last executing test programs: 20m11.99316546s ago: executing program 0 (id=7701): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x7, 0x4) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0x0, 0xfffffffffffffff5, &(0x7f0000000180)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) shutdown(0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140)=0x37, 0x4) (async) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x3}, 0x3}, 0xa) sendmsg$inet(r6, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) (async, rerun: 32) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x10, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x10b}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r9, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX=r8, @ANYBLOB="9c887167449a5d72b5ab1379cf9426a06239ae82fb40fe709d63f8d3be3fa46d1ce1827209d62d9f8879043b7afba68009577e02692f6e4c78dddb89a5c2fe88cc8e7ba887d18009a141e1c29bbf360b5e76142783914f1b2f47a2cabed9184be4992d8bfcca9e1e3217401d9e6b334696a71c6a6bb86fd9d0f2d5a0968b9c969b7c2942bf9de739d8f0f2e9517ee4c487d1d65a386af00cba821dccffbddd921f7f72ed61b3048f", @ANYRES8=r7, @ANYRES32, @ANYRES16=r12, @ANYBLOB="2f003ee455bd5927cea54b2156025d71bd7bb82c14652867f86dff2cacb24e3d147ebab868719866eddfa9f6ccea95cd5148cc3c4b95ad7bdb85fe1c22d4a034a85bb3e7b6f11660a9c08a25262bc9d583fc2b995e157f0cc1f7c6ed9e35db2eb6544aa6357fdb0e5bb3c8d15172d9bc5a38173792d34e32a84e7eec1c0de387feacb5099570daa29d0c6c82ff7f55aad91566f6d0977f83d0b18c372b4efa85fb9f44b0d1dcd6af66961a0c199370e02f86442a370d7f7592180b089eebaa153dc4d7e377bcd3238e2180dc5e75eff1293171fc4b9b46cea2b7f67735bb9a48d2622017ebf4c6660bfa", @ANYRES32, @ANYRESOCT=r7, @ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', r11, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x40000042) (rerun: 32) 20m11.836111673s ago: executing program 0 (id=7703): bpf$MAP_CREATE(0x15, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000600)=""/160, 0xa0, 0x9}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000020000000000000b7080000000000007b8af8ff00000000b7080000000b00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) close(0x3) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newtfilter={0x64, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @loopback}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x23, 0x401, 0x0, r0, 0x5, '\x00', r4, r1, 0x5, 0x4, 0x5, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 20m11.660276732s ago: executing program 0 (id=7706): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xf77}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x6}, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000000a803e7de55a34bc146d446aaca06c0008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000813b0100280012800e0001006970366772657461700000001400028006000200000000000600030008000000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 20m11.277417409s ago: executing program 0 (id=7709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="029000000080040008000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000100)=@fragment={0x3a, 0x0, 0x3, 0x1, 0x0, 0x1a, 0x64}, 0x8) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x10010, r1, 0xe821000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="029000000080040008000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) socket(0x2b, 0x1, 0x1) (async) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000100)=@fragment={0x3a, 0x0, 0x3, 0x1, 0x0, 0x1a, 0x64}, 0x8) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x10010, r1, 0xe821000) (async) 20m10.958907692s ago: executing program 0 (id=7713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES32=r0], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x5d23b1c087fb4ed9) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0), 0x1000020a, 0x0, 0xffffffffffffff22}, 0x400c810) mkdirat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffd, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) epoll_create1(0x80000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r7, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1e) shutdown(r7, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB="b1c835ce5b0526e76a8335f0c4a945ab81b43ae6508add7432fb8de9f62bf168c5595b35f162540974106232765454ec77f88752d6099af0aa3160d16268b727210e7be430f4c81f22de3410ff78f1463a6987315d24fa30ff9604432619cc"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000004c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffe41) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r11) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 20m10.013585617s ago: executing program 0 (id=7724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 19m54.549636688s ago: executing program 32 (id=7724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 27.430041194s ago: executing program 1 (id=19175): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x53, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 27.133815166s ago: executing program 3 (id=19178): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) unshare(0x22020400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000180)=0x28) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0800010000389cbd"], 0x38}}, 0x20000000) setsockopt$inet_buf(r0, 0x0, 0x30, 0x0, 0x0) unshare(0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sk_skb}, 0x94) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000001740), 0x0, 0x10002, 0x0) recvmmsg$unix(r6, 0x0, 0x0, 0x40000020, 0x0) r9 = socket(0x3, 0x80000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES8=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000001080)) 27.080989048s ago: executing program 1 (id=19180): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}}}}]}, 0x4c}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, 0x2, "4f6fb4d1af0f724e61fcffffff0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010e4000000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a30000000000800054000200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00cf5b194f585fa50f0280080003ab59a25f4e9aa96b7b4e8296866243aace28ca9a614e8a8082081921bf0601f74304e2792a4584ac563f1b20112cbbfda385a62ca5578497bddb12d09dcb424708fa5f52799df4640ce13821496e61d6b5dea8d4d76a69ba22821a8f73e2665711c3711e53f9db05b163a63325d6afe8517e6d11722ff9edd07681699c0327f6a201171331ff93b4571c5274c6cd949ba5abd29b62f493e1a89443838ee9e7abc4a039a8497e4bf82d7b36d24691b08e01c279ed03ce2a28a5c561550e7ecaa8ad1742cebeadc7289ed0f03ffcc0898481060f21ecefba2ccf7748555d949db01e903726c9895297a3aa4d69d2bb4f934706935287"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x11c, 0x4, 0x3e8, 0x0, 0x110, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x101, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 26.986356882s ago: executing program 1 (id=19182): getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/17, &(0x7f0000000040)=0x11) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400501, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_vlan\x00', 0x4000}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xc1, "a9436013ddbf8569dc3fdf81314df59984840aec738ebb58618e0d1c38f08307ed761b438facbba0f8d77b69c4019b20b5a4043342b320dcf1392ac8c66185400d5da25e3ab7ddb7b4e7dbd24ee9a6478ad6508aa4596734af42fa71c5eab8c2482f488abe7435d5af3f2027310f241d61b11c7e8c2d9912e69441618ea7700c2eaa5e08f2730f106dc1ac5e00f3e48cc1ee6c7369aea00738e7adbe7f2a6cef71ad960ab42fb5df38a3eb469a0484cc39bc702c047eb8933b19a43c426493ccbe"}, &(0x7f0000000280)=0xc9) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000002c0)={r2, 0x568}, &(0x7f0000000300)=0x8) (async) r4 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/193, 0xc1}], 0x5, &(0x7f0000000800)=""/186, 0xba}, 0x5}, {{&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000940)=""/220, 0xdc}, {&(0x7f0000000a40)=""/141, 0x8d}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/2, 0x2}], 0x4, &(0x7f0000001b80)=""/245, 0xf5}, 0x8}, {{&(0x7f0000001c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/167, 0xa7}], 0x1, &(0x7f0000001e00)=""/156, 0x9c}, 0x405}], 0x3, 0x40000112, &(0x7f0000001f80)={0x0, 0x3938700}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000001fc0)={r1}) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), r5) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002080)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002340)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x404400c}, 0xc, &(0x7f0000002300)={&(0x7f00000020c0)={0x214, r6, 0x410, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "cf4dab936840b34141fdd72b21265a7e8d8d8064b0495549768dcf377be44ffec9ee347337e9a8e5b2a58f6bf7dff29751baa066eb4c24ef46f39d47f7f85bd48cfd8d5558ceb2dd25813a22884802b72550321cbac2dc54f3e28dd4e8af0ea7ca1409d8620784d43e7b5fc054655f0aa57ae38d164f4addbd4df5ec37a052d95fcefaac7b3fcba38735cd0af3d1ca818083567cd96cc2f17ea95af3a1ef31af256074a7113cfad7153ed861f2f659cf"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^$@:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000002380)={{0x2, 0x3}, 0x100, './file0\x00'}) (async) r8 = socket$unix(0x1, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f00000024c0), 0x4) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000002500)={r3, 0x7ff}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002580)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000002c40)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002c00)={&(0x7f00000025c0)={0x614, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^$@:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f68}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#\\-!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}@$\'$!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#):\\-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(\'&/\x1e(\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc1, 0x4, "cc0880a31db8307217ecadc8bfae8ddc50eb0e277954029c905fd36fb913b7da964ee0f4b5e8902ce90bc0d30cc52109956ba61792906d829be7fad081b541763dbcfcf6713fff9552b98b456af3b8ed34ba9d922ceeb5ba2cd2c61763f614e4024d84ee1abfa5ca986a96db1a671c7559c1efd842a0777ea6b1f15fe80ee1b9879c5b01c346dbca00f68faa7179e571542d5022c33befbaf06a50a22b3d8671192c25cc75dd1a227e5cf5f03e7326f61a50a292e4bac3f8ed4d024316"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#:/:\xc4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}+\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "1a48751520e9e06207b15f5ba348abb0793b77ec4a9112735ee687cc1be3278c99fecd260177692b11267bf2d7b820e60d4d5bca41ae6770555b50588b398c38a4785268e33b15a11806f6c367d08641e8944954f2c9b60ff5106125f742191699fde90d4001f3ddcfc8e473225b736d9fd7a5d4a2c877cd07ed62fb5ef782635694cac51062deb9b92683f65b03449064f0a8656b82627c4b9d2e9afa998b5a2b7a8ff029e72645cc5e6557860af3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',2(%+\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x93, 0x5, "649d2f103202785c781ec765e840abf81eefc449f5af456fe5c41cf8d13cdf152f44c15f066fa7c0484dd0180d2fd706d07005c00167eb1ba60ed38b7223e9997c8bded503ed35a7cf1c94a11f8fbfe582a344afaef352e5f8d4426cc401713615d7df1c4dd28de2003d06096e81ef09e5ed27c9dd3b3eff6e000a07862aad1f439740568184baa2de0f905a8053d6"}]}]}, 0x614}, 0x1, 0x0, 0x0, 0x88080}, 0x20000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000002c80)={r3, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000002d40)=0x84) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xd, 0x11, &(0x7f0000002f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x776}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ldst={0x1, 0x2, 0x4, 0x0, 0x7, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f0000003000)='syzkaller\x00', 0x10001, 0x37, &(0x7f0000003040)=""/55, 0x41000, 0x29, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000003080)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000030c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000033c0)={{0xffffffffffffffff, &(0x7f00000031c0)='\':$@,\x82D\xd1:\x00', 0x80280, &(0x7f0000003200)={@align=0xee, {0x101, 0x8000, 0x0, 0x3}}, 0x0, &(0x7f0000003240), &(0x7f0000003280)=0x64}, {[0x4bdd0751, 0x9c, 0x3, 0x2]}, 0x4, 0xe2, &(0x7f00000032c0)=""/226}) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0xa, 0x4, &(0x7f0000002d80)=@raw=[@ringbuf_query], &(0x7f0000002dc0)='syzkaller\x00', 0x8, 0xf0, &(0x7f0000002e00)=""/240, 0x41100, 0x22, '\x00', r9, @fallback=0x3, r8, 0x8, &(0x7f0000002f00)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x7, &(0x7f0000003440)=[r11, 0xffffffffffffffff], &(0x7f0000003480)=[{0x4, 0x3, 0x6, 0x3}, {0x1, 0x5, 0xd}, {0x0, 0x2, 0xa}, {0x5, 0x3, 0xf, 0x4}, {0x400, 0x5, 0x8, 0x2}, {0x4, 0x4, 0x1, 0x5}, {0x2, 0x3, 0xd, 0x7}], 0x10, 0x7f}, 0x94) (async) setsockopt$inet6_int(r11, 0x29, 0x3e, &(0x7f00000035c0)=0x80, 0x4) (async) sendmsg$nl_route(r5, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)=@getrule={0x14, 0x22, 0x0, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400d}, 0x4000004) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000003700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000003900)={0x0, r12, "7643627e71a0b0a465b6ea9c566c363dee474c10a55c7bbcdf74a201e6ba891f02b7f30bafbc63acf37f00ce576561b4154e0e2a1ee0c78de5104330bb458d086a181b1e51bd2ba32d5c8671d19166c27c9668b60ecf85130b0ef587a9ba6513ced7cb1f546c39d435da8c9222941745a4f2e21feb6c8aa7bf90fe54cb29682db9beafef50b126a2fe8a29fcfa1f0e4d092e071bf4cf3092c901d0a93c804b95b9a8cba8c1eb95a85710c8f5ea4b1eb675a3ebc1a3cb4fc11fd3b2805972d5fc2e659999e0e782154714984950c7d67b81e2822af4efbd41b69f3a9ebfa7cd5748de7f26bf87b035e0d86300d717b740d4355ba19e4e18bd44cfff4daecc4e82", "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"}) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000004900)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004940)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0xb, '\x00', r7, r11, 0x1, 0x0, 0x1}, 0x50) (async) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000004e00)={0x0, "e4c5f62a148f9d3b34d538790f70e9c9"}) 24.135968348s ago: executing program 3 (id=19188): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0x20044851}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=0x0], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1000000000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x6) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000400)) 24.133224037s ago: executing program 1 (id=19189): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000aa08000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 23.757532322s ago: executing program 3 (id=19191): r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x0, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x20000400) ppoll(&(0x7f0000000500)=[{r0}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) 23.560335119s ago: executing program 3 (id=19193): r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES64=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x1, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x636a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2023, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x4000) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400300142603600e1208000b0000000401a80008000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PORT_SELF={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 23.559207734s ago: executing program 1 (id=19194): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000080)={0x2, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000140)=0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@mcast1, 0x3a, r3}) recvmmsg(r0, &(0x7f0000003080)=[{{&(0x7f0000000200)=@caif, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/246, 0xf6}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/71, 0x47}], 0x7}, 0x4}, {{&(0x7f0000000800)=@alg, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/222, 0xde}, {&(0x7f0000000980)=""/238, 0xee}], 0x2, &(0x7f0000000ac0)=""/219, 0xdb}, 0xa}, {{&(0x7f0000000bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/199, 0xc7}, {&(0x7f0000001d40)=""/171, 0xab}, {&(0x7f0000001e00)=""/97, 0x61}, {&(0x7f0000001e80)=""/85, 0x55}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/136, 0x88}], 0x7, &(0x7f0000003040)=""/43, 0x2b}, 0x8}], 0x3, 0x20, &(0x7f0000003140)) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000003180)={@dev={0xfe, 0x80, '\x00', 0x1e}, 0x60, r3}) r4 = socket$isdn(0x22, 0x3, 0x11) clock_gettime(0x0, &(0x7f0000005d80)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000005c40)=[{{&(0x7f00000031c0)=@nfc_llcp, 0x80, &(0x7f0000003240), 0x0, &(0x7f0000003280)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000004280)=@alg, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004300)=""/183, 0xb7}], 0x1, &(0x7f0000004400)=""/190, 0xbe}, 0x7f}, {{&(0x7f00000044c0)=@ax25={{0x3, @rose}, [@null, @netrom, @bcast, @null, @netrom, @bcast]}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004540)=""/240, 0xf0}, {&(0x7f0000004640)=""/226, 0xe2}], 0x2, &(0x7f0000004780)=""/217, 0xd9}, 0x5}, {{&(0x7f0000004880)=@caif=@dbg, 0x80, &(0x7f0000005900)=[{&(0x7f0000004900)=""/4096, 0x1000}], 0x1, &(0x7f0000005940)=""/45, 0x2d}, 0x2}, {{&(0x7f0000005980)=@nfc, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005a00)=""/1, 0x1}, {&(0x7f0000005a40)=""/232, 0xe8}], 0x2, &(0x7f0000005b80)=""/164, 0xa4}, 0x2b9e}], 0x5, 0x0, &(0x7f0000005dc0)={r5, r6+10000000}) epoll_create1(0x80000) bind$inet6(r2, &(0x7f0000005e00)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}, 0xc0000000}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005ec0)={'pimreg1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005f00)={@remote, @initdev, 0x0}, &(0x7f0000005f40)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000006000)={'syztnl2\x00', &(0x7f0000005f80)={'ip6_vti0\x00', r3, 0x4, 0xc, 0xe2, 0x3, 0x24, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x8, 0xd, 0x6a06}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000006200)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006040)={0x154, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000006240)='ip_vti0\x00', 0x10) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006280), 0xba039ab0ffda47b0, 0x0) ioctl$PPPIOCSMRU1(r12, 0x40047452, &(0x7f00000062c0)=0x1000) sendmmsg$inet6(r2, &(0x7f0000006d40)=[{{&(0x7f0000006300)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000006380)=[{&(0x7f0000006340)="110ffea58ffa960bea", 0x9}], 0x1, &(0x7f00000063c0)=[@tclass={{0x14, 0x29, 0x43, 0x9ab}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr={{0xa8, 0x29, 0x39, {0x1d, 0x12, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @empty]}}}, @rthdr={{0x88, 0x29, 0x39, {0x33, 0xe, 0x2, 0x4, 0x0, [@local, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast2, @private1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x0, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x1e0}}, {{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f00000065c0)="39657b8fa2ed5e9bfcc76280f3032ab4b32fd785657702960deb7f934b56070631020be51c6ca02e1628d22ce6f8c6b3f15056e3ec1a7f09b3a0578c634a1cf29b97604ff91937b2afce5989c759d05dcd6d445a36010871906430f8e633a99200afadb343aa14b430609a70da3a0b1302fce61dfa5e5865a7e496cdf1321d82c258a9bb80597103b69562e66952fd1ad585dd075b8afb9388feb9730a3c0ba47ee73abacb480bd9f4f2f64c4066fc4f774ce4d9751803f2fd6f771870f6e8f0df4a827b766e37ee3d638adca874832bae4fd4b0e287d7687ba8f781a1dc6c6cb9faf030b033315951ae700cfd27d2d2a5f10b0430f6", 0xf6}], 0x1, &(0x7f0000006700)=[@dstopts={{0x40, 0x29, 0x37, {0x21, 0x4, '\x00', [@ra, @jumbo, @calipso={0x7, 0x18, {0x1, 0x4, 0xa2, 0x3, [0x1, 0xffffffff8bc84d0a]}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x0, 0x0, 0x0, [@empty, @mcast2, @mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts={{0xc0, 0x29, 0x37, {0x5c, 0x14, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x2}, @pad1, @generic={0x84, 0x99, "3b4909b2b048d531aa451700e312e3703575a7bdaee306c1dbffcf6246d771755c3a55779e5089d5bf995cdf6c628213b53af1e0ff5de7bb699c2ca83cb6ffc6d155b16b54677f2458d993798a10537e7ef1492228d9bf66ae1791573533ceb613d6afccbfa984163f1eb3918646f39fe79ae840e863da6088b787a5f76f1e15ef75cc94f9b3cb3818fa9ea3ed8696d8fa3ba0ae751961745c"}]}}}], 0x168}}, {{&(0x7f0000006880)={0xa, 0x4e23, 0xd1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000006b80)=[{&(0x7f00000068c0)="8a22092d0da0a64649702076480b5163b95d489700fc0da3b2e6e3ce2c30bad9b97899a653fbdabfb4cc4d2ac422af64d0af0e84a33bb8b6f697d5fefcd9f1678eb03dee30a01cd104e040984185de6013b919ce9560bab779d73c8f6183a111280b43625ba08361d55618beebe9e1508b11cde99d9f9390ec20350e9375171f12516c3f024bb05d2a55ffc4d32eb0ad4764f7ca3be415e6682fd20c1d3d8d3f41b318eecb842d3bdbbc4ccb11f0b09adab34de0c7e2e9426bddc0fb9f0c0389fc", 0xc1}, {&(0x7f00000069c0)="033a3e0239603d901211a08bf71ccf6380099f9d31b273d3c6e7afc77b88cf477b06aac490ae5935a294acad92c16211743595a5098e0a05421050b09eb3df6f40a0213157a4680c656973333c32198acee90c12ff436150277b3daab567cd549427cfdf49a3f1e8fe239c0980e0d7bd0586faa98b15fab3b5300c361162edf5566e9542797da087704582bb7c2dd7d08f6ead6dfdc9ed474d4b554364d6a9c94f52794792806b537df203a47b9563bae4e3270affd18071642b9b611718f454ca5e5dc5ea5b7b21a15e07fffa7f", 0xce}, {&(0x7f0000006ac0)="1f9b62c63d320da19d347f4782ad017cec2dea171274e90c004f70af7728c0ab796734fdb7bb1c2d58c8211037eda257", 0x30}, {&(0x7f0000006b00)="172a761dda0c6e859cb2c4f3ae039826bda3fd6a384ec8a052c97180ced5711fc2898b064c50f70246f97a1969a3e06a2b3ec5eb8dd7c77a63a59712dd33de1abc48acbd96c856444f854ec7b02904fb91e05bf0b15cd892482ca7e61fc79cd74b183efff41502d382afa36d030a403053a5d0", 0x73}], 0x4, &(0x7f0000006bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x4, 0x8, 0x0, 0x52, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @local}, @remote]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x0, 0x9, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @local]}}}, @dontfrag={{0x14}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x33, 0xf, '\x00', [@generic={0x2, 0x14, "545dc05977fa92c596b0376ebfaa4df0a04206d6"}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @generic={0xf, 0x54, "a2d66dae12777cf2d984602edb3c8b1575a7060fa85332dd218b42ebf61f944d390a92f12c80d709f1c63e5f61c37bbd68d199e8fc10054993ad65e4bbd94e9496a843d98f39b65fe7469d97dfbc26780ad7db3e"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x178}}], 0x3, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000006e00), r1) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000006e40)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006f80), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f00000073c0)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000007380)={&(0x7f0000007000)={0x35c, r13, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x2, 0x0, 0x6, 0x2, 0x1, 0x7f, 0xfa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7}, {0x5, 0x9}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x6}, {0x5, 0x1}, {0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x4}, {}, {0x0, 0x4}, {}, {0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x2, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x1, 0x6, 0x1ff, 0x8001, 0x4, 0x7c5]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x5}, {0x2, 0x8}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x1}, {0x5, 0xa}, {0x2, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x8}, {0x6, 0x3}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x2, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0x3}, {0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x4}, {0x4}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x4, 0x6}, {}, {0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x2}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf9f, 0xaea, 0x9, 0x4, 0x8, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0xa}, {}, {0x7, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x1}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1878, 0x8000, 0x2, 0x4d20, 0xbc, 0xb, 0x4, 0x95]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x1, 0xffff, 0x0, 0x3, 0xcdb6, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x8, 0x800, 0x7, 0x2, 0xfff1, 0x0, 0x1fa0]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x1b, 0x24, 0x5, 0x16, 0x16, 0x36, 0x6, 0x12, 0x48, 0x48, 0x36, 0x12, 0x0, 0x5, 0xb, 0x18, 0xb, 0x4, 0x36, 0x5, 0x6c]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x5, 0x5, 0x5, 0x1000, 0xfff9, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x1, 0x60, 0x60, 0x9, 0xc, 0x0, 0xb, 0x3, 0xc, 0xb, 0x1, 0x2, 0x48, 0x18, 0x12, 0x7, 0x9, 0x6, 0x5, 0x48, 0x1, 0x6c, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x24, 0x2, 0x5, 0x6, 0x60, 0x6c, 0x1b, 0x36, 0x9, 0xb, 0x0, 0x6c, 0x18, 0xc, 0x9, 0x6, 0x16, 0x12, 0x6c, 0x6, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x12c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0xa}, {0x4, 0x4}, {0x7, 0x9}, {0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x6}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x3}, {0x5}, {0x7, 0x9}, {0x5, 0xa}, {0x6, 0xa}, {0x1, 0xa}, {0x2, 0x5}, {0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x5}, {0x3, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x9}, {0x4, 0x2}, {0x2, 0x4}, {0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x1}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x7}, {0x4}, {0x1, 0xa}, {0x3, 0x14}, {0x3, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0x6}, {0x7}, {0x6, 0x9}, {0x2, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x4}, {0x1, 0x4}, {0x3}, {0x1, 0x1}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x7}, {0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x3}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x1, 0x1000, 0x54, 0x44d9, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf0, 0x3, 0x6a6e, 0x600, 0x4, 0x5, 0x6, 0xff]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x1}, {0x3, 