last executing test programs: 10m14.684546081s ago: executing program 1 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0x1000}) 10m14.017745963s ago: executing program 1 (id=1002): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c0000000102030000000000000000000a00000514000a800800014000000001080001400000000064000280060003400000000014000180080001000a01010008000200ffffffff0c00028005000104210000000c00028005000100110000002c0001801400030032e5000000000000000000000000003a14000400ff0100000000000000000000000000010f000600746674702d32303030300000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bond\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x1, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x48) r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r8}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)={0x1, 0x99b, 0x18, {0x0, 0xea60}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2e, 0x2, 0x0, 0x0, "a77d5b5df3c0955dacbdbaf034816c24697dd8e960e6781250a5fbbbc5fb90a0400273acad08b9b0a609a7163bd22471cd17674fdeb717626dd531f7d06e7c02"}}, 0x80}, 0x1, 0x0, 0x0, 0x400d4}, 0x20044095) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x440, 0x100000c, 0x2c0, 0x1f0, 0x2c0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x0, 0x4, 0x63, 0x100081, 0xfffffffb, 0x3, 0x84, 0xfff, 0x20}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0xff, 'syz_tun\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x9, 0x2e, 0xb, 0x3c, 0x2d, 0x20, 0x21, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x24, 0x5, 0x33, 0x1d], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x800, 0x8, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x2, 0x6, 0x1, 0x7f, 0x1, 0x6]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 10m13.279654533s ago: executing program 1 (id=1003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e24, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e2bba}}, 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001110000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x0) 10m12.649110424s ago: executing program 1 (id=1005): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000280)={{0xffffffffffffffff, &(0x7f0000000000)='\'*\xff]$\'\x00', 0x4000, &(0x7f0000000040)={@_ha_fsid={[0xe0063c7, 0x5]}, {0x0, 0x1000, 0x0, 0x1}}, 0x7fff, &(0x7f0000000080), &(0x7f00000000c0)=0x8}, 0x2, &(0x7f0000000240)=[{0x2, 0x8, &(0x7f0000000100)='\x00', &(0x7f0000000140)="de392f8aa8cda8d976cc41ca322536eb443593e13082a09de6e01767d754e9991e20947ab55d577d5a2d52a86a12a0d2238cd53510c2efee8a0e7fed6b1c0734c64ef959a794a971fab9cd52", 0x4c, 0x8}, {0x1, 0x4, &(0x7f00000001c0)='*\xed,\x00', &(0x7f0000000200)="26880bb21cf3", 0x6, 0x30}]}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000300)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000340)=0x2c) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000380)={0x6b, "0f6d23004231f0ec9fb89453866d6bf2dae81ae6c012a0116e1cc0b04d7b2b08915993af05256f654f90c970d0da02b9626648de23ed302a01cbc888074d0a1747a315792751338a34659c0ce1a9d9899e6ba209580749e232c93cb288c52d6eb17f8466f0d29541974ae7cd1f3a6346330ff287c49edd29080ed8cc2d50cb9c"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x800}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000600)) ioctl$int_out(r1, 0x2, &(0x7f0000000640)) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x40800) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000780)=0x2d, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000007c0)={0x0, 0x1, 0x2, 0x0, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x5}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000880)={r3, 0xf98}, &(0x7f00000008c0)=0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8000) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000a80)={r3, 0x9596, 0x4, 0x1ff, 0x97b, 0xc, 0xc66, 0x5, {r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x9, 0x2, 0x2, 0x6}}, &(0x7f0000000b40)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000b80)={r6, 0x3}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000c00)={0x2, [0x1, 0xaa0]}, 0x8) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000c80), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000081) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000e40)={r4, 0x80000000, 0x2, 0x7, 0x5561, 0x3a, 0x8, 0x8, {r7, @in6={{0xa, 0x4e24, 0x78, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, 0x36, 0x7ba, 0x3, 0x7, 