7691fcaed059a81506cff1c497127ffe722a89eed137923ab282b827ef0a1b72db5e1881ffb37cbd116c333af186ed685805a3060b5a5593bacfe4a95137cddab8986720da502a875380f643f276eeaf2916d404d881c704ce88ebc5cd99aabc5f95422f920c3657f1abb370d64bb83043c2d74448ab1a3cd7a1a0211f28f2cfff7b59656d69b9325c1fe1da3ac7e6208ca23174f92a70a46555e3276f38fdbec65f2f7297c8e8e235a3bcda574ae310b413293704160c57906c37396338715900a5594fb6eec3fd5bf20487687d9991375f8cd2b552569472e5f4296fa92884ec5777f13049e83f3f4cb926b87fe469e73ffc8a07de53951d327729fe9a2c0d395bb384e9e286a16178d74bf1c484a34427c3c09d55c571ec7c06d593fcb23511b9bfec1c1d20c8b3a0edf5e2a41f1603f4dfc82b4e6e44d1244058ac5259956134f801f9f08fc9ea74f1b15c004a1d949589a0beba68955236e163dc8f6fe2b315a1724d0738d91a208468e1da5ffb9d75f8a68965203de985d8c344b878a283b38482c619df3e5416b7a52f9b76d8caad49808ac9a59269b8f96833c6ffd2419beaf802f0b272d42fe3c2583e9997eb6adf7e93d2dbed1164c5df16f3fdadfc0f1ee4d04dfa260343a02d9b9d980f20f95e20b6a5bafd8241f1abda68ad2bd5dd8c5431284bcfbe5922194d7006ad38b7b76cc69cac20af739cd57cd77002392e27e56a7813db9ddde2d016f466c3c3c89f32fc27db66b09861087ea9cb9d15fbead2543585fa38fdf327c96562f0a1d71eccacaaba8fa0303502724c26e125b078032415619cdaef7b5d93abe812e6038f1a9db2000db667704f737be0c1af904359fa67cf6f6543fa79755b8de10d3c0372aae042ea5bd3477372fc4c3b5ab5f6f759052232a91dc0c94a3121d1a726b990dd1bad9a0d38c009dcfd762f7131cd23d1b451f91360fcebdf227528e915a0c279caf581fbc0f5b05b03fbf82d2e9a728aca29cd98c5d59b2bce23406fd454678fea89d2c8a364c0558e6d978b795fcc8970d7171d641b2c73c08939ce0652857ea2cdb025a28092514a2ecc0d672a4f34af7fe1c36b4df41f5fe8251563662cfb76d0a447d5164508884e67681c175620c0243759b520ca86183a03fca2ce9f24aacaf7df2c2662d1f1ea4f4718c84e1595eaf9db5956ee8256b60e21223b7fe177ab7ece511979f8bfb8226e998778fd235361868db36113f71f24e87251e1afc0d8bceb6b188d7527909f9bcc292090caa9f58a48c829189213502f397e2245c84af457ea766d1ba4c78206a028b3806ce4970effea1c0a271a0ac4fad18cde3a4aa32ff4c3d87b4f04293d8a88eecab1a310a17f29d68bbbff986d25d523d7ab07135371891953a371a6f3f4571a806e29dde98048935bcc663745d4fae9962f0241d016cd4ff27292cbd5b8ff54763115a2e00864d9d1ebe21a37ece6be21109c9046884a63e71c0de53533473779f69dd3e7e802b2e3a0976e60c73dcefbdbbda6784a61fa3334430fe188f6ffc8707a8850024673d3d79e2207ff848febc2b5996c782fd3c6f358f03d4907a5f8f553485cb121306e5e827bea0dcc84a0d98a04fae796320bdf943420d245a51734ba11b9df92e1f3d8183276b998d6cb4a594925c04a3b763f743900a83ca237a76424e4d347091804b7ad8595bac565807a9bff7e4e5d98eae8c99b0854ccf3ada9afe6296e39330831116641fc33cf0c9cfee3e8f39bd3d8f6594e641d2e29fadeb131143bd44a757418cdad8434362e093716a9892590d2fbd86913f8cc9ee72815a2cc02ad71689b7be1767b781e6cb21062d5b9c0dccde30f48d15f71884ade35561b2475320b5d7db9899ad72103c966764ba85740503823e8bf93c63ed3f2da0b9477d4bbbc6d1116330e75a195219f2bd19598be01a4ab8a314eb93e6aa47904ba6c4f33ae186e53a376031cc8999b1d72f72ab8bcc5eb980163ed44c410e3ba1ab21d4a45e391d6ee726950e12b993de04263d2de28604a3f08ae6bb54435a37cafcd922c4d965b3b271e1ae3253376fe4d3fc9d12625470d0eb8e9b9e20029b2e06255b80ed13cecea038ccb6a951afeb7e461c4a7ccdd8f618dfd78022646ac120b2ee6282693cc8663f773ee369ba781577812f77ab9f66104a11bc6173600c6944caadcc0d23a9fd606e98a580a66a47dfc7692d8066a644529c27c548f8bac447cdc6651351df4361c905e31a7e0347819a3b2517110a41b464be1b2e6bfde0423a7887df7e3a92af54115c2f1d8e46a464d8843ca158885a6b73801a790ab6683a01cdb9871ef70cadbfbea014f1d546c40934da29adbf0f9ba9c80841f25dbcb502b26b2d6d05fc8026b892e1c15e5518e55c41acded3bdaca6a7c9c8453153b71002f5fcfcef370204eb1add35075c0eb1c8ae063e020146e2b81e5972ebb9e4b4d10321391ae9173bedce8c0e4eb41eaec2ea48191013746dc2374ade0abbd79f61e8576662dd857c228e791e7884aa21f28cecf6fbe0a5b98d209e2b0995b2fbf7c1074bbc6851bb7c595855d5f7e357477c927079284af997082799fd7862d87f819039d3352c5c05f3d83277f1c7235b4b5524c1e30fb418f45e2b47fed8ebc7ffff645db4a4f82f75b70e46ed71f7ff190f0af48111e57b78ef48555d3e1c969b9458da7f159c79ad76150883366af64acf7e278bba811510526c54f5fcabd4cd73d71fcf3c32013cb2d77652c037313e6459c0e33badd761da5f0d0a1bfa06bf829428fd1fb69954e311c1217df1d8b60ae890d5e1499536b1a228324d8596f2e5666fde9ad0a49f4ddc2e7786436e6129600d672a25778f79ade2f31247bc31d16ebe1e263e01a03b611b389e5da415d8e24d1e21c8d65a5975f79b498397b63f6ee89a1308f0ed156227a6a815506891e2ca580671ce17876e7b2178c06b063b32a935eee44b46f395d019b2ef965887b909aac54ec070b4f8f55654499c8803cb643911f31dc37c63a2d91e409757560fbe7f61066b8f822043119b3df522c30c6b6319c76611e337282cc65bacfd31e8bb7696dae572683a5cd6499b8e582a12eff0819d9b8313a9fdff3111b2f5d7b59b748d57506d2aa319b0cb4816bf78f709250487dcf4f010f371e2a026a8181aee94709fd1125f9979fb233bab6fc4f1e53e959ff9ba2896e8ec4b726fc09094660b7852e8e6919b88e37a48ae9bce2f6c8d9dd2b85940c7f2fbd86e996910a52c6ac4ce07c9e57cc4c258a1439102c8195f131ce3a39f50c1f64d02219de441602f8cdb174a6ff12c1c5b792871a1bccbd183e4405a15d62289c03bbaa32f5b562d93b12b96150e51a7b924c7fdceea868f26e7cd499f3d8d9f8856d6798f0fac19f2af23bbfe760955d516119e931278002aed5fc3d568182668d2ba87933c24b66cb0df8dabd0bf8af545ed4d27052dd7d2acdebda4d02c240994e6d38cfc05efa4aa91f9be6b98d6daf911b25a357a306cacdd176b61908ba8ca6125ca6d881b0a7000cc3d557e219e793bcaf0f289f430ea4d5737681cb06629867aedec7d9fbfaab04c268d8ce588204fd397b063a23d798fabbe07fe491abb7712e58f02983b754492b85dc21ee5df2e1bfd39a24c215e22fadbb69e32b431675e89939dfaa8b843a555b7931f8be40506f444100b00216a65168e68b25fc9da41e1af23e6070b73b9f7f8c934d18c7d8c11ed798c6b956167073036eff55d3a90d00c08b8580d4216bf86c8c713200d05d87799cf12f38c392e262ca17b258eb3716d6a7e81f8f4e722508980f6d3e8f5ca4c6213aab7f7c3238bfa727a9b9e64f620bfe316932d93a69a36807d962cfa9ee12517d2c27e0e6d5134b727725077c208a4db36c83c5f37be733bc99dfd242235d091e26091e3f36572448d3b667da3ac6920df165ca581844e665be471a09dcddd0f3d5b3dd3e6147ccdf74b1627992324e0f99dd6aa4ed7b8c991317af019fea40720186a34b3abcfa4bf0c773626dbde12dbf270828455a1c17e6f912c507ed2339a92627c3c4ea3de81fba495ab6a5f886de9180c00af71e2fb0e6598614e3cc1c8bf64c471faf491936ae58e314e483e5a636f56e3cbf28f9148fe4d58f96b1bc53bb0d177818d05d944bdf1574897269a3a3dfc2a4a32882aa39720604d3efe62d2531abd44da59ccb1871841206a05d4c64e1cc17523a39732895d5f8cbfe6cae3dcbcc13439cee7440fabfa4b0b27c6f67e7c8466b709cd3900f38a3a18dfb8868c11b75fd4ec1e7425806056ec3d42b1ee3dc4b2f0778a6a889d82d1843bcdbdc40175bdb847fb42c7fe9c93bd81b9cf54fc3f8eeb57b708fd705d0353918dc6a5421bef635183f267356d9219ae8720d4a78a31dd6e2dfac77828b0d00f0d1959a7faa11607faf4da8f18ce1e91ee4ade9909c9243bfed1df3c460f1c8cf1ed84c613fee89c9e72115b2773d678370d521d124419da70b176d2c7e38a698c7d5e3b0d820eb6b0f89777d0f6f403d418d106990a9108f9de5bb23567439748049f548a930c824204e588df942345f9d68c5b138689abe64a4d9905baacc5ab362d554d086528f0c1d36969583507e41d0a9c3389fb5ceee459e813940a1e1b532f9c92a118322f4bec8250e4b89ad8bd7dbe6240e0dbb00779ffccd27a86e54a8511b9bf256b0328cf7ece42b49adefb417a9bbc4e25de183d56efc1bb904437cdb25d743602ca1770cf8901ee8a59ca25ecf08f1b3cff7126996b3e23fc1f1914d80d0c765aa994687b2491d1bf1569ceeb3c390761ec6c95785cf5dd4bed1c2ec4ad76871b7714f9685f7ae0061ad897c3adccb879ce096"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x4}]}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x160, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DESC={0x144, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe36}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x744c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b64bd35}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11b9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc01}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d90}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r8 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001f006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) 83.873015ms ago: executing program 6 (id=4127): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x8) socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r1, &(0x7f0000000240)=@sco={0x1f, @fixed}, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) socket(0x11, 0x2, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x8b, &(0x7f0000000240)=""/139, 0x0, 0x1d}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000000)="96bc1480bb35", 0x6}, {&(0x7f0000001240)="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", 0x5c1}], 0x3, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x4000000) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) 0s ago: executing program 9 (id=4128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x92b5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20080010) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe8000"/36], 0x340a) kernel console output (not intermixed with test programs): [T10755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 372.582408][T10755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.589271][T10755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 372.589308][T10755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.589338][T10755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 372.915620][T10755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.918228][T10755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 372.918269][T10755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.918300][T10755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 373.053923][T16930] wg0 speed is unknown, defaulting to 1000 [ 373.228851][ T5627] Bluetooth: hci4: command tx timeout [ 373.234800][T10755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.234839][T10755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 373.234869][T10755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.234898][T10755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 373.539528][ T1400] net_ratelimit: 36 callbacks suppressed [ 373.539550][ T1400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.539831][ T1400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.847270][T10755] batadv10: left allmulticast mode [ 373.847292][T10755] batadv10: left promiscuous mode [ 373.849198][T10755] bridge0: port 7(batadv10) entered disabled state [ 373.885521][T10755] batadv9: left allmulticast mode [ 373.885558][T10755] batadv9: left promiscuous mode [ 373.885725][T10755] bridge0: port 6(batadv9) entered disabled state [ 373.920335][T10755] batadv5: left allmulticast mode [ 373.920364][T10755] batadv5: left promiscuous mode [ 373.920564][T10755] bridge0: port 5(batadv5) entered disabled state [ 373.923687][T10755] batadv4: left allmulticast mode [ 373.923713][T10755] batadv4: left promiscuous mode [ 373.923945][T10755] bridge0: port 4(batadv4) entered disabled state [ 373.963389][T10755] bond2: left allmulticast mode [ 373.975349][T10755] bond2: left promiscuous mode [ 373.975679][T10755] bridge0: port 3(bond2) entered disabled state [ 374.043058][T10755] pim6reg: left allmulticast mode [ 374.043576][T10755] dvmrp0: left allmulticast mode [ 374.579849][T10755] bond5 (unregistering): (slave geneve2): Releasing active interface [ 374.794229][T10755] bond1 (unregistering): Released all slaves [ 374.815043][T10755] bond2 (unregistering): Released all slaves [ 374.849404][T10755] bond3 (unregistering): Released all slaves [ 374.872403][T10755] bond4 (unregistering): Released all slaves [ 374.916439][T10755] bond5 (unregistering): Released all slaves [ 374.944320][T10755] bond6 (unregistering): Released all slaves [ 374.972790][T10755] bond7 (unregistering): Released all slaves [ 375.017499][T10755] bond8 (unregistering): Released all slaves [ 375.045486][T10755] bond9 (unregistering): Released all slaves [ 375.077115][T10755] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 375.091072][T10755] bond0 (unregistering): Released all slaves [ 375.114976][T10755] bond10 (unregistering): Released all slaves [ 375.123051][T16986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.124564][T17008] netlink: 'syz.3.2878': attribute type 1 has an invalid length. [ 375.124582][T17008] netlink: 'syz.3.2878': attribute type 3 has an invalid length. [ 375.124598][T17008] __nla_validate_parse: 2 callbacks suppressed [ 375.124611][T17008] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2878'. [ 375.313139][ T5627] Bluetooth: hci4: command tx timeout [ 375.332222][ T10] wg0 speed is unknown, defaulting to 1000 [ 375.332250][ T10] syz0: Port: 1 Link DOWN [ 376.055409][T17102] batman_adv: batadv0: Adding interface: veth0 [ 376.055431][T17102] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.055466][T17102] batman_adv: batadv0: Interface activated: veth0 [ 376.336430][T17102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.336457][T17102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.381187][T17102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.381215][T17102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.442331][T17102] batman_adv: batadv0: Interface deactivated: veth0 [ 376.442362][T17102] batman_adv: batadv0: Removing interface: veth0 [ 376.555870][T16930] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.556387][T16930] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.556543][T16930] bridge_slave_0: entered allmulticast mode [ 376.583416][T16930] bridge_slave_0: entered promiscuous mode [ 376.634857][T16930] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.636856][T16930] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.637024][T16930] bridge_slave_1: entered allmulticast mode [ 376.665224][T16930] bridge_slave_1: entered promiscuous mode [ 377.101083][T16930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.344229][T16930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.387902][ T5627] Bluetooth: hci4: command tx timeout [ 377.642813][T16930] team0: Port device team_slave_0 added [ 377.660646][T16930] team0: Port device team_slave_1 added [ 377.994396][T17191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.012962][T16930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.012983][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.013013][T16930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.066279][T16930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.066322][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.066352][T16930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.390305][T17206] ip_tables: iptables: counters copy to user failed while replacing table [ 378.416722][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 378.556266][T17206] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 378.556931][T17206] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2903'. [ 378.610964][T16930] hsr_slave_0: entered promiscuous mode [ 378.612190][T16930] hsr_slave_1: entered promiscuous mode [ 378.617283][T17216] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2906'. [ 378.617315][T17216] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2906'. [ 378.617335][T17216] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2906'. [ 378.679140][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.964783][T17227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2909'. [ 379.214306][T17235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2910'. [ 379.469448][ T5623] Bluetooth: hci4: command tx timeout [ 379.635087][T17255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.655390][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 379.670798][T17250] netlink: 'syz.5.2913': attribute type 4 has an invalid length. [ 379.781459][T17256] ip_tables: iptables: counters copy to user failed while replacing table [ 380.234835][T10755] hsr_slave_0: left promiscuous mode [ 380.235750][T10755] hsr_slave_1: left promiscuous mode [ 380.275631][T10755] veth1_macvtap: left promiscuous mode [ 380.275662][T10755] veth0_macvtap: left promiscuous mode [ 380.275766][T10755] veth1_vlan: left promiscuous mode [ 380.275815][T10755] veth0_vlan: left promiscuous mode [ 380.346495][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2921'. [ 381.547903][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 381.641427][T17302] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.923963][T10750] smbdirect: ib_dev[syz0] removed [ 382.116957][T17279] bridge0: port 3(batadv0) entered blocking state [ 382.117298][T17279] bridge0: port 3(batadv0) entered disabled state [ 382.117478][T17279] batadv0: entered allmulticast mode [ 382.146058][T17279] batadv0: entered promiscuous mode [ 382.386834][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 382.399495][T17336] syzkaller0: entered promiscuous mode [ 382.399520][T17336] syzkaller0: entered allmulticast mode [ 382.445571][T17336] netlink: 'syz.2.2926': attribute type 11 