last executing test programs: 2m34.400397968s ago: executing program 2 (id=693): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000240)=""/227, 0xe3}], 0x2}, 0x2a45}], 0x1, 0x40000041, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) (async) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r4, &(0x7f0000000400)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f5090", 0x52, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x4000080, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x49) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r0, 0x300, 0x0, 0x1, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) 2m34.001440282s ago: executing program 2 (id=697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000048fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="dc200008907810001e0c1b000300000063c7432b130e099f7786f6ce3c30eb72984b000104020000"], 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'sit0\x00', 0x800}) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='ipvlan1\x00') (async) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0xfffffffffffffee6, &(0x7f00000002c0)=[{&(0x7f0000008140)=ANY=[@ANYBLOB="c4220000120001000000000000000000100000000c00005bcba56423b8107500a42221"], 0x22c4}], 0x1, 0x0, 0x0, 0x2001}, 0x0) socket(0x1, 0x4, 0x51e9) 2m33.608036064s ago: executing program 2 (id=702): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x5f53, 0x4) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x10, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x200, 0x5f) (async) sendmmsg$inet(r2, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000004) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x44}}, 0x800) 2m33.217959786s ago: executing program 2 (id=706): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r3, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000180)=""/53, 0x35}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 2m30.879639168s ago: executing program 2 (id=717): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000880)='cgroup\x00', 0x113541, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000900)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000980)=""/96, 0x60}], 0x1, 0x9, 0x6c8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000180)=0xa40, 0x4) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6011a8bc0014060000000000000000000000ffffac141400fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004007d55e30090"], 0x0) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000340)="b5c3fa163c5971400cdb232e950e1ad1ca9778992faf7b575e2409bcb8c14b6b56581e5822c51c1826d2568c53a9b0255fd32e7fd3acdafdb4e7b4d6d107ae5d4551b2c7b3c8c8e2562b7c7ab925a8f6ab7344779ffe0200867bd5be56b173f8f46b36c0e51071f1a66470c9deeb188caaa8ffe08ba4c40c06bfc483954e180dc82bd2df22418f8be5fea6027f206c5a437abbf21aecdf13366254fd24ec971dcf86d07eef6cee9fb6456813932cbe5ff1f6115250da2112773c51fe1001538f8e1fba90cd01ee03e78ff3da7a74f1d7f7b332dae2e639e0dfba5210517411fda7f868a9f2e6875688fb309319145f0fad", 0xf1}, {&(0x7f0000000440)="924c1715765fcc812a1107c7e0d3ff1ef56660bdee835d1456bab240fe2f1f81cd2f4712e7c392e94b7ce67fa22614f7e21691abfe51341903cb96f2b6c49638ac7a046bedede4217a7b703549e397f993e24580f5a75df3610346a2149598225dc28875aee2fee3c45f612e41c874131294659ace675310ccb53f742275a215b70416", 0x83}, {&(0x7f0000000500)="53dc1610c665a1ecb35cbadf9af3dce258e7ad906f652ac163a9f221a00e55f487c5557343b622dd036f8173822e90a3afb7b60b96c2526afc81863fbce96f17195e673160d3e6f35045cb", 0x4b}, {&(0x7f0000000580)="eb598fbffd8baab8ab76c0a5763e24920220ddf80bbf7f7ccdfd218cd8bf60eeb428758e3350fbe657027c6d4242459a8ea4b3f7202da2546dc621453529e40644cac32004811357fe77a47adfd9b176772329cc77292212329e1825e60277ce0575e9b66bfb0a256cf4509a43f0c54784b003cc04b9a1808254c7b3f81a733b46b6fb5df4596c6b21b8", 0x8a}, {&(0x7f0000000640)="60ecaab4a726ef03bbf4fc660eacd47ccf039450d11193f2de312bc5ba62a3c28eebc4bfd7230cd1172196cc40cdc5dbd41c3d799ed8a786c7362638cf6c870894dc4edb", 0x44}], 0x5) socketpair(0x14, 0x5, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000740)={0x2, 0x3, 0x8001}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000007c0)={r8, 0x5, 0x30, 0xcd5, 0x7}, &(0x7f0000000800)=0x18) 2m29.987672373s ago: executing program 2 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x123, 0x0, 0x0, [@typed={0xffffffffffffffbc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x2e}]}, 0x28}], 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ff7fffff000000000000000018120000c0e83d36d5fe4dfac05ba7dc29bbc3bfb75536cbc4b290b056ca2731bcc93e739b0bd17d8e74f5930098b7f56e41d714c6ea394b0fbc897f9bcfcbfa0251b5aadf2de618062d45b3a8b7955078f82c80a1aab68c17be7770f709e9f72d0df25ac5bd5decd14ddcc51f9752c52baa535a08447d70bcfcdde816d7b3a67a525b4809f24338e52b0bfe0dfe94ecbf25fb7dc5062ab0a22faf6eeda7c9fc7a2c483a6406ad0793c715e5eea788", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f0000000340)='GPL\x00', 0x5}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140018800800014000000002070002"], 0x4c}}, 0x0) socketpair(0x1d, 0x80000, 0x9, &(0x7f0000000a80)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r7 = socket(0x10, 0x803, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "e8"}], 0x30}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) 2m26.820503969s ago: executing program 0 (id=752): r0 = socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000002c0)={0x5, 0x9, 0x7, 0x10001, 0x7, 0xd, 0x200, 0xfffffffffffffff7}, &(0x7f0000000300)={0x9b, 0x240000000000, 0xfffffffffffffffe, 0x9, 0x80c8, 0x3, 0x2, 0xab}, &(0x7f0000000340)={0x2, 0xc0f, 0x9, 0x101, 0xffff, 0x3, 0x2f13, 0x8001}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x4, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x8, &(0x7f0000000540)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3, 0x6, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000440)={0x9, 0x3, 0x8a6a}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000a00)={0xd8ec, 0x9, 0x2, 0x3, 0x5, 0x0, [{0x8, 0x9, 0x5, '\x00', 0x2}, {0xffffffffffffffdd, 0x9d, 0x286, '\x00', 0x2206}, {0x10, 0x7, 0x9, '\x00', 0x2}, {0x7ff, 0x2, 0x3, '\x00', 0x200}, {0x9, 0x0, 0x8, '\x00', 0x800}]}) setsockopt$sock_attach_bpf(r5, 0x1, 0x2c, &(0x7f0000000b40), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000b80), 0x4) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000000bc0)={0xf89c, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0xfffffffffffffd14}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000000)='](\x00', 0x200000, &(0x7f0000000140)={@align=0x8, {0x7, 0x8cc, 0x0, 0x3}}, 0x100, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x7fff}) write$tun(r10, &(0x7f0000001a80)=ANY=[@ANYBLOB="0000600300039d3c0300000000006cd5f4de13a53248fc000000000000000000000000000001ff020000000000000000000000000001890c023500000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbfe88000000000000000000000000010100000000000000000000000000000000fe880000000000000000000000000101fc0100000000000000000000000000016c02000000000000c204000000070101000001000401060401050000000000002f03000000000000040101c2040000010107100000000102090900ff0f0000000000000000000000330401080000000000000000000000000000000000000000fc000000000000000000000000000001000004d3fffffffd01005860000009f100000000000000a20000001f000000014a1d01a300650000fe029078ffffffff00000000830b20e0000002640101014412371fa5f27a1e9d6f2923ccab1c489d5b831351ac141419e0000002e0000001ac1e0101441c2163e000000100000006ffffffff000000040a010101000091b14418c1603ec6b85300000005000000080000000a00000003440c90a1ac14142500000008441c07336401010000000702e0000001000000080a01010000000008891ffbac141436ac1e0001e0000001ac14140a000000000a010100e0000001865d000000000205480a070209482a6a080fc84f0504c2f10703e7000bb90788d1ef89fe107f0011a8da37c737b6ff1186391f2f5bef387b0b4be57e67c68870b3810712e9608812afdfab4e407dc56d7ed0ae3d050319000662642fae440cb64000000e9e000100001708907800000000b4cb775f12ae7092a5dbb9fe21b77bdb109ffe6efac94822cfcd5e94cc3c7214d465f0f2ae85dc0a24872a9ddb941ab36d1021fb6ec2b818d7ca53995a107d8f0f0a9a1ae37d0a2b9cda644466afba4df9a5f59a273cc64cbf1c2b4896788ac367e74f2dfcc24f586fe56cfe2904666ea34f004c1e11000067000001219078ac1414bbac14140c8927cfe000000164010101e0000001ac1e0101ffffffffe0000001ac1e0001ac1414bbe0000002440c5093ac1e000100007fbd863f000000020606db3c48e2050fab2ec64b8ab50b573bb5c36fd305090d5a501e54711a0606e35d6eba01076bdc49dc94020330040b7c9d4a0c0cce33337c4414a881ffffffff00000007ac1e000100000008831bc9ffffffffffffffffe0000001e0000002ac14141eac141417442cc241e0000002fffffeffac14143d0000000fe000000200000101e00000010000000e6401010100000003440c987300000000000000040000004e244e230411907826ee341b06123ef3f6ca8f7ff0155c783da917a3dc981eeffb94091fd42b0595c1db1bedb332aec235b2e2a18513c309bdfa11eb30805e48e4b8684c8bca659927a996a2c7456d00830aef6a3564ebae907c31821800f79d19ee8f5d2c4a7ebabdbac11d146af60f2a8c105747bf18b50d0022168fe269fa327187c9d111aac8f016694dcea831cf476a6a48150333369ba8a0326174dbc4d189f7a842023b2b30a02a7ce6a850deee93f82e48a84b1615ead1005d2a9438ec51f9c422793af7bf9db87bc6ef98ccdd1aecc8c1437a7f759d814a862f32bccc3a0ae0e1c7aebae4278b49e9cbdd499c124ee0694f4bcca2b694c34ab92c8f8957f0aa9b2d64146236694f30236fda08069a2d5058cd321c8a665db88a13aec8a91b386ebfbab3c73e8bcaa2ea09f0e5f08c0be5da4d496f8e69b82d8eb172720b7032b6107e00d587898c8c0f08c37feeb084b9d4b524adc640b0f253048190f074cba77e46a68d54e7c8f936d33fc2ba5bf5da5158d80adb0f33386c0abf9143ff753ba52dd24a34c223a52989d5d77c4e1bfb891f912b9c9d99d88fc9d78f04c6382615ca9dff1845eb3e6d420ff74eed5c52fba59f886541d5c08783f43163e057267053e0c577ae3c0a45ae942d11465270c9b2d585fccb623d9b6dbb13566191672aa2b00cd39905339c7bdea950f4e27e31643531f3fc129e59f7b929f390a3912654b80e9209243c9f29725db1a004a02c3d477fe457634dd5c3c37b11abb15f3956e0f1ff2846627895fd5f39a576e8ff9f7bd06cd756c6cc6383d1a235a3ba72fa86f5251de97599818fd5feec15c0e05b491f13d5d00eb5c17fb1b3092742fc9be5b79cd97ea37aa7fa4c206f64e003f68350a4f7c3601725cfd4cbd93020dfe71ab426c9c265e72e407173e58589feaeeacd5b1ff3a404726d8d3fc8dae56023463bc23e64de458f4ce27f6efc9d12c45a1a309a5eeb360b5cfd87ab1aa6d0b5635a4a825540b797ad8042bb27163f2661e0e78e3e1f743fe006b5db18641b91a3ecee4a9a0a6e6ab5257d9f76949b603d58ad05fa7a0f614d68a0f836e5ba5c94d65c6fe3bbee37e54c2222d84bdc3c6aa2e093664fd0d816c35776c27eda23fde4375f1e52e6a1a1dd67d96cf4d9b9cb7d734aaf7595346237691a863e97ba83a25cb5c121a415ff951f829ff2053f9c3d8ae867a3a2290ae7c5a8884325f5bd80886306f37d90c9854be159800f2fb86f1efa9109b6286fa36858de249ab6bdc1db6e99ae6a080ac060d6bf0a6e2856a81edef6511759a14be1a69c9508ff847156e8ab03acc7f15b3dc482ae9b84d00d7b7231b8e3c7203d564a157be3b951ae01f89494bf76cd16597c866cffa9c03e697dbbc24b7628f180b7f7cc44117196a30b3467a949175d54d1d6a183acbd3f89882229d446f9b9ecb6c68c5e3960559e984468bd1e599b56fc4b328b5ae5f91732306a3ee268492d7948499fbd02e2511d9dabfe6506270aa9e78c30b0a9f9b09a9cb9bfa1b4f83ff941979789c69f16797e4bf074ddb22c4c98b8a2ccec769f6f531a185d3ef325c214c546bd4e2f46ae2507cd1587bc87ca48b5816c74a1d7ebb0dbb7400bda31fd4193d6ef20b897645d099fb488a949df41ddc315872a9932346612edd9adf503903205f41e7bc6085490d3a72e9f38f7667cf0521f974727f661c42b78a56565067f4a803c6ce7f915ab60dd1441acbb2b19716709f5a6c559abba8e4a99f0899d6553195ee7082ce3a2f08be79cd60641f67b2fdeccb596af38da16d757252eb636c4cae77f7eee6768b920287927e953d950b95390f0fd847a73191ce04770a31ce8eeb4307c6d72e801ec63aa05558f8870019dea708f3c12ebdf6bbb02220d021dd49d98434aa50b2475c63297b68dddf8d5e273a410f38dac3edc7eaa6331531537a248e6822a4252feaa6015fe0ef102b0602ec3acfef6dfe3d8de324a4823d87e50ac00f63e967d591e73b49ef21a4ca26d930246d9f23e01ebf2c3cf1dd89847b8e3df5b54d97b1282f93094f59672a231a8642eacf6bade8ef448c13b8c71aed2a8fa4e1b74f28db1c486bee516ae02ef5b677803ccd4d0817c9a8be0c6d02f29e5634074c3b4c54eab70b0940b8eaac17dc6ff7dfbfb91d6c942739c4af6ffa135b561995bffcb72151ba8dd51bb94d862f1b0a74a2fda5d7fc33d643792a2685488859243f04130755ccddca2c5a92c1eae372fbd5e2adde462fc21d499e19741f5a4f6e65b023cbf8cd9c391aedb142620667479511e2eb3e85e43ec16582b810ce978b0ab05d9327bf595bcadfb30b97a17ec6925bb48d7d95e48adae0492b14c6057fc5ce50be3871ad679d3827801469db0fd3731515d6cf53589a41241830d8092ca661cb3183e5c88c0a484bd575233756d37ba05a7bc445a3c53c0d278578935790b419a15be9176bcf8e650aa94ab29d2b5fd68e2c1c751bb06cfba87bfc482a2805c79ca5bdb69a4dc5759c31798a686b08d7244ae00e39900ad2688851a8f51a22a310fc1a9ef8d9c1597e95cacc25e877870d87a212727d2f801bf5c075c0728431b0a3bef57d69f9b970e1ae2314dd23bda20fffa332fbb2490354a91d9204846c7b4eaa4f39d0378ae4cd7a4ddd1fd335962ee430f885b955a921588ce2d997a97569d3c3793a669e81c7f9064ecc9c7e621a21e117eab612bad26edffee5588654d2c69e6b9ae4cee0340897243dcc7a10e06941cf44d701abc4beba8d473fe64e914fad32e5f8685e694000d3f08429a5d7b70af9ef747cca4d97d76c86be11b1ba6ca365cedb3ef95245580145de41fcd6007b44f3b499251a0d241a72bd3711c81b3e29e5d7363bdce99b6c1a36c4f3c9a79b301eb943b381e6b7222993386a3d9a496553c32568ab63210492f301f79d0fc35613b6ebd91377820b4ec393cf7965f38d62ac15368385fd430d7a9c0b5951bb52705c880fb4e8ea6e51220e64ad19405c2d97da15634c88cd5b11f0f0a2786eee99ca4ae64ad7100dc9c6f48750acb95cb1c34f84c42bcd3fd08f7f95b930274c9350ebe71a111d4552ef93d43ee7fc1d727d77fd9e456aa5e19336cc84a4e3d809a468de3a8376fce4618872ee8ca26cbcf61973a22c065faf2a1b24d4757e7e9868a0892cf0db0b945e2751653112d5c99280047bcc6e69b83b4b9f57aee78e5607f643bf57c52dcfa69c7a6e7378088d1b34ad9ee50cf79d87d31dd12b63d86b09ef7703d60641cdd57848d99223a5885a9ec8d6c94d8a9dd9fdb43e833e0ea160eaaae14ebab1c8bc946dd0b47b82e488c18513d614ad6b2541cfebee81b3ea5e548132dba02548d51731b91fec0917e5e8b9894f51556728565954bb52e056fff052770c4192e00e32ed1b317138afe338d0a1070cf88540d47c39632f367c31ef354539ec3fb412301354aead81365cd1cd854d25ea690081a3c3d22af7cfcb80dca6bbe76f3a4e0e8576d3deb40f84992658885086c02a07b7571f75281612af4adc3f1eeff748af74f897feb8d526fa6872333f97a812b031734658fd8bec5d52734bcb53c24e901e55e60a826324f83a5c568c02ea49b78cd3b042bcdf9eb7096c5972543783d6646d8e5e59c0d36848c704b9f6d5f78b500fe48c0329f524ec50be25c448af8ba810d1e90ce9e05a3cf0494000900aa97a6e4bf96f477dbddb9237f0876a923719db2a18778b208a216ade37ba6c1dc8d0d9544ffab26ba97a9040617ae89f9283e39e20a6a37c68abc59810e485f1f5dffcde9794ff9bcc5c5823025bbc19104de23cf091d2817872bb427cf9ba501d99751ff12dddbe6c86b67fab771c77753ecd143e489fa9e0e4193f8932813b4ea0fdd5c2788e5a6ad40d78961a4dc4a15854007c36fb65976376996eff6f66ee58b51fd49219b10e14798f7882774be6ef297f63db7b03e9fba7ddf1ace7091b14c349ce1426cc0332bdc343706472bc9609761cffb2f912693562a9118e42b8aae9dbfcf6b2615c954992105e450d48e08112ca55a5ba09a0a8cf17ddff844ee34708503f14e0241994b5771fa72c7517ede654867a7c2b4cc09f3f8e1f4db018454ef273817aa78df77120059fd466a2730d09d85541247033edcb0f44d643c10721acd2078e2749ea8059d9912a5fc68468617c1db120e0326cd07d710dd8fc2c73e0eae02712ab4e6b67c5cec181d6a951191913b677e5d607c512af62d0c9fa1ff49548800c67f06ac27930b42859e27f1e625bc73b1bdb1a611b6b1240eabb8346e868daaadcad62d923019f8a330762a11afeeb8e9351af79e19308ffbac144673396fbd080a78f3d3bfae58e81f8a20ddd98cff25bcb1e4a139a6c2a13b57e9e33026243ee984452a06a2dc7b142e894d22dbcd9dec88939c861053ecc36ea104631f30c7cfc6412ea2c8fa294d9518ac3640d1a707010c851596ea958d830a334153185979632f36711e5b21d96a398c346f9c36e92b167f60d1b246686ff0023dd8a2d853e69a213bed08e64a2f02e96b261bb17933a80f9d43a94ce128dd7a8f9cb8cb31822f44b1fb817a41644eb7c0b7a587d897625c3e118264782bda231f6b4682ac69811b13bc200014f586b368415387a040e0e2823934eed662d348b503317bc151979d14d561f2a5c93731f38ff42f8807ec95b724502fd1686691847bcceff8cf6dd87eff9c020c1be6749968c67bb1a9c3803a40fd4512897e84bb48e1421a599a899c5ba880733b20748868cc1177aae833bc1536e311bb10447e4583b9ab59b5a1beeb45afe10f9e337a475ee9765b19f673fd843c3812cd405f4a2def520562d379abb0a4f5471b9ca809bf9939a5b34a38f1cf0a30fbd03460bb5894144a5ddd72ad644464791a7fdb3d56d033f3376e68b5fdd0a5a3816595282a46704522525084d5257b10388cfc06cf318b86ce6b3085feea98bb5a84a3a156834c1b11ca93d74f5f146d783f6030dd614fcce2638fb264259ead082cb0d188d99f611bf2f0856002f5ae72b0d878ca7089705408c8c8bc186e01b5504f5d2505c1194353131485cc80fc5f939d241dcb384d586d9efe0549299f2728fa3790b762d7663732f7f2a457c93ba292670116b1a1e644376731d612a4541917b8def6232798a11cf12f2d822bec9f402a5aca2ce5c972aac8633982a1bef71b99d27fc750e8191b2fae68dd72b890e19ba217d2822c8612632ff5cefbe9f718bc3848e65b8080e7247963a6b60b23212329f99978698ea54174a573064115a928d36f7c693308166fb60956ba396cfb22ab3579b2983aabcae8045cec2f93aed67008bec0f56ba119b0156af88d0cca0b11468589f3b4a2e6bde9804f5a8126ab5fdf4abaf3fe1409e60d343bf1b27891f965532ffed4bd22078f46a7aaf42b19dc19274a28f990a0601e74ac3a3076020cbbc2796516659578fdf85b207fffe4a6c935b9686b2abefe1a3eb0538f6a4dbf30f742bae87067e6c8062b11f1a5c4e2c367483ffb1a9859d69f4ad647a90be867fe0fbc50c66c210196e8bc711b0c1a52999abe477246cb6f5469155860e11483288ad1225a1975c1f25bf673d9c3ddbd706d0cc8e2bae3a330ef6f7160e4ceb0f2cf8e3c961d078a1fb7fb8a69a4ddd5524e192879ebf055b51139bb5c07124acb965fa7059aabef1b23fb99b72811fe3bdc8512e55b6fde4b7889d79d6e6fa9ad710a2e5c7124e1113a2dedc822a02691e2676561062a21629bce35be7d7b92d281295bb312d98bb0b6a187dba375814f59934882a0089023e658c8"], 0x13db) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f00000004c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000500), 0x4) 2m26.184020548s ago: executing program 0 (id=757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffde9, 0x10, &(0x7f0000000040)}, 0x48) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @dev}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m26.083826828s ago: executing program 0 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x80000000) (async) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x80000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000480)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r1, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/238, 0xee}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000005740)=""/4092, 0xffc}], 0x3}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)}, 0x900000}], 0x7, 0x2, 0x0) 2m25.921989475s ago: executing program 0 (id=761): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000cc0)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000001080)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r2], 0x38}}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000dc0)={0x0, 0x2710}, 0x10) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000e40)={0x8, 'veth1_macvtap\x00', {'erspan0\x00'}, 0x4}) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="bc010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb93ea59b28a77d679cd9d0100180000b7ff4d8bfe6bad0000208b3dc126000000000006000000180000000a0000b4ff00000800000004080000000000000000e0ff020000000000a7ecac9170005f0500"], 0x0, 0x3a}, 0x28) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x80000020}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x3, &(0x7f0000000600)) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000e80)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000ec0)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000f00)='nv', 0x2) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000001040)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x4, 0x4, 0x40, 0x10}]}, &(0x7f0000000a40)='GPL\x00', 0x9, 0xb6, &(0x7f0000000a80)=""/182, 0x41000, 0x4, '\x00', r11, 0x25, r6, 0x8, &(0x7f0000000b40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x9, 0x7ff, 0xe0000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0x1, 0x1], 0x0, 0x10, 0xffff}, 0x94) syz_emit_ethernet(0x22, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81007f00000000000000060200000000ffec0000ff0f"], 0x0) 2m25.741112166s ago: executing program 0 (id=765): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000040)=0x100) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000900090073"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) epoll_create1(0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000040)=0x100) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) accept(r2, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000900090073"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) (async) 2m25.469013691s ago: executing program 0 (id=768): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) sendto$inet6(r0, &(0x7f0000000000)="f9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0x18) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) 1m6.986686759s ago: executing program 32 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x123, 0x0, 0x0, [@typed={0xffffffffffffffbc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x2e}]}, 0x28}], 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ff7fffff000000000000000018120000c0e83d36d5fe4dfac05ba7dc29bbc3bfb75536cbc4b290b056ca2731bcc93e739b0bd17d8e74f5930098b7f56e41d714c6ea394b0fbc897f9bcfcbfa0251b5aadf2de618062d45b3a8b7955078f82c80a1aab68c17be7770f709e9f72d0df25ac5bd5decd14ddcc51f9752c52baa535a08447d70bcfcdde816d7b3a67a525b4809f24338e52b0bfe0dfe94ecbf25fb7dc5062ab0a22faf6eeda7c9fc7a2c483a6406ad0793c715e5eea788", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f0000000340)='GPL\x00', 0x5}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140018800800014000000002070002"], 0x4c}}, 0x0) socketpair(0x1d, 0x80000, 0x9, &(0x7f0000000a80)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r7 = socket(0x10, 0x803, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "e8"}], 0x30}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) 1m6.986537917s ago: executing program 33 (id=768): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) sendto$inet6(r0, &(0x7f0000000000)="f9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0x18) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) 8.31903613s ago: executing program 5 (id=1265): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0x3, 0x9, 0xb95, 0x5, 0x1, 0xb85e, 0x1, 0x80000000}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0xc, 0xfe, "ee69ff67735482bb"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8884}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x3ff, 0x0, 0x0, 0x3}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000340)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_procfs$namespace(0x0, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, 0x0) r10 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r10, 0x0, 0x16, &(0x7f0000000480)=0x9, 0x4) sendmmsg$inet(r10, &(0x7f0000000540)=[{{&(0x7f0000000580)={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000640)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000480)=ANY=[], 0x8) sendmsg$NFC_CMD_START_POLL(r8, 0x0, 0x0) write$nci(r6, &(0x7f00000004c0)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x7, "66f6e03cc2bd67c00d9b265d498ea644b78c38b2fee1cb06dfa531269ba803d133110b1fef46583e8ac5ed7ec77355e451b7fe983aa348402ac9791ec56c14e33c614078b6179e8226d8d0db29dcc718fea94398"}, 0x57) write$nci(r6, 0x0, 0x5) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020600000200"], 0x10}}, 0x0) 5.072447186s ago: executing program 5 (id=1272): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1b0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001880)={0x0, 0x1c, &(0x7f00000018c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000001900)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, &(0x7f0000001940)) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x8, 0x3, 0x2, 0x4, 0xfff, 0xa073, 0xffff, [{0x8, 0x59be, 0x1ff, 0x2}, {0x7, 0xf, 0x101, 0x70000}, {0x6, 0x4, 0x5, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_U32_POLICE={0x4}]}}]}, 0x80}}, 0x0) syz_emit_ethernet(0x12ff, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x12c9, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x5, 0x200, "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"}, {0x3, 