0x6c22}}, &(0x7f0000000f00)=0xb0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x804) bind$tipc(r0, &(0x7f0000001080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x4}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000011c0), r10) 10m11.548789138s ago: executing program 1 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbee9, 0x12, r0, 0xb6ca3000) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000500000086be30f83e000000000800000000000014708f853027f201178bdcb5cae7083cbf2c02384ce2dcfe3e8c063ea6f6343a3a42e7abbb4d163de382ad9bf1ec1125237ef35c0dfe766d2179e5c25c23af27bf342aa47b329ab9ed9e1dd751e6ac169dea13d62e69954d23ab10b8275e7ceea44c6277ad5445393fd9b41a7fdcbc503bbcf483d83a318960999cc15257a7724864deece883909b393d44f516ad28ef9d118583c921119cc5de1e61bdab7f031c29290a990fa4531b00"/209], 0x18}, 0x40c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004819}, 0x40) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000b17000/0x3000)=nil, 0x3000, 0x0, 0x102050, r4, 0x180000000) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) close(r1) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1100c6bd7000030000000f00000008000300", @ANYRES32=r7, @ANYBLOB="08002b007f00000005002e00"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x400c0) r9 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="0001"], 0x1f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 10m10.634090631s ago: executing program 1 (id=1018): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$kcm(r1, &(0x7f0000003500)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e24, 0xfaf, @local, 0xc}}}, 0x80, 0x0, 0x0, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x150}, 0x20000094) sendto$phonet(r1, &(0x7f0000000040)="aba15449862c6e9fef1a4b35e041c136b9cc8c16695729ad74d603b9e5839561dc9480f459eb42f43b0c7f2f5195b89627546ba1b4e56177c2c676485843f1f5647055ef80af1a131f1a0c3b582fcb9cd6fdacead7d60228658821387ce1b3d32dcb774681bd2aaa7b48ed428379c4848b0e5de4faf3a619aa3438931d2a65b92d403e4e24efa9bc7a501f7b9ca1bfbb50b29989781ac1b87374d784ea95c551e0d8a866d59e85db60bd1c3de7c2e13ba2a2bba9412497476aac0a087817445abfaf701be6f7ffffb6791869317bf3ba6540d680f100", 0xd6, 0x8000, &(0x7f0000000140)={0x23, 0x7, 0x7, 0x3}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x100) 9m55.474338655s ago: executing program 32 (id=1018): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$kcm(r1, &(0x7f0000003500)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e24, 0xfaf, @local, 0xc}}}, 0x80, 0x0, 0x0, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x150}, 0x20000094) sendto$phonet(r1, &(0x7f0000000040)="aba15449862c6e9fef1a4b35e041c136b9cc8c16695729ad74d603b9e5839561dc9480f459eb42f43b0c7f2f5195b89627546ba1b4e56177c2c676485843f1f5647055ef80af1a131f1a0c3b582fcb9cd6fdacead7d60228658821387ce1b3d32dcb774681bd2aaa7b48ed428379c4848b0e5de4faf3a619aa3438931d2a65b92d403e4e24efa9bc7a501f7b9ca1bfbb50b29989781ac1b87374d784ea95c551e0d8a866d59e85db60bd1c3de7c2e13ba2a2bba9412497476aac0a087817445abfaf701be6f7ffffb6791869317bf3ba6540d680f100", 0xd6, 0x8000, &(0x7f0000000140)={0x23, 0x7, 0x7, 0x3}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x100) 8m42.328549342s ago: executing program 2 (id=1563): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) 8m41.056797409s ago: executing program 2 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'team0\x00', 0x2000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006480000000c0a01030000000000000000070000070900020073797a31000000000900010073797a30000000001c0003801800008008000340000000020900090073797a3000000000140000006600010000000000000000000084000a"], 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@delqdisc={0x2c, 0x26, 0x309, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xb, 0xb}, {0x4, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000d0) 8m39.724851416s ago: executing program 2 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40002}, 0x20000800) (async, rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r1, 0x11, 0x0, 0x3}, 0x14}}, 0x0) (rerun: 64) 8m39.092735141s ago: executing program 2 (id=1580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@tmpl={0x184, 0x5, [{{@in=@broadcast, 0x4d4, 0x2b}, 0xa, @in=@broadcast, 0x3500, 0x0, 0x3, 0x3, 0x1, 0x3ff, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d2, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x34ff, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@remote, 0x4d4, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4bec3d16756ef28e, 