has an invalid length. [ 382.445600][T17336] netlink: 'syz.2.2926': attribute type 11 has an invalid length. [ 382.445616][T17336] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2926'. [ 382.523968][T17340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2928'. [ 382.624746][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 382.624769][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 382.904617][T17352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2930'. [ 382.904651][T17352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2930'. [ 382.939299][T17352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2930'. [ 383.183561][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 383.185369][T17358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2932'. [ 383.185405][T17358] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 383.391878][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 383.640777][T17374] 8021q: adding VLAN 0 to HW filter on device team1 [ 384.012318][T17402] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 384.124660][T10755] IPVS: stop unused estimator thread 0... [ 384.271730][T16930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.298994][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.300343][T16930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.327489][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.336495][T16930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.384166][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.402486][T16930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.434332][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.675466][T17429] netlink: 'syz.4.2945': attribute type 1 has an invalid length. [ 384.675493][T17429] netlink: 'syz.4.2945': attribute type 4 has an invalid length. [ 384.774642][T16930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.822302][T16930] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.854184][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.854304][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.937131][T10755] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.937256][T10755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.995259][T17442] ip_tables: iptables: counters copy to user failed while replacing table [ 385.856610][T17469] __nla_validate_parse: 2 callbacks suppressed [ 385.856633][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2954'. [ 385.926979][T17473] syzkaller1: entered promiscuous mode [ 385.927009][T17473] syzkaller1: entered allmulticast mode [ 385.971686][T17473] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 386.069226][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2957'. [ 386.128894][T17473] bond1: entered promiscuous mode [ 386.128951][T17473] bond1: entered allmulticast mode [ 386.129441][T17473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.191144][T17482] erspan1: entered allmulticast mode [ 386.242356][T17482] bond1: (slave erspan1): making interface the new active one [ 386.242385][T17482] erspan1: entered promiscuous mode [ 386.255536][T17482] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 386.587185][T17501] netlink: 'syz.2.2960': attribute type 4 has an invalid length. [ 386.964869][T17525] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 387.006611][T16930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.227041][T16930] veth0_vlan: entered promiscuous mode [ 387.277223][T16930] veth1_vlan: entered promiscuous mode [ 387.415372][T16930] veth0_macvtap: entered promiscuous mode [ 387.445808][T16930] veth1_macvtap: entered promiscuous mode [ 387.620777][T16930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.654380][T16930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.763480][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.763705][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.763944][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.764168][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.764386][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.764595][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.764838][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.785016][ T3342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.796145][T10750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.799416][T10755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.804774][T17559] netlink: 684 bytes leftover after parsing attributes in process `syz.4.2968'. [ 387.819411][T10755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.162340][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.162368][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.401195][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.401222][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.908677][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 389.355342][T17592] gretap0: entered promiscuous mode [ 389.565063][ T1400] bond0: (slave bond_slave_1): interface is now up [ 389.760290][T17611] netlink: 'syz.3.2977': attribute type 29 has an invalid length. [ 390.056214][ T5627] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 390.057462][ T5627] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 390.503753][T17641] xt_bpf: check failed: parse error [ 390.836475][T17651] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 390.961884][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.979799][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.985670][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.004826][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.005536][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.050930][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.176782][T17655] bond0: (slave geneve4): making interface the new active one [ 391.225115][T17655] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 391.488882][T17669] IPVS: Scheduler module ip_vs_sip not found [ 391.576828][ T5618] syz_tun (unregistering): left allmulticast mode [ 391.576859][ T5618] syz_tun (unregistering): left promiscuous mode [ 391.577150][ T5618] bridge0: port 3(syz_tun) entered disabled state [ 391.699676][ T32] audit: type=1107 audit(1791266126.831:13): pid=17668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù' [ 392.110478][T10751] bond0: (slave bond_slave_1): interface is now up [ 392.253148][T17706] __nla_validate_parse: 9 callbacks suppressed [ 392.253170][T17706] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2994'. [ 392.832500][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2999'. [ 393.068958][ T5627] Bluetooth: hci1: command tx timeout [ 393.135142][T17751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3002'. [ 393.238503][T10750] IPVS: starting estimator thread 0... [ 393.331166][T17758] IPVS: using max 25 ests per chain, 60000 per kthread [ 393.409437][T17760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3004'. [ 393.925770][T17794] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.939374][T17795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.965024][T17656] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.966761][T17656] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.967246][T17656] bridge_slave_0: entered allmulticast mode [ 393.991034][T17656] bridge_slave_0: entered promiscuous mode [ 393.999900][T17656] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.004257][T17656] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.004800][T17656] bridge_slave_1: entered allmulticast mode [ 394.053265][T17656] bridge_slave_1: entered promiscuous mode [ 394.115042][ T5627] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 394.115138][ T5627] Bluetooth: hci3: Injecting HCI hardware error event [ 394.121390][ T5623] Bluetooth: hci3: hardware error 0x00 [ 394.335553][T17656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.366582][T17656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.497059][T17804] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3010'. [ 394.497085][T17804] netlink: 'syz.3.3010': attribute type 1 has an invalid length. [ 394.569302][T17656] team0: Port device team_slave_0 added [ 394.608959][T17656] team0: Port device team_slave_1 added [ 394.739440][T17656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.739460][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.739489][T17656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.745157][T17656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.745176][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.745206][T17656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.114965][T17656] hsr_slave_0: entered promiscuous mode [ 395.116135][T17656] hsr_slave_1: entered promiscuous mode [ 395.116989][T17656] debugfs: 'hsr0' already exists in 'hsr' [ 395.117010][T17656] Cannot create hsr debugfs directory [ 395.147881][ T5627] Bluetooth: hci1: command tx timeout [ 395.498729][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3014'. [ 395.498756][T17826] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 395.540572][T17826] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 395.585422][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3016'. [ 395.636913][ T5627] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 395.661921][ T5627] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 395.874885][T17840] No such timeout policy "syz0" [ 396.011844][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 396.182746][T17656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 396.182786][T17656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 396.182813][T17656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.271380][ T5623] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 396.587423][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3021'. [ 396.633048][T17656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 396.633090][T17656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 396.633120][T17656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.002056][T17656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 397.002098][T17656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 397.002129][T17656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.237387][ T1400] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.248257][ T5623] Bluetooth: hci1: command tx timeout [ 397.258942][ T1400] bond0: (slave bond_slave_1): interface is now down [ 397.469912][T17656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 397.469954][T17656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 397.469985][T17656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.538771][T17897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3026'. [ 397.653342][T17897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3026'. [ 397.655440][T17897] macvlan1: entered promiscuous mode [ 397.740738][T17897] macvlan3: entered promiscuous mode [ 397.740767][T17897] macvlan3: entered allmulticast mode [ 398.042733][T17918] netlink: 'syz.3.3029': attribute type 3 has an invalid length. [ 399.290968][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3035'. [ 399.308542][ T5623] Bluetooth: hci1: command tx timeout [ 399.397206][T17954] syzkaller1: entered promiscuous mode [ 399.397232][T17954] syzkaller1: entered allmulticast mode [ 399.662391][T17971] netlink: 'syz.3.3037': attribute type 2 has an invalid length. [ 399.664653][T17973] netlink: 'syz.5.3036': attribute type 7 has an invalid length. [ 399.664680][T17973] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3036'. [ 399.798793][ T13] bond0: (slave bond_slave_1): interface is now down [ 399.826468][T17971] : entered promiscuous mode [ 399.875708][T17656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.894429][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.910824][T17656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.946171][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.962947][T17656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.034015][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.035027][T17656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.093367][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.177025][T17990] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3042'. [ 400.200347][T17995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.201760][T18003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.525507][T17656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.574309][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 400.574529][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 400.616712][T17656] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.650034][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.650155][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.693168][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.693284][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.774648][T18023] netlink: 'syz.3.3045': attribute type 2 has an invalid length. [ 400.831028][T18023] netlink: 'syz.3.3045': attribute type 2 has an invalid length. [ 401.190471][T18011] tipc: Resetting bearer [ 401.299763][T18046] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.332510][ T1218] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.508570][ T5625] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.943903][T18062] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3049'. [ 402.093705][T18062] veth0: entered promiscuous mode [ 402.113159][T18067] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3049'. [ 402.113514][T18067] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3049'. [ 402.353493][ T3342] bond0: (slave bond_slave_1): interface is now down [ 402.538608][T18085] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 402.832770][T18085] bond1: entered promiscuous mode [ 402.834732][T18085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.979816][T18089] bond1: (slave bridge1): making interface the new active one [ 402.979846][T18089] bridge1: entered promiscuous mode [ 403.016800][T18089] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 403.100677][T18095] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 403.131040][T18061] veth0: left promiscuous mode [ 403.145802][T17656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.377580][T17656] veth0_vlan: entered promiscuous mode [ 403.422954][T17656] veth1_vlan: entered promiscuous mode [ 403.615068][T17656] veth0_macvtap: entered promiscuous mode [ 403.676186][T18116] __nla_validate_parse: 33 callbacks suppressed [ 403.676213][T18116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3054'. [ 403.686585][T17656] veth1_macvtap: entered promiscuous mode [ 403.883981][T18123] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 403.974851][T17656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.007401][T17656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.030258][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 404.143057][T10751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.143110][T10751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.143148][T10751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.143211][T10751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.562553][T18134] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 404.602093][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.602120][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.605739][T18134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3057'. [ 404.843521][T10751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.843546][T10751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.011836][T18148] netlink: 'syz.5.3059': attribute type 4 has an invalid length. [ 405.156345][T18144] netlink: 'syz.4.3060': attribute type 2 has an invalid length. [ 405.777233][T18167] netlink: 'syz.5.3061': attribute type 2 has an invalid length. [ 405.858701][T18170] netlink: 'syz.5.3061': attribute type 2 has an invalid length. [ 405.993061][T18167] : entered promiscuous mode [ 406.061439][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 406.312192][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.327430][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.334961][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.343933][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.344570][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.412296][ T5620] tipc: Resetting bearer [ 406.609339][ T5620] tipc: Disabling bearer [ 406.805133][T18199] netlink: 'syz.3.3066': attribute type 8 has an invalid length. [ 406.805159][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 406.923843][T18202] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3067'. [ 406.977003][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3067'. [ 408.442498][ T5627] Bluetooth: hci0: command tx timeout [ 408.550453][T18253] netlink: 'syz.5.3074': attribute type 1 has an invalid length. [ 408.613084][T18254] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3074'. [ 408.719490][T18255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3074'. [ 409.769182][T18096] Set syz1 is full, maxelem 65536 reached [ 410.511657][ T5627] Bluetooth: hci0: command tx timeout [ 412.604139][ T5627] Bluetooth: hci0: command tx timeout [ 413.287636][T18251] syzkaller0: entered promiscuous mode [ 413.287664][T18251] syzkaller0: entered allmulticast mode [ 413.707020][T18327] netlink: 'syz.1.3084': attribute type 13 has an invalid length. [ 413.720851][T18327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.779709][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 413.904219][T18184] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.904413][T18184] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.904570][T18184] bridge_slave_0: entered allmulticast mode [ 413.906585][T18184] bridge_slave_0: entered promiscuous mode [ 413.914786][T18184] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.915216][T18184] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.916279][T18184] bridge_slave_1: entered allmulticast mode [ 413.922045][T18184] bridge_slave_1: entered promiscuous mode [ 413.993224][T18184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.002913][T18184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.045376][T18184] team0: Port device team_slave_0 added [ 414.054210][T18184] team0: Port device team_slave_1 added [ 414.092918][T18184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.092939][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.092964][T18184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.097100][T18184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.097120][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.097149][T18184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.248773][T18184] hsr_slave_0: entered promiscuous mode [ 414.250011][T18184] hsr_slave_1: entered promiscuous mode [ 414.250841][T18184] debugfs: 'hsr0' already exists in 'hsr' [ 414.250863][T18184] Cannot create hsr debugfs directory [ 414.510077][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.546858][T18184] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.546895][T18184] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.610147][T18341] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 414.661547][T18184] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.661590][T18184] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.689595][ T5627] Bluetooth: hci0: command tx timeout [ 414.791372][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 414.791404][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 414.859721][T18352] bridge_slave_0: left allmulticast mode [ 414.861380][T18352] bridge_slave_0: left promiscuous mode [ 414.861580][T18352] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.866110][T18352] bridge_slave_1: left allmulticast mode [ 414.866138][T18352] bridge_slave_1: left promiscuous mode [ 414.866356][T18352] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.922510][T18352] bond0: (slave bond_slave_0): Releasing backup interface [ 414.946802][T18352] bond0: (slave bond_slave_1): Releasing backup interface [ 414.974070][T18352] team0: Port device team_slave_0 removed [ 414.995536][T18352] team0: Port device team_slave_1 removed [ 415.006045][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'. [ 415.018680][T18352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 415.022861][T18184] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.022902][T18184] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.079121][T18353] team0: Device xfrm0 is up. Set it down before adding it as a team port [ 415.079367][T18358] team0: Device xfrm0 is up. Set it down before adding it as a team port [ 415.130679][T18359] tipc: Enabled bearer , priority 0 [ 415.252718][T18184] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.252748][T18184] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.542747][T18384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3100'. [ 415.628369][T18184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.649883][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.651779][T18184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.678198][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.681623][T18184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.704800][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.716163][T18184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.737888][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.905862][T18184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.937093][T18184] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.972177][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.972298][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.036861][T18408] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3105'. [ 416.037435][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.037621][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.083535][T18408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.095874][T18408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.111362][T18408] bond0 (unregistering): Released all slaves [ 416.934055][T18184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.090256][T18449] netlink: 'syz.5.3111': attribute type 1 has an invalid length. [ 417.146048][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3111'. [ 417.163237][T18449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.222621][T18449] bond5: (slave bridge2): making interface the new active one [ 417.227043][T18449] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 417.693472][T18184] veth0_vlan: entered promiscuous mode [ 417.724146][T18474] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3116'. [ 417.726623][T18184] veth1_vlan: entered promiscuous mode [ 417.864843][T18184] veth0_macvtap: entered promiscuous mode [ 417.891970][T18184] veth1_macvtap: entered promiscuous mode [ 417.944598][T18184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.991982][T18184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.033680][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.034787][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.035114][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.112414][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.324905][T10757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.324929][T10757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.425393][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.425419][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.656895][T18502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3120'. [ 418.682624][T18501] syzkaller0: entered promiscuous mode [ 418.682651][T18501] syzkaller0: entered allmulticast mode [ 418.753792][T18498] syzkaller0: entered promiscuous mode [ 418.753811][T18498] syzkaller0: entered allmulticast mode [ 418.933242][T18514] sctp: [Deprecated]: syz.3.3124 (pid 18514) Use of int in max_burst socket option. [ 418.933242][T18514] Use struct sctp_assoc_value instead [ 419.395761][T18530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3129'. [ 419.664479][ T3342] IPVS: starting estimator thread 0... [ 419.666465][T18533] IPVS: rr: UDP [::1]:8080 - no destination available [ 419.747941][T18539] IPVS: using max 23 ests per chain, 55200 per kthread [ 420.043525][T18550] netlink: 'syz.4.3135': attribute type 8 has an invalid length. [ 420.043871][T18550] sch_fq: defrate 0 ignored. [ 420.116031][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 420.116074][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 421.003430][T18579] syzkaller1: entered promiscuous mode [ 421.003457][T18579] syzkaller1: entered allmulticast mode [ 421.024606][T18579] netlink: 'syz.2.3147': attribute type 4 has an invalid length. [ 421.144154][T18602] ipt_ECN: cannot use operation on non-tcp rule [ 421.343419][T18609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3153'. [ 421.365568][T18609] syzkaller1: entered promiscuous mode [ 421.365596][T18609] syzkaller1: entered allmulticast mode [ 421.490872][T18614] IPVS: rr: UDP [::1]:8080 - no destination available [ 421.559387][T18616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.561139][T18616] xt_l2tp: invalid flags combination: 0 [ 421.589965][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 421.786351][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'. [ 421.853129][T18631] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3164'. [ 422.003767][T18633] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 422.246012][T18643] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3166'. [ 422.393794][T18647] netlink: zone id is out of range [ 422.393813][T18647] netlink: zone id is out of range [ 422.393822][T18647] netlink: zone id is out of range [ 422.393831][T18647] netlink: zone id is out of range [ 422.393839][T18647] netlink: zone id is out of range [ 422.393848][T18647] netlink: zone id is out of range [ 422.393860][T18647] netlink: zone id is out of range [ 422.393868][T18647] netlink: zone id is out of range [ 422.552810][T18653] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 422.565984][T18653] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 422.566009][T18653] netlink: 'syz.2.3170': attribute type 2 has an invalid length. [ 422.599233][T18657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3172'. [ 422.750050][T18665] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 422.929623][T18667] veth1_macvtap: left promiscuous mode [ 422.979579][T18671] bridge0: port 1(vlan3) entered blocking state [ 422.980102][T18671] bridge0: port 1(vlan3) entered disabled state [ 422.980269][T18671] vlan3: entered allmulticast mode [ 422.980288][T18671] geneve0: entered allmulticast mode [ 422.982357][T18671] vlan3: entered promiscuous mode [ 422.982377][T18671] geneve0: entered promiscuous mode [ 423.109993][ T25] hid-generic 0005:046D:0A0E.0002: unknown main item tag 0x0 [ 423.113029][ T25] hid-generic 0005:046D:0A0E.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 423.314323][T18651] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 423.340862][T18684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3180'. [ 423.551102][T18691] hsr_slave_0: left promiscuous mode [ 423.553741][T18691] hsr_slave_1: left promiscuous mode [ 423.952788][T18711] Bluetooth: MGMT ver 1.23 [ 424.053551][T18713] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 424.083666][ T9320] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 424.160488][T18719] x_tables: duplicate underflow at hook 1 [ 424.502833][T18739] __nla_validate_parse: 3 callbacks suppressed [ 424.502855][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'. [ 424.502886][T18739] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3198'. [ 424.525268][T18739] geneve2: entered promiscuous mode [ 424.525331][T18739] geneve2: entered allmulticast mode [ 425.434280][T18779] tipc: Started in network mode [ 425.434315][T18779] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 425.434494][T18779] tipc: Enabled bearer , priority 10 [ 425.527485][T18787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3213'. [ 425.532730][T18787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3213'. [ 425.603376][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3214'. [ 425.603405][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3214'. [ 425.694772][T18795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3215'. [ 426.244822][T18818] netlink: 'syz.3.3223': attribute type 178 has an invalid length. [ 426.413119][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 426.549858][ T9320] tipc: Node number set to 10136234 [ 426.580123][T18838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3231'. [ 426.580192][T18838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3231'. [ 426.666929][T18843] Bluetooth: MGMT ver 1.23 [ 427.220474][T18871] netlink: 'syz.4.3242': attribute type 10 has an invalid length. [ 427.221046][T18872] netlink: 'syz.4.3242': attribute type 10 has an invalid length. [ 427.273553][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.282031][T18871] team0: Port device netdevsim1 added [ 428.607226][T18939] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 428.676513][T18942] netlink: 'syz.5.3262': attribute type 1 has an invalid length. [ 428.776713][T18947] netlink: 'syz.4.3264': attribute type 1 has an invalid length. [ 428.833128][T18947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.873281][T18947] macvlan2: entered promiscuous mode [ 428.873309][T18947] macvlan2: entered allmulticast mode [ 428.940999][T18947] bond1: (slave ip6gretap1): making interface the new active one [ 428.955606][T18947] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 428.994588][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.010837][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 429.020259][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 429.035237][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 429.054440][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.741365][T18987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 429.762653][T18991] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 429.926423][T18997] netlink: 'syz.3.3279': attribute type 1 has an invalid length. [ 429.926447][T18997] netlink: 'syz.3.3279': attribute type 2 has an invalid length. [ 429.926462][T18997] __nla_validate_parse: 11 callbacks suppressed [ 429.926476][T18997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3279'. [ 430.083363][T19003] net_ratelimit: 4 callbacks suppressed [ 430.083384][T19003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 430.136586][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'. [ 430.212909][T19014] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3286'. [ 430.385442][T19020] netlink: 'syz.4.3289': attribute type 30 has an invalid length. [ 430.530291][T19028] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 430.530318][T19028] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3291'. [ 430.964707][T19041] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3294'. [ 431.123390][T18951] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.123575][T18951] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.123747][T18951] bridge_slave_0: entered allmulticast mode [ 431.125650][T18951] bridge_slave_0: entered promiscuous mode [ 431.158178][ T5627] Bluetooth: hci3: command tx timeout [ 431.178099][T18951] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.178228][T18951] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.178410][T18951] bridge_slave_1: entered allmulticast mode [ 431.180503][T18951] bridge_slave_1: entered promiscuous mode [ 431.246364][T18951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.262234][T18951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.310921][T18951] team0: Port device team_slave_0 added [ 431.314418][T18951] team0: Port device team_slave_1 added [ 431.362192][T18951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.362214][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.362244][T18951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.413099][T18951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.413120][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.413160][T18951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.477207][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3298'. [ 431.666983][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3299'. [ 431.667027][T19065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.830666][T18951] hsr_slave_0: entered promiscuous mode [ 431.833850][T18951] hsr_slave_1: entered promiscuous mode [ 