0x14, "347bda34ea0dfc10cdb0c24c5d8a5ac129127e45dfc69a4b9dfef818f3af41465b55da88f81ca7334e9a8fce86e2ccfbd3baadaf2a4da6f18d382db2818e57dc57b7a4f2c2fdf1534fcf04d88a60886c299b5782d6799d4031ee54035b01cf6da4a70e96a9ba3bc6797aaefe50557bea3f2de5e78153036e57dfd9cf19020444cbf1772dcf90fd437120407d4be7b205e340e3ed7778099f5a5cec39f3a4295b0411010978"}, {0x1f, 0x6, "a9ffc8eb9533c8864b59148d130a0b89ab4a01821a09c21ec7ac3977e2923488e45224c456561ed084eb34fe36821846f36e814f0c"}, {0x3, 0xb, "7bbc25c7452ee2841e976bd7fa507cfb23a7383b58fb461477ecdac6478c13103ee4fb392c6ef3ab28646f24a054b4c371a6a98b4152286ff289005cae553a88bd0a68df30d2db683579b3bc8385aec268523fed2d08a4e08bf6"}, {0x18, 0x6, "c0ec63892b9b6431fcee61af9cf8f85a9c73ed20b97233c516775854bf62f71d55bbaf4f5ba7466ae6f347957b019e"}, {0x22, 0x1d, "a05d58cd4ab45303ef18bb4062c6c83475ac718e3ee4e98c1c12c906ca60b32e70201cae891637f524fd14fda28293891c1918380a536c8cf9e965166b51c8d734ad5a2bd8d267168c468b39fdede4ecf104a0ee1a9df96352d67b988b98539f2109ca53e30ed87926591287fb471d7b4ec1acc3304279c057f569d8d76d5b33b9a439152769a8f1e922f42227c3c8ef7a5083a6f11dce9f32273b0bb0c6666bb8e2d528cc31ef49f7224c6e8bc5602480d687bd7434d777c6d35c17fc2e2e5cabd57fbb20ad01a22d7d07083b6639e650e93b2312a2eb030de05956e9732ac6a1dd18d73169"}, {0x19, 0xd, "6a24af6c17fc8d874089d69a9f299268f3baa8674f5688b14249221d731d468009b8c5016d832a54a10561032d3cbeadcd9af47bb603044de5f688dc4f19031d5699648cb8d0a988d7246eb9cc9e9a542e91d696e51ee885ddb2620336b4242b90e6ffc6278928456a06"}]}}}}}}, 0x0) 4.268669344s ago: executing program 4 (id=1282): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000900)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xdcd}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f00000009c0)={r1, @in6={{0xa, 0x4e22, 0x8c72, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x3ff, 0x2, 0xfff9}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e, 0x4}}, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000003c0)={r2, 0x7, 0xd, 0x6}) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000cc0)="5766b1b827f6003300", 0x10) (async) bind$inet(r4, &(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10) (async) listen(r4, 0x5) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000d40)={0x2, 0x4e22, @local}, 0x10) (async) shutdown(r4, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x164, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_ZONE={0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb02}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd79}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_ORIG={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS={0x8}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xb5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x70}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x620}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x25}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xff}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) r6 = socket(0x10, 0x3, 0x0) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f0000000100)="ab7d3ec8220eb13c5ad89b85a5adc5c898871ce5e7ccfa3cce3fa7f31c56a9016d04977bf7e410374bbfc8db9c0460c9765ece0d2ca2a44ce2b3429433e4ea62056c33e37a9e", 0x46}, {&(0x7f0000000180)="b2e2f00526350b866b3d74aa9b598c25f1655ba0810e73966fe28893a2bfe2a63dafc313d6ee6547a5c670e1af76e1feb05582fa78e6ea7cc8f2f1315d21e9f561844be6d126a4e689c8f36ab86aa4585a44d1b6340b5e4891846b98f814571856907ef471ab0a9afd", 0x69}, {&(0x7f0000000200)="40af680727dbc8c3a4cde48746352705c4cd41078153ca4cc2b0c658f5151b8c6fa573bff2ae5f534f03411c7de53f835a0df2cb6484bca99920b3754b2b7c670dd77a1583474d80d1c900545996a2998ba720838edc77488570be1f333d7963b02e64119f296faaf03b70a5df9046a8c7e700a90b72a5c0214807e30a379da7e1764ead7867d35121ce8f6431288c9e00005b6e", 0x94}, {&(0x7f00000002c0)="569b0a763addf9e08b412ae6d13687b2a8e42883d72d5afcb234ecc3921a5d706e3013c7401c2cdf5a077f5332c815467b51c84a2194e0a0357d46a625fd34bd88641913f8210f6e9eb477201f9a24bcc65e12c64f9189f6a1159e532c5373b101cdd46e204f8e855d6ded4cf48d4db82fd51f154b254524e998f3dccc0da5db3f4ff5dea1060d44b5313252c79ea89610bdf489a98b926ff66b31ece58a5e3383123bdfb530a79184e2c4", 0xab}, {&(0x7f0000000380)="bcd6c8b9e2954d", 0x7}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="dc77986992267bf42fa34c7af533d4aa1835e891ea34fb4a0806b321694f58ef1d58a620028eeea506e84539d8ab9a9906871c8a07c05fab46ac0c932121759760cd9065e776203b76535ceb9a831f9982772aa32ca811e2b5f378a51bef3c7e84be6cbc2d606eadc00bf31241c9ad70bb0239", 0x73}, {&(0x7f00000004c0)="183181ccd89724c36a3fca13fba3b24adc1b3fa8f0a20d42d9c92859679267a172c71e802c04890d1242e1d2018a29e3fb6a98328c053391faa1c34492af14320f416bde02d821281c509489a350608f1e3b66ba129626d45f79f28d2190a053263a72a694f73fa2d71a27b34be98e673761db13717efc2861108a462a5c14678f7083703a9c408a9839dd91b185b14874c37c92c270a78769c07a0352602c37f45f7b75d8747fba0015b29989b2deace5c1a3fe1ccfadd8f5ccae1007057351922fc283ce84bc", 0xc7}, {&(0x7f00000006c0)="646b0cd833a1e0132191d789fa2ef8eface415dee5b8402190cfe9fe84262a401d1153a2ecb219d002e830f208cb1da19024e8dc671d9bdf53a09b3abb09b0ad1ac775dfcd9b0f1f158c04763f053ab9ec437acef5d3196b7f70d07d410d423438bab813e803ace801fb790d90ca38f814185ab4330e0c7f41c68c89b8687ebd34dda1021e4446d781870ae2", 0x8c}, {&(0x7f0000000780)="70835c9fe9cbb258685dfb9bb2cba41a059eefc1de18046d393393b50396f41af73ac2d708b0ed79feb16c9d681f11c7b43ddebadc5de23cfd90d3febffaad78e52e6ade69b58667890fa2d8e7593f7b458c88a92da07c2dd20181831c2ab1ec52dc50421fc39ba16e6b2e908cc5190ae1b2396e3b89858d71e5f32b60089ff7f4ad6b27e3a1ed83766015a41e4352a1d466454da70461ac6fc4dd4adf3159d0437505a33dd7e7", 0xa7}], 0xa, 0xc) 4.214394932s ago: executing program 5 (id=1283): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000300)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @random="6a5d0e8f64aa", @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @local, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7069, 0x8, 0x2, 0x1}}]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0xfffffffffffffcfa, 0x0, 0x0, 0x0, 0x1}, 0x496}], 0x1, 0x102, 0x0) sendmsg$inet6(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="123b9e4996858caeefca0403b54d68b2061e1ee4f3d8d5e72d3d9c39d49ec05c814741b43ebedd4ae11167cc37a73f611406d8657555ef50190ae6075195e9206d050cdf2853408d79f6", 0x4a}, {&(0x7f0000000600)="6434ea42a91c0c6343ab078349326f0e99d1bfe92dbe7570310165bf7b8267005693c4d6e1706d9828feb3b239af7d401ad303c8f521070680bc5663e37b9f7c0ae479558585497e0c841525c2a8ac441c6feea5959fe555", 0x58}], 0x2, &(0x7f00000006c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x800}}, @hopopts={{0x28, 0x29, 0x36, {0x11, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x58}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000a40)=[{}, {0x1}]}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000b00)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000d00)='GPL\x00', 0x5, 0xe2, &(0x7f0000000d40)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40), 0x2}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24004814) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40044) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x2f00, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0xa, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}}, 0x30040040) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x40000000) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) 3.763838504s ago: executing program 3 (id=1285): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={&(0x7f0000000a80)="d7ce6278cb4a79b25e8cde09b9d28d42e5e288dcd8442e7474c9e33ee341427b5ad60a224ac14b39795c027d9f9e4a8a98f9463db538c5d1e13bb26b2edbef8cbebdba690af32ed4d816196c25170ea746ca255f7e987e0746107bc5be401f2a3049ef2dcc9f5bca60ee1345172df6d0a49d2a31386e573609e60b8fe7962787d9a92b85302663b75896cef1ac52e5e185d7e884207e29775c7c7d3c26bcc7ef329219c5303585fa89b09f12ffb11f61dd755459796be9d12d8342de5d0a21cd21594580552c40aa7a5e5823ca07ac05280d44ef24effe4ecd1fae517d2e7c1854abb2265713c76daacfae5cb179fa654279bd", &(0x7f0000000b80)=""/94, &(0x7f0000000c00)="dd8de87369abb794ed09a41a331e76d4f74468462eebf4b615d27c4fb2551692d11700e1f9daac2a65e7e306318ae665566d29dac212beed91f99eb8652f1514a34d0c22f683db433ba0b6b46abfbc13c76b963659ca6e16c605d794710db181a614075e2681fc6cb842f6ad2080f39983dab7042641e7619c2b63fbfa2e91de2571087aa49724ca1c57e0189b51e97547e3ff7c97a37b5c50e7a1684c550c385c29e782af603a1775dd59a57c35e93abf34", &(0x7f0000000cc0)="5315598e", 0x2, r1}, 0x38) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x6, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@end]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5b, '\x00', r2, 0x0, r1}, 0x94) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e00010a0001e50000000000001b"], 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000100)=0x9, 0x4) (async) sendto$inet6(r6, 0x0, 0x0, 0x4000, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000d40)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x4, &(0x7f0000000e40)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000000e80)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000ec0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0xfffffffffffffd56, 0x10, &(0x7f0000001000), 0x1dd}, 0x48) (async) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) 3.637341739s ago: executing program 1 (id=1286): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000033c0)={'icmp6\x00'}, &(0x7f0000003400)=0x1e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x3, 0xfffffffffffffff9, 0x40, 0xfffffffffffff846], 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000003540)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) 3.474408529s ago: executing program 1 (id=1287): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0x0, 0x4007, 0x0, 0x80000000000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in=@broadcast, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x7502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.371649429s ago: executing program 3 (id=1289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000004400)={&(0x7f0000004240)=[&(0x7f0000000940)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000000980)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f00000009c0)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000000a00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000000a40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8000}, &(0x7f0000000b80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000000bc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000000c00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000000c40)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000000cc0)=@features={{0x4f32494e, 0x6, 0x10, 0x20000000}}, &(0x7f0000000d00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000000d40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000000d80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0xfffffffa}, &(0x7f0000000ec0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000000f00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x4, 0xf662}, {0x8000000000000000, 0x6}, {0x0, 0x5}, {0x5, 0x3ff}, {0x81, 0x1}, {0x0, 0x6}, {0xe3, 0x4}, {0x7, 0x9}, {0x33, 0xffffffffffffffff}, {0xf9d7, 0x5}, {0x2, 0x5}, {0x280, 0x80}, {0x53f2, 0x7}, {0x4, 0x1}, {0x6, 0x81}, {0x1, 0x8}, {0x1f, 0x8}, {0xf7e, 0xdf}, {0x8000000000000001, 0xa185}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x10001}, {0x3, 0xea5}, {0x9, 0x8}, {0x8, 0x5}, {0x4, 0x93b}, {0x5, 0x3}, {0x8, 0xe104}, {0x6, 0x6}, {0xf, 0x2}, {0x6, 0x1}, {0xac, 0x5}, {0x9, 0x3ff}, {0x1, 0x7}, {0x25, 0x361}, {0x7f, 0x5}, {0x3, 0x1300}, {0x7fff, 0x5}, {0x6, 0x9f53}, {0xbb, 0x7}, {0x28789f64, 0xffffffff80000001}, {0xe8, 0xfffffffffffffffb}, {0x1, 0x9}, {0x3, 0x7fffffff}, {0x100000001, 0x7}, {0x7, 0xa}, {0x81, 0x1}, {0x2, 0xe}, {0x3, 0x2}, {0x9, 0x3c}, {0x34b6, 0x10}, {0x7fffffff, 0xecb}, {0x32, 0x7fff}, {0x361, 0x9}, {0x38d4, 0x10001}, {0x4, 0xffffffffffffffff}, {0x8, 0x2}, {0x1, 0x401}, {0x1, 0x9}, {0x100000000, 0x6}, {0x6}, {0x1, 0x100000000}, {0x7fff, 0xe}, {0x5, 0x5}, {0xc, 0x6}, {0xfc00000000000000, 0x4}, {0x1, 0x2e6}, {0x4, 0x2}, {0x0, 0x100000001}, {0x100, 0x2}, {0x2, 0x6}, {0x1, 0x10}, {0xffffffff, 0xb1f9}, {0x7fff, 0x7306}, {0x6, 0x8}, {0x7fffffffffffffff, 0xf}, {0x6, 0xc}, {0x5, 0x67}, {0xc, 0x5}, {0x7, 0x8}, {0x4, 0xf56e}, {0x6, 0x65d}, {0x7fffffffffffffff, 0x1ff}, {0x800, 0xffffffffffffffff}, {0x8, 0xfffffffffffffff9}, {0x0, 0x1}, {0x7fffffffffffffff, 0xec}, {0x6, 0x6}, {0x81, 0x2}, {0x7fff, 0x859}, {0x9, 0x6d}, {0x0, 0x2}, {0x3, 0x6}, {0x7, 0xb}, {0x1cd8000000, 0x8000}, {0x8f66, 0xe6}, {0x4a48d853, 0xfe4}, {0x5, 0x400}, {0xffff, 0x80000000}, {0xa, 0xf}, {0x8000}, {0x3, 0x3}, {0x2, 0x8}, {0x9, 0x39}, {0xfff, 0x7}, {0x5, 0x4}, {0x100000000, 0x7}, {0xffffffffffffffb0, 0x1000}, {0x3, 0x10001}, {0x7, 0x7fffffff}, {0x7, 0x8}, {0x2, 0x901}, {0x80000000, 0x8}, {0x2, 0x5}, {0x8000000000000001, 0x4}, {0x7, 0xe28}, {0xe0, 0xffffffff}, {0x7f, 0x1000}, {0xff, 0x6}, {0x6}, {0x7, 0x100000000}, {0x0, 0xfffffffffffff0ac}, {0xdd8e, 0xbd}, {0x7, 0x1ba}, {0x4, 0x3}, {0x7, 0xb}, {0x9ca, 0x1}, {0x200, 0x7}, {0x400, 0x8000000000000000}, {0xa}, {0x9, 0x2}, {0x8, 0x400}, {0x401, 0x7fffffff}, {0x8001, 0x2}, {0x7ff, 0xab1a}, {0x3, 0x40}, {0x0, 0x8}, {0x0, 0x7}, {0x28469213, 0x4}, {0x8, 0xfff}, {0x1000, 0x8}, {0x5, 0x4}, {0x7fffffff, 0x7}, {0x5, 0x401}, {0x8000000000000001, 0x6}, {0x2, 0x9}, {0xfffffffffffff800, 0xf}, {0x3, 0x6}, {0xe3fb, 0x100}, {0x4, 0x200}, {0x1000, 0x80000001}, {0x8, 0x50}, {0x9, 0x9}, {0xe411, 0x9}, {0x80000001, 0x7}, {0x1161003, 0xfffffffffffffff8}, {0x0, 0x2}, {0xc7e, 0xffffffff80000000}, {0x3e599780, 0x9}, {0x10001, 0x9}, {0x7ff, 0x7}, {0x3, 0xfe}, {0x1, 0x1}, {0x8, 0xfff}, {0x400, 0x400}, {0xa24f, 0x80000001}, {0x101, 0x97}, {0xff, 0xc}, {0xffffffff, 0x1}, {0x200, 0x800}, {0x8, 0x2}, {0x9, 0x8}, {0x0, 0x5}, {0xffffffffffffffff, 0x3}, {0x6, 0x7}, {0x5}, {0x100, 0x1}, {0xe86, 0x10000}, {0x9, 0x4}, {0x7, 0x7}, {0x100000001, 0x7}, {0x0, 0x2}, {0x509, 0x2}, {0x5, 0x100000000}, {0x1, 0xb}, {0xbd, 0x3}, {0x7, 0x5}, {0x100000000, 0x9}, {0x876, 0x9}, {0x6b00, 0x7}, {0x0, 0x6}, {0x6, 0xaa}, {0x2da1, 0x8}, {0x4, 0x800}, {0x401}, {0x3, 0x740000000}, {0xd68e, 0x1}, {0x8}, {0x3, 0xd2}, {0x0, 0x655}, {0x8000000000000000, 0x9b}, {0xffffffffffffff7c, 0xd1}, {0x10000, 0x3}, {0x71cd, 0x7}, {0x75, 0x7fff}, {0xffffffffffffffff, 0xd9}, {0x2, 0x7fffffffffffffff}, {0xfffffffffffffff8, 0x800}, {0x1000, 0xdecf}, {0x3, 0x55e}, {0x7}, {0x5, 0x5}, {0xb, 0x81}, {0x1, 0x8}, {0x401, 0xda}, {0x401, 0x10000}, {0x30000, 0x1}, {0x3ab5, 0x7}, {0x6, 0xff}, {0x8, 0x3}, {0x9c, 0x6}, {0x73983847, 0x7af}, {0x5, 0x8000000000000000}, {0xa44f, 0xc}, {0x3, 0x6}, {0x9a, 0x8}, {0x8, 0x7d13}, {0x3ff, 0x9559}, {0xfffffffffffff1a1, 0xffff}, {0x1000, 0x400}, {0xfffffffffffffff7, 0x3}, {0xd, 0xfffffffffffffff7}, {0x3, 0x2}, {0x200, 0x7f}, {0xffffffffffff7fff, 0x5}, {0x6666, 0x4}, {0xfffffffffffffffe, 0xe}, {0x9, 0xd}, {0xd288, 0x8d26}, {0x7fffffff}, {0x3, 0x400}, {0x2, 0x2}, {0xda, 0x79}, {0x4, 0xfffffffffffffffe}, {0x6, 0x81}, {0x621, 0x1ff}, {0x3, 0x7fffffffffffffff}, {0x8, 0x2}, {0x2, 0x79}, {0xa00, 0x2}, {0xd, 0xfffffffffffffffa}, {0x7, 0x3}, {0x2e2, 0x8}, {0xc9, 0x8}]}, &(0x7f0000001f40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000001fc0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002000)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000002040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000002080)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f00000020c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x180000001}, {}, 0x9}, &(0x7f0000002200)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xa0000000}, {}, 0x8}, &(0x7f0000002340)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1c0000000}}, &(0x7f0000002380)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000002400)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002440)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x16}, &(0x7f0000002580)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f00000025c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000002600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0xfff, 0xbf}, {0x1, 0x8}, {0x5e66}, {0x9, 0x3ff}, {0x101, 0x2}, {0x80, 0x7fff}, {0x951, 0x8}, {0x4, 0x4faa3847}, {0x1, 0x2}, {0x1, 0x58}, {0x8001, 0x5}, {0x2, 0x80000001}, {0x836, 0x4}, {0x9, 0x5}, {0x4dbf, 0x8}, {0xfffffffffffffff6}, {0xda2, 0xff}, {0xfffffffffffffff7, 0xf84}, {0x7, 0x401}, {0x3}, {0xff, 0x2}, {0x8, 0x9}, {0x8, 0x1}, {0x3, 0x9}, {0x46da, 0x8000}, {0x0, 0xffd}, {0xb9, 0x1}, {0x18c, 0xf5}, {0x7, 0x7fffffffffffffff}, {0x6d5, 0xd}, {0xffffffffffff7fff, 0x9}, {0x6, 0x9}, {0x4, 0x8000000000000001}, {0x4, 0x3ff}, {0x5, 0xf}, {0x5, 0x1}, {0xcc, 0x9}, {0xfda, 0x9}, {0x9, 0x7f}, {0x2, 0xfff}, {0x9, 0x9}, {0x526, 0x200}, {0x9, 0x7}, {0x8, 0x100000000}, {0x8, 0xfffffffffffffff7}, {0x6, 0xf6ba}, {0x1, 0xfff}, {0x400, 0x2}, {0x4, 0x5}, {0x3ff, 0x5}, {0x9, 0xfffffffffffffff8}, {0x0, 0x7}, {0xf1, 0xaf9}, {0x190a00000000, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x8}, {0x50, 0x4}, {0x0, 0x6}, {0x4, 0x100000001}, {0x6b75, 0x10001}, {0x0, 0x9}, {0x9, 0x3ff}, {0x800, 0x9}, {0x8, 0x8}, {0x8, 0x6}, {0x2, 0x9}, {0x2, 0x9}, {0x9, 0x1}, {0xc, 0x9}, {0x100000001, 0xffff}, {0x3, 0xe3f}, {0x7, 0xcd4f}, {0x33b, 0x7fffffff}, {0x1, 0x9}, {0x1, 0x3}, {0x1078, 0x100000001}, {0xda23, 0x7fff}, {0x1bf226e0, 0x2}, {0x7, 0x100000001}, {0x8, 0x8}, {0x8}, {0x57, 0x101}, {0x8000000000000000, 0xffffffffffffffff}, {0x7, 0x1}, {0xec, 0x9}, {0xffffffffffffffff, 0xfffffffffffffc01}, {0x8a8, 0x10001}, {0x8, 0x3cb}, {0x7, 0x7ff}, {0x9, 0x7}, {0x8, 0x7}, {0x1, 0x6d4d}, {0x8001, 0x100000000}, {0x5, 0x4}, {0x22, 0x7}, {0x9c, 0x2}, {0x7, 0xffffffffffffffff}, {0x8, 0x8}, {0xe, 0x7}, {0x7, 0x7}, {0x10000, 0x80000001}, {0x4, 0x7}, {0x6, 0x8c0a}, {0x5, 0x7fffffffffffffff}, {0x800, 0x401}, {0x0, 0x7fffffff}, {0x1, 0x7}, {0x3, 0x3}, {0x800, 0x8000000000000001}, {0xfffffffffffffff4, 0x1000}, {0x9, 0x8}, {0x1, 0x1}, {0x9, 0x5}, {0x3, 0x2}, {0xb266, 0x400}, {0x9, 0x5}, {0x3, 0x4}, {0x6, 0xffffffff80000000}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x81, 0x81}, {0x7f}, {0x7, 0x7}, {0xfffffffffffffff7, 0xffffffffffffda49}, {0x8, 0x2}, {0x7f78, 0x7fff}, {0xad21, 0x3ff}, {0xffffffff, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x69d81535}, {0x6, 0x6}, {0xfffffffffffffffa, 0x2}, {0x6, 0x7fffffff}, {0x2, 0xc4}, {0x0, 0x4}, {0xffff, 0x7}, {0xffffffffffffffff, 0x1}, {0x3}, {0x8, 0xc}, {0x1, 0x28}, {0x9, 0x9}, {0x2, 0x5}, {0x6, 0x3b2}, {0x0, 0x8}, {0x9, 0x3}, {0xffffffffffffff01}, {0x4, 0xf3}, {0x100, 0x3}, {0x8001}, {0x6, 0x200}, {0x6, 0x9}, {0x8000, 0xfffffffffffffc01}, {0x9, 0x1}, {0x8, 0x9}, {0x10, 0xabab}, {0x9, 0xe00}, {0x8, 0x5}, {0x800, 0xffffffffffffe6ea}, {0x1, 0x1}, {0x400, 0x9}, {0x4cd3, 0x3c3c}, {0x7, 0x6319c671}, {0x2, 0x9}, {0x5, 0x8000000000000000}, {0xffffffff, 0x476}, {0x940, 0x4}, {0x8, 0x7fff}, {0x94}, {0x426d550e, 0x7}, {0x7, 0x3}, {0xfffffffffffffff8, 0x10000}, {0x2, 0x4}, {0xec9, 0x2}, {0x0, 0x7f}, {0x5}, {0x6, 0x9}, {0x0, 0x5}, {0x800, 0x6}, {0xf9ba, 0xfffffffffffffff8}, {}, {0x0, 0x3834e0a6}, {0x1b22, 0x7}, {0xfffffffffffffffd, 0x81}, {0xffffffffffffffff, 0xa}, {0xf369, 0xfc07}, {0x9, 0x5}, {0x2, 0x3}, {0x3}, {0x1, 0x8000000000000001}, {0x0, 0x8}, {0x0, 0x80000000}, {0x200, 0x100000000}, {0xf28, 0x6}, {0x3, 0x7ff}, {0x80000000, 0x101}, {0x1000}, {0x8, 0x4}, {0x7c, 0xc}, {0x8, 0xd4}, {0x4, 0x7}, {0xe, 0x1}, {0x7, 0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x10}, {0x91, 0x81}, {0x364b, 0x80000000}, {0x85b1, 0x3}, {0xff, 0x7ff}, {0x6, 0xaec4}, {0xe, 0x9169}, {0x0, 0xfffffffffffffff7}, {0x5, 0x4}, {0x3, 0x4}, {0xff, 0x6}, {0x2}, {0x98a, 0x5}, {0x1, 0xfb}, {0x2, 0x4}, {0x8, 0x80000001}, {0x9, 0x5}, {0x4, 0x6}, {0x9, 0x2}, {0xa8a2, 0xfffffffffffffff9}, {0x9, 0x9}, {0x3, 0xffffffff}, {0x8, 0xbcb6}, {0x81, 0x4}, {0x7ff, 0x8}, {0xef7, 0xc}, {0x4, 0x8}, {0x101, 0xfff}, {0x7, 0x9}, {0x7ff, 0x80}, {0x1, 0x800}, {0x3fe000000, 0x5}, {0x8, 0x7fffffff}, {0x7, 0x7f}, {0x3, 0xc}, {0x3, 0x9}, {0x1, 0x80}, {0xf9b1, 0x9}, {0x86, 0x3}, {0x7fffffffffffffff, 0xfffffffffffffffe}, {0x1, 0x4}, {0x6, 0x5}, {0x8, 0x3}, {0x7, 0x400}, {0x36, 0xffffffffffffff80}, {0x10000, 0xbe}, {0x4af, 0x5}, {0x80, 0x7}]}, &(0x7f0000003640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x7}, &(0x7f0000003780)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f00000037c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x100}, &(0x7f0000003900)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x8}, &(0x7f0000003a40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000003a80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003ac0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000003b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x9}, &(0x7f0000003c40)=@label={{0x4f32494e, 0x4, 0x10, 0x140000000}}, &(0x7f0000003cc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000003d00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000003d40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000003dc0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000003e00)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000003e40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}}, &(0x7f0000003f80)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000004000)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000004040)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x54d4}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f00000041c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x180000001}}, &(0x7f0000004200)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}], 0x32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2821f761, 0x2, 0x71b, 0x8}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x8006) syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40500000000000071101300000000007a050000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x5, 0xfd90, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0x366, 0x10, &(0x7f0000000900), 0x2b2}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095"], &(0x7f0000000540)='GPL\x00', 0x4}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffff7fff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008001) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) 3.325864466s ago: executing program 4 (id=1290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "60ec6972"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 3.200629547s ago: executing program 1 (id=1291): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002180)=@broute={'broute\x00', 0x20, 0x5, 0x5f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001a80], 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"]}, 0x66f) r1 = socket(0x2d, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r4, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r4, 0x10, 0x1, 0x4, 0x7, {{0x32, 0x4, 0x3, 0x5, 0xc8, 0x66, 0x0, 0x0, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@timestamp={0x44, 0x18, 0x1f, 0x0, 0x4, [0x0, 0x9, 0x200, 0xff, 0x7]}, @timestamp_addr={0x44, 0x24, 0x94, 0x1, 0x5, [{@rand_addr=0x64010100, 0x5}, {@multicast2, 0x1000}, {@multicast2, 0x8}, {@rand_addr=0x64010102, 0xfffffffe}]}, @rr={0x7, 0x2b, 0x6d, [@private=0xa010101, @local, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast, @broadcast, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xc4, 0x3, 0xd, [{@private=0xa010102, 0xfffffffe}, {@local, 0x6}, {@loopback, 0x7ff}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xff}, {@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x3}, {@loopback, 