0x9}, {0x7}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x3}, {0x6, 0x5}, {0x2, 0x2}, {0x7, 0x5}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x5, 0x7}, {0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x7, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x2}, {0x1}, {0x2, 0x6}, {0x1}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x3, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x5, 0x6}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x7}, {0x7, 0x4}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x8}, {0x4}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x7}]}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000007400)='team0\x00', 0x6) 23.292297217s ago: executing program 1 (id=19197): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x3, 0x6}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x3, 0x6}, 0x10) close(0x3) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000700000085000000970000009500000000000000bb2bc707bf0604b9d2efe82517a49da3749c8539db748631c35952be27d5a1a975a455a840db457b81252e84cf6a304a4e5c2a10d43bda73d95268af2980c1c368cf78b019dd78777a100aca8a04629e204200a202e95e277b52c067ef573f9167c44a7e075032db46f0599b56dfbcccaa1ef3c6221ecf7fd86d489a2fab3c5b9bb11379f890a780d3d7a56e3306ab60fb67ef592ec64438296d5be4f586dfcc9d7e457a5ae4a8718e29a1370975766713b3e10f85673e56f475c91e823d7ecf160eaae69932bac7af2e6d7aa1c05165a05499e0b0c8ed19"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r5 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r6, &(0x7f0000000280)=@generic, &(0x7f0000000000)=0xfffffee8) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) sendfile(r3, r7, &(0x7f0000000080)=0x401, 0xfffffffffffffc00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) (async) sendfile(r7, r8, 0x0, 0xffffffff000) setsockopt$inet6_tcp_int(r8, 0x6, 0x17, &(0x7f0000000040)=0xc, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0xfffff6f1, 0x2, 0x67f, 0x6bb5000}, 0x7, 0x1, 0x1, 0x3, 0x8, 0x6, 0xf, 0x19, 0x5, 0xc68, {0x532e, 0x4, 0x5, 0x7, 0x1ff, 0xc}}}}]}, 0x78}}, 0x48000) r13 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) 23.228772803s ago: executing program 3 (id=19199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff82", 0x13}], 0x1) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd611c"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x20000880) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000400000000000000b07381163cd3", @ANYRES32=r6, @ANYBLOB="21880000000000001c0012800b00010062726964676500000c00028005002a0001000000"], 0x3c}}, 0x0) sendto$packet(r1, &(0x7f0000000500)="39c394f705916c4516999da208000b15", 0x10, 0x40810, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000326bd7000fddbdf25200000001c002d800500040000000000080003000500000005000400000000000c002d80050004000000000008000300", @ANYRES32=r10, @ANYBLOB="0f000608774435f95a57e2b8"], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x28, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.912841571s ago: executing program 3 (id=19201): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000240)=@full={0xb, @remote, @null, 0x0, [@remote, @rose, @remote, @netrom, @rose]}, &(0x7f0000000280)=0x40, 0x800) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffb, @bcast, @netrom={'nr', 0x0}, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40000480) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r3, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x41, 0x4, 0x1, 0xa, 0x104, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x4a, 0x1, 0x6, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xc8f}, {@multicast1, 0xff}, {@broadcast, 0x2}, {@remote, 0xc}, {@multicast2, 0x8}]}, @noop, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x5, [0x0, 0xffffffff, 0x8, 0x43, 0x80000001, 0x7fffffff]}, @lsrr={0x83, 0x17, 0xf, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x44, 0x10, "a263b6b846a853be63b19e5adc89"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x8, [{@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0xfffffffa}, {@remote, 0xe}, {@remote, 0x8001}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x800}, {@loopback}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0xc}]}, @ssrr={0x89, 0x13, 0x4, [@private=0xa010101, @multicast1, @loopback, @remote]}]}}}}}) sendmsg$nl_route(r6, 0x0, 0x0) 20.506086024s ago: executing program 2 (id=19207): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4000}, 0x18) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x28, 0x12, 0x1, 0x70bd27, 0x0, "", [@nested={0x10, 0x99, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x13f}]}]}, 0x28}], 0x1}, 0x4000800) 20.229372139s ago: executing program 2 (id=19210): r0 = socket$inet(0x2, 0x800, 0x1) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 18.948340687s ago: executing program 2 (id=19217): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0xc040) (async) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) (rerun: 64) 18.79081982s ago: executing program 2 (id=19220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmmsg$inet(r3, &(0x7f0000000180), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x1, 0x48094) getpeername$llc(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)={0x18, r2, 0x1, 0x0, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 16.65210292s ago: executing program 2 (id=19221): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x2, 0x5, {{0x26, 0x4, 0x2, 0x1, 0x98, 0x66, 0x0, 0xf, 0x0, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xf1, [@private=0xa010102, @empty, @multicast1]}, @rr={0x7, 0x13, 0x38, [@rand_addr=0x64010100, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_addr={0x44, 0x3c, 0xe1, 0x1, 0x8, [{@loopback, 0x8}, {@multicast1, 0x4}, {@empty}, {@remote, 0x8}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x2a3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x3}]}, @cipso={0x86, 0x21, 0x3, [{0x1, 0xe, "a4f58444a8487e522e48dc33"}, {0x5, 0x4, "db4d"}, {0x1, 0x9, "3471e5e5546eaa"}]}]}}}}}) (async, rerun: 64) r4 = socket(0x11, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) (async) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r8, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x6, 0x40, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x80, 0x5, 0xffff}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r15) (async, rerun: 32) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r16, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x4}}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000005c0)={0x600, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x1, 0x91, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r8}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x10, 0x1, 0x1, 0x4}, {0x549, 0x9, 0x63, 0x10000}, {0x4, 0x1, 0xc, 0xa}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r11}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3bd, 0x4, 0x4, 0x6}, {0xe, 0x5, 0x1, 0x5}, {0xe, 0x0, 0xfe, 0x800}, {0x4, 0x61, 0x7, 0x401}, {0xb3b2, 0xf5, 0x9, 0xff}, {0xfff9, 0x9, 0x9, 0x236}, {0x7, 0xc, 0x9, 0x4}, {0x0, 0x5, 0x81, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r12}, {0x4}}, {{0x8, 0x1, r16}, {0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf3}}}]}}]}, 0x600}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (rerun: 64) 16.532952597s ago: executing program 2 (id=19224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000002c0)={r0, 0x0, 0x19, 0x8, 0xd97d, 0x2, [0xdb2c, 0x9, 0x0, 0x40, 0x2, 0x4]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r3}, 0x38) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002040)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x5, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x82, 0x5, "640e20"}]}}, {0x4e26, 0x4e20, 0x11, 0x0, @opaque="4c962bf5d925f54bf1"}}}, 0x3b) 12.055041546s ago: executing program 5 (id=19243): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) unshare(0x22020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x0) getuid() (async) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast1, 0x4e21, 0x9, 0x4e21, 0x3, 0xa, 0x120, 0x80, 0x3a, 0x0, r2}, {0x6, 0x0, 0x5, 0x2, 0xd, 0x3ff, 0xe}, {0x3, 0x6, 0x0, 0x7fff}, 0x8, 0x6e6bbb, 0x1, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x3505, 0x3, 0x3, 0x0, 0x9, 0x68, 0x3}}, 0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180100008f08000000000f80a9f7a3ac93010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207baff8ff00000000bfa100000000000064010000f8ffffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 11.082498174s ago: executing program 5 (id=19248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r1, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xea, &(0x7f0000000fc0)=""/234}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0}, &(0x7f0000000e80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000380)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000010c0)="a18e8c375082534a378960fa7c6522311b061d57c2b22e580c59ffdd22079d6fa9983312d608662223c364959b7f56e8d497026385659be774878a0c85b0f40ce30ca8c32069bdaafb73116f7b2f3607b736393667d9ce4b2cfd66ff60fc644639e4fd94f0ca85f39f3cad15684b1e11f3b5f0a689c5779ecea99ab9b225563b75403280d64aa2318383001e1f2d0cc04273d858688bfdea6eb97d2581dc9768986974adafd4cac63f4410402535b48ed17ee562d04cd5de28ff59c9077be654e63900c365e51027fa855700be72d2b0d10ff091d9a191b0171c9803af111751790728991c0d795981a21bab048348bb6b592f5f5eb1d787b85253426f3d2fa2ba22702d78cb2ba870ab6c16aa5570aa0333eb73eee41bb69f3829f4219b96767e07e3590d485135d7ff231abdcb22f89698901bc53b0ee4a9772f76973087e4f8824aad5953a963fc911971c906439dea2ac7bd4fd15cc5c9f8bf4c646d7ec1b0cfd66aaa7f197e2f8fae747e92d04350a51cc3f2dbb130356779bf18a4fd93e33090067b38670ec085cdf19a7aafcd011fb6cafbe3395a3ae7bd7f32737f9274db133de6d406df392aac91c0e894d81cbd4ad500ef4f2af0cab8cc14ab3e1f8c4c2946e39d4db7b89bb2081b7ffd65ac1ee877fad2dd5306832b329397603f8945e7743b145726a18781cc7b564e6dde5361e94ecba915c2c2a5da7e10821110cf455252f1f5528e9c8a31ecf9cc5dff3367f3fad85eac3506e4dfe81b6a2485045200638682ae126787aad8cded3021148d26c870b58bc8d4beff16fdec5bbf75e2acac8d2123187ca07db9418e081a0fac5e2665771dc43abf5c24bd65e42b7662183fa21c934f2af23cb1879f9ac7ce27991cd8d725d72f6dd07b1b027adb83b8f2cb59fed4f39afc143e6f8cd12ae593166b171fdc964b9153a28f8792daaae3d633b88e35ce4b5638ae697a36c8ae127b16b52033dc9f2a0c8d242ecdbd19523ba085e3ee669edf201832bc32d57cf2b30b5a3c1b615255652e72ba72a5de9ebec29d0460d606a24b5f9f57a3b3629d500038fec5df1eac03a912bee7d6530010be1992e859d303cb10329f5390f632159e28d01e51e86692acd24db29600f6cdd90bff59328c06a352bacb3c3476962ca1f43799cbaa6b36bbf01f663849aea93342ca362ee37fc3835eb957b5eed5405d8314da756cbe10bbe8e4482a8b3c242a520ee8c9305169b29468681717ea51fd5b59bbcb791e14d748fe1da1ab2734e16d0eaf25fb492b9b9d1498136c9f7e2eda3ea74c23109344c65384537492ed69147a1c6dafbd5b59e52c71bda26733a78f7e572d8e97bba62c2a2b059e18bdfb303450c38b13a89f5e687f73d9dd441651b51955df5df8c415c5a06265826eeb7369fda12f43efdfdd3fbc925ca89aa2fbf83e489385d4bede31cc7fc79f8425071737f08baf6deb3debdaa4202900000d4383b211a017764f512ba0b93c15b3ebdf88ba04f18111aa38fad17e78f19fb75e06dd5ebf993ab3fa55811cebd140f91bd8214d77e68d0a5dfeb99a32fd75dc578df8d4befdd3066fc926fb40283253d6a376009daa098746e47b927f37fd89fe43eeae1039851db9ed6d6a174dd780096c235324f7e1c4781f312fd1f0a596f9d683e4fb5f2888f9d30ef5184b0b4ffe5623eda1c9d5d3ce6d94ffd3b952e1323f572d0ce118bec957e820bba7d5c323ce811fcb494345c7f2f92d383595d3550b7f305b8fc4a1d843022ccca89e1426a9b352f49b6750e6f085f67cee850a50ff483382e57e67701a677632dc523030c7899fcc343d3915fa7a9242b63a463af4d71a983d911a0aa8f3f65cc985e4fba9219232b84a338226a7926c4870f00741db0f691ff4cc1dded9703d3a8ea317350d7fa91f399256adb71f6ceb093fbefaf7ce5021f84bf13451b9aaf11608c4b161fb9fcf30735affc05911df500272278bdc924a7d563adce4725f5943fde231cff55163f45059ed640396b9420e19d5178e8ae0e7012bb168dfd904326fcc28ba03a77ebee1e0afc1e33676cf202974c3e2fd5cb2ba1bf9f9d124fd0b60c9fb70a896be758026e06ed371b8022f7fef47a033a2914162699d216119a3a4837a07c95bf72cd83aebafa1aafa83dcbc73cdc4e63962bad53a6417e3e503ff27bdaf058edccaaad82dbccea9da6bd1885d56215a726168641b99934f3ee66e96fd7feac3389bfa997e82d13b721b3bfd51897e8af6cd10d3e58c2a0057bbd9eda9701ffe49fc3388af3a820adf3587e160c9935468fd6b5ed57457a492f22176af86a73b3c5ee42696557abaabfe598b77c20113161f829efab8fc6ec5cb308b2d2b7c5ea3f4b6510c5a5c63fe10a203c08f8f8e8c16eea5db0a4fd4d7b25de73b228f7517ea45ffe44b9bdc4fe18afdc5fc79017b852dab07aa020c68caa5c3a074608d06e4f89e978b790921860aa3b7aa81e11bdb2f6e944a862148380c9ba2426c9715670a6094986f1107af9c7a075e0229838026ab48e0c8edb64a8233e0606e8dbc0c3028693a38d036c7353f7eeabbe6a79a9402c14d77767f9e8f9f097d216a9db8285b5d48d1c8e5113c7a152edb7987d9743d9baa4e7ada8742e5b1a47e1af147b40058db081986620cd935dcf2057db06c4ef0256d5e5c10664e6bff96c791a11365d968b70dded82d154eca1ee5cd56698c1a8db1443f8ffa03ad09f5b95d4aa1a9468c2444dfb5d271663c959c526f11942a7c9797f2a128d8113f39aec81f6d9c5dfa763ade167158de0973b06d62db7a509ef68cf357a53b5ec09c4832eedf2d6b60bbe15c6b3ccd4f7c06aa0b5d1fd58309ead24c1f693b73acfbe4d56c351dd297e13f635752e1b331cc4c7f1693bbc973727344767cc4350a0681e76560d56d2c163fbdd673f6f6c25dcb4076282a213a5e36dc969031b026817a5c28c1747095be3078ae1d7ee7a9b0c4fcde1a92f97fa9ea6c8994b781de89d3a660145fed3d5549fdb643b5b3758ab77cab1cef6570bfee1c8689c9883b6aced027899a0abecf47ca2d98c4a48d590928fa062efe6db7f5f34c6e2b94388d5781c7efe70eebc8245f7b8d4c8d2b93eb876d1d8635718d7c00b8a27be1863bde9986f8c1cfad8677cc798388a1a493a1ab347e4311b49f092dff8d20de8544af0e528971cfcb58a18b4ce31cfe5fd4b267b48dd9e668ce80ac8df669f9ccdbaa9fc1ae2b2fe06ce9e3ee2329ca023b88fbc4121027226bb8f2c03e8d0442a6e436c51677076550c154ce7442c1ae0c8106151167806f387f096399136b574f63af3915bfb69b4380bde63a48db31079d568c9655bff7b60769854abfc15341c52b063fae2b6891b09a08049b1683070d53cd0c5c40b62b0b9380ea2315220347c4add485299d41f5b552c507b44421116964294ae782354ee559cda241c5f8f7c151566476d0369c0630c6835970b21531f5058a925d65a2aba2613ef00b4684323c6e76623e8a14de0c92d858d48bb88e05d4e8e73c0be38733c8ee88386b2543bf9957abc9c17de15a14dbeafd6b120577dea3ff810f983186509025f31931fc095dd3660aacad367ffe5da68e682e1ab055d9a7c7775f8b0cc7346903b004a86961700a9e5c49cf63181d9778f21347123f6715fdf24319fa09d2035df73e6fe6427dc73c5095ea4631e99071015ac0cf0e99c9a06d90a02621aef5d716dd0a8ba969eda037195fbc67fdf08da0c0dcbfc209229ddcd52717cd3aa61c05ee73b3a3798956f5e9e10676e1e672ed43beedd8f6c088d31e8c4684752d36be7e3a2bd99adfa6b3aefd03d7b44cf289f4d6dce34fe31fbaa2269be74862e24359754554f2c8e7a66259ef5714b37bc3c2304e2cd3e7212da69a68d61a13c2a35be0179fdfa7b683d51020f76c7be241932049ed98c463beb5c95085a9147854ecd9f55fed8ec7a56f14bfd2debcb9dea19f1a8f9344f487ad66d9fbe0e3e26c01b4127225862e3f44d80e9469d8fca55c3826ac7324a9a78a485c84f7a3db280166d0840f326e9f7d90fc170832d7105ff2fcc028e596bdfd22e0b02ab56c1ca01c6ffa3e79368a517fc350ecb0306011a21c9bd08c595929da9e496b3f9772d686f236ca6e735e31a49b598fe8b39d0c03841b23e9c2d5ff4c7b1ae23836d69d7dd4ad8e9104099004c68e5fa735d3140ad181989196ae1c3347c399088db7b5fb168a0eb874d055ab2b37fdcc6af0962782a194a9f3f239e343136d36b7c2887005d455702916e3f9606f8b5f35d40cbf09618762dd05692fddc2393273d902e576ad6369fa00c5e590d4de19c78d85e1de7ff14bf36a511175fdc2ea023e11de0d91f1d2cf0866b9f9b153b46f9bfa0789fb5a619111c777a0fd1da14322e81bd27d583ce62788e45d386ff40eed2e79447383914106d103e18c3cfb4c080d6850d026339244f37c213e56b81d9a36517248a205f195155d46f7b9f06135087b048ca66ee8a2298cf3bbe1e432aab9e9c5594cc860b7772bae6e5cece0f20df24601e25f3a57c0457d64ab543990966c8c6d762ffe94a9b726748337bd13dda0b33a6e39c8af0dd89a44b427a84e9474be1fadab944af86d7965dd19d158634acafc2beb9fdcd3405a25f9df24fb807648fb95de4447a2297dd59dc11eb40e3898a4412e158b026c07920e2bbc68b0dec8c69183239d2660cdd836c15d2103ca36d148d8f156c4406889b13dadc56e600ae07913ff75a3ce9014c51657ca7b12a769a310e46722e76f0d79ffe2d74232096b42bbfa9bf1d869064ce749fac723d832014b36b11a90d5bf49f6daeda728f8e3141bba3fabcc78012239251f4f49c497ced144356e23f2afcfb695be6d2e2877b1501572eb8611ea5fbc0c3310896ed58cba67de477342b6a033fc3fe50ab26ee6791c387aa1f6a8191770daad0667cae7adb950146d071225b498cfb6fa3b84c6c893f28aac2206844b997fd487ab888e2009c5ef94c6084e91b7dd5ce865ede5edc19e294f5a3c5d2fb6c1785423d68c99e7d54b69b7dd7cd29433bfdfb93136d7dd31be492fa09a9ce37263c669d67e065479485298caa4a0b2f448856cca7a3bca2b390854d5c06800363574356051a22ae26f033d1b73fbeb648a85742ecb80164d9600aaa840edd9e4bcb9e06cd43dbbc08181ad48201475cfdca5a3ca7ef5b588c2908e98a94b34ebccb5b9eab6e42420f9a47ecbb691d42026d9451ef860e20bad0e200f5013d97eda40ac80b397779e5749be80df6daa3bac55fcf166cec139e228007fb1ec3c0aa835dad9a278bd10b49bdf4d6037b2a72c1f4e0ad0d842cead5a64c10386e9a04aba87e2f2af6bbc7f7d6803eab6f652689ae0f750efd781f19d0223f42e83c4d0a3e9484d204481e4a7b3069097c04d2e04c29a058b2e918c71dd3b1539e672d3731a286bff87ea0a598ee3c742ea77e721e6168212514ce6c1b775e476f9153e128197b619189e6b932d4db5e46380ac7e6fca3e95eacc0cecd9dadc91b0f99c2329b55de00b18ba9e92b9d4fc5589c3857f71eff8dae2214e5ae3097d3578991276eba26f4b7ac82b1a3fd65710a34bd79533fdb559c7ee89b844e20e5b4f32cd42e82fdcc804f31d1c9a0e33ea1cb0e3abef3cae336877c14f0b672868725e8588fe3c9d7fdcc9b8e849768bdae432a119eff55db869dd2d9d0186865602f0f0b61ddb140eb0f29f0a3378994557cf72323932082256429068c7c0f7ea07dcd6706db2b8cd1ff43453a357f16e68ce8212d0c169", 0x1000}, {&(0x7f0000000280)="da4fcd1e01716d5396cfa947bfdb42fe948402efad099c6d0ff7e1f0fef112972d5f", 0x22}, {&(0x7f0000000600)="c1bffe92aa75378cd840e1adc906079b5356fea4ff678477b841edc6d08a7d6ca6dcd5d055fb64266a3636c4c955ad71c46fd956545f8d3a11ca62e93e2c55b86eb9502d5bfd7843712235b919ff84bc717dfe06ddf1276d9b85821d00daa8d6", 0x60}, {&(0x7f0000000680)="8138e7d62898c9cb2ca52b3fcd72e5d4a6fc0d68452a5f", 0x17}, {&(0x7f00000006c0)="5c87e718a7d5904f7f2cf86fb5ea24096f1fdcf74517024f06f3f225416c58509195aa76a799ec8bcfd3197db10d5bf854935aa67cdb360fae7dbd20bcbf13af5a47511720977cf3e6d0aaa77aa0001048356b32975dd9c8d63b74f1b048f5b4049093fb169da95cb4497f7a0d5b0227b004d0a89e8da1a09f82898d889c63568789d84e5357f4f1ea915bba7090ff304ac924b32a5adf8afa640f0dcadde3d1be358a6024f9e7ec4d87c9f99ce8a1cd60213eb9d5e1976a5b8692b8f7a813ffdf8f94e398e3", 0xc6}], 0x5, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}], 0xd8, 0x20000004}, 0x4000056) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r10, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r11, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 8.305931762s ago: executing program 33 (id=19197): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x3, 0x6}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x3, 0x6}, 0x10) close(0x3) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000700000085000000970000009500000000000000bb2bc707bf0604b9d2efe82517a49da3749c8539db748631c35952be27d5a1a975a455a840db457b81252e84cf6a304a4e5c2a10d43bda73d95268af2980c1c368cf78b019dd78777a100aca8a04629e204200a202e95e277b52c067ef573f9167c44a7e075032db46f0599b56dfbcccaa1ef3c6221ecf7fd86d489a2fab3c5b9bb11379f890a780d3d7a56e3306ab60fb67ef592ec64438296d5be4f586dfcc9d7e457a5ae4a8718e29a1370975766713b3e10f85673e56f475c91e823d7ecf160eaae69932bac7af2e6d7aa1c05165a05499e0b0c8ed19"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r5 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r6, &(0x7f0000000280)=@generic, &(0x7f0000000000)=0xfffffee8) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) sendfile(r3, r7, &(0x7f0000000080)=0x401, 0xfffffffffffffc00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) (async) sendfile(r7, r8, 0x0, 0xffffffff000) setsockopt$inet6_tcp_int(r8, 0x6, 0x17, &(0x7f0000000040)=0xc, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0xfffff6f1, 0x2, 0x67f, 0x6bb5000}, 0x7, 0x1, 0x1, 0x3, 0x8, 0x6, 0xf, 0x19, 0x5, 0xc68, {0x532e, 0x4, 0x5, 0x7, 0x1ff, 0xc}}}}]}, 0x78}}, 0x48000) r13 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) 7.900160702s ago: executing program 34 (id=19201): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000240)=@full={0xb, @remote, @null, 0x0, [@remote, @rose, @remote, @netrom, @rose]}, &(0x7f0000000280)=0x40, 0x800) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffb, @bcast, @netrom={'nr', 0x0}, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40000480) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r3, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x41, 0x4, 0x1, 0xa, 0x104, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x4a, 0x1, 0x6, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xc8f}, {@multicast1, 0xff}, {@broadcast, 0x2}, {@remote, 0xc}, {@multicast2, 0x8}]}, @noop, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x5, [0x0, 0xffffffff, 0x8, 0x43, 0x80000001, 0x7fffffff]}, @lsrr={0x83, 0x17, 0xf, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x44, 0x10, "a263b6b846a853be63b19e5adc89"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x8, [{@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0xfffffffa}, {@remote, 0xe}, {@remote, 0x8001}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x800}, {@loopback}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0xc}]}, @ssrr={0x89, 0x13, 0x4, [@private=0xa010101, @multicast1, @loopback, @remote]}]}}}}}) sendmsg$nl_route(r6, 0x0, 0x0) 4.655559385s ago: executing program 4 (id=19267): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nr0\x00'}) 4.449314974s ago: executing program 4 (id=19268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000000100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.490561172s ago: executing program 35 (id=19224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000002c0)={r0, 0x0, 0x19, 0x8, 0xd97d, 0x2, [0xdb2c, 0x9, 0x0, 0x40, 0x2, 0x4]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r3}, 0x38) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002040)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x5, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x82, 0x5, "640e20"}]}}, {0x4e26, 0x4e20, 0x11, 0x0, @opaque="4c962bf5d925f54bf1"}}}, 0x3b) 1.467711045s ago: executing program 4 (id=19270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd26, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x444c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x17, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4414, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "e7615d7fbb43e366b8d0ce64c1497183cd1bbfe6d4d411c2022058357190aa9dcbaacea65c7a0358b66a40c379a0e3972fe2ca18a7bc3f198719fb2430e24566ab1f3c9031e1369aec51f32f552e8eec12609ee91e2dda865f3dffeb3bf5199a9d837d8bcae37fb951ee1afc1fb93b45e67b19eef25ac1e61a0cc4db777e6dd7c425e1144617db9490ab520419b99cf367ca85fbdd790a9afcd6bea33e599b742b50c41181dd319fac3a29dd93b33b3fdc8c6e7e49d2548bd0204a6bd3af3d232b44722f74c6e08dab8c6813982fb0d2797e7eea0de275220e773b48eb1fb32c621764"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "a259a9902614949da9254cfc9a2706f62349973a203cc5160c9e1ab15b8c5ea4aa3909a12c1f41d504676a24ec1cab8ab616e62e331c6858a558f2e224ff8645bf41f8075701e026db97e847fe78cd9554397c159cde27193d79a0bbbf0292ea0aa2541b87d12291154e36c63e6e83a63646b6cd64e5f07beed767118248627b888a34e603e9b02f91d69bab08dd80ea342eccb4fc8fe2c4f75120beb6439fa8f670e2b29fcd772476551b1d29cdd460bb2be1e5699265dcedbb9887fc70e46affac69b9570cb383f7b6d6057879e8c12aa3a8b4ae44b8fb5beda8ee74e93c70bdacbd0636e8bb2e7f140fc6a1"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "9f226225c4b95b1135581b97a4c40a7d6d2597f3b16efe9c31a5c102596fec745758459cedc3284e0c4d7a2b46f9f94ce703ebcc19efc976af3fbe6d199453ba09775916976b428513a84673f2ce3cd4cb061feb92dd5d38eba2cdaa92c6e2"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, {0x2a40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2920, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x28f8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28e8, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x100, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfa, 0x1, "e04878b604b62dcb57c150524b30c93dfa4307d44861e86d958e0f28e7ca0057baba8f0049d6573227012e5232f1e57086ddfb722bc2d6936f79353b6c6a1e4069e910dc790ede1449a9ba7e9e2c16f51787a7a6787e35eeb59d8829b882772405f3d2c60b56d37a70161eacb141f9a1c894ea4a72572611f38b59e1afe42734b942469d2eeebacd7d8dfe78d785f92c60c6c32579ce9d15033be368dcac199f6abc89095d11911d2b8aad8eb8c4494677e39b680f8de476d2ae2c1c80b91ce9602abd46b06d230e7f77c3ff8b53aa29a68d91bdbcbc2567c43353cdeeae1622af44312d4a642d04e759836c4d68371c6630ef6cb99a"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_TO_DATA={0x154, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd7, 0x1, "415eb8dad451427e6a7d5ebaed665d5c2e5dfc5b28b1b371280fbcd1d744ad65e6aecedf2a69a94e2b9c419f164e7ca97c1d4b7b00c6452bb1bfe0dcbe27b3802a12bd37dc4f893f1553c93486c2610c007fc0f71715d71fbb305c54bd36304aa245779ea1bee8e1b1b1d8fdf41102f98525e54eae9862d75b3101949db307187e24498271630362209a470407f0786848fec977686de36fe38223c49b31c2dabc96f49d35c8b0432fc7067682a985ce9a8849c05d864ca0e7cf0fbf67d2816495d67b28ce34472f5a240a2db459ef286e4139"}, @NFTA_DATA_VALUE={0x3e, 0x1, "e04cc634153cfe3075d9e097f589147e8105f950831897c5b6bc57ef36e2af2d125e0f5a6735ff9f366f2c5e0c79ccfdadae5b21358561f1a8b2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_RANGE_TO_DATA={0x220, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "b8cb577f625119235c53caf1c0540f1a279079bd3d2acbbf59cb2c419ff978a271b1faae5526390327d757d6341e1e40d3ce5dc36b3022814eb991b4a0b1ccec72fd1356e21c3a2122c79df68d5d856b1789fba1fa8ae75f63e64f761559cda415f6d35c4afd199bed47398bb9ff4fe08a324267e579c60cbd7786605003ed8a76f752f8e881d67d26e718bea9f772de06605a1b634a1977e2985285fa365f469d87de178a6eafa344536e80a136aec54b9521ebf4d139e42bbcb72949476da48a435e1c7e30b4fd25f1330686e6612a6d"}, @NFTA_DATA_VALUE={0x9f, 0x1, "351db00d405c09330199b621f8efc1687c1483c17dab2ded27340b1700fc884f43eb5a3f7292bf94df499f2491bc8377d308df5c72fd41519a4e178545e6c0ad488058aff3a273c63829e3615002ea90b26e27aa57ab4848a33fb35011fdd1d0b5207252589d794acfffb4ab1beb1eb14d930bf16d032af1e2403c31991844283aa0e2beb40b647d409c73deb8d82ad489a4da84f134fd3b7f56ed"}, @NFTA_DATA_VALUE={0xa2, 