431.836583][T18951] debugfs: 'hsr0' already exists in 'hsr' [ 431.836608][T18951] Cannot create hsr debugfs directory [ 431.916962][T19075] netlink: 'syz.4.3300': attribute type 32 has an invalid length. [ 431.916986][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3300'. [ 432.203213][T19083] Cannot find del_set index 3 as target [ 432.220216][T19075] bond4: Setting coupled_control to off (0) [ 432.553752][T19089] netlink: 'syz.5.3304': attribute type 1 has an invalid length. [ 432.854948][T19097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3305'. [ 432.898256][T19103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3307'. [ 433.065630][T18951] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.091854][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.093272][T18951] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.132630][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.133949][T18951] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.135730][T19113] netlink: 'syz.2.3312': attribute type 2 has an invalid length. [ 433.141327][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046e9d400: rx timeout, send abort [ 433.183035][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.183889][T18951] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.215463][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.230907][ T5623] Bluetooth: hci3: command tx timeout [ 433.365582][T18951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.418695][T18951] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.457984][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.458088][T10751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.504337][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.504465][T10751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.641015][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805730d000: rx timeout, send abort [ 433.641474][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046e9d400: abort rx timeout. Force session deactivation [ 434.141907][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805730d000: abort rx timeout. Force session deactivation [ 434.324981][T19156] bond5: entered promiscuous mode [ 434.325064][T19156] bond5: entered allmulticast mode [ 434.325551][T19156] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.533451][T19161] bond6: entered promiscuous mode [ 434.533485][T19161] bond6: entered allmulticast mode [ 434.535490][T19161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.878939][T18951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.012957][T19191] veth1_macvtap: left promiscuous mode [ 435.314504][ T5627] Bluetooth: hci3: command tx timeout [ 435.423214][T19211] syzkaller0: entered promiscuous mode [ 435.423241][T19211] syzkaller0: entered allmulticast mode [ 435.831911][T19220] bridge0: port 1(bond0) entered blocking state [ 435.832675][T19220] bridge0: port 1(bond0) entered disabled state [ 435.832877][T19220] bond0: entered allmulticast mode [ 435.865458][T19220] bond0: entered promiscuous mode [ 435.937456][T18951] veth0_vlan: entered promiscuous mode [ 436.078688][T19226] veth3: entered allmulticast mode [ 436.089997][T18951] veth1_vlan: entered promiscuous mode [ 436.184545][T19234] netlink: 'syz.3.3337': attribute type 1 has an invalid length. [ 436.185941][T19235] netlink: 'syz.3.3337': attribute type 1 has an invalid length. [ 436.275323][T18951] veth0_macvtap: entered promiscuous mode [ 436.305425][T18951] veth1_macvtap: entered promiscuous mode [ 436.384056][T18951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.442147][T18951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.516097][T19237] veth5: entered promiscuous mode [ 436.584514][T19239] veth7: entered promiscuous mode [ 436.619724][T19246] netlink: 'syz.4.3339': attribute type 3 has an invalid length. [ 436.621234][T19246] netlink: 'syz.4.3339': attribute type 3 has an invalid length. [ 436.659670][ T1400] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.660718][ T1400] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.660768][ T1400] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.660812][ T1400] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.032719][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.032742][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.144910][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.144936][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.209577][T19267] __nla_validate_parse: 10 callbacks suppressed [ 437.209599][T19267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3346'. [ 437.261389][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3345'. [ 437.308856][ T5623] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 437.391721][ T5623] Bluetooth: hci3: command tx timeout [ 437.720843][T19280] IPVS: set_ctl: invalid protocol: 53585 255.200.121.44:55296 [ 437.829587][T19286] netlink: 'syz.6.3263': attribute type 4 has an invalid length. [ 437.846193][T19285] netlink: 'syz.6.3263': attribute type 4 has an invalid length. [ 437.865116][T19290] netlink: 'syz.4.3352': attribute type 2 has an invalid length. [ 437.958922][T19290] : entered promiscuous mode [ 438.041682][T19290] trusted_key: syz.4.3352 sent an empty control message without MSG_MORE. [ 438.073792][T19285] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3263'. [ 438.581580][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 439.186190][T19332] syzkaller0: entered promiscuous mode [ 439.186218][T19332] syzkaller0: entered allmulticast mode [ 439.336482][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3367'. [ 439.336581][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3367'. [ 439.503030][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3369'. [ 439.503154][T19364] openvswitch: netlink: Message has 4 unknown bytes. [ 439.790549][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'. [ 439.836667][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'. [ 440.056749][T19379] netlink: 'syz.4.3375': attribute type 1 has an invalid length. [ 440.056775][T19379] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3375'. [ 440.132814][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.509352][T19394] netlink: 'syz.6.3377': attribute type 1 has an invalid length. [ 440.714026][T19404] xt_cgroup: path and classid specified [ 440.714947][T19404] xt_hashlimit: size too large, truncated to 1048576 [ 440.858016][T19415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.931056][T19424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.828505][T19445] syzkaller0: entered promiscuous mode [ 441.828533][T19445] syzkaller0: entered allmulticast mode [ 442.356485][T19469] gretap0: entered promiscuous mode [ 442.367359][T19469] __nla_validate_parse: 7 callbacks suppressed [ 442.367383][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3396'. [ 442.367409][T19469] gretap0: left promiscuous mode [ 442.842970][T19484] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3399'. [ 443.404345][T19497] netlink: 'syz.6.3402': attribute type 4 has an invalid length. [ 443.404373][T19497] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3402'. [ 443.588240][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 443.661352][T19502] ip_tables: iptables: counters copy to user failed while replacing table [ 444.724253][T19540] syzkaller0: entered promiscuous mode [ 444.724280][T19540] syzkaller0: entered allmulticast mode [ 445.037983][T19556] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 445.171567][T19559] netlink: 'syz.4.3418': attribute type 3 has an invalid length. [ 445.733839][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3422'. [ 446.010038][T19582] IPVS: length: 4096 != 8 [ 446.036464][T19581] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 446.154144][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'. [ 446.253331][T19596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3428'. [ 446.294384][T19595] tipc: Enabled bearer , priority 0 [ 446.361091][T19595] syzkaller0: entered promiscuous mode [ 446.361119][T19595] syzkaller0: entered allmulticast mode [ 446.361899][T19595] tipc: Resetting bearer [ 446.486418][T19600] netlink: 'syz.6.3431': attribute type 1 has an invalid length. [ 446.486479][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3431'. [ 446.599631][T19594] tipc: Resetting bearer [ 446.821530][T19613] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 451.551060][T19594] tipc: Disabling bearer [ 451.805773][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 451.898359][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'. [ 452.063926][T19635] dvmrp0: entered allmulticast mode [ 452.141222][T19644] netlink: 'syz.2.3441': attribute type 10 has an invalid length. [ 452.544552][T19652] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3443'. [ 452.632080][T19652] xt_esp: unknown flags DD [ 452.971987][T19665] x_tables: duplicate underflow at hook 2 [ 452.987288][T19665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3448'. [ 453.404113][ T13] IPVS: starting estimator thread 0... [ 453.498392][T19687] IPVS: using max 26 ests per chain, 62400 per kthread [ 453.752003][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 453.752033][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3441'. [ 453.965344][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3454'. [ 454.631668][T19713] netlink: 'syz.5.3458': attribute type 8 has an invalid length. [ 454.631842][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3458'. [ 454.766841][T19706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.218931][T19737] IPVS: set_ctl: invalid protocol: 0 172.20.20.37:20001 [ 455.554499][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3467'. [ 455.613630][T19744] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3467'. [ 456.333562][T19765] netlink: Only one type of NAT may be specified [ 456.333634][T19765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.559714][T19774] netlink: 'syz.2.3474': attribute type 8 has an invalid length. [ 456.704092][T19772] team0 (unregistering): Port device team_slave_0 removed [ 456.743074][T19772] team0 (unregistering): Port device team_slave_1 removed [ 456.814687][T19777] __nla_validate_parse: 4 callbacks suppressed [ 456.814736][T19777] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3475'. [ 456.814790][T19777] veth0_to_bond: default FDB implementation only supports local addresses [ 457.061719][T19784] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 457.551642][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 457.569577][T19797] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 457.659163][T19797] bond3 (unregistering): Released all slaves [ 457.834872][T19816] ip_tables: iptables: counters copy to user failed while replacing table [ 457.862890][T19816] ip_tables: iptables: counters copy to user failed while replacing table [ 457.933704][T19817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3485'. [ 457.998719][T19820] netlink: 'syz.6.3486': attribute type 8 has an invalid length. [ 457.998744][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3486'. [ 458.041549][T10759] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.265404][T19823] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3488'. [ 458.265431][T19823] tc_dump_action: action bad kind [ 458.265877][T19822] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3488'. [ 458.265895][T19822] tc_dump_action: action bad kind [ 458.328944][T19830] ip_tables: iptables: counters copy to user failed while replacing table [ 458.453690][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3487'. [ 459.034692][T19859] netlink: 'syz.6.3497': attribute type 21 has an invalid length. [ 459.034720][T19859] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3497'. [ 459.182592][T19864] tunl0: entered promiscuous mode [ 459.185420][T19864] netlink: 'syz.3.3500': attribute type 3 has an invalid length. [ 459.185446][T19864] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3500'. [ 459.255732][T19865] netlink: 'syz.2.3498': attribute type 8 has an invalid length. [ 459.255777][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'. [ 459.444388][T19869] netlink: 'syz.2.3502': attribute type 11 has an invalid length. [ 459.583649][T19873] syzkaller1: entered promiscuous mode [ 459.583674][T19873] syzkaller1: entered allmulticast mode [ 459.935632][T19881] netlink: 'syz.3.3507': attribute type 2 has an invalid length. [ 460.187451][T19891] netlink: 'syz.6.3511': attribute type 1 has an invalid length. [ 460.330186][T19898] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 460.435784][T19901] Bluetooth: hci0: unsupported parameter 5135 [ 460.435810][T19901] Bluetooth: hci0: unsupported parameter 8192 [ 460.435824][T19901] Bluetooth: hci0: unsupported parameter 5135 [ 460.435838][T19901] Bluetooth: hci0: unsupported parameter 8192 [ 460.590219][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.702388][T19906] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 461.982545][T19926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3522'. [ 461.982573][T19926] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3522'. [ 461.982624][T19926] netlink: 'syz.6.3522': attribute type 5 has an invalid length. [ 462.043251][T19922] bond7: (slave bond_slave_0): Device is not our slave [ 462.043277][T19922] bond7: option active_slave: invalid value (bond_slave_0) [ 462.074084][T19922] bond7 (unregistering): Released all slaves [ 462.561625][T19946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3530'. [ 462.561664][T19946] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 462.563159][T19946] syz_tun: entered allmulticast mode [ 462.602266][T19946] dvmrp8: entered allmulticast mode [ 462.742578][T19945] syz_tun: left allmulticast mode [ 462.823252][T19953] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3531'. [ 463.365676][T19965] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 463.844672][T19980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3538'. [ 463.844721][T19980] nbd: couldn't find a device at index 65553 [ 464.093897][T19984] netlink: 'syz.2.3540': attribute type 13 has an invalid length. [ 464.093923][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3540'. [ 464.311867][T19984] netlink: 'syz.2.3540': attribute type 13 has an invalid length. [ 464.311894][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3540'. [ 464.311976][T10759] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.312609][ T1400] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.312653][ T1400] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.312697][ T1400] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.601051][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.601129][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.602043][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.604906][T19989] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 464.604946][T19989] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 464.604990][T19989] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 464.676713][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3543'. [ 464.703815][T19989] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 464.818425][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.821784][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.823991][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.826761][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.856403][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.865833][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.876260][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.885673][T19989] wlan1 speed is unknown, defaulting to 1000 [ 464.894729][T19989] wlan1 speed is unknown, defaulting to 1000 [ 465.276897][T20009] digital: digital_start_poll: Unknown protocol [ 465.363469][T20012] tipc: Enabled bearer , priority 0 [ 465.382255][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3549'. [ 465.429710][T20012] syzkaller0: entered promiscuous mode [ 465.429738][T20012] syzkaller0: entered allmulticast mode [ 465.430890][T20012] tipc: Resetting bearer [ 465.594492][T20011] tipc: Resetting bearer [ 465.739281][T20025] netlink: 'syz.2.3551': attribute type 1 has an invalid length. [ 469.968383][T20011] tipc: Disabling bearer [ 470.002825][T20025] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 