0xe000000}]}]}}}}}) 3.154953764s ago: executing program 6 (id=1292): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r0, 0x0, 0x21, &(0x7f0000000b80)=ANY=[], 0x14) (async) setsockopt$inet_msfilter(r0, 0x0, 0x21, &(0x7f0000000b80)=ANY=[], 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={0x28, r4, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={0x28, r4, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x224, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x3bd6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x3, 0x1]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x1, 0x0, 0x200, 0x1]}, @NL80211_ATTR_FRAME={0x1c8, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x0, 0x1}}, 0x9, @default, 0xc, @val={0x0, 0xe, @random="fe9dd7a0988638fec25db035d5fd"}, @val={0x1, 0x6, [{0x6c}, {0x4}, {0x18, 0x1}, {0xb}, {0x6}, {0x24, 0x1}]}, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x8, 0xd8, 0x5, 0xa9}}, @void, @val={0x5, 0xbf, {0x9, 0x1b, 0x7, "22ab3332e26b1564d8782ef063c9692626b42e7b4a01addbd2ec525874a58626be0f92d4b5f96ca7243e300ebc182b3223f34495ce441b463ae95d88b7e14da09961025c00d3eb7c8a905dc7a828142df91aeae51addf5d9e43a65ebc904f08d5e94c8c71b2b5c49c05f56e848da9db50354c414f58736ce7a0519b13c31043660394d467aff7fae7c1c272b1331ee5aeef7eafa28f412578d48e9149223aca412d3a4ec4efaec23d9109519236a69deb9cc80420f09dfa8b1946fb0"}}, @val={0x25, 0x3, {0x1, 0x78, 0x40}}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x1}}, @void, [{0xdd, 0x45, "8611ab395afd213bc84b890059117844c927144813eac3af7c09d35c2afd08fded199cd301bdef583812e0beff5e23e4f714520c89b6b1f64957055ecda61da66840ab12db"}, {0xdd, 0x65, "96af690242921bc7e52acab9ed3194e39703749f857d63de407921c2fd776d1dd1f9e9e69ca4c14d5f5ed65489ca643d2f793cdc377d954b60ad37e3db86757836f308540703eeb7612b7946659a7036ac2e0d7f95a538aa44efba5d1762735e4be6f8ddae"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x41}, 0x20000001) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3b6, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x2000000, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0xe, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x2000000, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0xe, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000140)={0x1, 0x6a, "8fcaa664b8b9e362d71c14d57a32b4cef150de2cd402e95335f48337f6a800991acaa08c3bba9942cc1c65640da64c11ddac1ab80114f4bfc95a46517272ec21e498266305a754c53f36a0b880fd39b220fd2f08fc416fc8fc121638d74fcc2fee485accdaa5a7d3e712"}, &(0x7f0000000a80)=0x72) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000ac0)={r11, @in6={{0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x7e20, 0x1, 0x4, 0x4000000, 0xe, 0x0, 0x80}, 0x9c) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000fbffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000fbffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000bc0)='cgroup.stat\x00', 0x275a, 0x0) preadv(r13, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/180, 0xb4}], 0x1, 0x6, 0x7) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000d00)={r11, 0x8000}, &(0x7f0000000d40)=0x8) (async) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000d00)={r11, 0x8000}, &(0x7f0000000d40)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000000d80)={r14, @in6={{0xa, 0x4e22, 0x5, @local, 0x8}}, 0x10000, 0x2, 0x1000, 0xf, 0x1, 0xe6f, 0x7}, &(0x7f0000000e40)=0x9c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3.112727796s ago: executing program 4 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'dvmrp1\x00', 0x200}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x800, {{@in6=@private1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x1, 0x0, 0x0, 0xff, 0x2, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@multicast2, 0x3502, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in=@empty, 0x4d5, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x1bc}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001200)='H', 0x1}], 0x1}, 0x0) (async) bind$bt_hci(r4, &(0x7f0000001240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r4, &(0x7f0000001280)=ANY=[], 0x6) (async) r5 = socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x840) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f00000000c0), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r11 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x13, 0x4, &(0x7f0000001100)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000001140)='GPL\x00', 0x4}, 0x90) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) (async) sendmsg$kcm(r11, &(0x7f0000000500)={&(0x7f0000000540)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r11, &(0x7f0000000680)={&(0x7f00000006c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) recvmsg$unix(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r13, 0xff03, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0x2, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 2.773304061s ago: executing program 3 (id=1294): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x7fff, @loopback, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2208}}], 0x1, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) (async) listen(r6, 0x7d4165c9) listen(r5, 0x40000b) (async) listen(r5, 0x40000b) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x10000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0x0, 0x0, 0x42, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11d60450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000002400)={0xa, 0x4e22}, 0x1c) writev(r9, &(0x7f0000002440)=[{&(0x7f0000002480)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) shutdown(r0, 0x2) 2.555338952s ago: executing program 1 (id=1295): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB='\v\x00'], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001c80)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001cc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffc53}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x50}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000001000000e27f00000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r6, 0x0, 0x0, 0x4}, 0x20) sendmmsg(r1, &(0x7f0000000480), 0x4000000000001f2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x1000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc044) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x24, r11, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r12}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 2.547735186s ago: executing program 6 (id=1296): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180b00004f0c000000000000fcffffff9d161000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvfrom(r7, &(0x7f0000000180)=""/58, 0x3a, 0x20, &(0x7f00000002c0)=@isdn={0x22, 0xc5, 0x5, 0xc0, 0x41}, 0x80) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000ff0100000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000007900e80200000000180000000000001100000000000000009500000000000000d50a00000000000095"], &(0x7f0000000880)='GPL\x00', 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r6, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000980)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r10, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x32}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0xb, 0x8, 0x0, 0x218d8, r8, 0xe, '\x00', r9, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x7}, 0x50) 2.301246836s ago: executing program 3 (id=1297): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000000)='syzkaller1\x00', 0x8040, &(0x7f0000000040)={@align=0x200000000000000, {0x0, 0x5, 0x5, 0xb819}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x1}, 0x4, &(0x7f0000000400)=[{0x1, 0x6800000, &(0x7f0000000100)=']#]*.}.\x00', &(0x7f0000000140)="c8bfd083cd45dd0baa2710a9ee57716b3a6a06f8e2d1a09e69f7610d63cb8a1ec316621e6bd7cc", 0x27}, {0x2, 0x3, &(0x7f0000000180)='syzkaller1\x00', &(0x7f00000001c0)="869058985219b46c1d0e16c370b30e2ae310adcec60e2dc8a6342ea3e96b44ad6a314a41dd5dd28309de400ed974b5bd970ff580df0bfdfb8ac0ffa3935f378b481fad6a7670a760b954413a2f033df9d079e5c1f6f96f6165be5a0bb8f6959eb4c9", 0x62, 0x10}, {0x2, 0xfffffff7, &(0x7f0000000240)='^\\:*#(-,)\x00', &(0x7f0000000280)="1766c66249421eda3208d0235d94639862a13c7fe70a4d2af93f8d2886390b53e301b901712cd9d3d2d67d715195be53b24cd0a322c60420e4e3e35553d8bf3e1e7dc0ce07e59d37d8d18309f756221ea527dfb324c28683dcbc5ec1faf47080895e955aabe9d449616f69e8da7d7bd346d5693f993d9f2776020f8ef94885427b5ad68707fdf300e225e004f7c2a4032f6a25a5216f3bec88de6cc607a897a5abe3055270ff76b333e0eb8398eb355923167ae01a22a4c3ecbbe5c8ca3193777210160a31c3b4e83bf047", 0xcb, 0xa}, {0x3, 0x6, &(0x7f0000000380)='-\x00', &(0x7f00000003c0)}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2c, r2, 0x5, 0x74bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3884918390d26f2f09f3064e0047f5e754fc8ac5f685c12f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fa9688ae76ffb46e91f13622f035c6c28ddf2fcb78487d4d"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x45) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x40241, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000008c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000900)=0x2, 0x4) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000940)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000980)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16, 0x200}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x60c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x5f8, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0x61a) 2.093692097s ago: executing program 4 (id=1298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="99", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r0, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1.683211362s ago: executing program 5 (id=1299): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r1, 0x802d21512708ad7b, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4040034) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/185, 0x32, 0xb9, 0x1}, 0x1f) 1.465478291s ago: executing program 4 (id=1300): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000001a00)=""/4118, &(0x7f0000000080)=0xffffffffffffff8a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012020, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x99, &(0x7f0000000740)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0x83, 0x0, &(0x7f0000000880)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000940), &(0x7f0000000980)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 1.329727972s ago: executing program 6 (id=1301): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x634c, 0x4, 0x3, 0x0, r2}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x47, "28a1d8e7428814a26a0ecc262f62dda91d478bbba20d4bdf9d364da10e87410e5f28fbd21d86e2df3a616f5f4196cb1a2c7a2b09e1871e619a357baf20e225bf2aec5ada654486"}, &(0x7f00000001c0)=0x4f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1.242731702s ago: executing program 5 (id=1302): r0 = socket(0x11, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbffffffffffffffffb9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0xea}, {&(0x7f00000004c0)=""/4096, 0x94}], 0x2}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffb350}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f00000016c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r4, 0x5, 0xb68, 0x0, &(0x7f0000001780)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r5, 0x84, 0x82, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f00000001c0)=0xfffffffc, 0x4) close(0x4) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4014011) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000180)=0x1ff, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r9, 0x1, 0xe5, 0x6, @broadcast}, 0xd4, &(0x7f0000000240)=[{&(0x7f0000000340)="02010200002d3922ff65b4355e953d23d254f0000000892f", 0x18}, {&(0x7f0000000380)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a77ff680c590257a0641572c0053e3fe684c9c9678f72a6ff270a8989633cbe781bf372d0d00610536d2812ab7e6573ede271134fd2d6fafaf98774b02f07f469a31e17fdb130f9eb7d25d4c5963fedae765302b73cee41c6abc3de9877b0a0e7bb115d37aa2fa3b6c727ecf5ff133e998474e11a6", 0xff87}], 0x2}, 0x5) 1.165796575s ago: executing program 3 (id=1303): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.016753s ago: executing program 4 (id=1304): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000005140)={&(0x7f0000005180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200310000000c0003"], 0xcd0}, 0x1, 0x0, 0x0, 0x894a02c83706212}, 0x4000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x1ff, 0x5c, &(0x7f0000000100)=""/92, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000005500)=[{0x0, 0x3, 0x9}, {0x0, 0x1, 0x2, 0xa}, {0x3, 0x1, 0x7, 0x1}, {0x3, 0x2, 0xe, 0xb}, {0x5, 0x3, 0x0, 0x4}, {0x1, 0xffffffff, 0x10, 0x8}, {0x3, 0x3, 0x8}, {0x2, 0x2, 0x4000005, 0x4}], 0x10, 0xf}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000042000100020000000000000003010000c80000001200010000112233445566778899aabb080000000400028018000380140006800800010001000000080002"], 0x48}}, 0x0) r3 = socket(0x2d, 0x2, 0x0) setsockopt(r3, 0x11d, 0x1, &(0x7f0000000480)="01000000", 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) sendto(r3, 0x0, 0x42, 0x40040, &(0x7f0000000500)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x4, 0x7, @vifc_lcl_ifindex=r5, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'lo\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="6800000000090504000000000000000002000000090001007379002c00000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379300008000200000000fe070003000000001e", 0x68}], 0x1}, 0x4800) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005240), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000052c0)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005380), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000054c0)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005480)={&(0x7f00000053c0)={0x84, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r10 = socket(0x2d, 0x2, 0x0) recvmmsg(r10, &(0x7f00000006c0)=[{{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000980)=""/253, 0xfd}], 0x2}, 0xffe00}, {{&(0x7f0000000a80)=@sco, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/193, 0xc1}], 0x1, &(0x7f0000000c40)=""/54, 0x36}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000000dc0)=""/87, 0x57}, {&(0x7f0000000e40)=""/221, 0xdd}, {&(0x7f0000005580)=""/63, 0x3f}], 0x4, &(0x7f0000000f80)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001fc0)=""/126, 0x7e}, {&(0x7f0000002040)=""/132, 0x84}, {&(0x7f0000002100)=""/144, 0x90}, {&(0x7f00000021c0)=""/85, 0x55}], 0x4, &(0x7f0000002240)=""/234, 0xea}, 0x1}, {{&(0x7f0000002340)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002440)=""/5, 0x5}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/72, 0x48}, {&(0x7f0000003500)=""/136, 0x88}, {&(0x7f00000035c0)=""/72, 0x48}, {&(0x7f0000003640)=""/87, 0x57}], 0x6}, 0x1179}, {{&(0x7f00000036c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003780)=""/84, 0x54}, {&(0x7f0000003800)=""/74, 0x4a}, {&(0x7f0000003880)=""/244, 0xf4}], 0x3}, 0x9}, {{&(0x7f0000003980)=@x25={0x9, @remote}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003a40)=""/115, 0x73}, {&(0x7f0000003ac0)=""/91, 0x5b}], 0x2, &(0x7f0000003b40)=""/212, 0xd4}, 0x5}, {{&(0x7f0000003c40)=@hci, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/212, 0xd4}, {&(0x7f0000004e40)=""/113, 0x71}, {&(0x7f0000004ec0)=""/229, 0xe5}, {0xffffffffffffffff}], 0x5, &(0x7f0000004fc0)=""/61, 0x3d}, 0x7fffffff}], 0x8, 0x10000, 0x0) bind(r10, &(0x7f0000005000)=@generic={0x2d, "00000100000008010800"}, 0x80) r11 = socket(0x2d, 0x2, 0x0) sendto(r11, 0x0, 0x0, 0x0, &(0x7f0000005080)=@generic={0x2d, "00000100000008010800"}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, 0x0, 0x25, 0x10, @void}, 0x10) 985.373147ms ago: executing program 1 (id=1305): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(0x3) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 748.679025ms ago: executing program 6 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="09000000010000", 0x7) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800dd8d00000000009ef60cd60000000000000600000000100016800c0008800800018004000300"], 0x34}}, 0x0) 745.854343ms ago: executing program 1 (id=1307): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000008000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1499, 0x503, 0x0, 0x0, 0x0, 0x0, 0xe3d389184a7c3303, 0xffff80fe}, 0x50) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000f80)=0x5, 0x4) bind$inet6(r2, &(0x7f0000001580)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESHEX=r2], 0x60}}, 0x8001) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000ec0)={0xffffffffffffffff, 0x0, &(0x7f0000000f00)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000f40)={0xffffffffffffffff, &(0x7f0000000f80), 0x0, 0x2}, 0x20) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001740)=[{&(0x7f0000001040)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f052", 0xf1}, {&(0x7f00000016c0)="593df29f4167fbd554faa339c58db2bfc1dc6da47af8ed1260ec583770fba41ef2c750e31de72dd6a166738e57530393d7ece2998dcb7086f19467691d7fd92ecf4402d7c082206029a28c0d8d944228e2d6ed3c30b9708879230b55ef4ec24f45e54dad740b6c16670adde18e6f46ad17261571ab88d2a950a9fb7bb7fa", 0x7e}], 0x2, 0x1) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000001180)=0x9, 0x65) splice(r1, 0x0, r2, 0x0, 0x800, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x5, 0x988, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000002c0], 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x62, 0x88f7, 'macvlan0\x00', 'geneve1\x00', 'team_slave_1\x00', 'ip6gre0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff, 0x7f, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0xf0, 0x168, [], [@common=@ERROR={'ERROR\x00', 0x20, {"daae02c769d924d430c63f1b33d232a3dc860e418a98e44cc6b97b34fdf0"}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x9, 0x5, 0x0, 0x0, "1c750c512301d12fb9512ca7c8d27c253bf2d0d6cbd44ee8506f0bef197b10119733fa17fb30e134e34c1235c7f680813a389824805af7e595631222495dc8e6"}}}}, {0x11, 0x11, 0x890d, 'pimreg\x00', 'batadv0\x00', 'macvlan0\x00', 'macvtap0\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff], @random="a64ed03b0fee", [0xd436d4426ef57a7f, 0x7f, 0x0, 0xff, 0x0, 0xff], 0x0, 0xb0, 0x210, 0x288, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x8, 0x83, 0x3, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10, 'system_u:object_r:cpu_online_t:s0\x00'}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@nflog={'nflog\x00', 0x50, {{0x4b, 0xb80, 0x401, 0x0, 0x0, "e17dee5e5f48313ddebb690a5eb28c96adfed40d8b2bca327ff707982659530ade1abdc36f410ebc31c868d473b422e4ce6e923092a69cb2af3517460c447ce4"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x1, 0x9300, 'syzkaller0\x00', 'vxcan1\x00', 'veth0_vlan\x00', 'veth0_to_hsr\x00', @broadcast, [0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0xe0, 0xe0, 0x110, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x401, {0xfffffffffffffff5}}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x11, 0x5, 0xd, 'macvlan1\x00', 'macvlan0\x00', 'macvlan0\x00', 'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x101], @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x198, 0x1e8, 0x230, [@comment={{'comment\x00', 0x0, 0x100}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x4, {0x267}}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x8, 0x6, {0x6bd8228}}}}}, {0x3, 0x48, 0x8103, 'veth1_virt_wifi\x00', 'wg0\x00', 'pimreg1\x00', 'pimreg\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x120, 0x198, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x7, 0x5, 0x1, 0x0, "13b01344d201c48183156cf8ca1b693b9fb1bb2eec10138ce7c551cd3ff6624f34ec204111d68ab7e42b910008bf0826e350f4b3e1f050b37c150a5918c9153d"}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x8, 0x5, 0x0, 0x0, "27ca0182c0c1876bfe072ce2b096fc05b69c9ddfc3e1d54f2517f7278abbfc9c1e272e830420a7b9df70f1b70eb91154e72838245b1e7fdc94a876ee85ccee69"}}}}]}]}, 0xa00) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @private=0xa010101}], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000001240)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x6, 0x0, 0x0, 0x574aca18db6b83aa, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xbf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x94) listen(r6, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000d00)={&(0x7f0000000d40)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="b2", 0x1}], 0x1, &(0x7f0000000e00)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) 684.44086ms ago: executing program 3 (id=1308): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000440)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 338.621378ms ago: executing program 6 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa8880000000000000000000014387987ad117fda5700000005201d0001000000"], 0x44}}, 0x0) 56.307932ms ago: executing program 6 (id=1310): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 0s ago: executing program 5 (id=1311): r0 = bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000002c0)={0x1d, r3}, 0x10) (async, rerun: 32) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@arena={0x21, 0x0, 0x0, 0x25, 0x20400, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x9, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x2, 0x3, 0x0, 0x8, 0x50, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x41}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbb}], &(0x7f0000000240)='syzkaller\x00', 0x4e28, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xe, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r5, r0, r0], &(0x7f0000000480)=[{0x4, 0x2, 0x3, 0x4}, {0x0, 0x1, 0xb, 0x6}, {0x0, 0x2, 0x5, 0x6}], 0x10, 0x5}, 0x94) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000106004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 65.350485][ T5600] cgroup: Unknown subsys name 'net' [ 65.484275][ T5600] cgroup: Unknown subsys name 'cpuset' [ 65.487035][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.825398][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.981079][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.983807][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.004856][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.007548][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.008188][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.008704][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.010043][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.010545][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.012036][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.013005][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.013312][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.014643][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.015501][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.018216][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.019347][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.032139][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.033087][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.037936][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.038517][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.039755][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.049348][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.049849][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.051514][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.052143][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.054986][ T4933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.919082][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.934274][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.948893][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.951749][ T5615] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.958834][ T5610] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.994647][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.015309][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.405254][ T5611] infiniband rxe0: set active [ 70.405273][ T5611] infiniband rxe0: added rxe_eth0 [ 70.455544][ T5611] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.455579][ T5611] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.455611][ T5611] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.478826][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.514991][ T5611] RDS/IB: rxe0: added [ 70.515336][ T5611] smc: adding ib device rxe0 with port count 1 [ 70.515415][ T5611] smc: ib device rxe0 port 1 has no pnetid [ 70.560114][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.592838][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.706070][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.913651][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.051959][ T5624] Bluetooth: hci1: command tx timeout [ 71.143549][ T5624] Bluetooth: hci3: command tx timeout [ 71.143799][ T4933] Bluetooth: hci4: command tx timeout [ 71.143912][ T5624] Bluetooth: hci0: command tx timeout [ 71.143921][ T4933] Bluetooth: hci2: command tx timeout [ 71.255219][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.275819][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.276680][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.276821][ T5613] bridge_slave_0: entered allmulticast mode [ 71.278875][ T5613] bridge_slave_0: entered promiscuous mode [ 71.297054][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297117][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.366096][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.366268][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.366792][ T5613] bridge_slave_1: entered allmulticast mode [ 71.368766][ T5613] bridge_slave_1: entered promiscuous mode [ 71.536497][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.540723][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.564114][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.564477][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.564593][ T5615] bridge_slave_0: entered allmulticast mode [ 71.566541][ T5615] bridge_slave_0: entered promiscuous mode [ 71.569672][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.569771][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.569883][ T5610] bridge_slave_0: entered allmulticast mode [ 71.573121][ T5610] bridge_slave_0: entered promiscuous mode [ 71.578695][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.626694][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.626791][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.627184][ T5615] bridge_slave_1: entered allmulticast mode [ 71.628991][ T5615] bridge_slave_1: entered promiscuous mode [ 71.659370][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.659468][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.659589][ T5610] bridge_slave_1: entered allmulticast mode [ 71.663497][ T5610] bridge_slave_1: entered promiscuous mode [ 71.777368][ T5613] team0: Port device team_slave_0 added [ 71.795751][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.803589][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.806319][ T5613] team0: Port device team_slave_1 added [ 71.839602][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.857145][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.871701][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.872896][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.873292][ T5612] bridge_slave_0: entered allmulticast mode [ 71.875725][ T5612] bridge_slave_0: entered promiscuous mode [ 71.929198][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.929213][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.929232][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.931633][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.931730][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.931846][ T5612] bridge_slave_1: entered allmulticast mode [ 71.933591][ T5612] bridge_slave_1: entered promiscuous mode [ 71.939179][ T5615] team0: Port device team_slave_0 added [ 71.947615][ T5615] team0: Port device team_slave_1 added [ 71.986044][ T5610] team0: Port device team_slave_0 added [ 72.002556][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.002568][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.002590][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.004018][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.004029][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.004049][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.008525][ T5610] team0: Port device team_slave_1 added [ 72.052858][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.052872][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.052892][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.069334][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.115623][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.154809][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.154824][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.154844][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.166248][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.233386][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.233401][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.233423][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.327878][ T5612] team0: Port device team_slave_0 added [ 72.342100][ T5613] hsr_slave_0: entered promiscuous mode [ 72.343146][ T5613] hsr_slave_1: entered promiscuous mode [ 72.354650][ T5615] hsr_slave_0: entered promiscuous mode [ 72.355633][ T5615] hsr_slave_1: entered promiscuous mode [ 72.356355][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 72.356428][ T5615] Cannot create hsr debugfs directory [ 72.359149][ T5612] team0: Port device team_slave_1 added [ 72.462442][ T5610] hsr_slave_0: entered promiscuous mode [ 72.463015][ T5610] hsr_slave_1: entered promiscuous mode [ 72.463424][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.463441][ T5610] Cannot create hsr debugfs directory [ 72.469152][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.469164][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.469180][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.528686][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.528702][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.528723][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.771378][ T5612] hsr_slave_0: entered promiscuous mode [ 72.771957][ T5612] hsr_slave_1: entered promiscuous mode [ 72.772357][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 72.772374][ T5612] Cannot create hsr debugfs directory [ 73.019511][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.035659][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.036675][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.041759][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.060238][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.070260][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.089047][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.098953][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.132537][ T5617] Bluetooth: hci1: command tx timeout [ 73.202673][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.206912][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.207557][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.211450][ T5624] Bluetooth: hci3: command tx timeout [ 73.211608][ T5617] Bluetooth: hci2: command tx timeout [ 73.213517][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.225223][ T5624] Bluetooth: hci4: command tx timeout [ 73.225296][ T5617] Bluetooth: hci0: command tx timeout [ 73.251802][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.258737][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.283922][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.286192][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.325661][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.325830][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.325955][ T5611] bridge_slave_0: entered allmulticast mode [ 73.327656][ T5611] bridge_slave_0: entered promiscuous mode [ 73.356035][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.356189][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.356310][ T5611] bridge_slave_1: entered allmulticast mode [ 73.357658][ T5611] bridge_slave_1: entered promiscuous mode [ 73.404661][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.426375][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.456554][ T5611] team0: Port device team_slave_0 added [ 73.469941][ T5611] team0: Port device team_slave_1 added [ 73.497806][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.508696][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.535117][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.535132][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.535152][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.535742][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.538655][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.574672][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.574686][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.574707][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.634442][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.654195][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.654982][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.657668][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.667980][ T5611] hsr_slave_0: entered promiscuous mode [ 73.669617][ T5611] hsr_slave_1: entered promiscuous mode [ 73.670304][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 73.670321][ T5611] Cannot create hsr debugfs directory [ 73.817352][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.819997][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.852439][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.855522][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.856326][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.858335][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.859169][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.897460][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.944478][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.951726][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.039295][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.059089][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.072189][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.075054][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.075672][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.078395][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.079989][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.086263][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.092663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.092914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.128293][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.144659][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.153352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.153453][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.179168][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.179279][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.208251][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.208336][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.274930][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.328309][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.376820][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.376878][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.435859][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.435917][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.467042][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.548595][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.586304][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.586539][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.608037][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.608132][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.637418][ T5610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.637432][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.695025][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.776234][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.806279][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.806336][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.849138][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.849196][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.217422][ T5617] Bluetooth: hci1: command tx timeout [ 75.293449][ T5617] Bluetooth: hci0: command tx timeout [ 75.294105][ T5617] Bluetooth: hci4: command tx timeout [ 75.294129][ T5617] Bluetooth: hci2: command tx timeout [ 75.294149][ T5617] Bluetooth: hci3: command tx timeout [ 75.400274][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.539140][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.733377][ T5615] veth0_vlan: entered promiscuous mode [ 75.765846][ T5615] veth1_vlan: entered promiscuous mode [ 75.914848][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.917021][ T5615] veth0_macvtap: entered promiscuous mode [ 75.955829][ T5615] veth1_macvtap: entered promiscuous mode [ 76.036935][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.058493][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.065817][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.150203][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.178612][ T5610] veth0_vlan: entered promiscuous mode [ 76.191163][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.191312][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.191348][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.191379][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.240226][ T5610] veth1_vlan: entered promiscuous mode [ 76.279265][ T5613] veth0_vlan: entered promiscuous mode [ 76.325801][ T5612] veth0_vlan: entered promiscuous mode [ 76.337734][ T5613] veth1_vlan: entered promiscuous mode [ 76.344269][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.344287][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.379418][ T5612] veth1_vlan: entered promiscuous mode [ 76.433699][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.433718][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.435886][ T5610] veth0_macvtap: entered promiscuous mode [ 76.485850][ T5611] veth0_vlan: entered promiscuous mode [ 76.486561][ T5613] veth0_macvtap: entered promiscuous mode [ 76.489446][ T5610] veth1_macvtap: entered promiscuous mode [ 76.525905][ T5613] veth1_macvtap: entered promiscuous mode [ 76.546606][ T5611] veth1_vlan: entered promiscuous mode [ 76.564321][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.568067][ T5612] veth0_macvtap: entered promiscuous mode [ 76.601887][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.610247][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.629257][ T5612] veth1_macvtap: entered promiscuous mode [ 76.673937][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.700846][ T1242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.705730][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.707689][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.753580][ T5611] veth0_macvtap: entered promiscuous mode [ 76.769369][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.797972][ T5611] veth1_macvtap: entered promiscuous mode [ 76.806465][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.806706][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.807077][ T1242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.807113][ T1242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.807142][ T1242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.872605][ T1242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873847][ T1242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873886][ T1242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873919][ T1242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873949][ T1242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873981][ T1242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874012][ T1242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.993002][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.993023][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.039078][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.068840][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.142448][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.142466][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.164728][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.164747][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.166876][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.203805][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.243251][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.291016][ T5624] Bluetooth: hci1: command tx timeout [ 77.296856][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.296873][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.369721][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.369739][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.371087][ T5624] Bluetooth: hci3: command tx timeout [ 77.371113][ T5624] Bluetooth: hci2: command tx timeout [ 77.371132][ T5624] Bluetooth: hci4: command tx timeout [ 77.371151][ T5624] Bluetooth: hci0: command tx timeout [ 77.477960][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.477977][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.541203][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.545031][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.545048][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.664880][ T5842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.669236][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.689176][ T5842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.701407][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.701423][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.703182][ T5840] Zero length message leads to an empty skb [ 78.035367][ T5857] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 78.134496][ T5859] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12'. [ 78.134518][ T5859] nbd: illegal input index 65508 [ 78.139341][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 78.163894][ T5857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.210852][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 78.222372][ T5861] bond1 (unregistering): Released all slaves [ 78.394612][ T5875] Bluetooth: MGMT ver 1.23 [ 78.396260][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 78.464146][ T5880] bridge_slave_0: mtu less than device minimum [ 78.658663][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 78.687887][ T5897] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 78.691904][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 78.697641][ T5897] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.698475][ T5897] IPv6: NLM_F_REPLACE set, but no existing node found! [ 78.741330][ T5890] can: request_module (can-proto-0) failed. [ 78.796788][ T5899] ipt_REJECT: ECHOREPLY no longer supported. [ 78.870721][ T5903] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 78.965525][ T5906] netlink: 'syz.1.29': attribute type 32 has an invalid length. [ 79.098431][ T5916] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.806592][ T5958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.187352][ T5973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.193953][ T5973] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 80.583578][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.584268][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.699446][ T5993] netlink: 'syz.3.56': attribute type 83 has an invalid length. [ 80.846208][ T5993] veth3: entered promiscuous mode [ 81.080343][ T6010] xt_l2tp: invalid flags combination: 8 [ 81.127726][ T6017] xt_l2tp: invalid flags combination: 8 [ 81.251989][ T6021] Bluetooth: hci0: unsupported parameter 5134 [ 81.252011][ T6021] Bluetooth: hci0: unsupported parameter 8192 [ 81.252046][ T6021] Bluetooth: hci0: unsupported parameter 5134 [ 81.252057][ T6021] Bluetooth: hci0: unsupported parameter 8192 [ 82.439184][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.265835][ T6025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.555183][ T6104] xt_hashlimit: size too large, truncated to 1048576 [ 84.611757][ T6106] syzkaller1: entered promiscuous mode [ 84.611778][ T6106] syzkaller1: entered allmulticast mode [ 84.694822][ T6113] openvswitch: netlink: Duplicate key (type 6). [ 84.804391][ T6115] __nla_validate_parse: 12 callbacks suppressed [ 84.804410][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.83'. [ 84.959541][ T6131] sctp: [Deprecated]: syz.2.88 (pid 6131) Use of int in max_burst socket option. [ 84.959541][ T6131] Use struct sctp_assoc_value instead [ 85.148872][ T6134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.90'. [ 85.196462][ T6144] hsr0: entered allmulticast mode [ 85.196483][ T6144] hsr_slave_0: entered allmulticast mode [ 85.196498][ T6144] hsr_slave_1: entered allmulticast mode [ 85.202164][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 85.217536][ T6144] hsr_slave_0: left promiscuous mode [ 85.226388][ T6144] hsr_slave_1: left promiscuous mode [ 85.256289][ T6144] hsr0 (unregistering): left allmulticast mode [ 85.576646][ T6158] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 86.002879][ T6198] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 86.156817][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.156976][ T6200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.157619][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.157736][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.263957][ T6209] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.657587][ T1203] cfg80211: failed to load regulatory.db [ 88.896909][ T6190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.897059][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 89.082952][ T6228] openvswitch: netlink: IP tunnel dst address not specified [ 89.155763][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 89.239853][ T6231] netlink: 'syz.4.118': attribute type 3 has an invalid length. [ 89.254400][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 89.254418][ T6237] netlink: 2 bytes leftover after parsing attributes