0x1, "c0d295e8231cd6aa128bc6df1aed91443107f9f7c453660e25bdfb5ae860ea1f7cf05e802c8d6755612a25f64c2624d50ed636874dab7a8e0ea4fe61c00f3d492b8e14cc07eed696955b5488bd7535cfbba7e4855d9177c7c8947112756d58223e5fa0fe189e299c0bb9b8bf0a0662cbabf691a435e51db2829fb0727c08592e33d0dab1b48ddc1a39921b72673287ef7a5b879e7e0c8c918df7fa46c642"}]}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_TO_DATA={0x1134, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "bbdea28ce701a4c19cba9fea6ff430a01d074c654888340b9dbf7dc9d8cf32b6f04033fba9ad97bc93ea3267858e6bd37f081b7fa5d015311ce3a3e92d55d11b23ebada0ad30519c49eea7501d7518a9c907415caa78704f32103d6fdffec2bb9aa99140d80b3813de7622820ce619e6ebdeb1f87edf5ccb1f80338687bb5e4d4ce11b508f84e100495edaaa2a906519cecb56ce60c8d7c23a028382f246410734884b1cedbf1a8d59944bea7f0a561e4af68a7d30fc65d51c09237d4464fd7c8bda952cbb3a61b63ae02bab9e81a2517ce7625227b05b7d0f43a117b3ab3184d0e6ebb016d5eb1378767a3f0b59afc141008fc48b78f47b86e4b71da7407354faa0ab5f76062fb695e03ba29029e80046e8cbcac0f318a4be2409e2d5c934a332dc9c2caee7adc5c8213650d2b82ba5b33292cd49c133dda253987ae8dd3d5f75f3cf53a98932663407735657550028c66b3351df608162991abe5d7090c870464351115c5f238b3b50c28b02eaf030bec49a7381153dd22c229f5d23eea4cdf2505cf294f2be15a44954bd2b613f4f824a1d9aa67d78a96f9655786bfd264d3deaa200e0ec8fb7dd2793c8b4fa3f39cb88ee5941abba7476ba7e6b666f68d74ad75de0de5a215b21422ef98c1b9b85ca3754243b5f38c3774a1d75d72d966e586abdf9e78204e43b857870d25a8fb6e2625eb379ab46fe89e6cf9d7e6afaaed9e02a2cd04530b4868c4783c99ed1188ae0be5ee215b7a1339d3a69d5610499b4d3c5e604520e8b0cf0abf95d3150d2223f692db9a6e1f48c0b069fcc8d7345d34d501836d07db4f98bdd28e1fc7bd4d6d4cf1f62672f513859821a7cdaf1bc0669f81b5284211d1d38042d51a131e67893a99a9a906ac14bb81a9a5a35a1e171f2bf442118d2d1bd5f8a24ec8ec224d60dcf01c2aa24daf947338213fc7d633a2feacacbf71ac19717e673ee83a6ef547e474d79503cc1c71a9673c777b5dae25dc9c7657abe99eb993c8b51805653b5fcd0dbc03b2640dc55c9b5b4ea68e867e587e4a91d60822151f448063c46643aae391ec2bf453ee6bf086bb71462c43f2d7f4b7294389f93d5d14ea7d48844a4645d5a28351a4cbeaa0a8be8c61a5df21f0c7a9843ccf1825f49d8eb77b281801626ed965fd01eceae075ea48eb521b90df07f02a4ba5a6b064a11f87c4fb5466312db902b4b0399b1a985695550767582344525911ec43273fc134465da37a5d233b90e6b29df42261bdaf7854464c214bf5881475632e28109ec5386da551303bf090554f6752556d972012aee3717a561788af51058e16d9d8bd7132543ce6e80c92b4d5ab4dc55745603b7f3ed33a68fa3ac9cdc771289a5995eb7a7749e7cd04adda24cebbb8af75f79f64d48a311ee65ce7e51ca8a3012f416f439ea3284802d6221c6cf1876ca5f462c89844edcaf1a0b517622667a87bc65f74d2e4d2e87c0f72d09af5a114038bd0facd31c02453cb44a913b8feca396a6844be494474448d9d106443ba0d4200581e60bec3e100d6f9b430ba4471fdab93445988417c06a2b48a343403aa4c87cf32b2995708fe220c1e0d28fe03472233b6ddb5634e0165bdc3351626cddd17548fe8e0b6ab9370b1df635d0ed1f790b475866a32c4179fe633ce23de921d67ac6ccaea3631cf6d98309ef00037fbb6f7dfec40ce6c4c3dfba4749b264881a65c8d02cacc789d34e4c6b77ede083c6f8349d6c80dc402a34165e282f2c2400cfff9819665dc1f163af730a4a45aee3ee3b1a24567313b10ff2584a12bdb225f19458741a1c4f4b247ce35de7fee9b9e3ec1cde029629286b47133e3dfdee4e341bd1308b16f6ec3ab6c6f448969c91b8136362cfecdd0578db8b6d9059a258810f6cb3ca1b2ced653953289530e8da5c4ce520ba255dd2cdb5d92acaacb2d6ee1bf985c6036333fe64e8361811884b9d0438d08df3cbb8183a0e9e7c9a6b1d383e995ffb63ae795a28ceb6b0ac44c84928c97ea531574f96dc3bc5e4d74cc407c169117494ab441db8bda7e988fa1953ca7b1311b53ead212586a2a1aa88e810c0f37447402cea55fd7e79bcae78cc7f400075fee080983f772cad9e09bb7a4b3d9860804034c2718a4940aa39197787a955ac1d2667c7465925986024b8b00ddc7331c9b7ec9ea6204b3ab8af498a3916d726e39be67a997f30bfb35b55ed70d7da4f859239d5c548be25c8e3964c05dc8f6fac5b60d38e87a1817f3ff61687065c0773bd51ac84c9a5159ea34db94cbbfa9e374a498e0f2b096b9f60902e07e6d034fd693f682443d740a4526918cd3c4946b34ec35a60071343485849465b4ad854d2d3308003aa769e8b1f3012a184232da73fab884a616c0a5685cc4a492f33b6bdb63fc7ebdae7df0c03b205f84d5aed2935fed68dc1fbfde18e51760d7ef31183a1985f6e02f71683d51cab247d9b49a9285688c7894fe1e59a80ed147dce0be0b8178cb536adfd9bbe82c6c2a4a43c8cc1b93325ae6d8729cb0f943e5457f80f391c404a4f49259bdfdf272e0ca17f188e7bcb58ed69fd9e40caae53094284ee6d6f34c705f61ea037224d220e435a2cc5bc6dec2370ee52ede3664c9ef5f5cd6e4dc3830291ebc72d22e452a22ab37a876f619edd14b7d351c83e4da42f14bb87966e0af289f16a8919731b23c5d3ca2691abaf3782143d92a19e349e6cd45da93afe1027fc5bd9e4e9015abeaca740b0d9a85b8e1807f72d77b2210e37ed49d32c10c19e8a013b3e6029962f4feddb1a880c7cc504b28cbfd9a020f1d220f08c68fc3b76f7130f6ad9ef7b454e81044f59b0997ca074b0eff355eabddd96ac57a1b1b0963f008d2a62c915defc743c3808ae68f1fb91d4e78289882bb618d13806d7ebe355570f24e5625eb96769ae4ee63e66d1f2ead024c7efe72181e8c04579d1c9d66726ab170c4aef537f41656e05aeacf4b295275bb16e8bbb6ec39a61872ef835631a276c656b0fa14a121c3435931da89bf10f7fde30c0c6d4f46a66251581e917cc671cdb025525cb13afa10130ed3bb23d4cbf778a4bf5734b6604fc56f36e5d4af7d4dfa67ac30e1930be7dc986b2a87b9bcffb7107b6c52065925c5d7201a4b6aa45e6c46d1bac6f3892623b3ccb0a2961cb6d671067634c571b82ac505405a904f6d8a7dd6a38866eb4e6c9034eb93f6c58b034395399215435cf5c5b0f1b2c93e10294da0dea84d658dfeb121ca095855a74acf94994b92a7bfff38850d1079587ed7bd7e218df4ecf0f9398e7e036e5619bf2e151cbeb0a46ad55405ee775c0ecd0ec6c836b2a1016cd405a19b84cc02b0421c7be5e60f97cfabbe45af14e53a92274122ff8fb855494addc66bd8de53700a3bf67995a4c38757fe266ce37d1efa70c3c6246ed83e6327d03eae7b60d32cb2e0c98a9b9801ed6c935e45a52746f0d9a988e509f102371e879635db038db3a2b456fb9db877e8200cb179e70a9bdb44d13326940a7d4f4fb3a86b97707738433699d3068f6cf006d2ec5bc74b37b3f898ad63b2d73e8c632e4d269423ba5940c46493f9530a9b2f7f000aa9224555a0af3e6fbdad12ddd2aeb7317125a0b9323a212fb34580268a1899c1ddbd4e5830bdb483670d4b3877cb88d025ec66f270d6ca903096bb7cc4a098ffbefa0bf51173730d3d03a64f747d1e1d29865b342baa94a191881b2c77dd79919457723f51900c4329b98012b62acdfecc635d533aa9fc848c9338b2b809031bdcdb1ca995e5d26d047a83276db50d5509e5b98de8f2ebd4a0632fcb7fc546b1092cd1a7cba828cda0e2886cd83bde87981ae25dd99560751ea0198516a1edd7e841c9d474acc8f82d50fbc119fa96709adef87ee7414e726d4a7ccea76e452532194e375d95835b0e009f8ffeea9e00209342b058a7efd21a131703fb9a1411d61171a4c0fcf54637053ad7238a9997b45621fc762c1b906606d2d8b4f2b8f2ac15740cf013f4f8133c6bb3ea46d93c67fa7424c94733f958d8b565fd8d1bd3607559e160478a52f72bd5280cf98c2cf674851f48a6ad151270509c15257ed0d667a67481cc894cfef70619dda9a772f9ea0eccfee62957e5d1798f5b3b37de7814d22500a8cb8a79699431ec3677168a32e4cbd7bb02811da8d5687b73a384b108b2c854b129ae85b1d003d11150cb7d1bed13b4478e0ecd48b2241b2deae36cc2ad09aefc84e02d73e95462ed0db6a63bb1c4106b165e9ce0e853cf405789eda9d97942bd75ad5aabbd949ee61cc0860536012827202ef30ffe0c134d20333767842c59d19cf9d32c4a359b81dfef1553d5146927f892feaeed5ae3e5047092503166dda942bf9ad356228c5d6e5073235dc74399e70b77802c7286d6a2a087afbe7cbd76aae6c0976528943aa3a0072adeaaa5d4eb83a5f1b6f4971d04255f3bda25ce77166ac2355e234acc56eff67710e8bea2ec3c828f2d9032776b853038423f7ab37990552109f15ad41b6dcadf07530bdb490c1134d658d2853636109637f63f5ac83f84c3e859d59980cd1b0c4cde62e962cb26a0de57e14ab2e522ff4b3eb3c09ab7c84d6b785ed91ca756ca25e7b39b8101836626a16d6608ea81c2e557b9e2d82ac920184608cc95616fa737b26c2e9226007a672d59e59715ed67acf1b940e4c1117b6cc647e1d4b84e19c56db1ba56bb99eca160e77969b820df3849b1221015e3fa7ff7558a55af5f9acf18b81c2bb00a07a1fd80d1829069b15abb5cd6e4e50c17002b6d14e6d333ca500724ad58b4f9e79b50c2a85c89b178dfaf97ab1b1288e0d8ea8f30b4b87b81384041ea077c71950e032603cf03057a8410fcb3aaff68fe3317e71bb3d37fa46d1b76beacc2791a97077e66b77bd314c0779a962e3027f65ce3426eb22caa95b570acec6fdaafd5500d7f546a6724c170ce9aec2651c23ccabbf188bdbcdf21bc3a14ed18708931ccb6a386b784cc28ff36807f260a7b179812d7e48c932d768ebd02bc73f5c3ae9893b9bc51567a226f8c7395cd17d7d08e384eaab11431da7b6149475fa219d3af77e422d5418afb23646a36aa842f8341045de5300ff3e2a348a4d770bd06cc5e3f47bd043349291411c62db9765bb7ac40e39d9208a59fc282d28d05d7e50a2323789d481e4ac7f6a9e8b1972bd1442d26e2929761ed869d38c7803e19c1664bbccf93b15708bce815f99499a24fc7c79a60845432265331d7aad3bf228f9570b9ee99bc3b733e111a8211957d69de433b421206ce96b1bf664c8619d431eefaf4005684116874cb73f7b34722000e089ac9d63460ee45aa3f717728a8d0ffdcfd336d0dfdf5116126fd8e8d7da19323179abee47263d37c0b01c98b473f51607aa80e1a9d29557cce07caebf8b9bc087e2d4a797c52b6f0c275d650f3b8b6287f83019fd4037d093f21d3ff17ff754bfe5100da2c0ba0d2d70feb483dea4634ae7a56dfc1c2e93a5d3b8cf249ed2f12570bed1e73da80eb70305843c9f0b2e4f6267ab38f6052917bc3b75e175351c06b154d4596281025a8643f6d311882a504a04c5ac84115c05e5ae7a62214316d9147253310f1d7c590222554a3b9e1c5486be314bdf3810e9eae8fc8cb499fb0ddded56ce005c33545b7dad69f65053f05e39e9bc8476651471167a892c50ac97a24b50f0f92a0c51d5e0f3fb8c71e112eae88d939eb6256a6e31c7691a70407b408e7408d92523ce7d59a50f698489a918e423ac787244b16a13009a33d8c44b2d95a3ac532dec629ba77a59bde1"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x59, 0x1, "9ebb3dab3136967faf2d9b49dfa8ed0915b748fef1eb38cc45996f2f9e05c4eaaf46e7525db94bcfe6260a54e4b588c4a05e99bcdebaba05b5632a8d60dfbba5db603d12ba467bdc56cb3296b26e3a7b7fc7d2df74"}, @NFTA_DATA_VALUE={0x65, 0x1, "1987b00795ed4af18d75f716a0900c7990de60c17bc7ab6bea1e7a18f808ea881a2f2bb0f8d2d39f18aa24f062717cdf64dc512b3bbb36cbf097b17cad4db73dcb38500c179369a97acbb044b82287045096d7b9339fe52cded01a9b599d6a4835"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_TO_DATA={0x1328, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "1c79879cbbb0f95d7d866b0bd1bb7dda4e16d54801f3a8896ec6de333519f1f32fa007d8195ab66921ebe3106fdff821ad8d3f69b6b6145d71474c7a0be809bcbe881436d8895e7f59ccbaab52886f0f92499d00a7cc013d1576b5f5d4837da8dabff455dc9565ba2a4fa186d0e340f0ba0cd1cca70d3bb05431c3730e3e24a8ef6139978ec0d1ab1898cd793d105bd5ecc4f0d90504ea61e5208e921222db4d7b7194674aaa15968c65b5552c6f218deea25bd9186464b78b677b83b0769d522cb2f6d8a21ac53fcf6bef3afc13209814720133a8515092666435afe6ba558d778ba50fa82303c057b0843c6ea70de226b4984ee2df78eecdcc9b605557d1a949c27643d502b6e840d30a27ee757c0c9e4eaf1d1b6bdd94a75c2f5914e673c6d940020e14468c18b80ccca31de460d9468d5953a7ff80c1be05a16bd4103d91dd8c47fa6f6b1a3eead126081fe64846ce78ce8f132f5590150b3bf526d25041ef073a087edfefc3579c27bd8ac2cd6f3550b70bf56da2de4a09b06202988fabdbd987e9c4aff7c3cb845d736ce012c3c19a8529f9003cb10ff4eaf8b4f84727c583756c8753bc282c1e709baaa68b85c84622d8206d3119e6233c6f89cb544e6bbebcf732b6cfaced6bd60382eff7cdc35a264669d2f1d0983fceda7203828be2de0e8195601e8cfe4dfde44683cbb32145a27760f382d3d10189c6709afa08c4a60f1b1601eeb6ef369934c54ec89add9f3288d1f2319ecc94dec24c14a72a68897164abefdaf040fddd99012c289c0d8cb4cceb43d50c2e55a7ee969b3a797a680fb170690b1789e5d1959ca868a0301ea7a1c1a370dfd0236afdc9eed964bf55158a400c8dd21781170cb1a4ac9e58c54f3bfb27685d8936d05cd67cb5fd0f3d28d065acd7c3c92e192041faba3d391b423da0d90d690a17ff685b769cd14cd6d05eb2577f967eca9f3d812408d97062841c388891d19fe213451f274e6645bc9cfe6d85275c6987aa0d53c9bc0f5a3d8b63046e6624ddb0dfe542a798e62efcf1b5073b7d096966b80ceacdd96e4fd2b8148680c204ac8ce0100622d04625b5aded2176890f398656b5369227e8aa207f277f7bb9791d6bb94aaa63a1f54cd478d5a297310109bccfdbd66dacbb9d69bd1ab5fb82405476adc45356b9a027b39b5defef032dbcb2911596a37e612e12b7f191e957d9e3254526ed6e51b163a6617ca4778cb1b2da4a587245fb78b36f7330f61da1342e47da2cf2256a85df5ad36482873f216a55d9ed413656fc8a6990d0d0e66d95c86b9aee307f8c98c98115b1a9ba17f73a31201f4ea4bc6a4a1b65e48e08e894a2b9c0c50fd166f8e1ab6a03fc284ce86ec69f9e07ec9684b6fcc7916b0f6472651aeaaca6e27597e8e2264f13fc3132a83b244cc5556b5980b426ebb544ec8dfd535f6d0531f59ef1c43e406742a8ee221d278ab692a7988c478ecd5a5390703276f5e0808be093a76717b2dd4f27a6e4f46f3c39a1306450721be1a79468ca40d89641df58f88f9aaceb527bd487808e525bf4471e0adbe5ca2bfc5172c2d52e457802b090ab42073d2dcef380a0470f7d590b75b6082f50952e336ed6155845919c976c1970630224d41e20d00ee2320ce0db581bc178129327bfa758936e76114470897bb0d0649a1b0139dcfdf77b9a0036969820bcb67122d7551a9ae81ba52ee90d28087cc05fa6a6f11bda0016b9c5726abc70bebd31e6662a6486d51e3e23761abdeaa6c1dfcd2d3e43d22da07e3a2ca7601faeb22b20c72920663c49a7a380c26226b72f5113d94334da6b589d91e0910d0b650176e177c9f81447d0366246b205f9ec552945fb5382affaf8dc8348a93c9a3bd132cb1c2144730557c4d9b2e3d1885f614227221c259dd130f9e5810fb8c6476252c071d23dd8330c6e62621618642f9193b74d72db82fb5b85faae94d77956628764ad49adf9beb3c9c8046e16ab5403c86ad1cba0d71f14146d730419d40eccbf3f891aa2116258e0d0333212bce82cadf117aeab8550200727da1408dddfe21b8cacea91b5e11dc0c0eda5e849836218edc74ee1cb4cc266fda02f08a0bbeb34909cc392500947f1e6b897d5424f18919569ed6a85f02bf82c64ac70b9750f52af9d13acd89b983b6d6bab33f8e82fc8dcc9814118a06e6ac7f1247ecd70d29536a1e12cc97c241963a0b2f705ec116c79dd9f15e1830e70d46a334989b0e91dbbb10bb7f41414e2892a2a1fd4831df782de1953761b407b109f074e2b0914882edd6609b39b258f66eab30456b80ca19228b47b2cfb5134f919f4bdb1f1761f6112a0034bb47251657b39756b21bd7a3a42fc7153deb2220601a69f7bfcc71eaa1265336a17f8ab564cccfda96fbab712bb5da1229fb5b3d418513ceda2b258a942897180b4969909d76bc04be51c10ea802c8bd9c45f77cb36a3ad179a18914c5c9d643911de5ffd6abaa06ba2e0bf52b06cd175821528cd3ed4584d54e340503dc181d8fc027069b6e05d401e0f2a53e87911a4533598720304ccf0af5a52a032e41b2934459d53d41a2dfb8dd0783b27bcbb2cdf36ea8bcd5c22b6c31df7d2a44225eb00c231e6ee271eef4b8fb64af9f4dee594934f0f318a4ace87ae3ebfacff7f8fbfc3e4fbd2012e065a5b2761711141750c39b670f8f7be6a572eed185b21c8c3fd31b37bab1eedaa061abc1bb49450fd4491f59a0fb8d4b03c5488965b866f77aaa28cd4e9d32efedd3eef40c73703049b11dd2c660492450bc17b29e5f836d52f0d1815ea30b66c7f356aa51c1e0c6ddc3990489eafe516ae6c81be332d26498c8e277b3a4c4f021a63836217fc74844e254bd302848fae386220496c527d34cd62e65bff5190407a02d457ffe847d1f9032a4a7dbfbd3c23399cd73e7a2ff2c114f68617eb4e4f52c74719ee13af68ec9a433e83ddbae9e7c16015ffb90cc574d01ca322a29f72cf54b361bf0fc71617f8ef95935fe193ff9d3e545ea6cd797ecf01bbbb658233fe508b0741ed181ffe2a8ad61f51ce9fd8f091c8429ddabd99259c5622f0fdab7bc4a8cab871024cd16d061daff5a79e9324d56e266c886512261b1fc42e8c57ce34d767afaefc8bb825b32cdc38fe3812656ccca7d1eb9f292b77c7df6b5b4b51ad54a3dd602431266307310aa8e2a7e39e967c461f69c1df2e9e0c82131b07d328a7c3baa48005fbae942822d9c74bca380e95c84a678b7df97c979fff2dfe69f074dba70e741dea8137ffad3c3f32f3d3ac17e17069fc67920d02b63d0aa25934231c04c953f35139e02c29c503e868e313a4b6534dc0474b98adf824495dcaa7141081d12e8fda9c9e5b777af0f3550fa4f02340e8c4198761a576f1a0ffa329f027ce6f4a21ae174204bf8755328d50f0beec5c164d659b7d5ff04d4c5c6f512bb885fecabaf484b069b345a6c1c973964d0cde5c020e0253f545cde5f22d4a6fcf6204521df861354caa0ffc13060cf383672e3ebc4f9c21852d0a3e58933ac6dedee846f7d8df9b70bf9dd6b27a3ec6b0c4a6232263dadfb34ff852e9c29fba4b11961dae52d5c8aec456c4575b5cbf034a2a1b2ba788837efb51d8a48aba79d5cdcb4f029c5a25e29c314439c0e41959d4dee4a32a0397212f63a8be685e78c835edde4535f8daabb19b53b80fdbf257492a12df8278b51b7878c81d4ceb462ba02ad79be6921e9a3187d282bfeaf18163ff06fcf1c1f79dac07bb6af52a66a4d86a12e1c743d2de64332dc3393f002ea1fd620c36a59d59f00dd6a7f9d56aded19bc502e7a9d9013dab36341ecf662b7292c33e8b1027d30b52b775157cd5565cd4f473fbfd98e7542661e48f6c9ecd75307ed0edf91df0b12d42fa6392143471804e3de6d97241d6fca917492402087cb8a6e01c7436be60bd49517622097e21c6f2f48f69f88fa8f696e60d980de0b899fb2fd46ef58ddc51ae928c33c36fb146b6d4515ab45fb7fa89eb09f78721a7b96b792e1422044ef77d96e61487f7b9f90f0b073234a1ca120b8b5dffdbbfe89fafbd73d4045dbfcca327e1b69fadfbc92f0e8e16a1d7f540c492565b810e7607b65494622abd9a5f863b7234c69890d71cf17e28c0a5daeb3aaf3ea241481541677974d545881c6fd687f75d5b04f7f5f1b34516d1c71ef3f63e8b0d7921321e5c0c4e7f56d225860800db32e0e7fca0219eda296c9e4efb460c84ba6cf89644980efa5ca30fd8f425040d80946c3dbf512ce72ffedc78065fcf4b5450009188cdb4d86439628e2358186875dd880646729a64cddeea03067e12c50d6f165c7dc901f7e35e3d5c8de9c4307d6770e50ab7f4910aba9f9cd964b59f7fb72a9ef003057072e0e26af6521d25d0d5650aedb04359c984e2a224aaf7d5acc44c9ddc1b73e5e7e5839a1cfbcd2b174aec56064d01923c82c9b38324ff83a0bae9d717f5d79611959d28cde54e4dcf314fdac50a53afba45c6efde9846208c8d9b76747b47f4154af00982a9a30db66a7735f3879c724f80f7246f28e562eab4a52f0ad4732cfa314940e611432ad238194c09ba429f6d1a8859f808c8ebccb443e7039d135fd2c618a60a663c36eb5e4563a9266051cd3b084206b85e430eae366a9fcb88d18588efe94eae58a4b632229c568bb45db266760dc45876e8cfa04f1aca84feab8ba0e93cba7c938e9a63ccea51f1c4fe90cab363bd717830ce4adca063daa4eeaefb6bccded3c848b4b428aaec2de9dfe2b3b7df140d9c4228d8511eb0cdccb88f87e49feb762119de2be61390d1abdddd768e7a3002086639f802865235227087c95f1a6216b03246106b308eec46324b714c97b2b9ef46d4f1d808453f3868d1bf93be6c757e5aa88347958680837928b71502140e07a2e8765316e4b0fb7176ac40c4c796099c0197b06f5f18628acdd1278a0479679eace1ae21035e4ea5ca2ab4e8df347bfcb265441a03f41c3c2077a004e1b9a4de78337387ca229b3597565777198db0bb9f13a62b5b52119ea34ca7e3e08d3a661dd86540f863d934b4848bfc16c533a9c8b69df03b685f27172aefe583c7004efb93fa118360ec20a29fa2a789c27ff8c43b889cf290c2d3ed8a73722cad1f1c98b446b078a1064e184541db372d76111fb0df97914b329a96798aeb1efd3b2e89f58864dc91c98e3b1bd31b63f53385cda9dd0c3d46c72d2a2765387f17b530e971ae5c33935cb8132edb42eacfdfbf1b3afbc6b8899802ecb361b868644a2b1ff42124b0fa656b5eac5231fee23a1eecd5cc5a64e64237f44060c3e8c61aaa56eb6fc86436af741f6afaf46f53c737cffbbb742c570d09eb901a93802554078a4ddcb9964ae83186118023ae84c75b49ef69660e6794eab68e7ac79ffff09a704442b1ffce7f0bd0ed8c8ef423b70c9f37246ffb3a02464e3dde8405deb0005d0b9ea08d4ec831ee30d1f94bbffdecac40f6a338e4b1b95caae2a860e8058ea7faa527687b62475cdd74c2208552d54fbb519d3b2cffb8b48e530633ae1545b16ecaa91c8ff6bd3a7fb64567b28cd69156e0da55a0905959ef7f918ddc2502d0aa4a40e7e235762996f4440c476069e4121c9b8a1d723f6cca0df050861107976d58ac9385412889d1534d2e897d29560507b1f55bd743e1ed27833407487316ef5b1e908757ca00535ac2d998f961bac21bfdb4aa68fae56c02acae5e999b28a70401b364bfdfc87f4f8708ff80fc8bd1e2623919c410e99b149532b526b0d19d064e160ad80b96f752425da99cf2"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "26a194a98ae9a98e34b2b3f09e752020c7c0c6d31a490fb421fb3610a4a4a14e26017a791a059304c0554f5beb70adb4fb49001561b43d408b6acb6758ddfc4e5f06127bb60ee82964390c680087698c67633a41c132f8fb9709540dd5ea3d58463dd0a9b522009c0920f12b64f81e2ac3943c906b8b85aea6441dc69731b87705e9f7c51fd7a214bc714b6ab8071ede69e443beea135fb5098b78678c161cf3fc"}, @NFTA_DATA_VALUE={0xf5, 0x1, "668cd9da8fc9e3d2681f4e9110627c28c1afec7c8d1eb4d6246dbd8a4c67ab932a37b7eb532a9ff1acf5935d9f8523bd3bcd12776dd313859ef76a355941cd4bf7ba3b097853f2dda1e817d879d679b7d7ece7e4cf93915fa8c2857fdb53cb5d8b95a6e40c8865b0425abceb7cdb11fa2ab2e2367a4be7658986d6275bbdd1d78a7bc1fa27ab14e9e4ff25d0f984eaf22092b57806678aa7d223f784035caff21cc491497c68b5e99aefed54daada43eb923b0f90954acc8602f9f48ebfb1ddcdaa4f7f1599c7de5e380aeb832f012ff755f2aa54401b4b36fc7ffc13c492019d8b4d9f3320b48a083212178ee835a5659"}, @NFTA_DATA_VALUE={0x4e, 0x1, "5dffb8bf84d3184302de4796679e695dc06734e37b9acddd18e5aa98213af8aef5ef03a96b0450cf4636b1ff728d94b6222ed00143cb74f07de7776641697d81a5f95eebef34e36610e4"}, @NFTA_DATA_VALUE={0xee, 0x1, "03e1bc87f18c244220a6b994d403d90db5f89f9dc24173bce6b9849a467d6bbc3964aa76ea3ebb1b4aac129ea56409133692a594d6b08dc5ad0ebfe5975d2b1d846bd89de0006654c82accd96a9619dd349c86c988294662e269b19b123a6a54d800faf14064d0cdb218da7c1224dece570f3b8397dfc35633726cd6a1977f74cc9020f57262340ad1fed6db0895fe3dcc0be4fa28d2388416c0caae8590b4af69afb8c81423f18760a54380414b100797ff89339d2ffc6c84bb93668d2460abd6c562f2004605103f99e79ba43d88a7b607a4058c31bdce7a21069cc4863317d8b8844039d78fd57dec"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x518}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}]}, {0x898, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'n'}, @NFTA_SET_ELEM_DATA={0x494, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "b54bbdf9705f5e7d9b1143ce9b18ce6174c21d492064b0d7d5d404976412e3f6bcad8326fb5345a1cf1c4bdb9b797eb234fef404d22f94188ebc1a5470b1a8650037426736bde7a5676e51aaf41e17153616c2e32ec07d3af8335674927804c79a1b64ee58051739d92acb3fef1dba76a0b61b89b8be6a9713d662052ea71170b888af79da6ce7632393aec021b546a3d7"}, @NFTA_DATA_VALUE={0xcf, 0x1, "ec007b0b044fd6f14749b784fc36622629671c90de84a995b9de3a0fa0945644887e1f41f45c7c7ee8a09b3e85fb7da148b1db775809dd0a83bdd1a006ad927e0e24ef569eb82cfbd70e130635e0c1bf996ef37e86796f31de2f70025a7d0f87d03c9574a3973f69cc686e0a584ef1b207b912d8ea5f5982e6c0b2b742b503c6eba1fbbc1993fe0bcfa77ad25ce3080054145e7bba9e09187028797bfe4701ef0927033324941fbab889c4d371f04dfe5a224e0a477b887870c8a34f47a18f81b89fd70bb1b9d1bfc1ef7d"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VALUE={0xe6, 0x1, "e5d14885d3838c045dee90c18e07fa97277052aee7bf3e84ec7e04ce05c2d597d512a1b230022db6aea98e330bf108da7cff86915018e6a153aed42b49a404b51d60be91fc8c3e5179dc982f4d5c62b9ef364b06a7242be266be038b3f57fda8c9f9deddf65f4ae86402619a8d2ffd487cd15cfd4c4d72b0261dd17bc14d2b1ece2f8b281315587acff562d19a9b706830b4252410dcf41bcfb7fdd1413d7e000e50e914564676233296c1f0c6b4cf5f63e965440682f92e18cea545d9bc7456be7612045e0d3319abdae073c853c26decae1986fc39a4d557dbae5769aa82440189"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x77, 0x1, "c70e999c595d15126dc57d815b4bab9e349a84a953368d544bc64d6ce9a18aa4f27f083f83e25bcdd8685a2635dba09a6fd3acd278f345387c1f4907e1cd294fc86d78449ed4fc69c3751551ac2043e46e8e52894d00e9d4f6cb78877169674adad847a977cd274910cbcfd56d5bbff33620b0"}, @NFTA_DATA_VALUE={0x57, 0x1, "bf7c849ae4fd15e9f8aa1c463cdb3068fca2ed9a139007674ab16bf5b11eeb5d85c5a4f2f3879ea6372c57fa7a02fb6967d6f91e6dc4dd10c25b68c5b5a9f29a49bd835c97caa8229c2041563a37c17663550a"}, @NFTA_DATA_VALUE={0x9, 0x1, "6f311e7ecf"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x2a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "bf22e70b14a91f633a9758f93e915906b0b69905ccc7aadb20ba0257460b7cf6ac86f4b5bda3092fc8390d4933f4db2c9b81041e1bf3acab5163674ff90015887f4b593363e53719c03ceda618"}, @NFTA_DATA_VALUE={0x4f, 0x1, "f5633b8213d82cce6de9aed722ff86d8690796ddc616bc8ede28c9521fa182195bbbd325c940d7d75cd08cee32e55c3a157864ff724b2af590370cac368ecf9dda303056c948c2621bf31a"}, @NFTA_DATA_VALUE={0x93, 0x1, "8bedd792e87e3b6d5f227c8417d0ce363f174625c808436882ef6f643a1ef5f14f56408ddd8332fe1ea6e562286b6239756b6da60aa0395e250091569dab58118b941224f4f81e8da4ace7e89334d1cc441d75102290984434d74a28610cae086ac21ca506c9de321a44370105bcf4284993aa2db324abaf40b4b48c9c71a65fb99b260dc585fe08da403a95c451cb"}, @NFTA_DATA_VALUE={0xa9, 0x1, "da3e6c56670d86067cf5cc72dd61985a6aea63899dd56c642ea2c2dee52a38a3ed748cabb8897cfefd043a0c918b6db445b8159e7a24229547c1d9bb7b5eeb5fb215ecf43a36179d22de64075908bf4ee92a0ee925d8b57f5146dca01d567f7b8badd8ec04e51490b505797bca9f2a761a3a56602c97c990032f7db9dbb5440a2d1d106ac8e6f299687def7a2485d5775156435157e63bddc28f5e599a3118d586fa002667"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x58, 0x1, "d15ec4593515ad9fd8fedb61ed26a46c891ce96158324ffe4920cd3d2a61bec22e06dc393f9bb79debcf48be24b423ff38d6f9bd3cafd3b762744b4780e73005527ba83a80bbeb948f4b3ab76cfd4965d0fbe6b2"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "dbaa68b4fdde77564588240537"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc0c}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "fd897bab2667d3915baad8f8bc6c28c4333126bf76405ab0352174576fb0778d500163da52b1ee566d4f8e6eb3d7b94c5ec40e19c3c1e36b1287a39c638eec10da042ff5de7e8b1cd5101215b7fa406a93bc0e5a269f295ae3dd114228"}]}, {0xd6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd68, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x34, 0x1, "338178e89f1e484760200e61317d414fe829ea6bcdd205844ab5cba9d4e3f830b96fe824a39ee9cccbb63a5c10efe03f"}, @NFTA_DATA_VALUE={0xc04, 