470.097096][T20026] veth3: entered allmulticast mode [ 470.385109][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'. [ 470.412538][T20038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3554'. [ 470.521602][T20041] Dead loop on virtual device ip6_vti0 (net 138), fix it urgently! [ 470.791976][T20051] xt_hl: Unknown Hop Limit match mode: 206 [ 470.794378][T20051] xt_hl: Unknown Hop Limit match mode: 206 [ 470.902882][T20056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3562'. [ 470.929862][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3559'. [ 471.016789][T20054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3559'. [ 471.022371][T20057] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3559'. [ 471.024242][T20054] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3559'. [ 471.154723][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3565'. [ 471.183051][T20067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3565'. [ 471.316063][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'. [ 471.398493][ T5623] block nbd0: Receive control failed (result -107) [ 471.409326][ T5623] block nbd1: Receive control failed (result -32) [ 472.114143][T20096] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 472.285450][T20107] netlink: 'syz.3.3575': attribute type 1 has an invalid length. [ 472.735117][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 472.738666][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 472.754912][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 472.767679][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 472.786576][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 472.945275][T20109] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 472.961513][T20132] netlink: 'syz.6.3578': attribute type 2 has an invalid length. [ 473.000380][T20111] veth3: entered promiscuous mode [ 473.030202][T20111] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 473.082391][T20102] lo speed is unknown, defaulting to 1000 [ 473.277450][T20102] lo speed is unknown, defaulting to 1000 [ 473.348627][T20102] lo speed is unknown, defaulting to 1000 [ 473.799433][T20144] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 473.799460][T20144] netlink: 'syz.3.3582': attribute type 4 has an invalid length. [ 473.801946][T20144] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 473.801967][T20144] netlink: 'syz.3.3582': attribute type 4 has an invalid length. [ 473.847954][T20147] netlink: 'syz.6.3581': attribute type 21 has an invalid length. [ 474.164344][ T9320] hid-generic 0005:0008:0009.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 474.443348][T20160] fido_id[20160]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci7/hci7:200/report_descriptor': No such file or directory [ 474.700976][T20121] wlan1 speed is unknown, defaulting to 1000 [ 474.831465][ T5623] Bluetooth: hci7: command tx timeout [ 474.909647][T20102] infiniband syz0: set active [ 474.909673][T20102] infiniband syz0: added lo [ 474.971165][ T5625] lo speed is unknown, defaulting to 1000 [ 475.121092][T20102] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 475.121140][T20102] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 475.121183][T20102] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 475.367273][T20102] RDS/IB: syz0: added [ 475.411767][T20102] smc: adding ib device syz0 with port count 1 [ 475.411987][T20102] smc: ib device syz0 port 1 has no pnetid [ 475.474588][T20185] __nla_validate_parse: 8 callbacks suppressed [ 475.474613][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 475.515592][ T25] lo speed is unknown, defaulting to 1000 [ 475.629517][T20102] lo speed is unknown, defaulting to 1000 [ 475.636916][T20172] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3587'. [ 475.636993][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3587'. [ 475.637039][T20172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3587'. [ 475.786399][T20189] Cannot find set identified by id 65534 to match [ 475.845956][T20189] Cannot find add_set index 0 as target [ 476.038991][T20193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3590'. [ 476.767385][T20121] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.775342][T20121] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.775774][T20121] bridge_slave_0: entered allmulticast mode [ 476.784748][T20121] bridge_slave_0: entered promiscuous mode [ 476.798404][T20121] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.798586][T20121] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.798748][T20121] bridge_slave_1: entered allmulticast mode [ 476.807019][T20121] bridge_slave_1: entered promiscuous mode [ 476.846638][T20209] ieee802154 phy1 wpan1: encryption failed: -90 [ 476.911115][ T5623] Bluetooth: hci7: command tx timeout [ 476.917261][T20102] lo speed is unknown, defaulting to 1000 [ 477.106485][T20214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3596'. [ 477.120931][T20121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.156249][T20121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.506441][T20121] team0: Port device team_slave_0 added [ 477.532804][T20121] team0: Port device team_slave_1 added [ 477.610243][T20224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3599'. [ 477.644263][T20121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.644284][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.644315][T20121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.646701][T20121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.646717][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.646745][T20121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.919876][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 478.244873][T20102] lo speed is unknown, defaulting to 1000 [ 478.631654][T20121] hsr_slave_0: entered promiscuous mode [ 478.651492][T20121] hsr_slave_1: entered promiscuous mode [ 478.655744][T20121] debugfs: 'hsr0' already exists in 'hsr' [ 478.655769][T20121] Cannot create hsr debugfs directory [ 478.991735][ T5623] Bluetooth: hci7: command tx timeout [ 479.083332][T20253] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 479.141030][T20257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3605'. [ 479.464195][T20267] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 479.577752][T20265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.580103][T20121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 479.615187][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.625382][T20121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 479.666884][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.677396][T20121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 479.860427][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.884212][T20121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 479.954362][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.053274][T20284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3613'. [ 480.053314][T20284] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 480.214258][T20102] lo speed is unknown, defaulting to 1000 [ 480.482376][T20121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.624278][T20121] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.648877][T10759] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.649096][T10759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.684425][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.684681][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.072145][ T5623] Bluetooth: hci7: command tx timeout [ 481.073066][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.934500][T20102] lo speed is unknown, defaulting to 1000 [ 482.769744][T20347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 482.777396][T20121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.752257][T20374] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 484.063962][T20102] lo speed is unknown, defaulting to 1000 [ 484.067070][T20379] netlink: 'syz.3.3630': attribute type 6 has an invalid length. [ 484.202870][T20121] veth0_vlan: entered promiscuous mode [ 484.227456][T20121] veth1_vlan: entered promiscuous mode [ 484.334141][T20387] xt_cgroup: path and classid specified [ 484.346447][T20121] veth0_macvtap: entered promiscuous mode [ 484.361830][T20121] veth1_macvtap: entered promiscuous mode [ 484.416811][T20387] atomic_op ffff88804a0c41e0 conn xmit_atomic 0000000000000000 [ 484.665208][T20394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 484.735004][T20121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.814593][T20121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.920552][ T145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.921448][ T145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.921490][ T145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.921528][ T145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.159441][T20401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3639'. [ 485.162555][T20401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.185376][T20102] lo speed is unknown, defaulting to 1000 [ 485.542297][T10750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.542363][T10750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.665375][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.665436][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.963057][T20412] netlink: 'syz.2.3642': attribute type 21 has an invalid length. [ 485.963087][T20412] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.142094][T20418] ip_tables: iptables: counters copy to user failed while replacing table [ 486.494737][T20102] lo speed is unknown, defaulting to 1000 [ 487.084743][T20441] Bluetooth: MGMT ver 1.23 [ 487.691893][T20102] lo speed is unknown, defaulting to 1000 [ 487.864529][ T5623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 487.898470][ T5623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 487.900337][ T5623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 487.903264][ T5623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 487.905955][ T5623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 488.141211][T20462] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3652'. [ 488.272753][T20463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.651672][T20478] sit1: entered promiscuous mode [ 488.651701][T20478] sit1: entered allmulticast mode [ 488.889693][T20102] lo speed is unknown, defaulting to 1000 [ 489.396819][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.673940][T20505] IPv6: sit1: Disabled Multicast RS [ 489.796234][T20506] xt_ipcomp: unknown flags 1D [ 490.029018][ T5627] Bluetooth: hci8: command tx timeout [ 490.322264][T20457] wlan1 speed is unknown, defaulting to 1000 [ 490.371689][T20102] lo speed is unknown, defaulting to 1000 [ 490.581623][T20526] netlink: 'syz.7.3669': attribute type 1 has an invalid length. [ 490.708481][T20528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3670'. [ 490.917138][T20536] netlink: 'syz.3.3671': attribute type 1 has an invalid length. [ 491.650821][T20569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3677'. [ 491.713689][T20570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3677'. [ 492.119290][ T5627] Bluetooth: hci8: command tx timeout [ 492.704067][T20457] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.704273][T20457] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.704437][T20457] bridge_slave_0: entered allmulticast mode [ 492.706745][T20457] bridge_slave_0: entered promiscuous mode [ 492.715663][T20457] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.715859][T20457] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.717300][T20457] bridge_slave_1: entered allmulticast mode [ 492.724726][T20457] bridge_slave_1: entered promiscuous mode [ 492.889157][T20457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.896493][T20457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.020508][T20457] team0: Port device team_slave_0 added [ 493.111429][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.136219][T20457] team0: Port device team_slave_1 added [ 493.255127][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.275521][T20457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.275549][T20457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.275602][T20457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.336723][T20457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.336751][T20457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.336786][T20457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.389467][ T5627] Bluetooth: hci6: command 0x0406 tx timeout [ 493.394939][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 493.618877][ T13] team0: Port device netdevsim1 removed [ 493.622770][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.753702][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.783877][T20457] hsr_slave_0: entered promiscuous mode [ 493.787467][T20457] hsr_slave_1: entered promiscuous mode [ 493.803352][T20457] debugfs: 'hsr0' already exists in 'hsr' [ 493.803376][T20457] Cannot create hsr debugfs directory [ 494.172662][T20553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.198026][ T52] Bluetooth: hci8: command tx timeout [ 494.426132][T20594] netlink: 'syz.3.3682': attribute type 10 has an invalid length. [ 494.520670][ T13] bridge_slave_1: left allmulticast mode [ 494.520736][ T13] bridge_slave_1: left promiscuous mode [ 494.521265][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.580613][T20596] ip_tables: iptables: counters copy to user failed while replacing table [ 494.605380][ T13] bridge_slave_0: left allmulticast mode [ 494.605476][ T13] bridge_slave_0: left promiscuous mode [ 494.606170][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.727183][T20604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3684'. [ 494.752208][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 494.753161][T20605] netlink: 'syz.6.3685': attribute type 1 has an invalid length. [ 494.924215][ T13] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 495.111235][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.135645][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.148161][ T13] bond0 (unregistering): Released all slaves [ 495.193386][ T13] bond1 (unregistering): Released all slaves [ 495.219391][ T13] bond2 (unregistering): Released all slaves [ 495.246156][ T13] bond3 (unregistering): Released all slaves [ 495.283814][ T13] bond4 (unregistering): Released all slaves [ 495.310453][ T13] bond5 (unregistering): Released all slaves [ 495.344123][ T13] bond6 (unregistering): Released all slaves [ 495.374611][T20594] tipc: Resetting bearer [ 495.389604][T20594] tipc: Resetting bearer [ 495.390827][T20594] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.393346][T20594] team0: entered promiscuous mode [ 495.393585][T20594] team0: entered allmulticast mode [ 495.396545][T20594] bond0: (slave team0): Enslaving as an active interface with an up link [ 495.520163][T10755] bridge0: port 1(bond0) entered blocking state [ 495.520337][T10755] bridge0: port 1(bond0) entered forwarding state [ 495.565502][T20605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.762117][T20618] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3688'. [ 495.783536][T20606] bond1: (slave gretap1): making interface the new active one [ 495.842335][T20606] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 495.891103][ T13] : left promiscuous mode [ 496.271616][ T52] Bluetooth: hci8: command tx timeout [ 496.606496][ T13] tipc: Disabling bearer [ 496.655043][ T13] tipc: Left network mode [ 496.786290][T20645] ip_tables: iptables: counters copy to user failed while replacing table [ 497.157030][T20654] netlink: 'syz.3.3695': attribute type 3 has an invalid length. [ 497.157093][T20654] netlink: 'syz.3.3695': attribute type 1 has an invalid length. [ 497.338384][T20658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3696'. [ 497.641045][T20664] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3697'. [ 497.642988][T20664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.616698][T20690] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 498.832739][T20696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.220806][T20457] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 