in process `syz.4.118'. [ 89.266569][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 89.302311][ T6238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.119'. [ 89.302333][ T6238] netlink: 43 bytes leftover after parsing attributes in process `syz.3.119'. [ 89.302346][ T6238] netlink: 'syz.3.119': attribute type 6 has an invalid length. [ 89.302357][ T6238] netlink: 'syz.3.119': attribute type 5 has an invalid length. [ 89.321469][ T6235] Cannot find set identified by id 4 to match [ 89.661948][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.662334][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.665014][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.665392][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.666982][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.669201][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.669581][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.669949][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.768715][ T6256] hsr_slave_1 (unregistering): left promiscuous mode [ 89.849645][ T6269] __nla_validate_parse: 2 callbacks suppressed [ 89.849658][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 89.888464][ T6269] hsr_slave_1 (unregistering): left promiscuous mode [ 89.968407][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 90.032786][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 90.032879][ T6275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.032888][ T6275] IPv6: NLM_F_CREATE should be set when creating new route [ 90.077387][ T6280] x_tables: duplicate underflow at hook 2 [ 90.307018][ T6294] TCP: TCP_TX_DELAY enabled [ 90.362282][ T6298] net_ratelimit: 25 callbacks suppressed [ 90.362301][ T6298] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.473677][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 90.576143][ T6308] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.167766][ T6343] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 91.289381][ T6353] netlink: 'syz.4.158': attribute type 1 has an invalid length. [ 91.335884][ T6356] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 91.370393][ T6353] bond2: (slave gretap1): making interface the new active one [ 91.373145][ T6353] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 91.470696][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 91.477974][ T6363] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 91.477992][ T6363] netlink: 220 bytes leftover after parsing attributes in process `syz.3.161'. [ 91.551576][ T6365] SET target dimension over the limit! [ 91.621009][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.405659][ T6410] tipc: Started in network mode [ 92.405679][ T6410] tipc: Node identity 4, cluster identity 4711 [ 92.405690][ T6410] tipc: Node number set to 4 [ 92.622870][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 93.024424][ T6427] syzkaller1: entered promiscuous mode [ 93.024446][ T6427] syzkaller1: entered allmulticast mode [ 93.132254][ T6430] netlink: 'syz.2.185': attribute type 83 has an invalid length. [ 93.139732][ T6430] Bluetooth: hci0: unsupported parameter 5135 [ 93.139752][ T6430] Bluetooth: hci0: unsupported parameter 8192 [ 93.139763][ T6430] Bluetooth: hci0: unsupported parameter 5135 [ 93.139774][ T6430] Bluetooth: hci0: unsupported parameter 8192 [ 93.173719][ T6430] batman_adv: batadv0: Adding interface: syz_tun [ 93.173739][ T6430] batman_adv: batadv0: Interface activated: syz_tun [ 93.184918][ T6432] netlink: 'syz.4.186': attribute type 16 has an invalid length. [ 93.184936][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.186'. [ 93.376482][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.376503][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.480221][ T6441] syz_tun: entered allmulticast mode [ 93.527037][ T6447] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 93.527197][ T6447] netlink: 156 bytes leftover after parsing attributes in process `syz.0.191'. [ 93.528209][ T6447] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 93.528260][ T6447] netlink: 156 bytes leftover after parsing attributes in process `syz.0.191'. [ 93.528546][ T6447] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 93.528708][ T6447] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 93.528873][ T6447] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 93.529029][ T6447] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 94.295099][ T6440] syz_tun: left allmulticast mode [ 94.426255][ T59] tipc: Subscription rejected, illegal request [ 94.689659][ T6485] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 94.801142][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.000798][ T6509] __nla_validate_parse: 64 callbacks suppressed [ 95.000817][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 95.000846][ T6509] netlink: 52 bytes leftover after parsing attributes in process `syz.2.216'. [ 95.228482][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 95.290426][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.292510][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.339415][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.339573][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.339992][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.340118][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.375499][ T6525] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.398789][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 95.398864][ T6525] bridge_slave_1: left allmulticast mode [ 95.398882][ T6525] bridge_slave_1: left promiscuous mode [ 95.399085][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.437799][ T6525] bridge_slave_0: left allmulticast mode [ 95.437823][ T6525] bridge_slave_0: left promiscuous mode [ 95.438710][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.444745][ T6534] netlink: 15051 bytes leftover after parsing attributes in process `syz.2.225'. [ 95.522247][ T6525] bond0: (slave bridge0): Releasing backup interface [ 95.565667][ T6532] : entered promiscuous mode [ 95.730528][ T6550] batman_adv: batadv0: Interface deactivated: syz_tun [ 95.756722][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.757035][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.768391][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 95.847782][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.859183][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.976570][ T6561] ipvlan2: entered allmulticast mode [ 95.976590][ T6561] virt_wifi0: entered allmulticast mode [ 96.061047][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.061963][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.062002][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.062035][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.162607][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 96.238995][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.236'. [ 96.239041][ T6585] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 96.466649][ T6600] bridge1: entered allmulticast mode [ 96.833061][ T6621] validate_nla: 63 callbacks suppressed [ 96.833078][ T6621] netlink: 'syz.0.244': attribute type 21 has an invalid length. [ 97.126626][ T6632] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 97.146813][ T6632] xt_hashlimit: size too large, truncated to 1048576 [ 97.306933][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 97.307195][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 97.633310][ T6667] netlink: 'syz.0.256': attribute type 29 has an invalid length. [ 97.791196][ T6678] ip_tables: iptables: counters copy to user failed while replacing table [ 98.136731][ T6702] syzkaller0: entered promiscuous mode [ 98.136752][ T6702] syzkaller0: entered allmulticast mode [ 98.150758][ T6702] tipc: Started in network mode [ 98.150784][ T6702] tipc: Node identity ded80ea64af2, cluster identity 4711 [ 98.151157][ T6702] tipc: Enabled bearer , priority 0 [ 98.167492][ T6702] tipc: Resetting bearer [ 98.180093][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.180133][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.180151][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.180165][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.180178][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.180191][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.189088][ T6699] tipc: Resetting bearer [ 98.244000][ T6699] tipc: Disabling bearer [ 98.390468][ T6717] sctp: Trying to GSO but underlying device doesn't support it. [ 98.575760][ T6731] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 98.657778][ T6739] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 98.657798][ T6739] netlink: 'syz.4.277': attribute type 2 has an invalid length. [ 98.710324][ T6741] netlink: 'syz.0.278': attribute type 20 has an invalid length. [ 98.727694][ T6741] netlink: 'syz.0.278': attribute type 20 has an invalid length. [ 98.740781][ T1232] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.740822][ T1232] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.740853][ T1232] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.740882][ T1232] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.790022][ T6743] gretap0: entered promiscuous mode [ 98.812478][ T6745] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.827809][ T6743] 0ªî{X¹¦: renamed from gretap0 [ 98.856478][ T6743] 0ªî{X¹¦: left promiscuous mode [ 98.856500][ T6743] 0ªî{X¹¦: entered allmulticast mode [ 98.863965][ T6743] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 98.918403][ T6747] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 98.934841][ T6753] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 99.006081][ T6753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.006907][ T6757] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 99.030463][ T6757] bond2: entered allmulticast mode [ 99.082164][ T6753] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 99.089306][ T6760] netlink: 'syz.3.284': attribute type 4 has an invalid length. [ 99.778369][ T6810] veth0_to_bond: entered allmulticast mode [ 99.865399][ T6813] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 100.227272][ T6842] __nla_validate_parse: 21 callbacks suppressed [ 100.227340][ T6842] netlink: 31 bytes leftover after parsing attributes in process `syz.4.305'. [ 100.227357][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 100.227931][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 100.578107][ T50] IPVS: starting estimator thread 0... [ 100.664577][ T6867] warning: `syz.4.312' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.666227][ T6858] IPVS: using max 42 ests per chain, 100800 per kthread [ 100.794243][ T6876] netlink: 104 bytes leftover after parsing attributes in process `syz.0.314'. [ 101.038778][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 101.060431][ T6888] bridge_slave_1: left allmulticast mode [ 101.060457][ T6888] bridge_slave_1: left promiscuous mode [ 101.068229][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.089682][ T6888] bridge_slave_0: left allmulticast mode [ 101.089706][ T6888] bridge_slave_0: left promiscuous mode [ 101.091198][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 101.093456][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.307848][ T6884] team0: Port device dummy0 added [ 102.187801][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 102.208025][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.208157][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.208341][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.208450][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.208564][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.208665][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.208780][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.208886][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.209023][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.209135][ T6955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.216449][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 102.366285][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 102.400338][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 102.520935][ T6969] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 102.865930][ T6982] validate_nla: 5 callbacks suppressed [ 102.865946][ T6982] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 103.053911][ T6986] openvswitch: netlink: IP tunnel TTL not specified. [ 103.374859][ T7005] ip_tables: iptables: counters copy to user failed while replacing table [ 103.795371][ T6991] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 103.795541][ T7035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.799214][ T7088] hsr0: entered allmulticast mode [ 104.799235][ T7088] hsr_slave_0: entered allmulticast mode [ 104.817586][ T7088] hsr_slave_0: left promiscuous mode [ 104.849429][ T7088] hsr0 (unregistering): left allmulticast mode [ 105.050674][ T5624] Bluetooth: hci0: command 0x080f tx timeout [ 105.171208][ T7115] IPVS: length: 239 != 24 [ 105.372346][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 105.538930][ T7140] tap0: tun_chr_ioctl cmd 2148553947 [ 105.801507][ T7159] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 105.828765][ T7158] __nla_validate_parse: 38 callbacks suppressed [ 105.828782][ T7158] netlink: 172 bytes leftover after parsing attributes in process `syz.1.376'. [ 105.944874][ T7159] team0: Port device dummy0 added [ 105.987069][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 105.997584][ T7159] netlink: 232 bytes leftover after parsing attributes in process `syz.4.377'. [ 106.041813][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 106.041839][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 106.043145][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 106.152690][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 106.152806][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 106.152906][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 106.153002][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 106.515490][ T7180] netlink: 'syz.2.381': attribute type 3 has an invalid length. [ 106.515511][ T7180] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 106.790634][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.032110][ T7209] netlink: 'syz.4.387': attribute type 4 has an invalid length. [ 107.119266][ T7211] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 107.119737][ T7211] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 107.119847][ T7211] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 107.119949][ T7211] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 107.120056][ T7211] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 107.159883][ T7210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.283684][ T7221] ip_tables: iptables: counters copy to user failed while replacing table [ 108.150763][ T7276] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 108.525259][ T7288] tunl0: entered promiscuous mode [ 108.589380][ T7288] validate_nla: 20 callbacks suppressed [ 108.589399][ T7288] netlink: 'syz.1.400': attribute type 3 has an invalid length. [ 108.804778][ T7298] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 109.280033][ T7315] macvlan0: entered promiscuous mode [ 110.037740][ T7347] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 110.265430][ T7359] sctp: [Deprecated]: syz.0.416 (pid 7359) Use of int in max_burst socket option. [ 110.265430][ T7359] Use struct sctp_assoc_value instead [ 110.383849][ T7364] netlink: 'syz.2.418': attribute type 19 has an invalid length. [ 110.384969][ T7364] ip_tables: iptables: counters copy to user failed while replacing table [ 110.465079][ T7366] tipc: Failed to remove unknown binding: 66,0,0/0:3210361616/3210361617 [ 110.465445][ T7366] tipc: Failed to remove unknown binding: 66,0,0/0:3210361616/3210361617 [ 111.159829][ T7394] __nla_validate_parse: 36 callbacks suppressed [ 111.159851][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 111.316259][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 111.462394][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 111.740338][ T7407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.962210][ T7407] tipc: Started in network mode [ 111.962239][ T7407] tipc: Node identity ac1414aa, cluster identity 4711 [ 111.963121][ T7407] tipc: New replicast peer: 172.20.20.187 [ 112.001308][ T7407] tipc: Enabled bearer , priority 10 [ 112.337105][ T7423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.369139][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 112.487760][ T7436] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 112.487905][ T7437] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 112.636118][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 112.678240][ T7437] xt_hashlimit: size too large, truncated to 1048576 [ 112.713493][ T7438] bond3: entered promiscuous mode [ 112.713514][ T7438] bond3: entered allmulticast mode [ 112.741579][ T7448] bond3: left allmulticast mode [ 112.742366][ T7448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.834074][ T7445] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 112.926634][ T7457] netlink: 'syz.3.439': attribute type 15 has an invalid length. [ 113.053291][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.442'. [ 113.097803][ T10] tipc: Node number set to 2886997162 [ 113.120353][ T7464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.441'. [ 113.232018][ T7464] syzkaller1: entered promiscuous mode [ 113.232200][ T7464] syzkaller1: entered allmulticast mode [ 113.360369][ T7474] netlink: 88 bytes leftover after parsing attributes in process `syz.3.448'. [ 113.397290][ T7476] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 113.585302][ T7481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'. [ 114.120276][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 114.260649][ T7500] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 114.319248][ T7512] tipc: Enabling of bearer rejected, media not registered [ 114.388977][ T7505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.455'. [ 114.625884][ T7523] syzkaller0: entered promiscuous mode [ 114.625905][ T7523] syzkaller0: entered allmulticast mode [ 114.656553][ T7532] x_tables: duplicate underflow at hook 1 [ 114.790096][ T7526] block nbd0: not configured, cannot reconfigure [ 115.728951][ T7544] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 115.729386][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.762024][ T7544] veth3: left promiscuous mode [ 115.996339][ T7558] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 116.072633][ T7563] ovs-dp0: entered promiscuous mode [ 116.883711][ T7606] xt_hashlimit: size too large, truncated to 1048576 [ 117.031538][ T7619] __nla_validate_parse: 2 callbacks suppressed [ 117.031555][ T7619] netlink: 104 bytes leftover after parsing attributes in process `syz.0.483'. [ 117.039004][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 117.174378][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 117.424453][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 117.572451][ T7637] syzkaller0: entered promiscuous mode [ 117.572628][ T7637] syzkaller0: entered allmulticast mode [ 117.837203][ T7655] netlink: 288 bytes leftover after parsing attributes in process `syz.3.493'. [ 118.470095][ T7678] netlink: 'syz.2.501': attribute type 2 has an invalid length. [ 118.470116][ T7678] netlink: 'syz.2.501': attribute type 8 has an invalid length. [ 118.470128][ T7678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.501'. [ 118.641756][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.503'. [ 118.748445][ T7659] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 118.979284][ T7690] netlink: 'syz.1.504': attribute type 8 has an invalid length. [ 119.171825][ T7703] bridge0: port 3(veth1_to_bridge) entered blocking state [ 119.171975][ T7703] bridge0: port 3(veth1_to_bridge) entered disabled state [ 119.173473][ T7703] veth1_to_bridge: entered allmulticast mode [ 119.179639][ T7703] veth1_to_bridge: entered promiscuous mode [ 119.352389][ T5624] Bluetooth: hci2: unexpected cc 0x2060 length: 8 > 7 [ 119.752068][ T7717] sctp: [Deprecated]: syz.4.514 (pid 7717) Use of int in max_burst socket option. [ 119.752068][ T7717] Use struct sctp_assoc_value instead [ 119.754625][ T7720] sctp: [Deprecated]: syz.4.514 (pid 7720) Use of int in max_burst socket option. [ 119.754625][ T7720] Use struct sctp_assoc_value instead [ 120.291583][ T7748] syzkaller1: entered promiscuous mode [ 120.291754][ T7748] syzkaller1: entered allmulticast mode [ 120.334282][ T7746] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 120.409784][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 120.409870][ T7757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.409880][ T7757] IPv6: NLM_F_CREATE should be set when creating new route [ 120.409943][ T7757] IPv6: NLM_F_CREATE should be set when creating new route [ 120.461526][ T7758] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 120.812317][ T5624] block nbd296: Receive control failed (result -32) [ 120.899182][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.524'. [ 120.899206][ T7776] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.011524][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 121.852530][ T7824] syzkaller0: entered promiscuous mode [ 121.852552][ T7824] syzkaller0: entered allmulticast mode [ 121.885896][ T7829] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 122.073841][ T7841] __nla_validate_parse: 4 callbacks suppressed [ 122.073870][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 122.157388][ T7829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.209333][ T7841] bridge2: entered promiscuous mode [ 122.248465][ T7841] bond1: (slave bridge2): making interface the new active one [ 122.260171][ T7841] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 122.495840][ T7854] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.544'. [ 122.523943][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 122.578241][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 122.645268][ T7858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.546'. [ 122.649421][ T7858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.546'. [ 122.711460][ T7860] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 122.789804][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.548'. [ 122.801716][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 122.904493][ T7860] bridge1: entered promiscuous mode [ 122.916817][ T7860] bond4: (slave bridge1): making interface the new active one [ 122.924578][ T7860] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 123.286884][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 123.293631][ T7888] netlink: 72 bytes leftover after parsing attributes in process `syz.2.554'. [ 123.338318][ T7887] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 123.579355][ T7898] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 123.645861][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.724948][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.022234][ T7921] x_tables: duplicate underflow at hook 1 [ 124.115851][ T7927] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 