0x1, "a7fd56fb0a0ecaa1a1f8d7625886d3161b7e4cc956c639c2b20dbd73f05f95928ae3d82c5695ef2ce561aaef83b41972dc0359b7d1db7b7816221e2beaf2390e5fff12f7f89c046a327b23d477c527fa21160284a5b8e19ad5ee9b08be9fda6c48997eac78fb5ec15a0960d851e1d6ebe213e33dc54e6d13e3176e68ec924a590e7b4110fa036dda90c0ed5c98a870796166cfe6e36d26eb4c6f7e962483f2e9fa6b96fa01f7e3a287b5505c3093f03ab7a5a30d05f409a5eefd51b205d0ee8daf15a7ff6f14fdc10514034fac2cd6a0ebf5a54feb4ba4596a0bd0214725374d451988eaeca679098504a8f5a52d36e4041157e7fa4b79adece57fec5938ddb2232bc7cf07d9dfc2c00b262cb8d15f429825e2af28bf6881b19d9b48b0218bc81f5551d13844a93010aade53bac764f37589fd4f0261cf277cb2bc789e907794813eece2a57b7dacd1e85fa4dda53fce8f45279641cb59a0f60f14e71a07964327b59ddab868c95e4fdf8b283f8dd0892ec6513b9cc97fd245a5208bd5db5c811149e67498702766d0503f329b1eb90ad04ed6f1461b77c44941377bad990c4acc1254255333fb949f2429caf5e9910badbb4f020c889a7f0516a2613635c2e5183531bfe315061e5ce93dbc45c1df48b44e3f01e34d253feab78686512a445ba06a0779d4969ebb23fcd6305df7fb94e591c27ef409856d82aa1d7f7dae1ed9e73b033e15f4d1c101c073f8955ec2ee22d4048b635ba8e02e6deb51694d777b2bff89b9a2bef1b0b2e41e1330503fd4107f755f336ac2eb80f9d3c9bf879a6977bf3fc8f9d644c7573621a49c412f60604cf4273eb56b5eecca39a8f9a19fe7cbe64132a50c6dfa98ce716d6eed1db1c1747ef3a0f22b7c6c0d527c88d5205b6c06f3a8d08bf66434f095a33fef4d38846a01b84f13e83d88ef7b2a25d52c1809e245ce8e4a85aa406d15ae40d5942d61ce96f9de34cdd1833a2ce869d055daa52c67c7fd6a4af58866eef4420d20a4f9fc72f70d5129e936ca51294f8f1bedc4f55e39055128b600d7141f2fc2a3a5c17051ebe6fa81eb2ba293fbb34fe1f5ff7c8bc375d7ab0c23d3074e126ee9d57f8b4908331e99bfbf537278c984ec7203c9d474a0601daef531bd987e3fed6371d04e750547175cbc82066638689e84ed986a6206ad7348ef28ef79f6f56c9e7acea73914728431add6237bdc7af4528c281bfb011e782b6912f6f27959e4370cad966af10d8e1e983316218ef9b63d071246b7384a223b264b610c44ecc895e56a56f509a0b27317f0683334b683ce77714ca634cdc0b925e89359d064a3bc5e3178879ae7eb7cb9555430b5d718bbe3fea94f62a8931db00f636b753a5984a1f66803917d3d909ba8f2c4cf9f8e32eedf700b6734b7fa3a76fdec470899eb3c9ae7a4557c1672f83752c1b93b0c70b71695a41ee28f210f546c89e4455b8eb14e7e984c1056b122c6343e84d554020bb04a2c1e393df5a9fc0fb73aa8cca0c042cbb8c1c5a007657cb70fc2c29b8ece7849220ba4023b5993b2635d34fc8316af165e6b8b1af6f30ca76d2814ce54da7e0dbd2de53485f120cfb8da9f68162791b47f57a9ffa7995564603ff1d40f3696663828e3be4003b6474772cecec6bc7d727921fa35a235fa142094de554055253350cc4e6709a9399504756317e41b6b988b5c9f2cac845f908dfa6f4c6ea29f631d9407e2834a2bc3c21dd389d93061f249418d24002b038beb419696c68b949e398e87e17180304c32b41dd8139def97c01e4f7140e9b5a022c17420a3cd816975efdb2756df0ee693964d696e3f4e1074d9ecb3135c3b3cd55a3a2000ba18167c029705df1811ba774ba4794dfe7ea7587d482374c0fa265f46559591961f7cd009ea7ca0df799be6d166675dfe1f63301d8d8f2edded8e66b33e2afb00a1738c3517983ec9fa5bbadb11ea4ddf238640dcc7a5f3d86498983cc6116ce0fb0554df7457f4d857ede2a02c5445df840c6c7f403f7ac3091c80b01053bc5f26df7926954324ca24740b15017cd00efc5e47c3508015e0ccb5717f69b6a40d376699a9d4cb95bf7b510ae6dea7591c3909542b22257ab7614d52bcd41090ec76192a9363c94b4c8d10cfd8092b7b30e28aa8d941faf962e86480e937ec4f84ea95cb8ede0997297d0f708765307ed44609035dda57e1ab343e9b6baf094c6ce89d721c6c0a6422bfa7b20fb4bec1f7221ca7f94027a0870ad68a16d9d7682d6f890f8c35425deabde76e67e040d22b7ec3d14d205c74d8313b5522ded61f7394c38213acaf9f824a7773ab0fcddb4a7f3ac09d8cc9bb04fe38df8f2f13f5fe2a50a57a1abd4ef0e81bd3410967d1afabb4c71a807cbd719066b0a53bba22be29a71810827c980e766d7ab5ac93696c76854b04418b363172919c20e455574e1cba8c2df7d67135af858f11e880dd35c1b6bd43a97b64ea23db90fbbaeedef082713237e9632831fea9bf208b9bcd0e5ef03a25c806ff4660aea4ad2e4981a1643257f6414aa433f7eddae4001c08ba1c75f16bba8b8df7ba0a09e0d3d3d31e37649e0a3f5ea20c6ff65c6ff4883aae5e31df00416d3567adabe848a57a4a56965baa2edbb2a7d1d43c8aa7eeec7457c530a75efe752b138be0a9e388830e5394f3b3ac75763b82bec5d2a28c4c166d83089c6ec7c00bdabf1fd1aecb0f88f460fc3d57a36be1ccbe758384097d1273a582ceed9e8e7d4917476228d79afef12b7cbeb297205b360c7738160d98b9412259c4a69fb059869ddc20b9dfa7940bdf02ba629c7f55308d2d6dae0a32357ad55c9654d3ebaed6ce48c256225460d93b1696329a9e54bcd8067bbd4f00cd62fceef172776426314d7f59cf7447faf4edd716cf68edd123ba6cc4a62afe587dffacf5a776562a70e9696d449aa52a3f21b61fc636504a0949c4f0e8872cef0c278c8fc02fba150359c1b3307f8575b0c789c543c98db9c3777d84f17421ab2ce13f35eb29d51590365525c2943d715eed91be8668969ea822fb670e130658555d98518e04562270c15a3081acd8b9fe0bf62409792be2cb81722f856c8d07ab1007f67d7f44f3eba3488c5d5b72aa81fcb40e032ffc793b3086ae4369a9c67cb4fdcade0e0cf88d72619a16ed2c0c4d05a46d71553f33a3fd10872f86bbf21345a0a0462c578353686cbd9dc200305fca7ad7b01122dc97f2a289ccbef4030c8d033116ae570fe42289abb77872bef60915ff74ee0f729d9fc8340563ddb3707938dc585b9e1f43b5578da8fb814d74388cdaed7ee88cdaf6787a55c477dbecf6dff9c9419b3b6de4dac0abd7651c727e59c3782458eb14ac19e13ecc4c93d4a101ae8e49c8d31a711c2ab23bf5c20f5e38357636cd090c7e103926df9cf88dd4defc7911f68e58b32cdb3be2e7258fb9fba290eca66391661dc9250ae6871730eaf66676ae9390766abad500b7e39e07bb36d12f2716c7282df07a49cfc970b2a4130d795b0f041cd96936c778fd5b7068a940554a8fb6524404266204999055a11334316119f3c3cebe533f0eb0520f82f744b10d2442c9ecf0c71ad474d5e19967753f8f6cf4de55ca6066bce52f894cb5c837098e1c5c5aa0b85032b4e050cebc9e2548950f79c08114adf7e99373339b79d7b0ceac71230597da30fc23d1cee0add82dbf5b22b8cf9da9255117028d12946796571373609810aba4c819616fcc3bdd4b8a389406e85585c64180acb7d1167b1aec8e8735c355b09373c2bc54e0accd613ef276ec54d4cc09db1944f4a532c95bffd71da3156267d2f44c1c49bcd24a02aabd521a4e49aa80974ea1f62dc0f330710b0dfb5c2ef7ace3c5dd3ca75fa744b74c1d4def84b8ba2eb601702b7ca4170432ff84e87d3d1fce5af3c1f6ae9678ba501183c6b0ff1b02a5867aaa8c5f142c9b65f3542be047b9c05905ff7788a5f9c78b55494c39c556718af09c9771b8cb9c7a8d9834092d399a2c542bc4d42f97017df6708de55c7fb985bd3f12dd58ec932001f007d09f0b2f33137ac7d15b0437192ec0c7980a90c79ea87ff2d0b5c4b1fdab848d92ad32df1a33a3c0ec767b7a9c1f171082699bd12f60e4ba4a4fe82900c90b4b333937bab988102cb59b5ea2e514ddbed6fe08ab4f96415e95593b346bf141184ca7f5d2f93dbde6ce04c9e3b2dd4eecc8844572a6dfc2e12b351757d634591a963e5438504f847788c64ae32838ad9724babc42fd13b3dd2cb151365c5674ce20b0480295fdea3c723270b75fdbbfca6562af88569652e354fa09216edaa8d1968633338f7de0213bf2a5a30520c955e2c4e5"}, @NFTA_DATA_VALUE={0x1c, 0x1, "b13fe1fe1368e8789080f1319b597296c386fbf562c7061f"}, @NFTA_DATA_VALUE={0x30, 0x1, "23362ab11d1c56da8dd224ca2f5697a549b85329549fbbdd07594cc54477a1ec0ab825e34614c0820c5aecc6"}, @NFTA_DATA_VALUE={0x7d, 0x1, "559c95b3e9ddfea8eb6ba469c1102dc12d6af1bdb6b2fbd55d9f1b9fa6f49d159f67c92ef594a8c9bc09f63edfe5a71a24b0a8424dc8b2e80a3c42d852b2d8dd37d988ccd8315dad28382f55ed3af6d25b09bccfac8fad2ab914151675ef2f00540233b09756e5de012d7181900f75a4af3bb1c3503456d73c"}]}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "cf8ad31a2c37f7dfe65b3226b9e0c1902c90ad1c30c6042510977ddc290ebc3bafb3c32626150bcb052f6bc4b93b0cbeb8f75c26005da5382a1a0f33929e6637782fb8006db437fcce9744267272adf4a36f3fa3b67295a498ba3ec3452d79304ee64e5415866608c2986969969890b12d8e64c896b3"}, @NFTA_DATA_VALUE={0x3c, 0x1, "88a018f0a3ed56dc74483199336b9de35a6f69e0b70d326f444d7bb3e8a54d6e308c83487843d81a9ea0ff5c6e8c6f1e6b7ca7d4a7b466d9"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4474}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) sendto(r6, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000009ac0)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r5, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x1b8, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdcff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1b5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x70, r7, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7a4f973a, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, 0x0) 1.365106805s ago: executing program 4 (id=19271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x3, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 1.262281841s ago: executing program 5 (id=19272): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, &(0x7f0000000080)) (async) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180), 0x10) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r4, 0xffffffffffffc000) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x64, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x64}}, 0x810) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x3c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x2) (async) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) recvmmsg$unix(r11, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 917.574743ms ago: executing program 4 (id=19273): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) unshare(0x2c020400) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc}, {0xffff, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x200400d4) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000200)="1895d112ef93b2d5c51b973af52d35c14f6c8c197e54be58b7033087af7b579aeaa00d04d578f1ee0d2b5e2b958f96214cd4385af3b878d14202003cc5595ecb1c46aee482453f7e1da30e980504eca56da56faf7fac1923c987ab4ca42ed3bb4104ac1d8b9b2a619ba398fea6761bc8dcaf4e93f1b46d4c589b4527251e057a32517173435701bd60878d3c37e47058a13e06f448ac81eb49b0db28913bec83c83261c194ba4132a1f966a057ca687237f40fd8347503f5927a8100183f4e760df6caf42db04e0e89d17803773293cfb3100a6bceb332bc950c6883ffd772c7f57ef06e1683f8ea") r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000430000"], 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x4008140) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'syztnl0\x00', r11, 0x4, 0x6, 0x3, 0x4, 0x4, @local, @mcast2, 0x8, 0x8, 0x4, 0x1}}) setsockopt$inet6_int(r12, 0x29, 0xce, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000380)="3d94c418501a37c9589f966a2252e49030ea1bc98d8518bf2dfdab39ecf1c13220bee86b999fcc322bf77cae80f3ce95af94c1e00a2d2aabf5994c022c9bed0034e84a92fe4bd1978f29e2ec17f2fb97e654bb47219fd06cd9ab2683b74fbf0a144d3c8125963edf8d129c91bfbe3a716154f178a0c2795a2030473a982943742c9cb9", 0x83}, {&(0x7f0000000580)="bc207176b41ab6b10f061a2129f8999c7a22434d33e2698777dcdb9839e4194a4103939e9141eb2309c3a6955f051d300d4f6ed75998ddcbb02074c2458ff1c7101c7503b722d125c35754ab2f1468c6f6c02862b3fb2f931c7f51eb9390", 0x5e}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000880)="a4841ac8365942cc1e1197e2f05852a2de182d60f11eb35aebab43780751a5667602298446d5f7256b1e5588a29e4f17ce5dd6661970c26967eb34a7231d31321d75243d9685077b72c57779ac815308ded6139814f6819a98d9ca70e6ce530f83a80f39565387cb30637a3fa471abe0caec2b9ebe8a831b12483dca1f11d11105a53965a5f3471ef9cbbed2e294c561884a595aefe8a8765e6cd8aa623257731db05555e07bf5cca945452b6eddb426f2192c23f558f7501d494745abb84250f755ccaa59556acce4023a0fdc1a770c261630274a4149c8b6856ddf", 0xdc}, {&(0x7f0000000440)="2e88d4efc24d16ef7a0837a99cc1af6b865b36f7eae22b4a0b7df8df0aa465d7a0cc10cd109c3c6cd297b1fb230159e67978a45b1e5aca3216e2", 0x3a}, {&(0x7f0000000680)="0711afa8c5c3834c6df905c4f2e8c1be91cd29a367ce94032a33ad5d4851bb480d038a298a9b6b31ad0eef1296863377b43890ebaeb972734c0e9e26cbec848eea524fa78832db5cb23562", 0x4b}, {&(0x7f0000000980)="143dace2dbc39edc185cadac2804454f6480466679e9667d4a57a66285ce30629e83899c7078f9aaa798b5aaf568fb4d61127134c85711692aca4d97de90f79b9f3c513c53f419e8c36ff1d32daae8721e616453cdf51bf5d1079899915d4a8f37e3d6ea913658e77f543847eaadb33fb5b83662c44beef1cec30f2ad6249af948efe2d7f1a2b430067d809160c0790b3ff12caac2818d52b0ef5e06c585f9fdc78989f8e385b8d34b521767a7d06f2a2b2af3db1b47bfaf", 0xb8}, {&(0x7f0000000a80)="56206effc6e29d406c6fd375287ee1f2c43f71d57074709dbeb9830f0f3aab0ad6abc6b11df44f057929724e5587b8a7016c6b1068bdd70fc814346fc881a9cd8edbbd3863ce74e63cf52ebfb693cc7a658f4efd9b301c8f514852c5c7605e32a5d193229bd8061e967d48463ce464c769cbecba6509c2a1bace8dee1de73e1dbc25682d73c70d94c43da62d25013ec1cf31766ac10b860aa44cd6", 0x9b}, {&(0x7f0000000600)="19c3799f5e0d63b1c3d3103398e2479390911cb5a4a6885a56f4a8fb97db914d24", 0x21}], 0x9, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x168}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb5}}], 0x78}, 0x4044094) 665.228542ms ago: executing program 4 (id=19274): socket$inet(0x2, 0x800, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 292.283303ms ago: executing program 5 (id=19275): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)=@tcp}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x58, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000010701020000000000000000070000031400078008000240d2000002060001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48080) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x12}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x42}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c00000001b00030027bd7000fddbdf06008000000000000000000000000000bbac1414400000000000000000000000004e2300004e2300010a00a080320000004ebe71ff4a53a92b9e656904e506e2135259", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000000500000000000000f8ffffffffffffffff0100000000000001000000000000000000000000000080090000000000000000000000801501000200000000000000010000000000000001010000000000000400000000000000070000000000000000000203000000002900000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) 128.424447ms ago: executing program 5 (id=19276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7fff, 0x4, 0xe71, 0x21, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x4, 0x9, {{0x6, 0x4, 0x0, 0x2a, 0x18, 0x66, 0x0, 0xbc, 0x2f, 0x0, @local, @multicast2, {[@end]}}}}}) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xba, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x7a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xd, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x5}, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0xeb, &(0x7f0000000800)=""/235, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0x4, 0x55, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x5, 0xe, 0x9}], 0x10, 0x4}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000c80)={{0xffffffffffffffff, &(0x7f0000000b00)='\x00', 0x40, &(0x7f0000000b40)={@_ha_fsid={[0x9, 0x1]}, {0xc5e, 0x5da, 0x4, 0xffffffff}}, 0x6, &(0x7f0000000b80), &(0x7f0000000bc0)=0x400}, {[0x1ff, 0x401, 0x80, 0xffffff7c]}, 0x1, 0x7e, &(0x7f0000000c00)=""/126}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%pS \x00'}, 0x20) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x2, 0x1e, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x8f}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x3d}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x4, 0x4, 0xb, 0x18, 0x8}], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x3, '\x00', r3, @fallback=0x2, r4, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x10, 0xcd, 0x5}, 0x10, r6, r7, 0x1, &(0x7f0000000e40)=[r8, r9, r10, r11], &(0x7f0000000e80)=[{0x0, 0x1, 0xa}], 0x10, 0x599f}, 0x94) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r9) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000fc0)={'vlan1\x00', 0x0}) (async) connect$l2tp6(r9, &(0x7f0000001000)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000001040)={0x0, @in6={{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}}, [0x2, 0x5, 0xff, 0x7, 0x3, 0x54ae9cf7, 0x1000, 0x8, 0x2, 0x9, 0x40a723e9, 0x9, 0xdf, 0x800, 0x8]}, &(0x7f0000001140)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001180)={r14, 0x2}, &(0x7f00000011c0)=0x8) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000001200)=r12, 0x4) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x100, 0x0, r11, 0x38c474f8, '\x00', r5, r9, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xe, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xa}, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @generic={0x80, 0x7, 0x5, 0xc, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xca68}]}, &(0x7f00000012c0)='GPL\x00', 0x7ff, 0x6e, &(0x7f0000001300)=""/110, 0x1f00, 0x0, '\x00', r13, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x2, &(0x7f0000001440)=[r0, r10, r10, r15, r2, r2], &(0x7f0000001480)=[{0x2, 0x3, 0xc, 0x5}, {0x1, 0x1, 0xf}]}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@map=r2, 0x1e, 0x0, 0x9, &(0x7f0000001580)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) close(r7) (async) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000016c0)={0x2a, 0x5, 0xa, 0x6, 0x4}) bind$isdn(r9, &(0x7f0000001700)={0x22, 0xfa, 0x7, 0x7, 0x6}, 0x6) unshare(0x2000000) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000001740)={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101, 0x0, "5e7c2dadc88bfae6a6fc24f0a8f2c3d69eb6655447d2f740bdd1fb4c23390066", 0x7fff, 0x3, 0x1, 0x6}, 0x3c) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000001780)={r14, 0x6257c722, 0x10}, 0xc) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r9) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x8c, r17, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "26bca0783b4a4bc5a07e16186891728a"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1e}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK={0x14, 0xfe, "9a1b5f05f51d7f9c4605a950c9e7c776"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x26}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "51b765262dc43c81c07cdee9431f07b5"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x81) ppoll(&(0x7f0000001a00)=[{r7, 0x1002}, {0xffffffffffffffff, 0x2}, {r16, 0x8088}, {r4, 0x16c0}, {r2, 0x4060}, {r2, 0x80}, {0xffffffffffffffff, 0x8000}], 0x7, &(0x7f0000001a40), &(0x7f0000001a80)={[0x5]}, 0x8) 0s ago: executing program 5 (id=19277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000000100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): he problem. [ 1995.832544][T24646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.943167][ T5827] Bluetooth: hci0: command tx timeout [ 1995.949247][T24760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18269'. [ 1996.058625][T24646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.078360][T24646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.115234][T24762] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18269'. [ 1996.152000][T16934] net_ratelimit: 210 callbacks suppressed [ 1996.152021][T16934] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.174092][T24646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.211469][ T7508] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.232298][T16934] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.252144][T16934] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.255786][T24760] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1996.272203][T16934] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.292133][T29506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.303740][T24761] vlan1: entered allmulticast mode [ 1996.308897][T24761] bond0: entered allmulticast mode [ 1996.314397][T29506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.352346][T29506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.372683][T16935] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.390096][T24762] bond0 (unregistering): left promiscuous mode [ 1996.397227][ T58] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1996.407562][T24762] bond0 (unregistering): Released all slaves [ 1997.223562][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 81 seconds [ 1997.234328][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 81 seconds [ 1997.284883][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 81 seconds [ 1997.296838][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 81 seconds [ 1998.951087][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.961198][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.979448][T24646] hsr_slave_0: entered promiscuous mode [ 1998.996303][T24646] hsr_slave_1: entered promiscuous mode [ 1999.013706][T24646] debugfs: 'hsr0' already exists in 'hsr' [ 1999.029891][T24646] Cannot create hsr debugfs directory [ 1999.049186][T16934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.077173][T16934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.477058][T24646] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.518393][T24646] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.570599][T24797] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.597657][T24797] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.623247][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18277'. [ 1999.679560][T24646] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.729932][T24646] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.773212][T24797] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.795194][T24797] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.859556][T24646] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.891565][T24646] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.934336][T24797] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.953010][T24797] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.971948][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18282'. [ 2000.053512][T24646] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2000.082019][T24646] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.143649][T24797] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2000.162074][T24797] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.231741][T24818] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.390843][T24818] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.417608][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18284'. [ 2000.450151][T29506] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2000.459345][T29506] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.511417][T24818] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.550969][T24821] syzkaller0: entered promiscuous mode [ 2000.556888][T24821] syzkaller0: entered allmulticast mode [ 2000.571220][T16934] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2000.579886][T16934] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.592988][T24646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2000.610788][T24818] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2001.172164][ T7508] net_ratelimit: 206 callbacks suppressed [ 2001.172185][ T7508] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.206690][T16935] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.234034][T16935] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.262084][T16935] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.286975][T16935] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.320307][T16935] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.349358][T16934] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.383932][ T7508] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.415238][ T7508] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2001.447061][ T7508] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2002.805747][T17545] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2002.814785][T17545] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.861746][T24646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2002.878637][T24646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2002.909987][T24646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2002.925358][T29506] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2002.936166][T29506] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.298127][T16935] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.324002][T16935] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.336858][T24646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2003.385339][T16935] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.402145][T16935] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.429506][T24646] 8021q: adding VLAN 0 to HW filter on device team0 [ 2003.484951][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.492113][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2003.534844][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.542106][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2003.636853][T24858] xt_CT: No such helper "snmp_trap" [ 2003.747715][T24868] netlink: 'syz.2.18288': attribute type 30 has an invalid length. [ 2004.021694][T24646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.138245][T24646] veth0_vlan: entered promiscuous mode [ 2004.161293][T24646] veth1_vlan: entered promiscuous mode [ 2004.234774][T24646] veth0_macvtap: entered promiscuous mode [ 2004.274635][T24646] veth1_macvtap: entered promiscuous mode [ 2004.314750][T24646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2004.365016][T24646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2004.405800][T31804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.415133][T31804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.444639][T31804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.452869][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18296'. [ 2004.467721][T31804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.546284][T24881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.660994][T29506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.682118][T29506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.793346][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18299'. [ 2004.808599][T24894] team0: No ports can be present during mode change [ 2004.840647][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.861915][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2005.154132][T24915] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.164603][T24915] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.303469][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18302'. [ 2005.368118][T24915] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.401996][T24915] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.473767][T24915] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.484120][T24915] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.508358][T24928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18304'. [ 2005.528819][T24915] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.533797][T24927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18304'. [ 2005.561924][T24915] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.750793][T31804] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2005.759958][T31804] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.795285][T24940] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.803013][T24940] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.814006][T24940] bridge0: entered allmulticast mode [ 2005.845929][ T7506] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2005.866141][ T7506] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.898272][T31804] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2005.912695][T31804] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.936510][ T7508] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2005.945735][ T7508] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2006.042941][T24952] netlink: 'syz.3.18310': attribute type 2 has an invalid length. [ 2006.140727][T24960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18313'. [ 2006.181910][ T7506] net_ratelimit: 164 callbacks suppressed [ 2006.181929][ T7506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.231893][ T7506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.281904][ T7508] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.312116][ T7506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.352183][T31804] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.391878][T31804] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.412192][T31804] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.440456][T31804] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2006.562219][ T7506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2006.569999][ T7506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2006.661077][T24986] netlink: 1208 bytes leftover after parsing attributes in process `syz.5.18319'. [ 2006.714301][T24991] sctp: [Deprecated]: syz.1.18321 (pid 24991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2006.714301][T24991] Use struct sctp_sack_info instead [ 2006.764538][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 90 seconds [ 2006.776557][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 90 seconds [ 2006.788809][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 90 seconds [ 2006.799851][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 90 seconds [ 2007.535746][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18327'. [ 2007.602633][T25020] syzkaller0: entered promiscuous mode [ 2007.608224][T25020] syzkaller0: entered allmulticast mode [ 