499.418872][T20457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.422160][T20457] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 499.472814][T20457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.489917][T20457] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 499.570076][T20457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.577349][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 499.581775][T20457] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 499.642127][T20457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.723596][T20719] ip_tables: iptables: counters copy to user failed while replacing table [ 500.259537][T20746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3707'. [ 500.266901][T20735] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3708'. [ 500.775882][ T13] hsr_slave_0: left promiscuous mode [ 500.790562][ T13] hsr_slave_1: left promiscuous mode [ 500.793216][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.797763][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.820364][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.820388][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.887310][ T13] veth1_vlan: left promiscuous mode [ 500.887402][ T13] veth0_vlan: left promiscuous mode [ 501.386303][ T13] team0 (unregistering): Port device team_slave_1 removed [ 501.493815][ T13] team0 (unregistering): Port device team_slave_0 removed [ 501.559450][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.874958][ T145] smc: removing ib device syz0 [ 502.002458][ T145] smbdirect: ib_dev[syz0] removed [ 502.004827][T20755] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 502.102036][ T9335] infiniband syz0: ib_query_port failed (-19) [ 502.103286][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 502.466760][T20770] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3710'. [ 502.487691][T20770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.757383][T20770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.142848][T20788] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3714'. [ 503.362198][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3713'. [ 503.672982][T20794] hsr0: entered allmulticast mode [ 503.673011][T20794] hsr_slave_0: entered allmulticast mode [ 503.673031][T20794] hsr_slave_1: entered allmulticast mode [ 503.952543][T20457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.119022][T20805] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3720'. [ 504.145389][T20457] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.234374][T10759] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.234602][T10759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.306741][T10759] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.307103][T10759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.837148][T20837] syzkaller0: entered promiscuous mode [ 505.837175][T20837] syzkaller0: entered allmulticast mode [ 506.098806][T20848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3728'. [ 506.355839][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3729'. [ 506.470079][T20853] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 506.475587][T20853] bond1 (unregistering): Released all slaves [ 506.930038][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 507.215945][T20867] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 507.216000][T20867] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 509.087322][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3742'. [ 509.087354][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3742'. [ 509.111157][T20457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.641819][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 510.904868][T20965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3751'. [ 510.906251][ T1400] IPVS: starting estimator thread 0... [ 510.960484][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3752'. [ 510.989975][T20967] IPVS: using max 23 ests per chain, 55200 per kthread [ 511.014419][T20972] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3753'. [ 511.483382][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3752'. [ 512.191402][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 512.193666][T21008] netlink: 'syz.2.3754': attribute type 12 has an invalid length. [ 512.193691][T21008] netlink: 'syz.2.3754': attribute type 29 has an invalid length. [ 512.193707][T21008] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3754'. [ 512.193729][T21008] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3754'. [ 512.673035][T20457] veth0_vlan: entered promiscuous mode [ 512.735395][T20457] veth1_vlan: entered promiscuous mode [ 512.805746][T20457] veth0_macvtap: entered promiscuous mode [ 512.841259][T20457] veth1_macvtap: entered promiscuous mode [ 512.890594][T20457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.951759][T21019] ip_tables: iptables: counters copy to user failed while replacing table [ 513.138438][T20457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.203912][T21028] FAULT_INJECTION: forcing a failure. [ 513.203912][T21028] name failslab, interval 1, probability 0, space 0, times 0 [ 513.203986][T21028] CPU: 0 UID: 0 PID: 21028 Comm: syz.7.3758 Not tainted syzkaller #0 PREEMPT(full) [ 513.204012][T21028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 513.204034][T21028] Call Trace: [ 513.204043][T21028] [ 513.204053][T21028] dump_stack_lvl+0xe8/0x150 [ 513.204090][T21028] should_fail_ex+0x410/0x560 [ 513.204122][T21028] should_failslab+0xa8/0x100 [ 513.204153][T21028] __kmalloc_cache_noprof+0xa3/0x600 [ 513.204197][T21028] ? call_usermodehelper_setup+0x8e/0x270 [ 513.204222][T21028] ? call_usermodehelper_setup+0x8e/0x270 [ 513.204251][T21028] ? __request_module+0x2ec/0x630 [ 513.204283][T21028] call_usermodehelper_setup+0x8e/0x270 [ 513.204310][T21028] ? __pfx_free_modprobe_argv+0x10/0x10 [ 513.204342][T21028] __request_module+0x3ba/0x630 [ 513.204385][T21028] ? irqentry_exit+0x218/0x910 [ 513.204417][T21028] ? rtnl_link_ops_get+0x23/0x250 [ 513.204448][T21028] ? __pfx___request_module+0x10/0x10 [ 513.204490][T21028] ? rtnl_link_ops_get+0x23/0x250 [ 513.204519][T21028] ? rtnl_link_ops_get+0x23/0x250 [ 513.204551][T21028] ? rtnl_link_ops_get+0x215/0x250 [ 513.204588][T21028] rtnl_newlink+0x662/0x1c30 [ 513.204620][T21028] ? kmem_cache_free+0x182/0x650 [ 513.204642][T21028] ? nlmon_xmit+0xb0/0x100 [ 513.204666][T21028] ? dev_hard_start_xmit+0x2cd/0x830 [ 513.204697][T21028] ? __dev_queue_xmit+0x14d1/0x3920 [ 513.204717][T21028] ? __netlink_deliver_tap+0x5b4/0x860 [ 513.204738][T21028] ? netlink_deliver_tap+0x19c/0x1b0 [ 513.204759][T21028] ? netlink_unicast+0x781/0x940 [ 513.204788][T21028] ? netlink_sendmsg+0x813/0xb40 [ 513.204812][T21028] ? __pfx_rtnl_newlink+0x10/0x10 [ 513.204839][T21028] ? do_syscall_64+0x166/0x520 [ 513.204869][T21028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.204929][T21028] ? kasan_quarantine_put+0xbb/0x1f0 [ 513.204952][T21028] ? lockdep_hardirqs_on+0x7b/0x110 [ 513.204983][T21028] ? nlmon_xmit+0xb0/0x100 [ 513.205005][T21028] ? kmem_cache_free+0x182/0x650 [ 513.205041][T21028] ? __lock_acquire+0x747/0x2de0 [ 513.205080][T21028] ? irqentry_exit+0x218/0x910 [ 513.205110][T21028] ? lockdep_hardirqs_on+0x7b/0x110 [ 513.205165][T21028] ? __pfx_rtnl_newlink+0x10/0x10 [ 513.205194][T21028] rtnetlink_rcv_msg+0x802/0xc00 [ 513.205229][T21028] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 513.205259][T21028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.205285][T21028] ? ref_tracker_free+0x689/0x830 [ 513.205316][T21028] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.205356][T21028] netlink_rcv_skb+0x226/0x4a0 [ 513.205390][T21028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.205422][T21028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.205459][T21028] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.205480][T21028] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.205508][T21028] netlink_unicast+0x7bd/0x940 [ 513.205553][T21028] netlink_sendmsg+0x813/0xb40 [ 513.205575][T21028] ? lockdep_hardirqs_on+0x7b/0x110 [ 513.205614][T21028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.205647][T21028] ? apparmor_socket_sendmsg+0x98/0x360 [ 513.205675][T21028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.205698][T21028] sock_sendmsg_nosec+0x13a/0x180 [ 513.205727][T21028] ____sys_sendmsg+0x54e/0x850 [ 513.205767][T21028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.205810][T21028] ? import_iovec+0x73/0xa0 [ 513.205845][T21028] ___sys_sendmsg+0x2a5/0x360 [ 513.205877][T21028] ? __lock_acquire+0x747/0x2de0 [ 513.205907][T21028] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.205979][T21028] ? __fget_files+0x2a/0x420 [ 513.206010][T21028] ? __fget_files+0x3a2/0x420 [ 513.206053][T21028] __x64_sys_sendmsg+0x1b1/0x290 [ 513.206087][T21028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.206142][T21028] do_syscall_64+0x166/0x520 [ 513.206174][T21028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.206196][T21028] ? clear_bhb_loop+0x70/0xc0 [ 513.206223][T21028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.206244][T21028] RIP: 0033:0x7fb5fb59e199 [ 513.206266][T21028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.206285][T21028] RSP: 002b:00007fb5fc3da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.206310][T21028] RAX: ffffffffffffffda RBX: 00007fb5fb825fa0 RCX: 00007fb5fb59e199 [ 513.206327][T21028] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 513.206342][T21028] RBP: 00007fb5fc3da090 R08: 0000000000000000 R09: 0000000000000000 [ 513.206356][T21028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.206378][T21028] R13: 00007fb5fb826038 R14: 00007fb5fb825fa0 R15: 00007fff9d843928 [ 513.206413][T21028] [ 513.443383][ T3342] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.443545][ T3342] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.443655][ T3342] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.443761][ T3342] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.114490][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3761'. [ 514.593407][ T13] IPVS: stop unused estimator thread 0... [ 514.690131][T10755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.690157][T10755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.161074][T10757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.161099][T10757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.082953][ T3342] IPVS: starting estimator thread 0... [ 516.169272][T21087] IPVS: using max 25 ests per chain, 60000 per kthread [ 517.489503][T21121] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3777'. [ 517.515740][T21121] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3777'. [ 517.915981][T21128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3781'. [ 518.011130][T21135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3781'. [ 518.454129][T21151] netlink: 'syz.8.3788': attribute type 4 has an invalid length. [ 518.454188][T21151] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3788'. [ 518.690532][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3786'. [ 518.815562][ T27] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.817465][T10757] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.818213][T10757] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.818283][T10757] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.126210][T21170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3789'. [ 519.293183][T21170] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3789'. [ 519.950416][T21193] syzkaller0: entered promiscuous mode [ 519.950482][T21193] syzkaller0: entered allmulticast mode [ 520.805819][T21225] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.024798][T21230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3802'. [ 521.130497][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 521.130542][T21238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.404185][T10764] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 521.697417][T21251] netlink: 'syz.8.3809': attribute type 21 has an invalid length. [ 522.038623][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 522.265242][T21263] gretap0: entered promiscuous mode [ 522.296336][T21265] 0ªî{X¹¦: renamed from gretap0 [ 522.315948][T21265] 0ªî{X¹¦: left promiscuous mode [ 522.315973][T21265] 0ªî{X¹¦: entered allmulticast mode [ 522.343986][T21265] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 522.836150][T21274] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 524.574348][T21342] __nla_validate_parse: 4 callbacks suppressed [ 524.574377][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3828'. [ 524.640054][T21342] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3828'. [ 525.684107][T21368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3838'. [ 525.684151][T21368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3838'. [ 525.747458][T21368] netlink: 'syz.3.3838': attribute type 3 has an invalid length. [ 525.749498][T21368] netlink: 'syz.3.3838': attribute type 3 has an invalid length. [ 526.213631][T21390] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 526.254142][T21389] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 526.461019][T21392] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 526.463121][T21392] bond5 (unregistering): Released all slaves [ 526.576002][T21390] bridge2: entered promiscuous mode [ 526.585792][T21390] bond4: (slave bridge2): making interface the new active one [ 526.586310][T21390] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 526.703017][T21403] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3846'. [ 526.725535][T21405] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3847'. [ 526.739212][T21406] netlink: 'syz.3.3847': attribute type 17 has an invalid length. [ 526.739235][T21406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3847'. [ 526.739264][T21406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3847'. [ 526.774691][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 526.993028][T21406] syz_tun: entered promiscuous mode [ 527.005531][T21406] ip6gretap0: entered promiscuous mode [ 527.404262][T21421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3853'. [ 527.702190][T21427] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.704879][T21435] xfrm1: entered promiscuous mode [ 527.704970][T21435] xfrm1: entered allmulticast mode [ 528.147920][T21454] syzkaller0: left promiscuous mode [ 528.147947][T21454] syzkaller0: left allmulticast mode [ 528.270731][T21455] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.620636][T10751] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.819895][T21470] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 529.255420][T21481] tipc: Failed to remove unknown binding: 66,0,0/0:1259084985/1259084986 [ 529.256359][T21481] tipc: Failed to remove unknown binding: 66,0,0/0:1259084985/1259084986 [ 529.553756][T21485] smc: net device lo erased user defined pnetid SYZ0 [ 529.554017][T21485] smc: smcd device lo erased user defined pnetid SYZ0 [ 529.946449][T21501] __nla_validate_parse: 8 callbacks suppressed [ 529.946472][T21501] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3872'. [ 530.214397][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3875'. [ 530.916751][T21531] ip_tables: iptables: counters copy to user failed while replacing table [ 530.976923][T21536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3878'. [ 530.976991][T21536] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3878'. [ 530.977318][T21536] netlink: 'syz.3.3878': attribute type 5 has an invalid length. [ 530.977358][T21536] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3878'. [ 531.925497][T21565] ip_tables: iptables: counters copy to user failed while replacing table [ 533.684496][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3886'. [ 533.822663][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888073022800: rx timeout, send abort [ 534.588295][ T5623] Bluetooth: hci8: command 0x0405 tx timeout [ 535.071477][T21638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3893'. [ 535.961513][T21653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input7 [ 536.250637][T21667] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3900'. [ 536.661149][T21679] ieee802154 phy1 wpan1: encryption failed: -90 [ 536.769426][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3906'. [ 536.812655][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3906'. [ 536.814514][T21686] netlink: 124 bytes leftover after parsing attributes in process `syz.8.3906'. [ 536.844767][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3906'. [ 536.963330][T21693] smc: net device lo applied user defined pnetid SYZ0 [ 536.963396][T21693] smc: smcd device lo applied user defined pnetid SYZ0 [ 537.108331][T21691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3908'. [ 537.179888][T21691] syzkaller1: entered promiscuous mode [ 537.179914][T21691] syzkaller1: entered allmulticast mode [ 537.373375][T21704] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3910'. [ 537.601036][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3911'. [ 538.174369][T21732] netlink: 'syz.2.3915': attribute type 4 has an invalid length. [ 538.174435][T21732] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3915'. [ 538.359351][T21736] tipc: Invalid UDP bearer configuration [ 538.359489][T21736] tipc: Enabling of bearer rejected, failed to enable media [ 539.665378][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.690904][T21780] netlink: zone id is out of range [ 539.690923][T21780] netlink: zone id is out of range [ 539.691075][T21780] netlink: zone id is out of range [ 540.340025][T21798] ip_tables: iptables: counters copy to user failed while replacing table [ 540.434698][T21800] __nla_validate_parse: 1 callbacks suppressed [ 540.434722][T21800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3931'. [ 540.506319][T21801] 8021q: VLANs not supported on ip_vti0 [ 540.974436][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3937'. [ 540.976661][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3937'. [ 542.009942][T21855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3945'. [ 542.009973][T21855] nbd: couldn't find a device at index 65553 [ 542.478014][T21868] netlink: 'syz.8.3949': attribute type 4 has an invalid length. [ 542.480773][T21863] netlink: 'syz.6.3947': attribute type 1 has an invalid length. [ 542.522880][T21872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.620605][T21869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 542.653784][T21863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.756274][T21886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 542.800529][T21875] bond2: (slave gretap2): making interface the new active one [ 542.807311][T21875] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 543.002770][T21876] bond2: entered promiscuous mode [ 543.045130][T21880] macvlan3: entered promiscuous mode [ 543.045159][T21880] macvlan3: entered allmulticast mode [ 543.053346][T21880] bond2: (slave macvlan3): Opening slave failed [ 543.218825][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3953'. [ 543.218867][T21899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3953'. [ 543.334784][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3953'. [ 543.334824][T21899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3953'. [ 543.338202][T10751] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.338254][T10751] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.338292][T10751] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.459280][T10751] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.481949][T21905] block nbd2: Unsupported socket: should be TCP or UNIX. [ 543.507226][T21907] netlink: 'syz.3.3954': attribute type 64 has an invalid length. [ 544.405291][T21934] ip_tables: iptables: counters copy to user failed while replacing table [ 544.405522][T21935] ip_tables: iptables: counters copy to user failed while replacing table [ 544.455426][ T32] audit: type=1800 audit(1791266279.591:14): pid=21934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3964" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1408 res=0 errno=0 [ 544.641614][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.656444][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.671340][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.675313][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.676438][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 545.037102][T21943] sit0: entered promiscuous mode [ 545.063875][T21943] netlink: 'syz.3.3966': attribute type 1 has an invalid length. [ 545.398845][ T145] bond0: (slave team0): link status definitely down, disabling slave [ 545.442503][ T145] bond0: now running without any active interface! [ 545.443604][ T145] bridge0: port 1(bond0) entered disabled state [ 546.496436][T21936] wlan1 speed is unknown, defaulting to 1000 [ 546.513902][T21984] can: request_module (can-proto-4) failed. [ 546.827860][ T52] Bluetooth: hci0: command tx timeout [ 547.160056][T22016] __nla_validate_parse: 4 callbacks suppressed [ 547.160078][T22016] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3982'. [ 547.285880][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807405e000: rx timeout, send abort [ 547.286411][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807405e000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 547.294026][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807405dc00: rx timeout, send abort [ 547.295607][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807405dc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 547.864040][T22036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3985'. [ 547.864082][T22036] netlink: 'syz.3.3985': attribute type 7 has an invalid length. [ 547.864095][T22036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3985'. [ 548.029957][T21936] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.030122][T21936] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.030322][T21936] bridge_slave_0: entered allmulticast mode [ 548.046157][T21936] bridge_slave_0: entered promiscuous mode [ 548.083588][T21936] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.083704][T21936] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.083880][T21936] bridge_slave_1: entered allmulticast mode [ 548.120995][T21936] bridge_slave_1: entered promiscuous mode [ 548.171479][T22034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3984'. [ 548.270032][T21936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.273767][T21936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.337276][T21936] team0: Port device team_slave_0 added [ 548.347308][T21936] team0: Port device team_slave_1 added [ 548.390606][T21936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.390624][T21936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.390648][T21936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.392856][T21936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.392874][T21936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.392903][T21936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.554310][T22053] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 548.554350][T22053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.916674][ T52] Bluetooth: hci0: command tx timeout [ 548.994164][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3992'. [ 549.267199][T22071] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 549.267249][T22071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.305320][T22071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3995'. [ 549.372213][T21936] hsr_slave_0: entered promiscuous mode [ 549.441196][T21936] hsr_slave_1: entered promiscuous mode [ 549.443623][T21936] debugfs: 'hsr0' already exists in 'hsr' [ 549.466296][T21936] Cannot create hsr debugfs directory [ 549.644146][T22088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3996'. [ 549.721580][ T4937] Bluetooth: hci1: command 0x0406 tx timeout [ 550.044632][T22095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3999'. [ 550.044775][T22095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3999'. [ 550.433672][T22105] batman_adv: batadv0: Adding interface: veth0 [ 550.433693][T22105] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.433728][T22105] batman_adv: batadv0: Interface activated: veth0 [ 550.434392][T22101] netlink: 576 bytes leftover after parsing attributes in process `syz.2.4002'. [ 550.988678][ T5623] Bluetooth: hci0: command tx timeout [ 551.503497][T22112] block nbd0: Unsupported socket: should be TCP or UNIX. [ 551.526761][T22131] ªªªªª»: renamed from dummy0 (while UP) [ 551.581573][T22130] syzkaller0: entered promiscuous mode [ 551.581608][T22130] syzkaller0: entered allmulticast mode [ 551.817033][T21936] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 551.833017][T21936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.864063][T21936] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 551.893624][T21936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.894823][T21936] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 551.935656][T21936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.937294][T21936] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 551.974289][T21936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.276302][T22157] ip_tables: iptables: counters copy to user failed while replacing table [ 553.100930][ T5623] Bluetooth: hci0: command tx timeout [ 553.388718][ T27] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.842996][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 558.289655][T22184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4015'. [ 558.493743][T22187] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4018'. [ 558.493789][T22187] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4018'. [ 558.529074][T21936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.551046][T22187] erspan0: entered promiscuous mode [ 558.552383][T22187] gretap0: entered promiscuous mode [ 558.553127][T22187] debugfs: 'hsr1' already exists in 'hsr' [ 558.553150][T22187] Cannot create hsr debugfs directory [ 558.661993][T21936] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.724231][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.724377][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.776833][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.776952][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.135372][T22201] bond3: invalid ARP target 0.0.0.0 specified for addition [ 559.135443][T22201] bond3: option arp_ip_target: invalid value (0) [ 559.165814][T22201] bond3 (unregistering): Released all slaves [ 560.309472][T22228] syzkaller0: entered promiscuous mode [ 560.309502][T22228] syzkaller0: entered allmulticast mode [ 560.332278][T22223] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4027'. [ 560.417012][T22224] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4027'. [ 561.054955][T22255] x_tables: unsorted underflow at hook 3 [ 561.412732][T21936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.702233][T22264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.893939][T22270] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4036'. [ 562.078964][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4033'. [ 562.099105][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4033'. [ 563.006737][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293643][T22304] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 563.293813][T22304] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 563.386956][T22304] tc_dump_action: action bad kind [ 563.529540][T22306] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 563.529607][T22306] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 563.752616][T21936] veth0_vlan: entered promiscuous mode [ 563.806726][T21936] veth1_vlan: entered promiscuous mode [ 564.043040][T21936] veth0_macvtap: entered promiscuous mode [ 564.075572][T21936] veth1_macvtap: entered promiscuous mode [ 564.121842][T21936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.161645][T21936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.296494][T22333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.622297][ T27] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.914063][T10764] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.985435][T22355] vlan1: entered promiscuous mode [ 564.985462][T22355] bridge0: entered promiscuous mode [ 565.004156][ T3342] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.051082][ T3342] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.074260][T10755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.074300][T10755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.172787][T10755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.172814][T10755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.333219][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4057'. [ 565.335052][T22359] netlink: 'syz.6.4057': attribute type 1 has an invalid length. [ 565.477727][T22361] bond3: (slave veth0_to_bond): making interface the new active one [ 565.480531][T22361] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 565.545323][T22359] macvlan1: entered promiscuous mode [ 565.545384][T22359] macvlan1: entered allmulticast mode [ 565.551744][T22359] bond3: entered promiscuous mode [ 565.551806][T22359] veth0_to_bond: entered promiscuous mode [ 565.598340][T22359] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 565.620641][T22359] bond3: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.620751][T22359] bond3: left promiscuous mode [ 565.620763][T22359] veth0_to_bond: left promiscuous mode [ 565.691399][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4057'. [ 565.694816][T22369] netlink: 'syz.6.4057': attribute type 1 has an invalid length. [ 565.936758][T22375] macvlan1: entered promiscuous mode [ 565.936783][T22375] macvlan1: entered allmulticast mode [ 565.937552][T22375] bond3: entered promiscuous mode [ 565.937571][T22375] veth0_to_bond: entered promiscuous mode [ 565.938475][T22375] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 565.939585][T22375] bond3: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.939682][T22375] bond3: left promiscuous mode [ 565.939697][T22375] veth0_to_bond: left promiscuous mode [ 565.940260][T22379] netlink: 'syz.8.4060': attribute type 1 has an invalid length. [ 566.290195][T22379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 566.759786][T22399] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4062'. [ 566.762562][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4061'. [ 566.796642][T22401] veth0_to_bridge: entered promiscuous mode [ 566.872069][T22400] veth0_to_bridge: left promiscuous mode [ 567.312118][ T25] wlan1 speed is unknown, defaulting to 1000 [ 567.312148][ T25] syz2: Port: 1 Link DOWN [ 567.454626][T22422] No such timeout policy "syz1" [ 567.608413][T22431] syzkaller0: entered promiscuous mode [ 567.608442][T22431] syzkaller0: entered allmulticast mode [ 568.193210][ T32] audit: type=1800 audit(1791266303.331:15): pid=22451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4078" name="memory.events" dev="tmpfs" ino=45 res=0 errno=0 [ 568.240448][ T32] audit: type=1804 audit(1791266303.381:16): pid=22451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4078" name="/newroot/5/memory.events" dev="tmpfs" ino=45 res=1 errno=0 [ 568.285914][T22451] netlink: 'syz.9.4078': attribute type 2 has an invalid length. [ 568.321510][T22454] netlink: 'syz.3.4077': attribute type 4 has an invalid length. [ 568.904202][T22470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'. [ 568.904247][T22470] netlink: 'syz.2.4083': attribute type 10 has an invalid length. [ 568.904268][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4083'. [ 568.997497][T22470] geneve3: entered promiscuous mode [ 568.997527][T22470] geneve3: entered allmulticast mode [ 569.338952][T22485] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4090'. [ 569.339019][T22485] netlink: 43 bytes leftover after parsing attributes in process `syz.8.4090'. [ 569.339075][T22485] netlink: 'syz.8.4090': attribute type 6 has an invalid length. [ 569.339110][T22485] netlink: 'syz.8.4090': attribute type 5 has an invalid length. [ 569.339145][T22485] netlink: 43 bytes leftover after parsing attributes in process `syz.8.4090'. [ 569.524169][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4092'. [ 569.610156][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118727 [ 569.610210][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118726 [ 569.610236][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118725 [ 569.610261][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118724 [ 569.615374][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118727 [ 569.615411][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118726 [ 569.615436][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118725 [ 569.615461][T22492] tipc: Failed to remove unknown binding: 66,0,0/2:2084118723/2084118724 [ 569.737405][T22492] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 570.304340][T22507] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.276290][T22545] __nla_validate_parse: 3 callbacks suppressed [ 571.276316][T22545] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4108'. [ 571.297758][T22549] syz_tun: entered allmulticast mode [ 571.325310][T22546] dvmrp8: entered allmulticast mode [ 571.424786][T22543] syz_tun: left allmulticast mode [ 571.732706][T22560] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4112'. [ 571.859444][T22566] x_tables: duplicate entry at hook 1 [ 572.005919][T22578] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4116'. [ 572.181200][T22583] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 572.796332][T22598] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4120'. [ 572.800373][T22598] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4120'. [ 573.022061][T22600] netlink: 'syz.6.4121': attribute type 2 has an invalid length. [ 573.022090][T22600] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4121'. [ 573.037205][T22600] : entered promiscuous mode [ 574.127966][T22542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.496534][T22631] sctp: [Deprecated]: syz.6.4127 (pid 22631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.496534][T22631] Use struct sctp_sack_info instead [ 574.525525][ T33] INFO: task syz.1.3084:18324 blocked for more than 143 seconds. [ 574.525555][ T33] Not tainted syzkaller #0 [ 574.525568][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.525580][ T33] task:syz.1.3084 state:D stack:25400 pid:18324 tgid:18323 ppid:16930 task_flags:0x400140 flags:0x00080002 [ 574.525653][ T33] Call Trace: [ 574.525661][ T33] [ 574.525686][ T33] __schedule+0x17db/0x58f0 [ 574.525757][ T33] ? __pfx___schedule+0x10/0x10 [ 574.525798][ T33] ? schedule+0x90/0x2b0 [ 574.525831][ T33] schedule+0x164/0x2b0 [ 574.525861][ T33] schedule_preempt_disabled+0x13/0x30 [ 574.525890][ T33] __mutex_lock+0x7c1/0x1550 [ 574.525929][ T33] ? __mutex_lock+0x5d4/0x1550 [ 574.525965][ T33] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 574.526001][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 574.526044][ T33] ? net_generic+0x1e/0x240 [ 574.526070][ T33] ? net_generic+0x1e/0x240 [ 574.526106][ T33] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 574.526137][ T33] ? __kmalloc_noprof+0x36b/0x720 [ 574.526169][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 574.526201][ T33] ? do_syscall_64+0x166/0x520 [ 574.526231][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.526257][ T33] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 574.526302][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 574.526351][ T33] ? rcu_is_watching+0x16/0xb0 [ 574.526382][ T33] ? trace_kmalloc+0x2a/0xf0 [ 574.526409][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 574.526435][ T33] ? __nla_parse+0x40/0x60 [ 574.526470][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 574.526503][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 574.526543][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 574.526582][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.526630][ T33] ? bpf_lsm_capable+0x9/0x20 [ 574.526654][ T33] ? security_capable+0x7e/0x2c0 [ 574.526703][ T33] genl_rcv_msg+0x614/0x7a0 [ 574.526740][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.526771][ T33] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 574.526821][ T33] netlink_rcv_skb+0x226/0x4a0 [ 574.526847][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.526879][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.526922][ T33] ? down_read+0x2be/0x330 [ 574.526962][ T33] genl_rcv+0x28/0x40 [ 574.526991][ T33] netlink_unicast+0x7bd/0x940 [ 574.527041][ T33] netlink_sendmsg+0x813/0xb40 [ 574.527077][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.527112][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 574.527144][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.527168][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 574.527199][ T33] ____sys_sendmsg+0x54e/0x850 [ 574.527241][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.527287][ T33] ? import_iovec+0x73/0xa0 [ 574.527322][ T33] ___sys_sendmsg+0x2a5/0x360 [ 574.527356][ T33] ? __lock_acquire+0x747/0x2de0 [ 574.527387][ T33] ? __pfx_ ** replaying previous printk message ** [ 574.527387][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.527426][ T33] ? futex_wait+0x2a2/0x390 [ 574.527479][ T33] ? __fget_files+0x2a/0x420 [ 574.527510][ T33] ? __fget_files+0x3a2/0x420 [ 574.527555][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 574.527616][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.527683][ T33] do_syscall_64+0x166/0x520 [ 574.527716][ T33] ? trace_irq_disable+0x3b/0x140 [ 574.527740][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.527763][ T33] ? clear_bhb_loop+0x70/0xc0 [ 574.527792][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.527816][ T33] RIP: 0033:0x7f71d5d9e199 [ 574.527837][ T33] RSP: 002b:00007f71d6bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.527864][ T33] RAX: ffffffffffffffda RBX: 00007f71d6025fa0 RCX: 00007f71d5d9e199 [ 574.527882][ T33] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 574.527897][ T33] RBP: 00007f71d5e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 574.527913][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.527927][ T33] R13: 00007f71d6026038 R14: 00007f71d6025fa0 R15: 00007fff3a676368 [ 574.527963][ T33] [ 574.528030][ T33] [ 574.528030][ T33] Showing all locks held in the system: [ 574.528043][ T33] locks held by kworker/0:1/10: 4, on CPU#0: [ 574.528060][ T33] #0: ffff88801b696d40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.528130][ T33] #1: ffffc900000f7c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.528193][ T33] #2: ffffffff8ed5d768 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0 [ 574.528252][ T33] #3: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 574.528320][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 574.528337][ T33] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.528416][ T33] locks held by getty/5377: 2, on CPU#1: [ 574.528432][ T33] #0: ffff88803534b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.528489][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 574.528562][ T33] locks held by kworker/u8:16/10749: 2, on CPU#1: [ 574.528579][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.528643][ T33] #1: ffffc9000405fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.528720][ T33] locks held by kworker/u8:21/10755: 3, last CPU#1: [ 574.528737][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.528800][ T33] #1: ffffc9000392fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.528866][ T33] #2: ffff88803394e258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 574.528944][ T33] locks held by kworker/u8:27/10764: 4, last CPU#1: [ 574.528961][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.529026][ T33] #1: ffffc900036ffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.529093][ T33] #2: ffff88802d7ba258 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 574.529167][ T33] #3: ffff888057b950e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x19e/0xb40 [ 574.529239][ T33] locks held by syz.0.1989/13429: 2, on CPU#0: [ 574.529256][ T33] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.529316][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 574.529389][ T33] locks held by syz.1.3084/18324: 2, on CPU#0: [ 574.529406][ T33] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.529465][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 574.529531][ T33] locks held by syz.5.3483/19808: 2, on CPU#1: [ 574.529547][ T33] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.529606][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 574.529668][ T33] locks held by syz.5.3483/19810: 2, on CPU#1: [ 574.529694][ T33] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.529752][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 574.529819][ T33] locks held by syz.7.3866/21478: 2, on CPU#1: [ 574.529835][ T33] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.529895][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 574.529958][ T33] locks held by syz-executor/21936: 4, last CPU#0: [ 574.529975][ T33] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 574.530038][ T33] #1: ffff888056277180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 574.530093][ T33] #2: ffff888020edc080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 574.530153][ T33] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 574.530220][ T33] locks held by syz.8.4107/22538: 2, last CPU#0: [ 574.530236][ T33] #0: ffff88801b09e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 574.769484][T22634] netlink: 'syz.6.4127': attribute type 10 has an invalid length. [ 574.786752][ T33] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 574.786836][ T33] locks held by syz.3.4125/22614: 3, last CPU#1: [ 574.786853][ T33] #0: ffff8880581b3600 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 574.786917][ T33] #1: ffff8880481d8260 (sk_lock-AF_INET6/1){+.+.}-{0:0}, at: sctp_close+0xd8/0x8d0 [ 574.786981][ T33] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 574.787041][ T33] locks held by syz.3.4125/22615: 2, on CPU#1: [ 574.787057][ T33] #0: ffff88802c426c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: pfkey_sendmsg+0x495/0x11d0 [ 574.787208][ T33] #1: ffffffff903a6ee0 (pfkey_mutex){+.+.}-{4:4}, at: pfkey_register+0x110/0x890 [ 574.787366][ T33] locks held by syz.6.4127/22633: 2, last CPU#1: [ 574.787402][ T33] #0: ffff88807d3ac0e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xdb0 [ 574.789244][ T33] #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.789429][ T33] locks held by syz.6.4127/22634: 3, last CPU#1: [ 574.789472][ T33] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 574.789633][ T33] #1: ffff888089baee70 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 574.789812][ T33] #2: ffffffff902f94a0 (flowtable_lock){+.+.}-{4:4}, at: nf_flow_table_cleanup+0x21/0xb0 [ 574.840042][ T33] [ 574.840063][ T33] ============================================= [ 574.840063][ T33] [ 574.840122][ T33] NMI backtrace for cpu 1 [ 574.840157][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 574.840222][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 574.840255][ T33] Call Trace: [ 574.840278][ T33] [ 574.840302][ T33] dump_stack_lvl+0xe8/0x150 [ 574.840389][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 574.840464][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.840511][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 574.840540][ T33] sys_info+0x135/0x170 [ 574.840562][ T33] watchdog+0xfd7/0x1030 [ 574.840595][ T33] ? watchdog+0x1c7/0x1030 [ 574.840626][ T33] kthread+0x38b/0x480 [ 574.840649][ T33] ? __pfx_watchdog+0x10/0x10 [ 574.840671][ T33] ? __pfx_kthread+0x10/0x10 [ 574.840694][ T33] ret_from_fork+0x514/0xb70 [ 574.840720][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 574.840741][ T33] ? __switch_to+0xc89/0x1420 [ 574.840775][ T33] ? __pfx_kthread+0x10/0x10 [ 574.840802][ T33] ret_from_fork_asm+0x1a/0x30 [ 574.840854][ T33] [ 574.840886][ T33] Sending NMI from CPU 1 to CPUs 0: [ 574.840923][ C0] NMI backtrace for cpu 0 [ 574.840936][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 574.840957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 574.840969][ C0] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 574.840998][ C0] Code: 89 df 48 c7 c6 00 0f 6a 8e e8 a7 48 f0 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d [ 574.841016][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000086 [ 574.841032][ C0] RAX: 00000000ffffffff RBX: ffffffff9acd1908 RCX: ffffffff81a3ebdc [ 574.841047][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9acd1908 [ 574.841059][ C0] RBP: ffffc90000007ce0 R08: ffffffff84eb20c7 R09: 0000000000000001 [ 574.841073][ C0] R10: ffffc90000007d20 R11: fffff52000000fa6 R12: 1ffff92000000f88 [ 574.841088][ C0] R13: ffffffff9acd1910 R14: dffffc0000000000 R15: 1ffffffff359a322 [ 574.841103][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 574.841119][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.841133][ C0] CR2: 0000200000002200 CR3: 000000005a262000 CR4: 00000000003526f0 [ 574.841150][ C0] Call Trace: [ 574.841158][ C0] [ 574.841165][ C0] do_raw_spin_lock+0x11c/0x2f0 [ 574.841193][ C0] ? lock_acquire+0x115/0x350 [ 574.841214][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.841248][ C0] _raw_spin_lock_irqsave+0x4c/0x60 [ 574.841273][ C0] debug_object_activate+0xb7/0x420 [ 574.841306][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 574.841325][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 574.841363][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 574.841407][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 574.841431][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 574.841458][ C0] [ 574.841464][ C0] [ 574.841471][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.841495][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 574.841520][ C0] Code: f7 e8 cd 3f ba f5 f7 c3 00 02 00 00 74 05 e8 60 8d e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 04 3d ab f5 65 48 8b 05 4c e0 ab 07 48 85 c0 74 18 5b 41 5e e9 [ 574.841537][ C0] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 [ 574.841552][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 574.841565][ C0] RDX: 0000000000000000 RSI: ffffffff8e416424 RDI: 0000000000000001 [ 574.841585][ C0] RBP: ffffc90000157e18 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 574.841600][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: 0000000000000002 [ 574.841613][ C0] R13: ffff88801e298000 R14: ffffffff9ad442c0 R15: dffffc0000000000 [ 574.841639][ C0] nbcon_kthread_func+0x6c4/0x880 [ 574.841665][ C0] ? nbcon_kthread_func+0x163/0x880 [ 574.841685][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 574.841710][ C0] ? __kthread_parkme+0x71/0x1f0 [ 574.841738][ C0] ? __kthread_parkme+0x199/0x1f0 [ 574.841767][ C0] kthread+0x38b/0x480 [ 574.841785][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 574.841804][ C0] ? __pfx_kthread+0x10/0x10 [ 574.841823][ C0] ret_from_fork+0x514/0xb70 [ 574.841842][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 574.841860][ C0] ? __switch_to+0xc89/0x1420 [ 574.841886][ C0] ? __pfx_kthread+0x10/0x10 [ 574.841904][ C0] ret_from_fork_asm+0x1a/0x30 [ 574.841942][ C0] [ 574.895291][T22630] ip_tables: iptables: counters copy to user failed while replacing table [ 574.897093][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 576.027888][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.037034][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 576.047129][ T33] Call Trace: [ 576.050459][ T33] [ 576.053428][ T33] vpanic+0x56d/0xa60 [ 576.057453][ T33] ? __pfx___schedule+0x10/0x10 [ 576.062346][ T33] ? __pfx_vpanic+0x10/0x10 [ 576.066900][ T33] panic+0xc5/0xd0 [ 576.070660][ T33] ? __pfx_panic+0x10/0x10 [ 576.075115][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 576.080626][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 576.086086][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 576.092284][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 576.098477][ T33] watchdog+0x1030/0x1030 [ 576.102848][ T33] ? watchdog+0x1c7/0x1030 [ 576.107302][ T33] kthread+0x38b/0x480 [ 576.111417][ T33] ? __pfx_watchdog+0x10/0x10 [ 576.116125][ T33] ? __pfx_kthread+0x10/0x10 [ 576.120751][ T33] ret_from_fork+0x514/0xb70 [ 576.125376][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 576.130513][ T33] ? __switch_to+0xc89/0x1420 [ 576.135241][ T33] ? __pfx_kthread+0x10/0x10 [ 576.139864][ T33] ret_from_fork_asm+0x1a/0x30 [ 576.144678][ T33] [ 576.147906][ T33] Kernel Offset: disabled [ 576.152250][ T33] Rebooting in 86400 seconds..