124.309899][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.774634][ T7948] syzkaller0: entered promiscuous mode [ 124.774816][ T7948] syzkaller0: entered allmulticast mode [ 125.229397][ T7978] netlink: 'syz.3.582': attribute type 5 has an invalid length. [ 125.459354][ T7984] netlink: 'syz.2.585': attribute type 8 has an invalid length. [ 125.493322][ T7983] ip_tables: iptables: counters copy to user failed while replacing table [ 125.718687][ T7997] netlink: 'syz.2.588': attribute type 17 has an invalid length. [ 125.772956][ T7997] gretap0: entered promiscuous mode [ 125.775777][ T7997] gretap0: left promiscuous mode [ 125.873686][ T8001] x_tables: unsorted entry at hook 2 [ 126.250894][ T5617] Bluetooth: hci0: command 0x080f tx timeout [ 126.253004][ T5624] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.046188][ T8041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.057062][ T8041] macvlan2: entered promiscuous mode [ 127.057080][ T8041] macvlan2: entered allmulticast mode [ 127.057958][ T8041] bond4: entered promiscuous mode [ 127.058871][ T8041] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.064572][ T8050] IPv6: NLM_F_REPLACE set, but no existing node found! [ 127.067525][ T8050] IPv6: NLM_F_REPLACE set, but no existing node found! [ 127.114246][ T8041] bond4: left promiscuous mode [ 127.144311][ T8049] netlink: 'syz.2.600': attribute type 9 has an invalid length. [ 127.475161][ T8064] __nla_validate_parse: 11 callbacks suppressed [ 127.475181][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.603'. [ 127.906854][ T8078] ªªªªª»: renamed from dummy0 (while UP) [ 128.189202][ T8081] udevd[8081]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 128.227916][ T8079] udevd[8079]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 128.245828][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'. [ 128.330938][ T5624] Bluetooth: hci0: command 0x080f tx timeout [ 128.626334][ T8118] gre2: entered promiscuous mode [ 128.680340][ T8124] netlink: 48 bytes leftover after parsing attributes in process `syz.0.618'. [ 128.834675][ T8125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.913663][ T8127] syzkaller1: entered allmulticast mode [ 129.038824][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 129.147644][ T8139] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 129.153177][ T1232] IPVS: starting estimator thread 0... [ 129.163743][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 129.163762][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 129.163786][ T8139] netlink: 'syz.3.622': attribute type 13 has an invalid length. [ 129.240964][ T8141] IPVS: using max 35 ests per chain, 84000 per kthread [ 129.365509][ T8151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.625'. [ 129.491356][ T8156] ip_tables: iptables: counters copy to user failed while replacing table [ 129.498466][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 129.498490][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 129.507189][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 129.617856][ T8162] netlink: 'syz.0.629': attribute type 2 has an invalid length. [ 130.499576][ T8210] sctp: [Deprecated]: syz.3.643 (pid 8210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.499576][ T8210] Use struct sctp_sack_info instead [ 131.466979][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.469135][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.469696][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.470125][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.500392][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.508988][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.509457][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.509800][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.510292][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.533665][ T8254] ip6t_srh: unknown srh invflags 4000 [ 131.982107][ T8280] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 132.370140][ T31] audit: type=1804 audit(1792304003.995:2): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.659" name="/newroot/127/cgroup.controllers" dev="tmpfs" ino=670 res=1 errno=0 [ 132.375834][ T31] audit: type=1800 audit(1792304004.005:3): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.659" name="cgroup.controllers" dev="tmpfs" ino=670 res=0 errno=0 [ 132.735715][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.833002][ T8317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.839436][ T8313] __nla_validate_parse: 13 callbacks suppressed [ 132.839454][ T8313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.666'. [ 132.858618][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.666'. [ 133.148042][ T5278] veth1_vlan: left promiscuous mode [ 133.222490][ T8325] sctp: [Deprecated]: syz.1.670 (pid 8325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.222490][ T8325] Use struct sctp_sack_info instead [ 133.633010][ T8342] netlink: 'syz.3.677': attribute type 4 has an invalid length. [ 133.673309][ T8343] tipc: Failed to obtain node identity [ 133.673339][ T8343] tipc: Enabling of bearer rejected, failed to enable media [ 133.703442][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.678'. [ 134.487424][ T8409] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 134.670503][ T8426] veth1_macvtap: left promiscuous mode [ 135.364989][ T8447] ip_tables: iptables: counters copy to user failed while replacing table [ 135.799692][ T8461] ip_tables: iptables: counters copy to user failed while replacing table [ 135.889730][ T8461] C: renamed from lo (while UP) [ 135.908481][ T8461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 136.741487][ T8504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.772262][ T8505] gre1: entered promiscuous mode [ 136.822303][ T5624] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 136.822543][ T5624] Bluetooth: hci2: Injecting HCI hardware error event [ 136.823652][ T5617] Bluetooth: hci2: hardware error 0x00 [ 136.852780][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 137.163451][ T8520] pimreg3: entered allmulticast mode [ 137.182286][ T8521] syz.2.706: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.182430][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz.2.706 Not tainted syzkaller #0 PREEMPT(full) [ 137.182452][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.182471][ T8521] Call Trace: [ 137.182483][ T8521] [ 137.182491][ T8521] dump_stack_lvl+0xe8/0x150 [ 137.182524][ T8521] warn_alloc+0x24d/0x270 [ 137.182547][ T8521] ? kasan_save_track+0x4f/0x80 [ 137.182569][ T8521] ? kasan_save_track+0x3e/0x80 [ 137.182595][ T8521] ? __pfx_warn_alloc+0x10/0x10 [ 137.182614][ T8521] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 137.182641][ T8521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.182681][ T8521] __vmalloc_node_range_noprof+0x127/0x1540 [ 137.182724][ T8521] ? rcu_is_watching+0x16/0xb0 [ 137.182755][ T8521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.182775][ T8521] ? __kmalloc_cache_noprof+0x321/0x600 [ 137.182799][ T8521] ? __kmalloc_cache_noprof+0x14d/0x600 [ 137.182820][ T8521] ? xskq_create+0x56/0x220 [ 137.182845][ T8521] xskq_create+0x148/0x220 [ 137.182865][ T8521] ? xsk_init_queue+0x8a/0xe0 [ 137.182886][ T8521] xsk_init_queue+0x8a/0xe0 [ 137.182906][ T8521] xsk_setsockopt+0x52a/0x960 [ 137.182938][ T8521] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.182970][ T8521] ? __pfx_aa_sk_perm+0x10/0x10 [ 137.183007][ T8521] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 137.183034][ T8521] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.183064][ T8521] do_sock_setsockopt+0x17c/0x1b0 [ 137.183089][ T8521] __x64_sys_setsockopt+0x13d/0x1b0 [ 137.183114][ T8521] do_syscall_64+0x166/0x520 [ 137.183135][ T8521] ? trace_irq_disable+0x3b/0x140 [ 137.183155][ T8521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.183175][ T8521] ? clear_bhb_loop+0x70/0xc0 [ 137.183198][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.183217][ T8521] RIP: 0033:0x7fc46139e559 [ 137.183241][ T8521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.183256][ T8521] RSP: 002b:00007fc46219b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.183275][ T8521] RAX: ffffffffffffffda RBX: 00007fc461626180 RCX: 00007fc46139e559 [ 137.183289][ T8521] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 137.183300][ T8521] RBP: 00007fc461435ab8 R08: 0000000000000004 R09: 0000000000000000 [ 137.183312][ T8521] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.183325][ T8521] R13: 00007fc461626218 R14: 00007fc461626180 R15: 00007fff602df288 [ 137.183357][ T8521] [ 137.210160][ T8521] Mem-Info: [ 137.210174][ T8521] active_anon:5880 inactive_anon:0 isolated_anon:0 [ 137.210174][ T8521] active_file:3 inactive_file:42989 isolated_file:0 [ 137.210174][ T8521] unevictable:0 dirty:26 writeback:0 [ 137.210174][ T8521] slab_reclaimable:11087 slab_unreclaimable:99006 [ 137.210174][ T8521] mapped:29294 shmem:525 pagetables:1245 [ 137.210174][ T8521] sec_pagetables:0 bounce:0 [ 137.210174][ T8521] kernel_misc_reclaimable:0 [ 137.210174][ T8521] free:1324364 free_pcp:9280 free_cma:0 [ 137.210222][ T8521] Node 0 active_anon:23520kB inactive_anon:0kB active_file:12kB inactive_file:171748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117176kB dirty:104kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12856kB pagetables:4832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.210270][ T8521] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.210320][ T8521] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.219176][ T8521] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 137.219252][ T8521] Node 0 DMA32 free:1342228kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23520kB inactive_anon:0kB active_file:12kB inactive_file:171748kB unevictable:0kB writepending:104kB zspages:0kB present:3129332kB managed:2527500kB mlocked:0kB bounce:0kB free_pcp:35060kB local_pcp:20188kB free_cma:0kB [ 137.219309][ T8521] lowmem_reserve[]: 0 0 0 0 0 [ 137.219342][ T8521] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.219387][ T8521] lowmem_reserve[]: 0 0 0 0 0 [ 137.219415][ T8521] Node 1 Normal free:3939868kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:2012kB free_cma:0kB [ 137.219466][ T8521] lowmem_reserve[]: 0 0 0 0 0 [ 137.219498][ T8521] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.219652][ T8521] Node 0 DMA32: 1303*4kB (UME) 433*8kB (UME) 185*16kB (UM) 209*32kB (UM) 106*64kB (UE) 124*128kB (UME) 71*256kB (UME) 20*512kB (UME) 9*1024kB (U) 3*2048kB (UME) 307*4096kB (UM) = 1342228kB [ 137.219798][ T8521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 137.219888][ T8521] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3939868kB [ 137.220029][ T8521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.220044][ T8521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.220057][ T8521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.220072][ T8521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.220085][ T8521] 43513 total pagecache pages [ 137.220096][ T8521] 0 pages in swap cache [ 137.220102][ T8521] Free swap = 124996kB [ 137.220109][ T8521] Total swap = 124996kB [ 137.220116][ T8521] 2097051 pages RAM [ 137.220122][ T8521] 0 pages HighMem/MovableOnly [ 137.220128][ T8521] 433560 pages reserved [ 137.220133][ T8521] 0 pages cma reserved [ 137.268330][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 138.128518][ T8531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.712'. [ 138.242087][ T8534] netlink: 424 bytes leftover after parsing attributes in process `syz.1.713'. [ 138.900827][ T5617] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 139.164721][ T8479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.633658][ T8550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.719'. [ 139.633688][ T8550] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 139.640109][ T8552] netlink: 72 bytes leftover after parsing attributes in process `syz.3.718'. [ 139.640131][ T8552] netlink: 72 bytes leftover after parsing attributes in process `syz.3.718'. [ 139.923974][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.720'. [ 140.380267][ T8578] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 140.490964][ T8582] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 140.987735][ T8602] hsr0: entered promiscuous mode [ 141.013180][ T8597] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.451381][ T8614] netlink: 'syz.1.735': attribute type 21 has an invalid length. [ 141.536056][ T8614] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 141.584809][ T8614] bond4 (unregistering): Released all slaves [ 141.915618][ T8633] openvswitch: netlink: Key 15 has unexpected len 2 expected 4 [ 142.067116][ T8637] netlink: 'syz.1.741': attribute type 27 has an invalid length. [ 142.424745][ T8644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 142.702951][ T8643] Failure starting scanning (-16) [ 143.333333][ T8665] block nbd3: not configured, cannot reconfigure [ 143.510225][ T8672] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 143.510250][ T8672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.751'. [ 143.510275][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 143.664517][ T8680] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 144.082304][ T8697] netlink: 'syz.3.756': attribute type 4 has an invalid length. [ 144.083100][ T8698] netlink: 'syz.3.756': attribute type 4 has an invalid length. [ 144.166226][ T8702] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 144.308407][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 144.325468][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.762'. [ 144.565101][ T8723] No such timeout policy "s" [ 144.565119][ T8723] netlink: Failed to associated timeout policy 's' [ 144.601823][ T8729] No such timeout policy "s" [ 144.601839][ T8729] netlink: Failed to associated timeout policy 's' [ 144.651854][ T8732] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 144.699986][ T8720] sock: sock_timestamping_bind_phc: sock not bind to device [ 144.996754][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.770'. [ 145.285889][ T8757] netlink: 232 bytes leftover after parsing attributes in process `syz.1.775'. [ 145.526853][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 145.590557][ T8769] bond2: option xmit_hash_policy: invalid value (64) [ 145.597127][ T8769] bond2 (unregistering): Released all slaves [ 145.938683][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 146.405149][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 146.716639][ T43] IPVS: starting estimator thread 0... [ 146.718575][ T8814] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 146.801009][ T8820] IPVS: using max 32 ests per chain, 76800 per kthread [ 147.046999][ T8835] netlink: 84 bytes leftover after parsing attributes in process `syz.3.789'. [ 148.102665][ T8888] syzkaller1: entered promiscuous mode [ 148.102688][ T8888] syzkaller1: entered allmulticast mode [ 148.687185][ T5624] Bluetooth: hci4: link tx timeout [ 148.687203][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.690885][ T5624] Bluetooth: hci4: link tx timeout [ 148.690902][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.694674][ T5624] Bluetooth: hci4: link tx timeout [ 148.694688][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.694701][ T5624] Bluetooth: hci4: link tx timeout [ 148.694709][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.848100][ T5624] Bluetooth: hci4: link tx timeout [ 148.848118][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.848132][ T5624] Bluetooth: hci4: link tx timeout [ 148.848141][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.883602][ T5624] Bluetooth: hci4: link tx timeout [ 148.883619][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.883634][ T5624] Bluetooth: hci4: link tx timeout [ 148.883642][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.211624][ T8924] __nla_validate_parse: 2 callbacks suppressed [ 149.211642][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 149.311352][ T8931] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 149.436954][ T8935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.479114][ T5624] Bluetooth: hci4: link tx timeout [ 149.479132][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 149.479147][ T5624] Bluetooth: hci4: link tx timeout [ 149.479156][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.616419][ T5624] Bluetooth: hci4: link tx timeout [ 149.616437][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 149.616452][ T5624] Bluetooth: hci4: link tx timeout [ 149.616461][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.139404][ T5624] Bluetooth: hci4: link tx timeout [ 150.139423][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 150.139437][ T5624] Bluetooth: hci4: link tx timeout [ 150.139445][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.511954][ T5624] Bluetooth: hci4: link tx timeout [ 150.511972][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 150.511985][ T5624] Bluetooth: hci4: link tx timeout [ 150.511992][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.516074][ T8975] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 150.576270][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'. [ 150.599120][ T8975] bond2: entered promiscuous mode [ 150.599585][ T8975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.600426][ T8977] bond2: entered allmulticast mode [ 150.638816][ T8975] bond2: (slave bridge4): making interface the new active one [ 150.638838][ T8975] bridge4: entered promiscuous mode [ 150.639007][ T8975] bridge4: entered allmulticast mode [ 150.663573][ T8975] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 150.735442][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 151.074702][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 152.457124][ T9057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 152.469148][ T9060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 152.515596][ T9062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.833'. [ 152.810817][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 152.859638][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.837'. [ 152.859696][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.837'. [ 152.939375][ T9071] team0: Port device macvlan0 added [ 153.405442][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 153.507003][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 153.561969][ T9085] bond3: entered promiscuous mode [ 153.564104][ T9085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.064749][ T9112] xt_time: unknown flags 0x68 [ 154.115046][ T9105] syzkaller0: entered promiscuous mode [ 154.115069][ T9105] syzkaller0: entered allmulticast mode [ 191.140636][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 194.193306][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.261989][ T5623] Bluetooth: hci0: command 0x080f tx timeout [ 196.262057][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 223.380049][ T9184] h: entered promiscuous mode [ 223.410456][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 223.519001][ T9184] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 223.536733][ T9184] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 223.583014][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.587283][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.588497][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.589480][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.590074][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.686205][ T5746] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 223.756531][ T4933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.770955][ T4933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.771676][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.774050][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.779515][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.021338][ T9205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'. [ 224.169356][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 224.169384][ T9203] netlink: 14 bytes leftover after parsing attributes in process `syz.3.855'. [ 224.393963][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 224.775925][ T9190] rxe_eth0 speed is unknown, defaulting to 1000 [ 224.788420][ T43] IPVS: starting estimator thread 0... [ 224.911414][ T9230] IPVS: using max 34 ests per chain, 81600 per kthread [ 225.415132][ T9187] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.461538][ T9246] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.462381][ T9251] tunl0: entered promiscuous mode [ 225.464163][ T9251] netlink: 'syz.3.863': attribute type 3 has an invalid length. [ 225.464185][ T9251] netlink: 9 bytes leftover after parsing attributes in process `syz.3.863'. [ 225.690694][ T5624] Bluetooth: hci5: command tx timeout [ 225.724113][ T9264] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.861359][ T5624] Bluetooth: hci6: command tx timeout [ 225.904796][ T9272] netlink: 'syz.1.869': attribute type 2 has an invalid length. [ 225.904818][ T9272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'. [ 226.025865][ T9272] : entered promiscuous mode [ 226.392902][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.393069][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.393203][ T9190] bridge_slave_0: entered allmulticast mode [ 226.396005][ T9190] bridge_slave_0: entered promiscuous mode [ 226.410391][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.412779][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.412919][ T9190] bridge_slave_1: entered allmulticast mode [ 226.416567][ T9190] bridge_slave_1: entered promiscuous mode [ 226.683438][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.725919][ T9295] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 226.747008][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.762741][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.873'. [ 226.994406][ T9190] team0: Port device team_slave_0 added [ 227.044547][ T9190] team0: Port device team_slave_1 added [ 227.218615][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.218631][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.218651][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.269211][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.269226][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.269247][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.310227][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 227.522491][ T9190] hsr_slave_0: entered promiscuous mode [ 227.523523][ T9190] hsr_slave_1: entered promiscuous mode [ 227.720440][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.724604][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.724750][ T9187] bridge_slave_0: entered allmulticast mode [ 227.732474][ T9187] bridge_slave_0: entered promiscuous mode [ 227.771298][ T5624] Bluetooth: hci5: command tx timeout [ 227.824969][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.825113][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.825231][ T9187] bridge_slave_1: entered allmulticast mode [ 227.827802][ T9187] bridge_slave_1: entered promiscuous mode [ 227.836479][ T9332] Cannot find del_set index 2 as target [ 227.942240][ T5624] Bluetooth: hci6: command tx timeout [ 