2007.636375][T25025] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2007.644618][T25029] netlink: 'syz.2.18327': attribute type 58 has an invalid length. [ 2007.653357][T25029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18327'. [ 2008.483627][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18329'. [ 2008.510857][T25035] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18329'. [ 2010.626425][T25065] netlink: 'syz.4.18335': attribute type 2 has an invalid length. [ 2010.764587][T25065] !9: entered promiscuous mode [ 2011.029227][T25072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18336'. [ 2011.069280][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18336'. [ 2011.224141][T25083] netlink: 'syz.3.18338': attribute type 1 has an invalid length. [ 2011.266316][T17549] net_ratelimit: 176 callbacks suppressed [ 2011.266337][T17549] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.298527][T25083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18338'. [ 2011.344603][T17549] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.372396][T17549] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.403543][T17549] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.424453][ T7506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.472502][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.494266][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.602479][ T7506] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.623789][T17549] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.653084][T17549] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2011.678646][T25090] macvlan2: entered promiscuous mode [ 2011.691384][T25090] macvlan2: entered allmulticast mode [ 2012.083244][T25099] syzkaller1: entered promiscuous mode [ 2012.109510][T25099] syzkaller1: entered allmulticast mode [ 2012.606274][T25109] syzkaller0: entered promiscuous mode [ 2012.612580][T25109] syzkaller0: entered allmulticast mode [ 2015.101128][T25136] FAULT_INJECTION: forcing a failure. [ 2015.101128][T25136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2015.150321][T25136] CPU: 1 UID: 0 PID: 25136 Comm: syz.4.18350 Not tainted syzkaller #0 PREEMPT(full) [ 2015.150350][T25136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2015.150361][T25136] Call Trace: [ 2015.150369][T25136] [ 2015.150378][T25136] dump_stack_lvl+0xe8/0x150 [ 2015.150408][T25136] should_fail_ex+0x412/0x560 [ 2015.150443][T25136] _copy_from_user+0x2d/0xb0 [ 2015.150468][T25136] ___sys_sendmsg+0x1c6/0x360 [ 2015.150500][T25136] ? __pfx____sys_sendmsg+0x10/0x10 [ 2015.150570][T25136] ? __fget_files+0x2a/0x420 [ 2015.150593][T25136] ? __fget_files+0x3a0/0x420 [ 2015.150627][T25136] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2015.150650][T25136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2015.150687][T25136] ? __pfx_ksys_write+0x10/0x10 [ 2015.150729][T25136] do_syscall_64+0x14d/0xf80 [ 2015.150752][T25136] ? trace_irq_disable+0x3b/0x150 [ 2015.150777][T25136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.150795][T25136] ? clear_bhb_loop+0x40/0x90 [ 2015.150817][T25136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.150835][T25136] RIP: 0033:0x7fc9be99c629 [ 2015.150853][T25136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2015.150867][T25136] RSP: 002b:00007fc9bf844028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2015.150887][T25136] RAX: ffffffffffffffda RBX: 00007fc9bec15fa0 RCX: 00007fc9be99c629 [ 2015.150900][T25136] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 2015.150911][T25136] RBP: 00007fc9bf844090 R08: 0000000000000000 R09: 0000000000000000 [ 2015.150922][T25136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2015.150933][T25136] R13: 00007fc9bec16038 R14: 00007fc9bec15fa0 R15: 00007fffe061f558 [ 2015.150964][T25136] [ 2015.427701][T25139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.496209][T25141] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18351'. [ 2015.519826][T25143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18352'. [ 2015.539253][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18354'. [ 2015.584351][T25139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.720904][T25165] netlink: 'syz.5.18358': attribute type 21 has an invalid length. [ 2015.732964][T25139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.753931][T25162] ip6tnl0: Caught tx_queue_len zero misconfig [ 2015.783418][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 99 seconds [ 2015.794559][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 99 seconds [ 2015.812067][T25165] netlink: 'syz.5.18358': attribute type 3 has an invalid length. [ 2015.820728][T25165] netlink: 144 bytes leftover after parsing attributes in process `syz.5.18358'. [ 2015.830518][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 99 seconds [ 2015.872303][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 99 seconds [ 2015.949003][T25139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.969968][T25170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18359'. [ 2016.152527][T25176] netlink: 165 bytes leftover after parsing attributes in process `syz.4.18361'. [ 2016.184195][ T6628] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.276479][T17550] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.316490][T17550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.346271][T17550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.362798][ T6628] net_ratelimit: 171 callbacks suppressed [ 2016.362818][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2016.422878][ T6628] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2016.467673][T25190] netlink: 'syz.1.18365': attribute type 1 has an invalid length. [ 2016.502577][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18366'. [ 2016.544917][ T48] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2016.582783][T17550] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2016.601971][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2016.607076][T25183] syzkaller0: entered promiscuous mode [ 2016.615594][T25183] syzkaller0: entered allmulticast mode [ 2016.622747][T17550] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2016.635910][T17550] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2016.678153][T25201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18369'. [ 2016.710662][T25201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18369'. [ 2016.751990][T17550] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2016.772093][T17550] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2016.893354][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2019.485655][T25224] netlink: 165 bytes leftover after parsing attributes in process `syz.1.18373'. [ 2020.053035][T25271] netlink: 'syz.1.18388': attribute type 1 has an invalid length. [ 2020.061686][T25267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18386'. [ 2020.222660][T25271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18388'. [ 2020.291283][T25271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2020.360716][T25279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2020.378889][T25279] bond2: (slave geneve3): making interface the new active one [ 2020.391250][T25279] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 2020.424139][ T6628] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2020.443768][ T6628] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2020.455665][ T6628] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2020.474900][ T6628] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2020.592647][T25288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18391'. [ 2020.750991][T25294] pim6reg: entered allmulticast mode [ 2020.783059][T25294] pim6reg: left allmulticast mode [ 2020.841691][T25295] pim6reg: entered allmulticast mode [ 2020.854798][T25296] pim6reg: left allmulticast mode [ 2021.155699][T25308] xt_l2tp: v2 tid > 0xffff: 37482740 [ 2021.448648][T17549] net_ratelimit: 183 callbacks suppressed [ 2021.448669][T17549] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2021.512286][T17549] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2021.623669][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2021.631695][ T6628] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2021.693151][T25321] ip6gre0: Caught tx_queue_len zero misconfig [ 2021.782433][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2021.791827][ T6628] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2021.920635][ T48] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2021.974365][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2022.001114][ T6628] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 2022.134733][ T6628] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 2022.159188][T25343] netlink: 165 bytes leftover after parsing attributes in process `syz.4.18405'. [ 2022.174829][T25343] FAULT_INJECTION: forcing a failure. [ 2022.174829][T25343] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.191059][T25343] CPU: 0 UID: 0 PID: 25343 Comm: syz.4.18405 Not tainted syzkaller #0 PREEMPT(full) [ 2022.191084][T25343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2022.191095][T25343] Call Trace: [ 2022.191103][T25343] [ 2022.191111][T25343] dump_stack_lvl+0xe8/0x150 [ 2022.191141][T25343] should_fail_ex+0x412/0x560 [ 2022.191167][T25343] should_failslab+0xa8/0x100 [ 2022.191190][T25343] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2022.191226][T25343] ? __alloc_skb+0x1d0/0x7d0 [ 2022.191247][T25343] ? __local_bh_enable_ip+0xd0/0x130 [ 2022.191274][T25343] __alloc_skb+0x1d0/0x7d0 [ 2022.191300][T25343] xfrm_send_policy_notify+0x5de/0x1bf0 [ 2022.191332][T25343] ? __lock_acquire+0x6b5/0x2cf0 [ 2022.191357][T25343] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 2022.191395][T25343] ? km_policy_notify+0x28/0x200 [ 2022.191413][T25343] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 2022.191439][T25343] km_policy_notify+0x121/0x200 [ 2022.191456][T25343] ? km_policy_notify+0x28/0x200 [ 2022.191476][T25343] km_policy_expired+0xc5/0x120 [ 2022.191498][T25343] ? __pfx_km_policy_expired+0x10/0x10 [ 2022.191521][T25343] ? xfrm_policy_kill+0x3c1/0x440 [ 2022.191540][T25343] ? xfrm_audit_policy_delete+0x109/0x1f0 [ 2022.191561][T25343] xfrm_add_pol_expire+0x526/0x940 [ 2022.191590][T25343] ? __pfx_xfrm_add_pol_expire+0x10/0x10 [ 2022.191611][T25343] ? apparmor_capable+0x137/0x1a0 [ 2022.191641][T25343] ? __nla_parse+0x40/0x60 [ 2022.191668][T25343] xfrm_user_rcv_msg+0x746/0xb20 [ 2022.191694][T25343] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2022.191755][T25343] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2022.191781][T25343] ? rcu_is_watching+0x15/0xb0 [ 2022.191803][T25343] ? trace_contention_end+0x3d/0x150 [ 2022.191828][T25343] ? __mutex_lock+0x319/0x1300 [ 2022.191860][T25343] netlink_rcv_skb+0x232/0x4b0 [ 2022.191882][T25343] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2022.191902][T25343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2022.191937][T25343] ? netlink_deliver_tap+0x2e/0x1b0 [ 2022.191955][T25343] ? netlink_deliver_tap+0x2e/0x1b0 [ 2022.191978][T25343] xfrm_netlink_rcv+0x79/0x90 [ 2022.191995][T25343] netlink_unicast+0x80f/0x9b0 [ 2022.192024][T25343] ? __pfx_netlink_unicast+0x10/0x10 [ 2022.192045][T25343] ? netlink_sendmsg+0x650/0xb40 [ 2022.192064][T25343] ? skb_put+0x11b/0x210 [ 2022.192090][T25343] netlink_sendmsg+0x813/0xb40 [ 2022.192120][T25343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.192145][T25343] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2022.192168][T25343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2022.192190][T25343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.192216][T25343] ____sys_sendmsg+0xa68/0xad0 [ 2022.192250][T25343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2022.192286][T25343] ? import_iovec+0x73/0xa0 [ 2022.192315][T25343] ___sys_sendmsg+0x2a5/0x360 [ 2022.192346][T25343] ? __pfx____sys_sendmsg+0x10/0x10 [ 2022.192411][T25343] ? __fget_files+0x2a/0x420 [ 2022.192434][T25343] ? __fget_files+0x3a0/0x420 [ 2022.192469][T25343] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2022.192496][T25343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2022.192527][T25343] ? __pfx_ksys_write+0x10/0x10 [ 2022.192555][T25343] do_syscall_64+0x14d/0xf80 [ 2022.192578][T25343] ? trace_irq_disable+0x3b/0x150 [ 2022.192601][T25343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.192617][T25343] ? clear_bhb_loop+0x40/0x90 [ 2022.192639][T25343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.192656][T25343] RIP: 0033:0x7fc9be99c629 [ 2022.192673][T25343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2022.192688][T25343] RSP: 002b:00007fc9bf844028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2022.192707][T25343] RAX: ffffffffffffffda RBX: 00007fc9bec15fa0 RCX: 00007fc9be99c629 [ 2022.192720][T25343] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 2022.192731][T25343] RBP: 00007fc9bf844090 R08: 0000000000000000 R09: 0000000000000000 [ 2022.192741][T25343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2022.192752][T25343] R13: 00007fc9bec16038 R14: 00007fc9bec15fa0 R15: 00007fffe061f558 [ 2022.192783][T25343] [ 2023.102514][T23621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2023.112620][T23621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2023.120724][T23621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2023.137905][T23621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2023.146411][T23621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2023.225247][T25362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18409'. [ 2023.983309][T17549] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2023.992660][T17549] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2024.001119][T17549] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2024.066101][T17549] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2024.322172][T25379] xt_hashlimit: size too large, truncated to 1048576 [ 2024.439803][T17550] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.453427][T17550] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.471977][T17550] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.500802][T17550] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.117042][T25398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18416'. [ 2025.147859][T25398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18416'. [ 2025.184459][T25359] chnl_net:caif_netlink_parms(): no params data found [ 2025.224568][ T5827] Bluetooth: hci4: command tx timeout [ 2025.316409][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 108 seconds [ 2025.328702][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 108 seconds [ 2025.339961][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 108 seconds [ 2025.351573][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 108 seconds [ 2025.449610][T25405] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2025.515988][T25410] netlink: 15 bytes leftover after parsing attributes in process `syz.1.18419'. [ 2025.546702][T25414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18418'. [ 2025.559353][T25405] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2025.619408][T25359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.627026][T25359] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.636208][T25359] bridge_slave_0: entered allmulticast mode [ 2025.663523][T25359] bridge_slave_0: entered promiscuous mode [ 2025.675677][T25405] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2025.720354][T25359] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.728035][T25359] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.735953][T25359] bridge_slave_1: entered allmulticast mode [ 2025.744477][T25359] bridge_slave_1: entered promiscuous mode [ 2025.763457][T25405] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2025.888800][T25359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2025.914058][T25359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2025.936809][T25424] netlink: 165 bytes leftover after parsing attributes in process `syz.3.18423'. [ 2026.018245][T25359] team0: Port device team_slave_0 added [ 2026.039680][T25359] team0: Port device team_slave_1 added [ 2026.137957][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.172134][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.274147][T25426] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.311974][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.331004][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18424'. [ 2026.374321][T25359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2026.384575][T25359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2026.439228][T25359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2026.456366][T25359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2026.472012][T25359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2026.522613][T25359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2026.583900][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.614821][T25426] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.665910][T25439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18426'. [ 2026.694008][T25426] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.114158][T25426] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.207127][T25359] hsr_slave_0: entered promiscuous mode [ 2027.225604][T25359] hsr_slave_1: entered promiscuous mode [ 2027.232197][T25359] debugfs: 'hsr0' already exists in 'hsr' [ 2027.237947][T25359] Cannot create hsr debugfs directory [ 2027.302176][ T5827] Bluetooth: hci4: command tx timeout [ 2027.510875][ T7506] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.590577][ T6628] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.627705][T25461] netlink: 165 bytes leftover after parsing attributes in process `syz.4.18433'. [ 2027.699734][T17549] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.747601][T17549] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.929791][T25472] netlink: 'syz.3.18436': attribute type 21 has an invalid length. [ 2028.046373][T25472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18436'. [ 2028.105751][T25481] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.18440'. [ 2028.469349][T25493] netlink: 38299 bytes leftover after parsing attributes in process `syz.4.18443'. [ 2028.828585][T25510] netlink: 'syz.4.18446': attribute type 1 has an invalid length. [ 2028.875056][T25359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2028.895020][T25359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2028.915473][T25359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2028.933994][T25359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2029.249442][T25529] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.18447'. [ 2029.358935][T25528] veth1_to_batadv: entered promiscuous mode [ 2029.367658][T25528] veth1_to_batadv: entered allmulticast mode [ 2029.387961][ T5827] Bluetooth: hci4: command tx timeout [ 2029.558318][T25359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2029.618713][T25539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18450'. [ 2029.680589][T25359] 8021q: adding VLAN 0 to HW filter on device team0 [ 2029.755444][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.762648][ T7506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2029.920663][T25085] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.927958][T25085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2030.244152][T25565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18456'. [ 2030.369126][T25561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18456'. [ 2030.692345][T25359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2030.910327][T25359] veth0_vlan: entered promiscuous mode [ 2030.996775][T25586] netlink: 'syz.1.18462': attribute type 1 has an invalid length. [ 2031.053484][T25359] veth1_vlan: entered promiscuous mode [ 2031.110746][T25586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2031.166179][T25594] bond3: (slave veth7): Enslaving as an active interface with a down link [ 2031.204007][T25586] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18462'. [ 2031.267650][T25359] veth0_macvtap: entered promiscuous mode [ 2031.278003][T25359] veth1_macvtap: entered promiscuous mode [ 2031.437127][T25359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2031.465135][T23621] Bluetooth: hci4: command tx timeout [ 2031.525505][T25359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2031.564381][ T7506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.591114][ T7506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.620833][ T7506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.664208][ T7506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.844400][T31804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2031.872908][T31804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2032.082471][T25626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18474'. [ 2032.097952][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2032.152212][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2032.320671][T25663] tipc: Started in network mode [ 2032.335485][T25663] tipc: Node identity e0000002, cluster identity 4711 [ 2032.382511][T25663] tipc: Enabling of bearer rejected, failed to enable media [ 2032.773881][T25681] __nla_validate_parse: 1 callbacks suppressed [ 2032.773900][T25681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18484'. [ 2032.801947][T25681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18484'. [ 2032.818198][T25686] veth1_to_team: Caught tx_queue_len zero misconfig [ 2032.827612][T25686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18487'. [ 2033.218304][T25716] xt_CT: No such helper "snmp_trap" [ 2033.223169][T25722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18495'. [ 2033.437967][T25736] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 2033.622791][T25744] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2033.796539][T25749] ip6tnl0: Caught tx_queue_len zero misconfig [ 2033.804548][T25749] netlink: 616 bytes leftover after parsing attributes in process `syz.5.18501'. [ 2033.848693][T25749] tipc: Enabled bearer , priority 0 [ 2033.910865][T25749] syzkaller0: entered promiscuous mode [ 2033.917452][T25749] syzkaller0: entered allmulticast mode [ 2033.927227][T25749] tipc: Resetting bearer [ 2033.949899][T25748] tipc: Resetting bearer [ 2034.354927][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 117 seconds [ 2034.366584][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 117 seconds [ 2034.378004][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 117 seconds [ 2034.399960][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 117 seconds [ 2036.379925][T25748] tipc: Disabling bearer [ 2036.560623][T25774] netlink: 220 bytes leftover after parsing attributes in process `syz.4.18506'. [ 2036.602432][T25774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2037.036090][T25795] ip6gre3: entered promiscuous mode [ 2037.362839][T25806] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.378910][T25809] net_ratelimit: 51 callbacks suppressed [ 2037.378927][T25809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2037.413998][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18514'. [ 2037.454003][T25806] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.479109][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.495546][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2037.584068][T25806] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.706926][T25806] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.745005][T25817] netlink: 7 bytes leftover after parsing attributes in process `syz.3.18517'. [ 2037.788530][T25818] syzkaller0: entered promiscuous mode [ 2037.795398][T25818] syzkaller0: entered allmulticast mode [ 2037.884876][ T6628] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.976527][T25085] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.028728][ T6628] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.146120][ T6628] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.166164][T25832] syzkaller0: entered promiscuous mode [ 2038.174726][T25832] syzkaller0: entered allmulticast mode [ 2038.194731][T25832] 0: reclassify loop, rule prio 0, protocol 800 [ 2038.411132][T25844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18527'. [ 2038.421374][T25844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18527'. [ 2038.434636][T25840] syzkaller0: entered promiscuous mode [ 2038.440140][T25840] syzkaller0: entered allmulticast mode [ 2038.503433][T25844] geneve4: entered promiscuous mode [ 2038.508851][T25844] geneve4: entered allmulticast mode [ 2041.283110][T25864] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2041.326000][T25875] syzkaller1: entered allmulticast mode [ 2041.410242][T25889] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18536'. [ 2041.455060][T25887] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18535'. [ 2041.481555][T25891] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18536'. [ 2041.533027][T25893] netlink: 'syz.2.18537': attribute type 1 has an invalid length. [ 2041.546860][T25891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.554084][T25891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2041.561700][T25891] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.568883][T25891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2041.581270][T25891] bridge0: left allmulticast mode [ 2041.600726][T25891] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18536'. [ 