228.069078][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.089141][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 228.146263][ T9335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.274046][ T9346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.295043][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.547661][ T9187] team0: Port device team_slave_0 added [ 228.582563][ T9187] team0: Port device team_slave_1 added [ 228.648681][ T9368] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 228.658664][ T9370] netlink: 'syz.4.888': attribute type 21 has an invalid length. [ 228.723169][ T9371] __nla_validate_parse: 1 callbacks suppressed [ 228.723186][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 228.746346][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.746360][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.746381][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.853877][ T9370] netlink: 'syz.4.888': attribute type 6 has an invalid length. [ 228.853900][ T9370] netlink: 132 bytes leftover after parsing attributes in process `syz.4.888'. [ 228.992386][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.992403][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.992424][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.301694][ T9384] xt_cgroup: no path or classid specified [ 229.309130][ T9385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.891'. [ 229.458551][ T9381] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 229.494895][ T9187] hsr_slave_0: entered promiscuous mode [ 229.497594][ T9387] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 229.499831][ T9187] hsr_slave_1: entered promiscuous mode [ 229.528290][ T9187] debugfs: 'hsr0' already exists in 'hsr' [ 229.530223][ T9187] Cannot create hsr debugfs directory [ 229.876213][ T5624] Bluetooth: hci5: command tx timeout [ 229.954596][ T9190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.975418][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.999063][ T9190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.022063][ T5624] Bluetooth: hci6: command tx timeout [ 230.081907][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.083697][ T9190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.090156][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.155014][ T9190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.168966][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.326123][ T9407] netlink: 'syz.3.898': attribute type 2 has an invalid length. [ 230.649671][ T9429] netlink: 'syz.4.903': attribute type 3 has an invalid length. [ 230.649692][ T9429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.903'. [ 230.870222][ T9187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.901210][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.905965][ T9187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.939013][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.959131][ T9187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.004823][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.005710][ T9187] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.025334][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.240206][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.309521][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.395135][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.395240][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.433749][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.433856][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.694993][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.769816][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.823432][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.823537][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.857276][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.857378][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.930850][ T5624] Bluetooth: hci5: command tx timeout [ 232.091070][ T5624] Bluetooth: hci6: command tx timeout [ 232.884931][ T9495] ip_tables: iptables: counters copy to user failed while replacing table [ 232.988014][ T9490] C: renamed from lo (while UP) [ 233.010517][ T9490] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.069041][ T9502] raw_sendmsg: syz.4.918 forgot to set AF_INET. Fix it! [ 233.148189][ T9507] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 233.188666][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.378031][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.457900][ T9516] x_tables: duplicate underflow at hook 1 [ 233.985359][ T9531] netlink: Failed to add helper -22 [ 233.985410][ T9531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.225884][ T9190] veth0_vlan: entered promiscuous mode [ 234.267569][ T9187] veth0_vlan: entered promiscuous mode [ 234.274319][ T9190] veth1_vlan: entered promiscuous mode [ 234.320287][ T9187] veth1_vlan: entered promiscuous mode [ 234.493378][ T9190] veth0_macvtap: entered promiscuous mode [ 234.512433][ T9190] veth1_macvtap: entered promiscuous mode [ 234.519244][ T9187] veth0_macvtap: entered promiscuous mode [ 234.537913][ T9187] veth1_macvtap: entered promiscuous mode [ 234.577553][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.603269][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.617076][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.627653][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 234.627684][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 234.733732][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.814568][ T1022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.814908][ T1022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.814945][ T1022] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.814985][ T1022] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.864067][ T1022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.864109][ T1022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.864140][ T1022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.864171][ T1022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.202265][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.202284][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.329978][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.329998][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.458346][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.458366][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.631789][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.631808][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.684079][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 235.684111][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 235.684789][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 235.684812][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 235.685418][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 235.685437][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 236.345987][ T9592] netlink: 44 bytes leftover after parsing attributes in process `syz.5.930'. [ 236.346010][ T9592] netlink: 43 bytes leftover after parsing attributes in process `syz.5.930'. [ 236.347030][ T9592] netlink: 'syz.5.930': attribute type 6 has an invalid length. [ 236.347045][ T9592] netlink: 'syz.5.930': attribute type 5 has an invalid length. [ 236.718549][ T9602] IPv4: Oversized IP packet from 127.202.26.0 [ 237.624395][ T9628] veth5: entered promiscuous mode [ 237.728210][ T9640] netlink: 'syz.1.942': attribute type 3 has an invalid length. [ 238.192080][ T9662] ip_tables: iptables: counters copy to user failed while replacing table [ 238.536661][ T9670] lo speed is unknown, defaulting to 1000 [ 238.536815][ T9670] lo speed is unknown, defaulting to 1000 [ 238.537816][ T9670] lo speed is unknown, defaulting to 1000 [ 238.561672][ T9670] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 238.561704][ T9670] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 238.561743][ T9670] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 238.663239][ T9670] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 238.941178][ T9670] lo speed is unknown, defaulting to 1000 [ 238.945811][ T9670] lo speed is unknown, defaulting to 1000 [ 238.949389][ T9670] lo speed is unknown, defaulting to 1000 [ 238.954645][ T9670] lo speed is unknown, defaulting to 1000 [ 238.957930][ T9670] lo speed is unknown, defaulting to 1000 [ 238.963839][ T9670] lo speed is unknown, defaulting to 1000 [ 238.968698][ T9670] lo speed is unknown, defaulting to 1000 [ 239.658368][ T9696] __nla_validate_parse: 7 callbacks suppressed [ 239.658388][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.956'. [ 239.664374][ T9697] openvswitch: netlink: Message has 8 unknown bytes. [ 240.059007][ T9708] netlink: 44 bytes leftover after parsing attributes in process `syz.6.960'. [ 240.270433][ T9718] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 240.784968][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 245.781149][ T9755] netlink: 'syz.3.968': attribute type 3 has an invalid length. [ 246.441090][ T9754] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 246.521223][ T9754] bond5 (unregistering): Released all slaves [ 246.574934][ T9762] netlink: 'syz.5.969': attribute type 20 has an invalid length. [ 246.574957][ T9762] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.609490][ T9767] netlink: 'syz.5.969': attribute type 20 has an invalid length. [ 246.920381][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 247.158259][ T9771] bridge1: entered promiscuous mode [ 247.158305][ T9771] bridge1: entered allmulticast mode [ 247.302150][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 247.555896][ T9794] netlink: 'syz.3.975': attribute type 16 has an invalid length. [ 247.555916][ T9794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.975'. [ 247.822003][ T5624] block nbd0: Receive control failed (result -32) [ 248.101370][ T5624] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 248.101394][ T5624] Bluetooth: unknown link type 48 [ 248.101439][ T5624] Bluetooth: hci3: connection err: -111 [ 248.138813][ T9796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.138830][ T9796] IPv6: NLM_F_CREATE should be set when creating new route [ 248.230283][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 248.509668][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.982'. [ 248.779694][ T9831] netlink: 104 bytes leftover after parsing attributes in process `syz.3.987'. [ 248.792866][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 248.847026][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.6.985'. [ 248.999165][ T9835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.558274][ T9865] ebt_among: dst integrity fail: 301 [ 249.559597][ T9863] netlink: 'syz.3.994': attribute type 3 has an invalid length. [ 249.815221][ T9874] ip_tables: iptables: counters copy to user failed while replacing table [ 249.856409][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 250.085826][ T9886] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1002'. [ 250.085848][ T9886] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 250.268003][ T9898] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 250.397821][ T9898] bond5: entered promiscuous mode [ 250.408629][ T9898] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.734507][ T9898] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.735515][ T9898] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 250.735531][ T9898] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 250.768774][ T9898] bond5: (slave xfrm1): making interface the new active one [ 250.768794][ T9898] xfrm1: entered promiscuous mode [ 250.785356][ T9898] xfrm1: left promiscuous mode [ 250.863228][ T9913] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.182811][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e8e000: rx timeout, send abort [ 251.291275][ T9939] x_tables: duplicate underflow at hook 2 [ 251.630374][ T9940] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 251.630405][ T9940] bond7: option packets_per_slave: allowed values 0 - 65535 [ 251.653988][ T9940] bond7 (unregistering): Released all slaves [ 251.682961][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e8d800: rx timeout, send abort [ 251.684097][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e8e000: abort rx timeout. Force session deactivation [ 251.959904][ T9966] __nla_validate_parse: 1 callbacks suppressed [ 251.959923][ T9966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1022'. [ 252.093438][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 252.094265][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 252.134942][ T9971] tipc: Enabling of bearer rejected, failed to enable media [ 252.183008][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e8d800: abort rx timeout. Force session deactivation [ 252.546089][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 252.641088][ T9990] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 252.718749][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1030'. [ 252.814336][ T9998] dvmrp0: entered allmulticast mode [ 253.325386][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 253.388008][T10023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.404465][T10032] netlink: 'syz.6.1034': attribute type 1 has an invalid length. [ 253.421721][T10024] macvlan2: entered promiscuous mode [ 253.421741][T10024] macvlan2: entered allmulticast mode [ 253.422682][T10024] bond6: entered promiscuous mode [ 253.423317][T10024] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.427659][T10024] bond6: left promiscuous mode [ 253.469403][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 253.469456][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 253.490457][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 253.517783][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.519035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.519051][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.954101][T10050] netlink: 'syz.5.1043': attribute type 12 has an invalid length. [ 253.954122][T10050] netlink: 'syz.5.1043': attribute type 29 has an invalid length. [ 253.954133][T10050] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1043'. [ 254.059995][T10055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 254.066602][T10053] bridge0: port 1(veth1_to_bridge) entered blocking state [ 254.067047][T10053] bridge0: port 1(veth1_to_bridge) entered disabled state [ 254.067355][T10053] veth1_to_bridge: entered allmulticast mode [ 254.073237][T10053] veth1_to_bridge: entered promiscuous mode [ 254.138656][T10055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 254.483480][T10067] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 255.285920][T10096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.490188][T10111] bridge_slave_1: left allmulticast mode [ 255.490212][T10111] bridge_slave_1: left promiscuous mode [ 255.490412][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.530011][T10111] bridge_slave_0: left allmulticast mode [ 255.530037][T10111] bridge_slave_0: left promiscuous mode [ 255.531523][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.619415][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.001196][ T1022] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.001260][ T1022] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.001292][ T1022] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.052086][T10126] syzkaller0: entered promiscuous mode [ 256.052271][T10126] syzkaller0: entered allmulticast mode [ 256.276894][T10130] xt_bpf: check failed: parse error [ 256.376830][T10137] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 256.377337][T10137] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 256.870258][T10158] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.881192][T10158] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.149774][T10160] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 257.565191][T10189] netlink: 'syz.4.1083': attribute type 21 has an invalid length. [ 257.627110][T10189] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 257.673768][T10189] bond7 (unregistering): Released all slaves [ 258.410928][T10215] __nla_validate_parse: 15 callbacks suppressed [ 258.410948][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 258.410974][T10215] netlink: 'syz.4.1090': attribute type 10 has an invalid length. [ 258.410988][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 258.419901][T10218] xt_hashlimit: size too large, truncated to 1048576 [ 258.499577][T10221] netlink: 'syz.6.1091': attribute type 1 has an invalid length. [ 258.537146][T10215] geneve2: entered promiscuous mode [ 258.537171][T10215] geneve2: entered allmulticast mode [ 258.666187][ T31] audit: type=1804 audit(1792304130.295:4): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1092" name="/newroot/253/cgroup.controllers" dev="tmpfs" ino=1311 res=1 errno=0 [ 258.702399][ T31] audit: type=1800 audit(1792304130.335:5): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1092" name="cgroup.controllers" dev="tmpfs" ino=1311 res=0 errno=0 [ 258.706656][ T31] audit: type=1800 audit(1792304130.335:6): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1092" name="cgroup.controllers" dev="tmpfs" ino=1311 res=0 errno=0 [ 258.800645][T10230] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.807588][T10221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.946455][T10223] bond2: (slave gretap1): making interface the new active one [ 258.958744][T10223] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 259.034814][T10230] bridge_slave_0: left allmulticast mode [ 259.034840][T10230] bridge_slave_0: left promiscuous mode [ 259.035060][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.104651][T10230] bridge_slave_1: left allmulticast mode [ 259.104677][T10230] bridge_slave_1: left promiscuous mode [ 259.104889][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.155956][T10230] bond0: (slave bond_slave_0): Releasing backup interface [ 259.186869][T10230] bond0: (slave bond_slave_1): Releasing backup interface [ 259.214400][T10230] team0: Port device team_slave_0 removed [ 259.249788][T10230] team0: Port device team_slave_1 removed [ 259.269438][T10230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.269619][T10230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.290103][T10230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.290293][T10230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.319249][T10230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.352469][T10224] gre2: entered promiscuous mode [ 259.352489][T10224] gre2: entered allmulticast mode [ 259.364747][T10252] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 259.397055][T10236] team0: Port device xfrm0 added [ 259.562517][T10237] tipc: Started in network mode [ 259.562547][T10237] tipc: Node identity e2b58730157e, cluster identity 4711 [ 259.562929][T10237] tipc: Enabled bearer , priority 0 [ 259.565954][ T5820] lo speed is unknown, defaulting to 1000 [ 259.906363][T10251] veth7: entered allmulticast mode [ 260.015933][T10251] veth9: entered allmulticast mode [ 260.046189][T10275] netlink: 'syz.1.1101': attribute type 20 has an invalid length. [ 260.046211][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 260.164069][T10251] veth11: entered allmulticast mode [ 260.235291][T10275] netlink: 'syz.1.1101': attribute type 20 has an invalid length. [ 260.235313][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 260.481301][ T1022] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.486782][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.493135][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.493168][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.570808][ T5751] tipc: Node number set to 4157310768 [ 260.627653][T10276] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 260.642766][T10276] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 260.714669][T10296] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 260.779958][T10288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.848053][T10357] ovs-s: entered promiscuous mode [ 261.859927][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'. [ 261.963179][T10377] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1121'. [ 261.987785][T10377] netlink: 'syz.6.1121': attribute type 1 has an invalid length. [ 262.227985][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 262.336398][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 262.375334][T10382] 8021q: adding VLAN 0 to HW filter on device team1 [ 262.423982][T10390] 8021q: adding VLAN 0 to HW filter on device team2 [ 262.502004][T10396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.758198][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 263.137716][T10432] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1136'. [ 263.140558][T10429] netlink: 'syz.3.1137': attribute type 10 has an invalid length. [ 263.178058][T10429] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.187366][T10429] bond0: (slave team0): Enslaving as an active interface with an up link [ 263.394186][T10444] : renamed from bond_slave_0 (while UP) [ 263.499797][T10453] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 263.513380][T10446] __nla_validate_parse: 1 callbacks suppressed [ 263.513396][T10446] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1143'. [ 263.620191][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 263.879188][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1144'. [ 263.879209][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1144'. [ 263.967980][T10460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1145'. [ 264.077518][T10464] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1147'. [ 264.235073][T10466] netlink: NAT attribute has 8 unknown bytes [ 264.235106][T10466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.237769][ T31] audit: type=1804 audit(1792304135.865:7): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1148" name="/newroot/47/cgroup.controllers" dev="tmpfs" ino=254 res=1 errno=0 [ 264.239002][ T31] audit: type=1800 audit(1792304135.865:8): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1148" name="cgroup.controllers" dev="tmpfs" ino=254 res=0 errno=0 [ 264.389669][T10468] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 264.683166][T10468] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.034950][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 265.067868][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 265.674946][ T12] IPVS: starting estimator thread 0... [ 265.678806][T10511] netlink: 'syz.3.1160': attribute type 20 has an invalid length. [ 265.678825][T10511] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.761463][T10512] IPVS: using max 27 ests per chain, 64800 per kthread [ 265.992264][T10523] netlink: 'syz.6.1163': attribute type 1 has an invalid length. [ 266.064478][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1163'. [ 266.174156][T10523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.481915][T10534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1166'. [ 267.410484][T10536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.411778][T10536] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 267.558838][T10536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.558860][T10536] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 267.604849][T10584] netlink: 'syz.5.1177': attribute type 10 has an invalid length. [ 267.626266][T10584] team0: Device hsr0 is of different type [ 267.664375][T10536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.664396][T10536] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 267.740688][T10536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.740710][T10536] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 267.987678][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.369199][T10608] netlink: 'syz.3.1184': attribute type 2 has an invalid length. [ 268.449283][T10608] : entered promiscuous mode [ 268.624683][T10536] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 268.631717][T10536] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 268.681005][T10616] __nla_validate_parse: 3 callbacks suppressed [ 268.681033][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1187'. [ 268.716366][T10536] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 268.716401][T10536] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 269.052668][T10635] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 269.572224][T10651] tipc: Enabled bearer , priority 9 [ 269.973720][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1197'. [ 270.385848][T10679] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1200'. [ 270.387984][T10679] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1200'. [ 270.388004][T10679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1200'. [ 270.547477][T10682] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 270.592920][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 270.623587][T10682] bond5: (slave bridge5): making interface the new active one [ 270.624029][T10682] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 271.515179][T10699] syzkaller0: entered promiscuous mode [ 271.515203][T10699] syzkaller0: entered allmulticast mode [ 271.650989][T10708] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.653720][T10708] bridge0: port 3(bond7) entered blocking state [ 271.654515][T10708] bridge0: port 3(bond7) entered disabled state [ 271.654659][T10708] bond7: entered allmulticast mode [ 271.701192][T10708] bond7: entered promiscuous mode [ 271.701813][T10708] bridge0: port 3(bond7) entered blocking state [ 271.701942][T10708] bridge0: port 3(bond7) entered forwarding state [ 271.898997][ T1022] bridge0: port 3(bond7) entered disabled state [ 272.229825][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1216'. [ 272.229850][T10741] openvswitch: netlink: Flow actions attr not present in new flow. [ 272.447636][T10748] netlink: 'syz.5.1219': attribute type 4 has an invalid length. [ 272.511622][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1219'. [ 272.531604][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1218'. [ 274.557862][T10732] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1213'. [ 274.557884][T10732] tc_dump_action: action bad kind [ 274.702672][T10754] netlink: 'syz.3.1222': attribute type 64 has an invalid length. [ 274.752245][T10749] dvmrp0: entered allmulticast mode [ 274.753601][T10751] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 274.757697][ T943] lo speed is unknown, defaulting to 1000 [ 274.757732][ T943] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 274.940023][T10757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1220'. [ 275.138261][T10757] bond0: (slave 30): Releasing backup interface [ 275.200395][T10757] : entered promiscuous mode [ 275.200417][T10757] : entered allmulticast mode [ 275.306967][T10782] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 275.306991][T10782] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 275.605304][T10796] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 276.512112][T10836] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1237'. [ 276.531737][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 276.535108][T10836] gretap0: entered promiscuous mode [ 277.061088][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1243'. [ 277.572430][T10898] netlink: 'syz.5.1249': attribute type 1 has an invalid length. [ 277.632506][T10897] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1248'. [ 277.639119][T10897] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1248'. [ 277.680046][T10898] bond1: entered promiscuous mode [ 277.687923][T10898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.704703][T10893] syzkaller0: entered promiscuous mode [ 277.704878][T10893] syzkaller0: entered allmulticast mode [ 277.755135][T10900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.755832][T10900] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 277.755850][T10900] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 277.790957][T10900] bond1: (slave xfrm1): making interface the new active one [ 277.790981][T10900] xfrm1: entered promiscuous mode [ 277.792360][T10900] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 277.797959][T10893] xt_NFQUEUE: number of total queues is 0 [ 277.846764][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'. [ 277.899108][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 278.002019][T10916] xt_l2tp: invalid flags combination: 0 [ 278.041240][T10921] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 278.041259][T10921] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1252'. [ 278.125972][T10902] syzkaller0: entered promiscuous mode [ 278.125997][T10902] syzkaller0: entered allmulticast mode [ 278.163993][T10911] pim6reg: entered allmulticast mode [ 281.303845][T10977] __nla_validate_parse: 2 callbacks suppressed [ 281.303864][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'. [ 281.521842][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1261'. [ 281.751500][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'. [ 281.751532][T10998] netlink: 'syz.3.1262': attribute type 8 has an invalid length. [ 281.751543][T10998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1262'. [ 281.804720][T10989] syzkaller0: create flow: hash 2524754791 index 0 [ 281.966043][ T13] syzkaller0: tun_net_xmit 76 [ 281.967932][ T13] syzkaller0: tun_net_xmit 48 [ 281.996055][ T5820] syzkaller0: tun_net_xmit 76 [ 282.120809][T11010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 282.198669][T11019] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 284.670967][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 284.702839][T10983] syzkaller0 (unregistered): delete flow: hash 2524754791 index 0 [ 284.726178][T11034] tun0: tun_chr_ioctl cmd 2148553947 [ 284.939580][T11043] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1272'. [ 285.840148][T11096] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1280'. [ 285.840172][T11096] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1280'. [ 286.155192][T11113] netlink: 'syz.5.1283': attribute type 3 has an invalid length. [ 286.155762][T11113] netlink: 'syz.5.1283': attribute type 3 has an invalid length. [ 286.353869][T11118] bond2: entered promiscuous mode [ 286.353929][T11118] bond2: entered allmulticast mode [ 286.354270][T11118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.535309][T11113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.900640][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1288'. [ 286.955736][T11113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.323821][T11113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.329195][T11158] ip6t_frag: unknown flags 6 [ 287.403592][T11163] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1292'. [ 287.449921][T11147] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1292'. [ 287.837902][T11113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.409353][T11201] syzkaller1: entered promiscuous mode [ 288.409546][T11201] syzkaller1: entered allmulticast mode [ 288.595577][T11197] netlink: Failed to add helper -22 [ 288.595681][T11197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.038551][T11242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1309'. [ 290.173675][ T32] INFO: task syz.0.768:8736 blocked for more than 143 seconds. [ 290.173727][ T32] Not tainted syzkaller #0 [ 290.173738][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.173763][ T32] task:syz.0.768 state:D stack:24344 pid:8736 tgid:8735 ppid:5611 task_flags:0x400040 flags:0x00080002 [ 290.173897][ T32] Call Trace: [ 290.173922][ T32] [ 290.173961][ T32] __schedule+0x17db/0x58f0 [ 290.174084][ T32] ? __pfx___schedule+0x10/0x10 [ 290.174150][ T32] ? schedule+0x90/0x2b0 [ 290.174192][ T32] schedule+0x164/0x2b0 [ 290.174249][ T32] schedule_preempt_disabled+0x13/0x30 [ 290.174287][ T32] __mutex_lock+0x7c1/0x1550 [ 290.174349][ T32] ? __mutex_lock+0x5d4/0x1550 [ 290.174393][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 290.174446][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 290.174512][ T32] ? kernel_text_address+0xa5/0xe0 [ 290.174552][ T32] ? __kernel_text_address+0xd/0x30 [ 290.174588][ T32] ? unwind_get_return_address+0x4d/0x90 [ 290.174647][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 290.174718][ T32] ? stack_trace_save+0xa9/0x100 [ 290.174769][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 290.174804][ T32] ? check_path+0x21/0x40 [ 290.174848][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 290.174906][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 290.174970][ T32] ? kasan_save_track+0x4f/0x80 [ 290.175007][ T32] ? kasan_save_track+0x3e/0x80 [ 290.175043][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 290.175081][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 290.175131][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 290.175172][ T32] ? netlink_dump+0x1e7/0xee0 [ 290.175209][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 290.175245][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 290.175298][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 290.175341][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 290.175392][ T32] ? genl_rcv+0x28/0x40 [ 290.175431][ T32] ? netlink_unicast+0x8ef/0xa80 [ 290.175465][ T32] ? netlink_sendmsg+0x813/0xb40 [ 290.175505][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 290.175561][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 290.175597][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 290.175631][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 290.175667][ T32] ? do_syscall_64+0x166/0x520 [ 290.194602][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.194729][ T32] ? rcu_is_watching+0x16/0xb0 [ 290.194771][ T32] ? trace_kmalloc+0x2a/0xf0 [ 290.194827][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 290.194866][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 290.194903][ T32] ? netlink_dump+0x1e7/0xee0 [ 290.194958][ T32] ? netlink_dump+0x1e7/0xee0 [ 290.195002][ T32] genl_dumpit+0x10b/0x1b0 [ 290.195061][ T32] netlink_dump+0x711/0xee0 [ 290.195125][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 290.195190][ T32] ? genl_start+0x497/0x6d0 [ 290.195254][ T32] __netlink_dump_start+0x589/0x7b0 [ 290.195299][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 290.195357][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 290.195414][ T32] ? genl_get_cmd+0x523/0x960 [ 290.195461][ T32] ? __pfx_genl_start+0x10/0x10 [ 290.195513][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 290.195555][ T32] ? __pfx_genl_done+0x10/0x10 [ 290.195626][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 290.195686][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.195744][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 290.195817][ T32] netlink_rcv_skb+0x226/0x4a0 [ 290.195856][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.195911][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.195986][ T32] ? down_read+0x2be/0x330 [ 290.196045][ T32] genl_rcv+0x28/0x40 [ 290.196086][ T32] netlink_unicast+0x8ef/0xa80 [ 290.196169][ T32] netlink_sendmsg+0x813/0xb40 [ 290.196217][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.196279][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 290.196339][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.196376][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 290.196447][ T32] ____sys_sendmsg+0x54e/0x850 [ 290.196504][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.196565][ T32] ? import_iovec+0x73/0xa0 [ 290.196626][ T32] ___sys_sendmsg+0x2a5/0x360 [ 290.196661][ T32] ? __lock_acquire+0x747/0x2de0 [ 290.196701][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.196741][ T32] ? futex_wait+0x2a2/0x390 [ 290.196836][ T32] ? __fget_files+0x2a/0x420 [ 290.220716][ T32] ? __fget_files+0x3a2/0x420 [ 290.220786][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 290.220843][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.220916][ T32] do_syscall_64+0x166/0x520 [ 290.220975][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.221010][ T32] ? clear_bhb_loop+0x70/0xc0 [ 290.221050][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.221084][ T32] RIP: 0033:0x7f6100d9e559 [ 290.221117][ T32] RSP: 002b:00007f6101bd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.221152][ T32] RAX: ffffffffffffffda RBX: 00007f6101025fa0 RCX: 00007f6100d9e559 [ 290.221181][ T32] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 290.221208][ T32] RBP: 00007f6100e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 290.221220][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.221246][ T32] R13: 00007f6101026038 R14: 00007f6101025fa0 R15: 00007ffef8556968 [ 290.221309][ T32] [ 290.221433][ T32] [ 290.221433][ T32] Showing all locks held in the system: [ 290.221442][ T32] locks held by kworker/u8:0/12: 2, on CPU#0: [ 290.221472][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.221571][ T32] #1: ffffc90000117c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.221664][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 290.221677][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.221771][ T32] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.221867][ T32] #2: ffff88801cf3d258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 290.221971][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 290.221999][ T32] #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 290.222093][ T32] #1: ffffffff9bd4be38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 290.222188][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 290.222200][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 290.222291][ T32] locks held by kworker/u8:2/43: 2, on CPU#0: [ 290.222320][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.222399][ T32] #1: ffffc90000b37c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.222498][ T32] locks held by kworker/u8:3/50: 2, last CPU#0: [ 290.222526][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.222620][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.222730][ T32] locks held by kworker/u8:6/153: 2, last CPU#0: [ 290.222757][ T32] #0: ffff8880791c6140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.222857][ T32] #1: ffffc90002d5fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 290.235593][ T32] locks held by getty/5371: 2, on CPU#0: [ 290.235626][ T32] #0: ffff888036fb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.235722][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 290.235830][ T32] locks held by syz.2.726/8580: 2, on CPU#1: [ 290.235858][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.235950][ T32] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 290.236048][ T32] locks held by syz.0.768/8736: 3, on CPU#0: [ 290.236061][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.236155][ T32] #1: ffff88801cb536e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 290.236246][ T32] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 290.236344][ T32] locks held by syz-executor/9187: 3, last CPU#1: [ 290.236357][ T32] #0: ffff888079db4460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 290.238703][ T32] #1: ffff888077f014a0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 290.238833][ T32] #2: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 290.238941][ T32] locks held by syz.1.1307/11236: 2, last CPU#0: [ 290.238971][ T32] #0: ffff888036c3e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 290.239044][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 290.239141][ T32] locks held by syz.3.1308/11237: 2, last CPU#0: [ 290.239169][ T32] #0: ffff888022e90f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 290.239240][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 290.239335][ T32] locks held by modprobe/11238: 1, last CPU#0: [ 290.239363][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 290.239440][ T32] locks held by modprobe/11243: 1, last CPU#0: [ 290.239467][ T32] #0: ffff888036c38f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 290.239560][ T32] locks held by syz.6.1310/11244: 1, last CPU#1: [ 290.239588][ T32] #0: ffff88803f8fb088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 290.248183][ T32] [ 290.248209][ T32] ============================================= [ 290.248209][ T32] [ 290.248247][ T32] NMI backtrace for cpu 0 [ 290.248264][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 290.248284][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.248295][ T32] Call Trace: [ 290.248302][ T32] [ 290.248309][ T32] dump_stack_lvl+0xe8/0x150 [ 290.248341][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 290.248370][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.248402][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 290.248432][ T32] sys_info+0x135/0x170 [ 290.248456][ T32] watchdog+0xfd7/0x1030 [ 290.248484][ T32] ? watchdog+0x1c7/0x1030 [ 290.248509][ T32] kthread+0x38b/0x480 [ 290.248528][ T32] ? __pfx_watchdog+0x10/0x10 [ 290.248547][ T32] ? __pfx_kthread+0x10/0x10 [ 290.248566][ T32] ret_from_fork+0x514/0xb70 [ 290.248587][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 290.248606][ T32] ? __switch_to+0xc89/0x1420 [ 290.248634][ T32] ? __pfx_kthread+0x10/0x10 [ 290.248654][ T32] ret_from_fork_asm+0x1a/0x30 [ 290.248687][ T32] [ 290.248771][ T32] Sending NMI from CPU 0 to CPUs 1: [ 290.248817][ C1] NMI backtrace for cpu 1 [ 290.248830][ C1] CPU: 1 UID: 0 PID: 11222 Comm: syz.4.1304 Not tainted syzkaller #0 PREEMPT(full) [ 290.248852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.248864][ C1] RIP: 0010:hrtimer_interrupt+0x400/0xaa0 [ 290.248896][ C1] Code: 00 4c 89 f7 4c 89 fe e8 be ac 13 00 4d 39 fe 7d 0f e8 e4 a9 13 00 4c 8b 7c 24 10 e9 c2 00 00 00 48 8b 44 24 30 42 80 3c 20 00 <74> 08 48 89 ef e8 f6 8a 84 00 48 b8 ff ff ff ff ff ff ff 7f 48 89 [ 290.248913][ C1] RSP: 0018:ffffc90000a18d10 EFLAGS: 00000046 [ 290.248930][ C1] RAX: 1ffff110170a505e RBX: ffff8880b8528280 RCX: ffff88803c7f0000 [ 290.248946][ C1] RDX: 8000000001000101 RSI: 00000043925bf7be RDI: 00000043925c147b [ 290.248960][ C1] RBP: ffff8880b85282f0 R08: 0000000001000101 R09: 0000000000000001 [ 290.248973][ C1] R10: dffffc0000000000 R11: fffff52000143190 R12: dffffc0000000000 [ 290.248989][ C1] R13: ffff8880b85284a8 R14: 00000043925c147b R15: 00000043925bf7be [ 290.249004][ C1] FS: 000055557e333500(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 290.249021][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.249035][ C1] CR2: 0000200000000300 CR3: 00000000798aa000 CR4: 00000000003526f0 [ 290.249052][ C1] Call Trace: [ 290.249059][ C1] [ 290.249083][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 290.249109][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 290.249132][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.249153][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 290.249174][ C1] Code: f7 e8 4d 80 b8 f5 f7 c3 00 02 00 00 74 05 e8 40 cf e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 7d a9 f5 65 48 8b 05 cc 7f aa 08 48 85 c0 74 18 5b 41 5e e9 [ 290.249191][ C1] RSP: 0018:ffffc90000a18f40 EFLAGS: 00000206 [ 290.249206][ C1] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000102 [ 290.249220][ C1] RDX: 0000000000000002 RSI: ffffffff8e469cbf RDI: 0000000000000001 [ 290.249233][ C1] RBP: 0000000000000003 R08: ffffffff917a747f R09: 1ffffffff22f4e8f [ 290.249247][ C1] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: 0000000000000009 [ 290.249260][ C1] R13: 0000000000000008 R14: ffff8880b8528280 R15: 0000000000000100 [ 290.249284][ C1] handle_softirqs+0x226/0x860 [ 290.249312][ C1] ? do_softirq+0x77/0xd0 [ 290.249339][ C1] ? __vsock_release+0x435/0x500 [ 290.249358][ C1] do_softirq+0x77/0xd0 [ 290.249381][ C1] [ 290.249387][ C1] [ 290.249394][ C1] __local_bh_enable_ip+0x100/0x140 [ 290.249420][ C1] __vsock_release+0x435/0x500 [ 290.249449][ C1] vsock_release+0x99/0x100 [ 290.249469][ C1] __sock_release+0xa0/0x1f0 [ 290.249495][ C1] ? __pfx_sock_close+0x10/0x10 [ 290.249518][ C1] sock_close+0x1c/0x30 [ 290.249541][ C1] __fput+0x40d/0xa50 [ 290.249573][ C1] task_work_run+0x1d9/0x270 [ 290.249596][ C1] ? __pfx_task_work_run+0x10/0x10 [ 290.249622][ C1] exit_to_user_mode_loop+0x204/0x770 [ 290.249645][ C1] ? rcu_is_watching+0x16/0xb0 [ 290.249672][ C1] do_syscall_64+0x328/0x520 [ 290.249695][ C1] ? trace_irq_disable+0x3b/0x140 [ 290.249716][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.249735][ C1] ? clear_bhb_loop+0x70/0xc0 [ 290.249758][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.249777][ C1] RIP: 0033:0x7f997879e559 [ 290.249793][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.249809][ C1] RSP: 002b:00007ffd746b7498 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 290.249828][ C1] RAX: 0000000000000000 RBX: 00007f9978a27da0 RCX: 00007f997879e559 [ 290.249841][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 290.249853][ C1] RBP: 00007f9978a27da0 R08: 0000000000000006 R09: 0000000000000000 [ 290.249865][ C1] R10: 00007f9978a27cb0 R11: 0000000000000246 R12: 0000000000046da6 [ 290.249879][ C1] R13: 00007f9978a2618c R14: 0000000000046d24 R15: 00007f9978a26180 [ 290.249902][ C1] [ 290.267279][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 291.654572][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 291.663667][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.673715][ T32] Call Trace: [ 291.676996][ T32] [ 291.679924][ T32] vpanic+0x56d/0xa60 [ 291.683907][ T32] ? __pfx___schedule+0x10/0x10 [ 291.688754][ T32] ? __pfx_vpanic+0x10/0x10 [ 291.693264][ T32] panic+0xc5/0xd0 [ 291.696978][ T32] ? __pfx_panic+0x10/0x10 [ 291.701384][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 291.706841][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 291.712202][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 291.718352][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 291.724502][ T32] watchdog+0x1030/0x1030 [ 291.728834][ T32] ? watchdog+0x1c7/0x1030 [ 291.733240][ T32] kthread+0x38b/0x480 [ 291.737296][ T32] ? __pfx_watchdog+0x10/0x10 [ 291.741958][ T32] ? __pfx_kthread+0x10/0x10 [ 291.746538][ T32] ret_from_fork+0x514/0xb70 [ 291.751113][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 291.756219][ T32] ? __switch_to+0xc89/0x1420 [ 291.760886][ T32] ? __pfx_kthread+0x10/0x10 [ 291.765462][ T32] ret_from_fork_asm+0x1a/0x30 [ 291.770220][ T32] [ 291.773499][ T32] Kernel Offset: disabled [ 291.777827][ T32] Rebooting in 86400 seconds..