2041.664314][T25891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.671943][T25891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.759056][T25898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18537'. [ 2041.909987][T25910] netlink: 'syz.5.18543': attribute type 2 has an invalid length. [ 2042.083368][T25917] netlink: 165 bytes leftover after parsing attributes in process `syz.3.18545'. [ 2042.831878][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 2042.839963][ C1] lec:lec_tx_timeout: lec0 [ 2042.845234][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 2043.183936][T25965] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18552'. [ 2043.218185][T25964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18553'. [ 2043.864604][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 126 seconds [ 2043.875753][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 126 seconds [ 2043.886886][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 126 seconds [ 2043.898004][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 126 seconds [ 2045.239001][T25931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2045.363045][T25981] __nla_validate_parse: 1 callbacks suppressed [ 2045.363063][T25981] netlink: 136 bytes leftover after parsing attributes in process `syz.4.18557'. [ 2045.428830][T25984] netlink: 165 bytes leftover after parsing attributes in process `syz.3.18558'. [ 2045.760542][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18566'. [ 2045.800929][T26014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18566'. [ 2045.852620][T26014] netlink: 'syz.1.18566': attribute type 14 has an invalid length. [ 2045.860727][T26014] netlink: 'syz.1.18566': attribute type 12 has an invalid length. [ 2045.873745][T26012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18566'. [ 2046.160973][T26034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18568'. [ 2046.192600][T26034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18568'. [ 2046.202295][T26034] netlink: 'syz.1.18568': attribute type 6 has an invalid length. [ 2046.471219][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18571'. [ 2046.566333][T26044] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 2046.631924][T26044] netlink: 'syz.5.18573': attribute type 5 has an invalid length. [ 2046.931360][T26062] : entered promiscuous mode [ 2047.010763][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18578'. [ 2047.034600][T26068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18578'. [ 2047.159187][T26079] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.208094][T26083] ip6gre1: entered allmulticast mode [ 2047.300927][T26089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2047.335318][T26079] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.485006][T26079] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.733395][T26079] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.861927][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 2047.870018][ C1] lec:lec_tx_timeout: lec0 [ 2047.943461][ T7506] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.014408][T25085] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.077190][T31804] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.386450][ T7506] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.874243][T26156] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2048.946182][T26161] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2049.070392][T26165] netlink: 'syz.5.18599': attribute type 21 has an invalid length. [ 2049.207835][T26165] netlink: 'syz.5.18599': attribute type 1 has an invalid length. [ 2049.651679][T26198] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2052.396053][T26181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2052.427093][T26208] netlink: 'syz.2.18609': attribute type 11 has an invalid length. [ 2052.552409][T26214] sctp: [Deprecated]: syz.3.18610 (pid 26214) Use of int in max_burst socket option deprecated. [ 2052.552409][T26214] Use struct sctp_assoc_value instead [ 2052.918651][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 135 seconds [ 2052.930236][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 135 seconds [ 2052.945421][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 135 seconds [ 2052.959115][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 135 seconds [ 2053.069799][T26253] __nla_validate_parse: 13 callbacks suppressed [ 2053.069819][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18620'. [ 2053.243894][T26241] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.307606][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2053.320085][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2053.331252][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2053.344466][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2053.358939][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2053.504260][T26244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2053.523312][T26266] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18623'. [ 2053.574694][T26266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18623'. [ 2053.849618][T26241] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.915513][T26241] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.932897][T26275] syzkaller1: entered promiscuous mode [ 2053.938451][T26275] syzkaller1: entered allmulticast mode [ 2054.008051][T26241] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.115200][ T6628] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.150159][ T6628] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.171610][ T6628] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.201975][ T6628] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.340112][T26259] chnl_net:caif_netlink_parms(): no params data found [ 2054.425284][T26259] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.446101][T26259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.454525][T26259] bridge_slave_0: entered allmulticast mode [ 2054.463623][T26259] bridge_slave_0: entered promiscuous mode [ 2054.473010][T26259] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.485393][T26259] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.497534][T26259] bridge_slave_1: entered allmulticast mode [ 2054.510470][T26259] bridge_slave_1: entered promiscuous mode [ 2054.567690][T26259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.592296][T26259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2054.630237][T26259] team0: Port device team_slave_0 added [ 2054.650963][T26259] team0: Port device team_slave_1 added [ 2054.681225][T26259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2054.693955][T26259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.699841][T26299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18629'. [ 2054.722088][T26259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2054.764901][T26259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2054.772540][T26259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.800608][T26259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2054.864415][T26259] hsr_slave_0: entered promiscuous mode [ 2054.870958][T26259] hsr_slave_1: entered promiscuous mode [ 2054.879007][T26259] debugfs: 'hsr0' already exists in 'hsr' [ 2054.885750][T26259] Cannot create hsr debugfs directory [ 2054.998246][T26259] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.076048][T26259] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.127661][T26259] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.186938][T26259] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.382686][T23621] Bluetooth: hci1: command tx timeout [ 2056.441194][T26262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2056.453807][T26275] netlink: 220 bytes leftover after parsing attributes in process `syz.5.18625'. [ 2056.484303][T26259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2056.569340][T26259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2056.600981][T26259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2056.627440][T26259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2056.664862][T26310] vlan2: entered allmulticast mode [ 2056.670246][T26310] team0: entered allmulticast mode [ 2056.676174][T26310] team_slave_0: entered allmulticast mode [ 2056.683309][T26310] team_slave_1: entered allmulticast mode [ 2056.851114][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18635'. [ 2056.919320][T26332] netlink: 'syz.2.18635': attribute type 8 has an invalid length. [ 2057.105666][T26338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18637'. [ 2057.146179][T26341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18637'. [ 2057.388258][T26259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.445219][T26259] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.462024][T23621] Bluetooth: hci1: command tx timeout [ 2057.473116][T17550] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.480425][T17550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.514844][T29506] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.522064][T29506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2057.577121][T26354] netlink: 68 bytes leftover after parsing attributes in process `syz.1.18640'. [ 2057.686182][T26362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18643'. [ 2057.961611][T26259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2058.112243][T26382] __nla_validate_parse: 1 callbacks suppressed [ 2058.112263][T26382] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.18647'. [ 2058.158228][T26386] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18649'. [ 2058.185722][T26386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18649'. [ 2058.466777][T26259] veth0_vlan: entered promiscuous mode [ 2058.615816][T26259] veth1_vlan: entered promiscuous mode [ 2058.757419][T26401] veth3: entered promiscuous mode [ 2058.803816][T26405] veth5: entered promiscuous mode [ 2058.869712][T26259] veth0_macvtap: entered promiscuous mode [ 2058.881297][T26259] veth1_macvtap: entered promiscuous mode [ 2058.958258][T26408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18652'. [ 2059.004046][T26259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2059.034897][T26259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2059.080163][T26411] netlink: 'syz.2.18653': attribute type 1 has an invalid length. [ 2059.089269][T25085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.145566][T25085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.164910][T25085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.196874][T26414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18654'. [ 2059.231084][T25085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.544047][T23621] Bluetooth: hci1: command tx timeout [ 2059.562614][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2059.570711][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2059.632722][T26438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18660'. [ 2059.738476][T31804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2059.740804][T26444] netlink: 'syz.5.18662': attribute type 1 has an invalid length. [ 2059.758647][T31804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2059.795875][T26438] syzkaller0: entered promiscuous mode [ 2059.801437][T26438] syzkaller0: entered allmulticast mode [ 2059.816697][T26438] tipc: Started in network mode [ 2059.822920][T26438] tipc: Node identity cec06b9d8aa3, cluster identity 4711 [ 2059.830405][T26438] tipc: Enabled bearer , priority 0 [ 2059.848012][T26444] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 2060.051530][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18666'. [ 2060.082357][T26462] netlink: 261 bytes leftover after parsing attributes in process `syz.5.18666'. [ 2060.169117][T26469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18670'. [ 2060.173336][T26468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18669'. [ 2060.290200][T26468] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.304284][T26467] netlink: 'syz.2.18669': attribute type 16 has an invalid length. [ 2060.316078][T26468] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.325726][T26467] netlink: 'syz.2.18669': attribute type 17 has an invalid length. [ 2060.376799][T26427] tipc: Resetting bearer [ 2060.400104][T26427] tipc: Disabling bearer [ 2060.450467][T26467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2060.553052][T26485] bond12: entered promiscuous mode [ 2060.601492][T26485] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2060.770753][T26494] tipc: Enabled bearer , priority 0 [ 2060.782584][T26494] vlan0: entered promiscuous mode [ 2060.787826][T26494] vlan0: entered allmulticast mode [ 2060.902215][T26494] veth0_vlan: entered allmulticast mode [ 2060.918412][ T1194] IPVS: starting estimator thread 0... [ 2061.032090][T26509] IPVS: using max 37 ests per chain, 88800 per kthread [ 2061.120071][T26517] ipvlan0: entered promiscuous mode [ 2061.156817][T26517] ipvlan0: left promiscuous mode [ 2061.197568][T26493] tipc: Disabling bearer [ 2061.357377][T26523] netlink: 'syz.2.18681': attribute type 1 has an invalid length. [ 2061.365339][T26523] netlink: 'syz.2.18681': attribute type 3 has an invalid length. [ 2061.392033][T26523] netlink: 'syz.2.18681': attribute type 2 has an invalid length. [ 2061.624338][T23621] Bluetooth: hci1: command tx timeout [ 2061.874105][T26553] netlink: 'syz.4.18688': attribute type 1 has an invalid length. [ 2061.891666][T26553] nbd: couldn't find device at index -427251215 [ 2061.970034][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 144 seconds [ 2061.981568][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 144 seconds [ 2062.005318][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 144 seconds [ 2062.016631][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 144 seconds [ 2062.053684][T26563] netlink: 'syz.5.18694': attribute type 1 has an invalid length. [ 2062.119365][T26563] Cannot find add_set index 2 as target [ 2062.200188][T26571] Bluetooth: MGMT ver 1.23 [ 2062.932161][T26562] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2063.970993][T26661] ip6_vti0: mtu less than device minimum [ 2064.178046][T26677] __nla_validate_parse: 9 callbacks suppressed [ 2064.178066][T26677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18718'. [ 2064.274228][T26677] openvswitch: netlink: Missing valid actions attribute. [ 2064.281377][T26677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2064.412440][T26687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18722'. [ 2064.442654][T26687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18722'. [ 2064.457567][T26689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18721'. [ 2064.582868][T26687] netlink: 124 bytes leftover after parsing attributes in process `syz.4.18722'. [ 2064.589254][T26693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18716'. [ 2064.775195][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18723'. [ 2064.793145][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18723'. [ 2064.945818][T26704] netlink: 'syz.3.18725': attribute type 1 has an invalid length. [ 2065.089832][T26706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18725'. [ 2065.120496][T26704] bond2: entered promiscuous mode [ 2065.156952][T26704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2065.210184][T26706] bond2: entered allmulticast mode [ 2065.249679][T26704] bond2: (slave bridge2): making interface the new active one [ 2065.262690][T26704] bridge2: entered promiscuous mode [ 2065.270435][T26704] bridge2: entered allmulticast mode [ 2065.285664][T26704] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 2065.962781][T26717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18727'. [ 2065.982413][T26717] bond0: option arp_all_targets: invalid value (939524095) [ 2067.565790][T26736] ip6gretap0: entered promiscuous mode [ 2068.222555][T26756] xt_hashlimit: max too large, truncated to 1048576 [ 2068.251307][T26756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2069.407095][T26799] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.482472][T26795] __nla_validate_parse: 9 callbacks suppressed [ 2069.482490][T26795] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18750'. [ 2069.563941][T26804] bond4 (unregistering): Released all slaves [ 2069.612670][T26812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18753'. [ 2069.660613][T26795] xt_CT: No such helper "syz1" [ 2069.693720][T26799] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.768151][T26816] netlink: 'syz.5.18755': attribute type 1 has an invalid length. [ 2069.832846][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18757'. [ 2069.842250][T26825] netlink: 84 bytes leftover after parsing attributes in process `syz.4.18757'. [ 2069.862572][T26799] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.873206][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18757'. [ 2069.953752][T26825] team0: Port device team_slave_0 removed [ 2069.993777][T26799] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2070.259283][T25085] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.284715][T25085] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.326830][T25085] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.328957][T26833] netlink: 96 bytes leftover after parsing attributes in process `syz.4.18760'. [ 2070.371231][T25085] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.389263][T26833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18760'. [ 2071.223321][T26861] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 2071.392444][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 153 seconds [ 2071.403953][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 153 seconds [ 2071.422019][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 153 seconds [ 2071.433623][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 153 seconds [ 2071.756217][T26878] netlink: 'syz.4.18771': attribute type 2 has an invalid length. [ 2071.787621][T26878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18771'. [ 2071.860419][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18774'. [ 2071.870450][T26885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18774'. [ 2071.906568][T26885] netlink: 'syz.2.18774': attribute type 11 has an invalid length. [ 2071.947532][T25085] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2071.957961][T26885] netlink: 'syz.2.18774': attribute type 11 has an invalid length. [ 2071.975070][T25085] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2072.000640][T25085] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2072.031567][T25085] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2072.187329][ T1195] IPVS: starting estimator thread 0... [ 2072.282015][T26898] IPVS: using max 29 ests per chain, 69600 per kthread [ 2072.501453][T26890] sctp: [Deprecated]: syz.5.18776 (pid 26890) Use of int in maxseg socket option. [ 2072.501453][T26890] Use struct sctp_assoc_value instead [ 2072.988637][T26908] "syz.5.18781" (26908) uses obsolete ecb(arc4) skcipher [ 2073.590704][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2073.603785][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2073.691013][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2073.734943][T26926] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2073.885384][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2073.923679][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2073.931525][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2074.010942][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2074.059542][T25085] macsec0: left allmulticast mode [ 2074.076405][T25085] veth1_macvtap: left allmulticast mode [ 2074.094630][T25085] macsec0: left promiscuous mode [ 2074.115684][T25085] bridge0: port 1(macsec0) entered disabled state [ 2074.269396][T25085] veth11: left allmulticast mode [ 2074.274755][T25085] veth11: left promiscuous mode [ 2074.279999][T25085] bridge9: port 1(veth11) entered disabled state [ 2074.545554][T25085] bond7 (unregistering): (slave gretap0): Releasing backup interface [ 2074.665865][T25085] bond2 (unregistering): (slave bridge3): Releasing active interface [ 2074.805756][T25085] bond4 (unregistering): (slave bridge6): Releasing active interface [ 2075.049499][T25085] bond1 (unregistering): (slave veth3): Releasing active interface [ 2075.059389][T25085] bond1 (unregistering): Released all slaves [ 2075.075166][T25085] bond2 (unregistering): Released all slaves [ 2075.089264][T25085] bond3 (unregistering): Released all slaves [ 2075.107197][T25085] bond4 (unregistering): Released all slaves [ 2075.120079][T25085] bond5 (unregistering): Released all slaves [ 2075.136990][T25085] bond0 (unregistering): Released all slaves [ 2075.161445][T25085] bond6 (unregistering): (slave veth5): Releasing active interface [ 2075.173467][T25085] bond6 (unregistering): Released all slaves [ 2075.186903][T25085] bond7 (unregistering): (slave bond8): Releasing backup interface [ 2075.199926][T25085] bond8 (unregistering): left promiscuous mode [ 2075.208342][T25085] bond7 (unregistering): Released all slaves [ 2075.221321][T25085] bond8 (unregistering): Released all slaves [ 2075.239397][T25085] bond9 (unregistering): Released all slaves [ 2075.253157][T25085] bond10 (unregistering): (slave bond11): Releasing backup interface [ 2075.264166][T25085] bond10 (unregistering): Released all slaves [ 2075.279309][T25085] bond11 (unregistering): Released all slaves [ 2075.292197][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.325588][T26966] ip6gretap0: Device is already in use. [ 2075.356876][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.393844][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.428642][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.459280][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.469186][T25085] : left promiscuous mode [ 2075.511331][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.532422][T26977] __nla_validate_parse: 7 callbacks suppressed [ 2075.532438][T26977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18801'. [ 2075.536499][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.556224][T26977] nbd: must specify a size in bytes for the device [ 2075.581985][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.582038][T25085] tipc: Left network mode [ 2075.593509][T26977] batadv_slave_1: entered allmulticast mode [ 2075.638451][T26977] batadv_slave_1: left allmulticast mode [ 2075.665315][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2075.727475][T26986] openvswitch: netlink: Flow key attr not present in new flow. [ 2075.793034][T26926] wlan1 speed is unknown, defaulting to 1000 [ 2076.046383][T26985] xt_connbytes: Forcing CT accounting to be enabled [ 2076.133138][T26987] nbd: socks must be embedded in a SOCK_ITEM attr [ 2076.164244][T26987] block nbd3: shutting down sockets [ 2076.300906][T27015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18811'. [ 2076.315648][T27018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18810'. [ 2076.350284][T26985] netlink: 'syz.3.18803': attribute type 1 has an invalid length. [ 2076.357527][T27015] bond4: entered promiscuous mode [ 2076.364285][T27015] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2076.386510][T26985] netlink: 248 bytes leftover after parsing attributes in process `syz.3.18803'. [ 2076.476724][T27015] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2076.533108][T27015] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 2076.557426][T27015] bond4: (slave sit1): Error -95 calling set_mac_address [ 2077.128566][T25085] hsr_slave_0: left promiscuous mode [ 2077.135214][T25085] hsr_slave_1: left promiscuous mode [ 2077.162568][T25085] veth0_macvtap: left promiscuous mode [ 2077.676883][T25085] team0 (unregistering): Port device team_slave_1 removed [ 2077.696582][T25085] team0 (unregistering): Port device team_slave_0 removed [ 2078.006168][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18823'. [ 2078.039549][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18823'. [ 2078.335898][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18826'. [ 2078.453938][T27036] wlan1 speed is unknown, defaulting to 1000 [ 2078.476791][T25085] IPVS: stop unused estimator thread 0... [ 2078.632559][T27087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18828'. [ 2078.937279][T27081] delete_channel: no stack [ 2079.160974][T27108] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.214996][T27108] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.329480][T27111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2079.474865][T27108] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.522611][T27108] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.589438][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18836'. [ 2079.667993][T27108] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.721970][T27108] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.802124][T27108] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.821460][T27108] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.988719][T25085] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2079.998304][T25085] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.127608][ T6628] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2080.138827][ T6628] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.162054][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18842'. [ 2080.183443][ T6628] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2080.208318][ T6628] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.232093][ T6628] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2080.240471][ T6628] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.414154][T27136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.438877][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 162 seconds [ 2080.449805][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 162 seconds [ 2080.461824][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 162 seconds [ 2080.488488][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 162 seconds [ 2080.504051][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 2080.696256][T27153] __nla_validate_parse: 1 callbacks suppressed [ 2080.696278][T27153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18847'. [ 2080.833787][T27136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.981690][T27136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.062944][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18852'. [ 2081.123806][T27175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18852'. [ 2081.138152][T27136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.305898][T27183] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.340667][T27183] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2081.397532][T27191] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2081.470634][T27207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18859'. [ 2081.548767][T27216] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2081.588454][T27206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18856'. [ 2081.654908][T27216] bond3 (unregistering): Released all slaves [ 2081.698739][T27183] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.742009][T27183] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2081.779961][T27230] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2081.802145][T27230] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.066159][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18861'. [ 2082.076651][T27210] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.087905][T27183] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.098679][T27183] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2082.135881][T27208] wlan1 speed is unknown, defaulting to 1000 [ 2082.145628][T27263] hsr_slave_1 (unregistering): left promiscuous mode [ 2082.175310][T27230] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.194764][T27230] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.214995][T27210] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.247707][T27183] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.268585][T27183] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2082.296803][T27210] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.305456][T27210] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.320130][T27230] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.348914][T27230] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.450377][T27230] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.460755][T27230] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.513964][T27267] Cannot find set identified by id 0 to match [ 2082.524256][T27267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 2082.565535][T27210] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 2082.583187][T27210] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 2082.622413][T27210] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 2082.631207][T27210] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 2082.643420][T27210] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 2082.653209][T27210] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 2082.740027][T27248] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2082.759484][T27248] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.769140][T27248] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2082.784387][T27248] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.857624][T27248] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 2082.874824][T27248] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 2082.900701][T27269] sctp: [Deprecated]: syz.1.18863 (pid 27269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2082.900701][T27269] Use struct sctp_sack_info instead [ 2082.930345][T27248] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2082.955387][T27248] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.987757][T27248] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2083.012122][T27248] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.026210][T27273] tipc: Enabling of bearer rejected, failed to enable media [ 2083.036847][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 2083.048259][T27271] netlink: 'syz.3.18864': attribute type 1 has an invalid length. [ 2083.080455][T27273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18865'. [ 2083.090263][T27273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18865'. [ 2083.130907][T27276] tipc: Started in network mode [ 2083.136064][T27276] tipc: Node identity 129ba9c559c2, cluster identity 4711 [ 2083.159933][T27276] tipc: Enabled bearer , priority 0 [ 2083.170757][T27276] syzkaller0: entered promiscuous mode [ 2083.176538][T27276] syzkaller0: entered allmulticast mode [ 2083.211550][T27276] tipc: Resetting bearer [ 2083.226208][T27278] vlan3: entered promiscuous mode [ 2083.231389][T27278] bridge0: entered promiscuous mode [ 2083.289118][T27275] tipc: Resetting bearer [ 2083.354350][T27275] tipc: Disabling bearer [ 2083.478270][T27293] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18871'. [ 2083.564322][T27297] pim6reg: entered allmulticast mode [ 2083.658771][T27304] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.755183][T27312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2083.807438][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18875'. [ 2083.841397][T27304] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.932853][T27304] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.945502][T27322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2083.952777][T27322] IPv6: NLM_F_CREATE should be set when creating new route [ 2083.968550][T27322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2083.975919][T27322] IPv6: NLM_F_CREATE should be set when creating new route [ 2083.987162][T27324] IPv6: sit1: Disabled Multicast RS [ 2083.994801][T27324] sit1: entered allmulticast mode [ 2084.020232][T27304] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2084.117542][T27328] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2084.419139][T27338] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2084.438422][T27338] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 2084.462102][T27331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.470514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.480493][T27331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.502425][T27338] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 2084.567142][T27331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.575875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.624067][T27331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.635446][T27331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.682659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.691862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.700659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.901913][T27361] lo: Caught tx_queue_len zero misconfig [ 2085.035541][T27335] wlan1 speed is unknown, defaulting to 1000 [ 2085.343285][T27376] netlink: 'syz.3.18893': attribute type 11 has an invalid length. [ 2085.681868][T27248] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.727971][T27248] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.738328][T27248] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.802398][T27248] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.844396][T27394] netlink: 'syz.2.18896': attribute type 21 has an invalid length. [ 2085.896468][T27396] sctp: [Deprecated]: syz.2.18896 (pid 27396) Use of int in max_burst socket option. [ 2085.896468][T27396] Use struct sctp_assoc_value instead [ 2085.984476][T27373] wlan1 speed is unknown, defaulting to 1000 [ 2086.036244][T27405] __nla_validate_parse: 4 callbacks suppressed [ 2086.036262][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18899'. [ 2086.060063][T27405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18899'. [ 2086.093379][T27409] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18898'. [ 2086.110666][T27409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18898'. [ 2086.170344][T27411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18900'. [ 2086.185163][T27411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.192570][T27411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2086.206834][T27411] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18900'. [ 2086.225332][T27411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18900'. [ 2086.272281][T27411] bond1: option ad_select: invalid value (34) [ 2086.289577][T27411] bond1 (unregistering): Released all slaves [ 2086.591236][T27427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2086.680642][T27427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2086.744642][T27437] pim6reg: entered allmulticast mode [ 2086.753989][T27437] pim6reg: left allmulticast mode [ 2086.834100][T27439] syzkaller0: entered promiscuous mode [ 2086.839861][T27439] syzkaller0: entered allmulticast mode [ 2088.994790][T27403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2089.152166][T27457] sctp: [Deprecated]: syz.5.18910 (pid 27457) Use of int in maxseg socket option. [ 2089.152166][T27457] Use struct sctp_assoc_value instead [ 2089.270928][T27459] bond1 (unregistering): Released all slaves [ 2089.332712][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18911'. [ 2089.351680][T27472] netlink: 'syz.4.18911': attribute type 5 has an invalid length. [ 2089.363344][T27472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18911'. [ 2089.430739][T27472] geneve2: entered promiscuous mode [ 2089.471964][T27472] geneve2: entered allmulticast mode [ 2089.489769][T27256] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 2089.531381][T27256] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 2089.556000][T27256] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 2089.580686][T27256] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 2089.626979][T27475] nbd: socks must be embedded in a SOCK_ITEM attr [ 2089.641907][T27475] block nbd3: shutting down sockets [ 2089.648484][T27489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18920'. [ 2089.661927][T27489] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 2089.693855][T27477] netlink: 'syz.3.18913': attribute type 1 has an invalid length. [ 2089.827505][T27495] syzkaller0: entered promiscuous mode [ 2089.840810][T27495] syzkaller0: entered allmulticast mode [ 2089.962656][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 171 seconds [ 2089.973982][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 171 seconds [ 2089.985980][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 171 seconds [ 2089.997417][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 171 seconds [ 2095.965952][ T5189] udevd[5189]: worker [21312] /devices/virtual/block/nbd0 timeout; kill it [ 2095.975067][ T5189] udevd[5189]: seq 104755 '/devices/virtual/block/nbd0' killed [ 2098.905243][ T1299] net_ratelimit: 1 callbacks suppressed [ 2098.905264][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.928800][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2098.983342][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 180 seconds [ 2098.994935][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 180 seconds [ 2099.032635][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 180 seconds [ 2099.043725][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 180 seconds [ 2103.941828][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 2103.949896][ C1] lec:lec_tx_timeout: lec0 [ 2103.954825][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 2108.507597][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 189 seconds [ 2108.518402][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 189 seconds [ 2108.529929][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 189 seconds [ 2108.540997][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 189 seconds [ 2108.962236][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 2108.970357][ C1] lec:lec_tx_timeout: lec0 [ 2117.552066][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 198 seconds [ 2117.564295][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 198 seconds [ 2117.575966][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 198 seconds [ 2117.611950][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 198 seconds [ 2127.076246][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 207 seconds [ 2127.088494][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 207 seconds [ 2127.099695][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 207 seconds [ 2127.111022][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 207 seconds [ 2131.475022][T27530] netlink: 'syz.4.18934': attribute type 1 has an invalid length. [ 2131.506619][T27530] __nla_validate_parse: 4 callbacks suppressed [ 2131.506636][T27530] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18934'. [ 2131.607648][T27535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18935'. [ 2131.643503][T27535] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18935'. [ 2131.702698][T27535] netlink: 11 bytes leftover after parsing attributes in process `syz.5.18935'. [ 2131.731400][T27549] syzkaller0: entered promiscuous mode [ 2131.757929][T27553] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18939'. [ 2131.768317][T27558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18942'. [ 2131.772251][T27549] syzkaller0: entered allmulticast mode [ 2131.794662][T27553] netlink: 'syz.4.18939': attribute type 1 has an invalid length. [ 2131.861219][T27560] bond3: option resend_igmp: invalid value (2878) [ 2131.881605][T27560] bond3: option resend_igmp: allowed values 0 - 255 [ 2131.904358][T27560] bond3 (unregistering): Released all slaves [ 2132.017060][T27575] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18939'. [ 2134.257767][T27580] dvmrp31: entered allmulticast mode [ 2134.278016][T27583] syzkaller1: entered promiscuous mode [ 2134.291411][T27583] syzkaller1: entered allmulticast mode [ 2134.456564][T27596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18953'. [ 2134.486640][T27596] vlan3: entered promiscuous mode [ 2134.492482][T27596] syz_tun: entered promiscuous mode [ 2134.519383][T27593] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 2134.555744][T27601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18954'. [ 2134.567102][T27601] batadv_slave_1: entered promiscuous mode [ 2134.581654][T27601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18954'. [ 2134.793388][T27617] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2134.880089][T27621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2136.106471][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 216 seconds [ 2136.117454][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 216 seconds [ 2136.128558][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 216 seconds [ 2136.159931][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 216 seconds [ 2137.440283][T27593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2137.577060][T27628] __nla_validate_parse: 1 callbacks suppressed [ 2137.577080][T27628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18961'. [ 2137.778906][T27639] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.853579][T27645] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2137.915079][T27646] bridge_slave_0: left allmulticast mode [ 2137.953576][T27646] bridge_slave_0: left promiscuous mode [ 2137.972232][T27646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.002897][T27646] bridge_slave_1: left allmulticast mode [ 2138.009025][T27646] bridge_slave_1: left promiscuous mode [ 2138.015402][T27646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.021059][T27655] xt_socket: unknown flags 0x50 [ 2138.026149][T27650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18965'. [ 2138.050769][T27646] bond0: (slave bond_slave_0): Releasing backup interface [ 2138.066491][T27646] bond0: (slave bond_slave_1): Releasing backup interface [ 2138.091530][T27658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18969'. [ 2138.093308][T27646] team0: Port device team_slave_0 removed [ 2138.104372][T27658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18969'. [ 2138.118635][T27646] team0: Port device team_slave_1 removed [ 2138.126385][T27646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2138.135041][T27646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2138.144208][T27646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2138.153586][T27646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2138.162733][T27646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2138.188654][T27639] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.306696][T27639] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.393841][T27639] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.557671][T27246] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.651825][T27676] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2138.678418][T27676] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2138.699420][T27245] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.726508][T27677] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2138.774789][T27245] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.788712][T27676] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2138.804856][T27676] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2138.853725][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18973'. [ 2138.918790][T27245] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.930917][T27676] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2138.955604][T27676] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2139.119358][T27676] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2139.136054][T27676] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2139.193185][T27700] netlink: 'syz.4.18979': attribute type 9 has an invalid length. [ 2139.368596][T27245] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 2139.378945][T27245] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 2139.407801][T27245] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 2139.417348][T27245] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 2139.447622][T27187] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 2139.462476][T27187] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 2139.502822][T27187] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 2139.511262][T27187] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 2139.520471][T27721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18985'. [ 2139.544445][T27723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18985'. [ 2139.672209][T27725] sctp: [Deprecated]: syz.2.18988 (pid 27725) Use of int in max_burst socket option. [ 2139.672209][T27725] Use struct sctp_assoc_value instead [ 2139.748984][T27732] 9: renamed from lo (while UP) [ 2139.934685][T27742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18990'. [ 2140.131280][T27739] wlan1 speed is unknown, defaulting to 1000 [ 2140.554988][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18995'. [ 2140.564648][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18995'. [ 2140.668257][T27762] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.678115][T27762] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2140.736907][T27765] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2140.797214][T27767] ip6gretap0: entered promiscuous mode [ 2140.804703][T27767] macvtap1: entered promiscuous mode [ 2140.814585][T27767] macvtap1: entered allmulticast mode [ 2140.820191][T27767] ip6gretap0: entered allmulticast mode [ 2140.870500][T27762] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.895218][T27762] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2141.125423][T27762] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.158209][T27762] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2141.236598][T27787] xt_hashlimit: size too large, truncated to 1048576 [ 2141.253859][T27762] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.264955][T27791] netlink: 'syz.1.19007': attribute type 1 has an invalid length. [ 2141.278517][T27762] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2141.529120][T27805] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2141.550331][T27805] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2141.718195][T27808] nbd: nbd64 already in use [ 2141.855996][T21854] udevd[21854]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2141.949441][T27807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2141.967352][T27807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2142.156097][T27805] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2142.182907][T27805] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2142.205557][T31407] wlan1 speed is unknown, defaulting to 1000 [ 2142.205578][T27245] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2142.211978][T31407] yz2: Port: 1 Link DOWN [ 2142.221977][T27245] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2142.251457][T27245] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2142.261636][T27245] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2142.273194][T27822] 8021q: VLANs not supported on ip_vti0 [ 2142.305245][T27187] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 2142.321122][T27187] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 2142.397517][T27246] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 2142.408647][T27246] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 2142.456565][T27246] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 2142.466457][T31407] IPVS: starting estimator thread 0... [ 2142.472451][T27246] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 2142.513146][T27246] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 2142.531981][T27246] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 2142.582654][T27830] IPVS: using max 36 ests per chain, 86400 per kthread [ 2142.685053][T27839] netlink: 'syz.4.19017': attribute type 3 has an invalid length. [ 2142.728500][T27842] __nla_validate_parse: 6 callbacks suppressed [ 2142.728519][T27842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19018'. [ 2142.746115][T27842] bond4: entered allmulticast mode [ 2142.839334][T27846] netlink: 'syz.4.19019': attribute type 10 has an invalid length. [ 2142.853405][T27846] syz_tun: entered promiscuous mode [ 2142.879194][T27841] bond4: left allmulticast mode [ 2143.002767][T27850] netlink: 'syz.4.19021': attribute type 1 has an invalid length. [ 2143.010708][T27850] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19021'. [ 2143.022273][T27851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19020'. [ 2143.040414][T27850] netlink: 'syz.4.19021': attribute type 21 has an invalid length. [ 2143.051315][T27850] netlink: 164 bytes leftover after parsing attributes in process `syz.4.19021'. [ 2143.063733][T27850] syzkaller1: entered promiscuous mode [ 2143.069300][T27850] syzkaller1: entered allmulticast mode [ 2143.113190][T27856] syzkaller0: entered promiscuous mode [ 2143.119155][T27856] syzkaller0: entered allmulticast mode [ 2143.386146][T27864] syzkaller0: entered promiscuous mode [ 2143.392427][T27864] syzkaller0: entered allmulticast mode [ 2144.151482][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19027'. [ 2145.641164][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 225 seconds [ 2145.652635][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 225 seconds [ 2145.664293][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 225 seconds [ 2145.675664][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 225 seconds [ 2145.743569][T27871] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.757032][T27873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2145.779113][T27878] netlink: 164 bytes leftover after parsing attributes in process `syz.2.19029'. [ 2145.799960][T27871] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.888667][T27871] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.941424][T27871] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.027113][T27893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19034'. [ 2146.038882][T27892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19034'. [ 2146.097826][T27245] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.162094][T27256] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.205761][T27256] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.257644][T27187] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.526696][T27909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2146.643148][T27895] wlan1 speed is unknown, defaulting to 1000 [ 2146.673980][T27916] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19041'. [ 2146.696022][T27916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19041'. [ 2146.969288][T27909] wlan1 speed is unknown, defaulting to 1000 [ 2147.046099][T27929] syzkaller1: entered promiscuous mode [ 2147.058088][T27929] syzkaller1: entered allmulticast mode [ 2147.379926][T27942] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.475141][T27943] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2147.575885][T27942] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.711015][T27942] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.764583][T27961] __nla_validate_parse: 2 callbacks suppressed [ 2147.764604][T27961] netlink: 96 bytes leftover after parsing attributes in process `syz.5.19054'. [ 2147.797325][T27961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19054'. [ 2147.844661][T27942] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.094447][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19062'. [ 2148.158672][T27988] bridge1: entered promiscuous mode [ 2148.164313][T27988] bridge1: entered allmulticast mode [ 2148.668810][T28006] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19067'. [ 2148.683804][T28006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19067'. [ 2149.060796][T28026] netlink: 'syz.5.19072': attribute type 1 has an invalid length. [ 2149.351359][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19076'. [ 2149.489182][T28046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19073'. [ 2149.988430][T28058] netlink: 'syz.4.19081': attribute type 2 has an invalid length. [ 2150.001536][T28058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19081'. [ 2150.172826][T27256] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.229047][T27256] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.248876][T27256] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.278183][T27256] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.471375][T28073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19086'. [ 2150.958338][T28099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19095'. [ 2151.603317][T28107] wlan1 speed is unknown, defaulting to 1000 [ 2151.982380][T28143] syz_tun: entered allmulticast mode [ 2152.240194][T28149] syzkaller0: entered promiscuous mode [ 2152.285059][T28149] syzkaller0: entered allmulticast mode [ 2152.310999][T28151] tipc: Enabled bearer , priority 0 [ 2152.399880][T28167] netlink: 'syz.4.19112': attribute type 39 has an invalid length. [ 2152.450704][T28147] tipc: Resetting bearer [ 2152.476764][T28147] tipc: Disabling bearer [ 2152.493944][T28142] syz_tun: left allmulticast mode [ 2152.653319][T28175] tunl0: Caught tx_queue_len zero misconfig [ 2152.717652][T28182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2152.910165][T28188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2152.978439][T28188] __nla_validate_parse: 4 callbacks suppressed [ 2152.978457][T28188] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19118'. [ 2153.851635][T28217] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2153.893089][T28217] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2153.950754][T28220] netlink: 'syz.1.19124': attribute type 1 has an invalid length. [ 2154.121522][T28226] delete_channel: no stack [ 2154.136545][T28226] delete_channel: no stack [ 2154.674290][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 234 seconds [ 2154.685910][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 234 seconds [ 2154.697303][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 234 seconds [ 2154.722189][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 234 seconds [ 2154.978711][T28271] netlink: 'syz.1.19138': attribute type 1 has an invalid length. [ 2154.989807][T28269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.19138'. [ 2154.999259][T28271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19138'. [ 2155.010056][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19138'. [ 2155.316074][T28281] vlan2: entered promiscuous mode [ 2155.321371][T28281] team0: entered promiscuous mode [ 2155.337640][T28281] team_slave_0: entered promiscuous mode [ 2155.346435][T28283] netlink: 'syz.3.19143': attribute type 1 has an invalid length. [ 2155.355997][T28281] team_slave_1: entered promiscuous mode [ 2155.363225][T28283] netlink: 1 bytes leftover after parsing attributes in process `syz.3.19143'. [ 2155.537513][T28294] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 2155.572307][T28294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19148'. [ 2155.583344][T28296] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.19149'. [ 2155.670265][T28292] lo speed is unknown, defaulting to 1000 [ 2155.676290][T28292] lo speed is unknown, defaulting to 1000 [ 2155.683506][T28292] lo speed is unknown, defaulting to 1000 [ 2155.701223][T28292] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2155.732671][T28292] lo speed is unknown, defaulting to 1000 [ 2155.788996][T28292] lo speed is unknown, defaulting to 1000 [ 2155.791132][T28304] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2155.814446][T28292] lo speed is unknown, defaulting to 1000 [ 2155.818119][T28304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2155.831105][T28305] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.19151'. [ 2155.847352][T28292] lo speed is unknown, defaulting to 1000 [ 2155.868532][T28292] lo speed is unknown, defaulting to 1000 [ 2155.872009][T28305] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2155.876708][T28292] lo speed is unknown, defaulting to 1000 [ 2155.894597][T28292] lo speed is unknown, defaulting to 1000 [ 2155.902269][T28292] lo speed is unknown, defaulting to 1000 [ 2155.910559][T28292] lo speed is unknown, defaulting to 1000 [ 2155.926562][T28292] lo speed is unknown, defaulting to 1000 [ 2155.944445][T28292] lo speed is unknown, defaulting to 1000 [ 2155.953840][T28292] lo speed is unknown, defaulting to 1000 [ 2155.963504][T28292] lo speed is unknown, defaulting to 1000 [ 2156.062343][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19154'. [ 2156.131437][T28316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19154'. [ 2156.322348][T28326] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2156.405192][T28309] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 2156.411552][T28319] netlink: 'syz.4.19157': attribute type 1 has an invalid length. [ 2156.690998][T28322] wlan1 speed is unknown, defaulting to 1000 [ 2156.713576][T28322] lo speed is unknown, defaulting to 1000 [ 2156.745379][T28339] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.801267][T28340] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2156.833422][T28339] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.929935][T28339] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.064763][T28339] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.468063][T28365] C: renamed from team_slave_0 [ 2157.521568][T27203] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.587272][ T6608] IPVS: starting estimator thread 0... [ 2157.597346][T27203] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.650525][T27256] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.702221][T28370] IPVS: using max 27 ests per chain, 64800 per kthread [ 2157.710236][T27256] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.249553][T28403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2158.275262][T28403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2158.370876][T28368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2158.528937][T28415] x_tables: unsorted underflow at hook 3 [ 2158.536369][T28415] __nla_validate_parse: 5 callbacks suppressed [ 2158.536386][T28415] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.19180'. [ 2158.550376][T28418] netlink: 256 bytes leftover after parsing attributes in process `syz.4.19181'. [ 2158.752436][T28433] syzkaller0: entered promiscuous mode [ 2158.757926][T28433] syzkaller0: entered allmulticast mode [ 2160.354615][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.370094][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2161.334473][T28407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2161.517964][T28444] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19188'. [ 2161.529397][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19189'. [ 2161.658849][T28447] bond7: entered promiscuous mode [ 2161.703999][T28447] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2161.826020][T28451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2161.842586][T28451] bond7: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 2161.872965][T28451] bond7: (slave ip6tnl3): Error -95 calling set_mac_address [ 2162.238299][T28468] syzkaller0: entered promiscuous mode [ 2162.256991][T28468] syzkaller0: entered allmulticast mode [ 2162.369435][T28476] netlink: 'syz.1.19197': attribute type 2 has an invalid length. [ 2164.201216][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 243 seconds [ 2164.222210][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 243 seconds [ 2164.233291][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 243 seconds [ 2164.244932][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 243 seconds [ 2164.884885][T28475] lo speed is unknown, defaulting to 1000 [ 2164.895021][T28475] lo speed is unknown, defaulting to 1000 [ 2164.911132][T28475] lo speed is unknown, defaulting to 1000 [ 2165.163245][T28513] netlink: 76 bytes leftover after parsing attributes in process `syz.5.19206'. [ 2165.227818][T28519] netlink: 72 bytes leftover after parsing attributes in process `syz.4.19208'. [ 2165.339938][T28523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19209'. [ 2165.406488][T28490] wlan1 speed is unknown, defaulting to 1000 [ 2165.414425][T28490] lo speed is unknown, defaulting to 1000 [ 2165.842990][T28492] wlan1 speed is unknown, defaulting to 1000 [ 2165.850966][T28492] lo speed is unknown, defaulting to 1000 [ 2165.859244][T28475] infiniband sqz0: set down [ 2165.864243][ T6608] lo speed is unknown, defaulting to 1000 [ 2165.871793][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 2165.880033][ C1] lec:lec_tx_timeout: lec0 [ 2165.883010][T28475] infiniband sqz0: added lo [ 2165.980615][T28475] RDS/IB: sqz0: added [ 2165.994050][T28475] smc: adding ib device sqz0 with port count 1 [ 2166.060224][T28475] smc: ib device sqz0 port 1 has no pnetid [ 2166.082557][T28534] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 2166.119368][ T6608] lo speed is unknown, defaulting to 1000 [ 2166.153188][T28475] lo speed is unknown, defaulting to 1000 [ 2166.160325][T28545] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2166.428544][T28549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2166.661598][T28552] syzkaller0: entered promiscuous mode [ 2166.670100][T28552] syzkaller0: entered allmulticast mode [ 2166.678273][T28475] lo speed is unknown, defaulting to 1000 [ 2166.830479][T28568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19219'. [ 2167.280929][T30673] lec:lec_start_xmit: lec0:No lecd attached [ 2168.927033][T28475] lo speed is unknown, defaulting to 1000 [ 2169.033727][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19223'. [ 2169.267630][T28475] lo speed is unknown, defaulting to 1000 [ 2169.535344][T28591] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 2169.559228][T28475] lo speed is unknown, defaulting to 1000 [ 2169.929367][T28475] lo speed is unknown, defaulting to 1000 [ 2170.063449][T28611] syzkaller0: entered promiscuous mode [ 2170.083906][T28611] syzkaller0: entered allmulticast mode [ 2172.311374][T28475] lo speed is unknown, defaulting to 1000 [ 2172.400374][T28623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2172.411004][T28625] netlink: 'syz.4.19237': attribute type 1 has an invalid length. [ 2172.472371][T28625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2172.590157][T28475] lo speed is unknown, defaulting to 1000 [ 2172.818713][T28475] lo speed is unknown, defaulting to 1000 [ 2172.824699][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 2172.824732][ C1] lec:lec_tx_timeout: lec0 [ 2172.973471][T28637] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 2173.127969][T28640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19240'. [ 2173.177773][T28475] lo speed is unknown, defaulting to 1000 [ 2173.272811][T28645] netlink: 'syz.5.19241': attribute type 1 has an invalid length. [ 2173.305173][T28645] bond14: entered promiscuous mode [ 2173.310407][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 252 seconds [ 2173.310776][T28645] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2173.328793][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 252 seconds [ 2173.340978][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 252 seconds [ 2173.344362][T28645] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2173.352913][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 252 seconds [ 2173.392726][T28645] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2173.406496][T28645] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 2173.442503][T28648] batadv_slave_1: entered promiscuous mode [ 2173.533825][T28475] lo speed is unknown, defaulting to 1000 [ 2173.560865][T28647] batadv_slave_1: left promiscuous mode [ 2173.823553][T28475] lo speed is unknown, defaulting to 1000 [ 2174.093480][T28475] lo speed is unknown, defaulting to 1000 [ 2174.324204][T28670] syzkaller0: entered promiscuous mode [ 2174.329804][T28670] syzkaller0: entered allmulticast mode [ 2176.528574][T28475] lo speed is unknown, defaulting to 1000 [ 2176.732332][T28475] lo speed is unknown, defaulting to 1000 [ 2176.966643][T28475] lo speed is unknown, defaulting to 1000 [ 2177.158659][T28689] netlink: 'syz.4.19251': attribute type 1 has an invalid length. [ 2177.170286][T28689] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19251'. [ 2177.190031][T28475] lo speed is unknown, defaulting to 1000 [ 2177.226584][T28691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19252'. [ 2177.554760][T28702] xt_l2tp: v2 tid > 0xffff: 37482740 [ 2177.579239][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2177.590464][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2177.599704][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2177.615863][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2177.625221][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2177.748356][T28706] Cannot find del_set index 4 as target [ 2178.035053][T23621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2178.048287][T23621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2178.057703][T23621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2178.069290][T23621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2178.100844][T23621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2178.335816][T28675] wlan1 speed is unknown, defaulting to 1000 [ 2178.346673][T27256] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.366179][T28675] lo speed is unknown, defaulting to 1000 [ 2178.393220][T27248] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.447151][T27248] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.497919][T27203] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.529438][T27210] bridge_slave_0: left allmulticast mode [ 2178.539399][T27210] bridge_slave_0: left promiscuous mode [ 2178.551948][T27210] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.150153][T27210] bond2 (unregistering): (slave geneve3): Releasing active interface [ 2179.424231][T27210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2179.433854][T27210] bond_slave_0: left promiscuous mode [ 2179.441051][T27210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2179.450787][T27210] bond_slave_1: left promiscuous mode [ 2179.460619][T27210] bond0 (unregistering): Released all slaves [ 2179.471455][T27210] bond1 (unregistering): (slave veth3): Releasing backup interface [ 2179.481172][T27210] bond1 (unregistering): Released all slaves [ 2179.494688][T27210] bond2 (unregistering): Released all slaves [ 2179.509115][T27210] bond3 (unregistering): (slave veth7): Releasing active interface [ 2179.520323][T27210] bond3 (unregistering): Released all slaves [ 2179.536457][T27210] bond4 (unregistering): Released all slaves [ 2179.554241][T27210] bond5 (unregistering): Released all slaves [ 2179.567095][T27210] bond6 (unregistering): Released all slaves [ 2179.579658][T27210] bond7 (unregistering): Released all slaves [ 2179.599185][T28584] wlan1 speed is unknown, defaulting to 1000 [ 2179.613312][T28584] lo speed is unknown, defaulting to 1000 [ 2179.701888][ T7871] Bluetooth: hci6: command tx timeout [ 2179.911742][T27210] tipc: Left network mode [ 2179.962603][T28738] netlink: 'syz.4.19260': attribute type 1 has an invalid length. [ 2179.970676][T28738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19260'. [ 2180.183457][ T7871] Bluetooth: hci2: command tx timeout [ 2180.259012][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19262'. [ 2180.322836][T28744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19262'. [ 2180.373857][T28744] geneve3: entered promiscuous mode [ 2180.379115][T28744] geneve3: entered allmulticast mode [ 2180.735941][T28700] wlan1 speed is unknown, defaulting to 1000 [ 2180.750580][T28700] lo speed is unknown, defaulting to 1000 [ 2180.758170][T28708] wlan1 speed is unknown, defaulting to 1000 [ 2180.768943][T28764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19265'. [ 2180.780531][T28700] lo speed is unknown, defaulting to 1000 [ 2180.789065][T28708] lo speed is unknown, defaulting to 1000 [ 2181.167034][T28708] lo speed is unknown, defaulting to 1000 [ 2181.216218][T28781] syzkaller0: entered promiscuous mode [ 2181.242783][T28781] syzkaller0: entered allmulticast mode [ 2181.788134][ T7871] Bluetooth: hci6: command tx timeout [ 2182.265765][ T7871] Bluetooth: hci2: command tx timeout [ 2182.364221][ T560] block nbd0: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 261 seconds [ 2182.375929][ T560] block nbd0: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 261 seconds [ 2182.400228][ T560] block nbd0: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 261 seconds [ 2182.435856][ T560] block nbd0: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 261 seconds [ 2183.866661][ T7871] Bluetooth: hci6: command tx timeout [ 2184.314852][T23621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2184.326342][T23621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2184.337251][T23621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2184.343484][ T5827] Bluetooth: hci2: command tx timeout [ 2184.360968][T23621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2184.391573][T23621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2185.239125][T28700] chnl_net:caif_netlink_parms(): no params data found [ 2185.299338][T28832] netlink: 'syz.5.19275': attribute type 1 has an invalid length. [ 2185.472370][T28708] chnl_net:caif_netlink_parms(): no params data found [ 2185.601802][T25746] ================================================================== [ 2185.609912][T25746] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 2185.617146][T25746] Read of size 8 at addr ffff8880a47e00a8 by task khidpd_15c25886/25746 [ 2185.625479][T25746] [ 2185.627802][T25746] CPU: 1 UID: 0 PID: 25746 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) [ 2185.627821][T25746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2185.627831][T25746] Call Trace: [ 2185.627838][T25746] [ 2185.627846][T25746] dump_stack_lvl+0xe8/0x150 [ 2185.627870][T25746] print_report+0xba/0x230 [ 2185.627889][T25746] ? __mutex_lock+0x812/0x1300 [ 2185.627909][T25746] kasan_report+0x117/0x150 [ 2185.627928][T25746] ? __mutex_lock+0x812/0x1300 [ 2185.627951][T25746] __mutex_lock+0x812/0x1300 [ 2185.627972][T25746] ? __mutex_lock+0x5ac/0x1300 [ 2185.627994][T25746] ? l2cap_unregister_user+0x6a/0x1b0 [ 2185.628017][T25746] ? __pfx___mutex_lock+0x10/0x10 [ 2185.628042][T25746] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2185.628061][T25746] ? lockdep_hardirqs_on+0x7a/0x110 [ 2185.628082][T25746] l2cap_unregister_user+0x6a/0x1b0 [ 2185.628104][T25746] hidp_session_thread+0x3cb/0x440 [ 2185.628121][T25746] ? __pfx_hidp_session_thread+0x10/0x10 [ 2185.628137][T25746] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 2185.628155][T25746] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 2185.628170][T25746] ? __kthread_parkme+0x7a/0x1f0 [ 2185.628190][T25746] ? __kthread_parkme+0x19c/0x1f0 [ 2185.628211][T25746] kthread+0x388/0x470 [ 2185.628226][T25746] ? __pfx_hidp_session_thread+0x10/0x10 [ 2185.628240][T25746] ? __pfx_kthread+0x10/0x10 [ 2185.628254][T25746] ret_from_fork+0x51e/0xb90 [ 2185.628273][T25746] ? __pfx_ret_from_fork+0x10/0x10 [ 2185.628290][T25746] ? __switch_to+0xc7d/0x1450 [ 2185.628307][T25746] ? __pfx_kthread+0x10/0x10 [ 2185.628321][T25746] ret_from_fork_asm+0x1a/0x30 [ 2185.628348][T25746] [ 2185.628353][T25746] [ 2185.790205][T25746] The buggy address belongs to the physical page: [ 2185.796609][T25746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880a47e3740 pfn:0xa47e0 [ 2185.806665][T25746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2185.813788][T25746] raw: 00fff00000000000 ffffea0002bd3208 ffff8880b8640c40 0000000000000000 [ 2185.822395][T25746] raw: ffff8880a47e3740 0000000000000000 00000000ffffffff 0000000000000000 [ 2185.831054][T25746] page dumped because: kasan: bad access detected [ 2185.837646][T25746] page_owner tracks the page as freed [ 2185.842999][T25746] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 25359, tgid 25359 (syz-executor), ts 2023083073580, free_ts 2185597362625 [ 2185.861655][T25746] post_alloc_hook+0x231/0x280 [ 2185.866417][T25746] get_page_from_freelist+0x24dc/0x2580 [ 2185.871955][T25746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2185.877852][T25746] alloc_pages_mpol+0x232/0x4a0 [ 2185.882694][T25746] ___kmalloc_large_node+0x4e/0x150 [ 2185.887875][T25746] __kmalloc_large_node_noprof+0x18/0x90 [ 2185.893580][T25746] __kmalloc_noprof+0x3e8/0x760 [ 2185.898412][T25746] hci_alloc_dev_priv+0x28/0x2060 [ 2185.903434][T25746] vhci_create_device+0x120/0x650 [ 2185.908448][T25746] vhci_write+0x3ce/0x4a0 [ 2185.912763][T25746] vfs_write+0x61d/0xb90 [ 2185.916988][T25746] ksys_write+0x150/0x270 [ 2185.921298][T25746] do_syscall_64+0x14d/0xf80 [ 2185.925878][T25746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.931756][T25746] page last free pid 28584 tgid 28582 stack trace: [ 2185.938242][T25746] __free_frozen_pages+0xc2b/0xdb0 [ 2185.943387][T25746] bt_host_release+0x82/0x90 [ 2185.947982][T25746] device_release+0x9e/0x1d0 [ 2185.952570][T25746] kobject_put+0x228/0x560 [ 2185.956971][T25746] vhci_release+0x15a/0x1a0 [ 2185.961554][T25746] __fput+0x44f/0xa70 [ 2185.965538][T25746] task_work_run+0x1d9/0x270 [ 2185.970125][T25746] do_exit+0x69b/0x2320 [ 2185.974272][T25746] do_group_exit+0x21b/0x2d0 [ 2185.978854][T25746] get_signal+0x1284/0x1330 [ 2185.983342][T25746] arch_do_signal_or_restart+0xbc/0x830 [ 2185.988873][T25746] exit_to_user_mode_loop+0x86/0x480 [ 2185.994141][T25746] do_syscall_64+0x32d/0xf80 [ 2185.998721][T25746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.004693][T25746] [ 2186.007000][T25746] Memory state around the buggy address: [ 2186.012637][T25746] ffff8880a47dff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2186.020694][T25746] ffff8880a47e0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2186.028836][T25746] >ffff8880a47e0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2186.036889][T25746] ^ [ 2186.042258][T25746] ffff8880a47e0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2186.050395][T25746] ffff8880a47e0180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2186.058439][T25746] ================================================================== [ 2186.070064][T25746] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2186.077386][T25746] CPU: 1 UID: 0 PID: 25746 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) [ 2186.087185][T25746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2186.097247][T25746] Call Trace: [ 2186.100521][T25746] [ 2186.103439][T25746] vpanic+0x56c/0xa60 [ 2186.107418][T25746] ? __pfx_vpanic+0x10/0x10 [ 2186.111919][T25746] panic+0xc5/0xd0 [ 2186.115642][T25746] ? __pfx_panic+0x10/0x10 [ 2186.120249][T25746] ? __mutex_lock+0x812/0x1300 [ 2186.125007][T25746] ? __mutex_lock+0x812/0x1300 [ 2186.129763][T25746] check_panic_on_warn+0x89/0xb0 [ 2186.134685][T25746] ? __mutex_lock+0x812/0x1300 [ 2186.139440][T25746] end_report+0x73/0x180 [ 2186.143666][T25746] ? __mutex_lock+0x812/0x1300 [ 2186.148413][T25746] kasan_report+0x128/0x150 [ 2186.152906][T25746] ? __mutex_lock+0x812/0x1300 [ 2186.157662][T25746] __mutex_lock+0x812/0x1300 [ 2186.162253][T25746] ? __mutex_lock+0x5ac/0x1300 [ 2186.167005][T25746] ? l2cap_unregister_user+0x6a/0x1b0 [ 2186.172378][T25746] ? __pfx___mutex_lock+0x10/0x10 [ 2186.177405][T25746] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2186.183221][T25746] ? lockdep_hardirqs_on+0x7a/0x110 [ 2186.188584][T25746] l2cap_unregister_user+0x6a/0x1b0 [ 2186.193861][T25746] hidp_session_thread+0x3cb/0x440 [ 2186.198958][T25746] ? __pfx_hidp_session_thread+0x10/0x10 [ 2186.204672][T25746] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 2186.211131][T25746] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 2186.217351][T25746] ? __kthread_parkme+0x7a/0x1f0 [ 2186.222288][T25746] ? __kthread_parkme+0x19c/0x1f0 [ 2186.227388][T25746] kthread+0x388/0x470 [ 2186.231454][T25746] ? __pfx_hidp_session_thread+0x10/0x10 [ 2186.237075][T25746] ? __pfx_kthread+0x10/0x10 [ 2186.241646][T25746] ret_from_fork+0x51e/0xb90 [ 2186.246410][T25746] ? __pfx_ret_from_fork+0x10/0x10 [ 2186.251506][T25746] ? __switch_to+0xc7d/0x1450 [ 2186.256172][T25746] ? __pfx_kthread+0x10/0x10 [ 2186.260748][T25746] ret_from_fork_asm+0x1a/0x30 [ 2186.265507][T25746] [ 2186.268844][T25746] Kernel Offset: disabled [ 2186.273150][T25746] Rebooting in 86400 seconds..