0x3, 0x4f, 0xb48, 0xfff, 0x53}, {{@in=@loopback, 0x453, 0x2b}, 0x2, @in6=@loopback, 0x3504, 0xfdadbf66eb8f5390, 0x0, 0xd8, 0x3, 0x4, 0x9}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x3c}, 0x2, @in6=@private2, 0x0, 0x0, 0x0, 0x6, 0xa7e, 0x3, 0x8}, {{@in6=@local, 0x4d6, 0x33}, 0xa, @in=@broadcast, 0x34ff, 0x0, 0x2, 0xff, 0xc0000000, 0x101, 0x1}]}]}, 0x23c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xbffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) 8m38.500620456s ago: executing program 2 (id=1585): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="c5d83bffc24abf0e04a42b856c4c65b3a651b0369ae4c8ccd12a031c35eccd5967", 0x21}, {&(0x7f0000000180)="b328f65422f31b678ba4460d181b6ebd33c850690bda833b2b7aab72c9f94ad6a4bc23f48a8efaa751f8a7d0636df54d589e8243f23ab17e64578edc3bf373acde2f926defcba159bc3bd87109a2a58eb8a5", 0x52}, {&(0x7f0000000200)="c3c62d2c9afe180c13e336f5ef3f4b528dc6eb50ff7062888e5929e3f588a174ab523686fde989b6271d8252326e1758c7a497001dbd2879a0a09013d95a5d7dab575edde7d99873376af5f1feb19365b6e86fd173dda43fb40733c8686e3cda5712413ca8a6cd073ee92aefbb3ddb6cc63b87a1c3ea5371dd25b5c452cbc7089d3028db422339f200502486091afbf9945d5cfa571bc4a4a749a91e9a0289a4a6db29717221ea4f1101171996275ca183a32068c54945792ea65972ef55e9582b392e1bf8fa2bc818b45d57a14f84ae2be5bf6cb3288d2daf84292ec2c363957b97ffe839f90aac77cb", 0xea}, {&(0x7f0000000300)="0850f13af8b2333b693aff0d6d64ef7eed89421fd6eca2b37d310083f2db44a8b6f0ed3f071b367b5c588b65c55098e8780cafba8a25022af4bcea269fa70815ff9313d21f9695f167c55c8fb735ee5d71dd7fc36df42d03b783b5a642ee44739d425b2a7142cda7fbf6ec6cbffc22671722993734117f8cf8f94737fc9173cd84b6a245ec039d70924ec16c1ca55f8e2f979826cb55462601112ffeb3904a7ce601d29a639ca3f05d0a2112b331833a526a1a8f849dbcf6c58db7bfcdd83160fa798af4b70c2056ac5a18e28c", 0xcd}], 0x4}, 0xc051) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f0000000580)) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000780)=""/193, 0xfde4}], 0x2, 0x0, 0x7}}, @rdma_args={0x0, 0x114, 0x1, {{0x4, 0x6}, {&(0x7f00000008c0)=""/97}, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/35}, {&(0x7f0000000980)=""/239}, {&(0x7f0000000a80)=""/135}, {&(0x7f0000000b40)=""/211}, {&(0x7f0000000c40)=""/111}, {&(0x7f0000000cc0)=""/245}], 0x0, 0x1, 0x10001}}], 0xa0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000540)={0x0, @aes128, 0x0, @desc3}) socketpair(0x2a, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1f0}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4011) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000200000007b1130000000002a3a3be773623912df850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 8m37.377293511s ago: executing program 2 (id=1595): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000580)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00060000000000010000000000000058"}}}]}, 0x48}}, 0x20008080) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00060000000000010000000000000058"}}}]}, 0x48}}, 0x20008080) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000055000004000000ff0300000000000000882170f115a066cbdff15375ad5e5e43206c186e62932269597fd77f679bb398f6e4665d78141be9a687c01a577769", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000055000004000000ff0300000000000000882170f115a066cbdff15375ad5e5e43206c186e62932269597fd77f679bb398f6e4665d78141be9a687c01a577769", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x38}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) (async) sendmsg$inet6(r9, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r12, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd841}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40004}, 0x20000094) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104010000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a2c0012801100010062726964676500000000766500000000140005800500190002000000080025000800ff00140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 8m22.210049403s ago: executing program 33 (id=1595): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000580)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00060000000000010000000000000058"}}}]}, 0x48}}, 0x20008080) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00060000000000010000000000000058"}}}]}, 0x48}}, 0x20008080) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000055000004000000ff0300000000000000882170f115a066cbdff15375ad5e5e43206c186e62932269597fd77f679bb398f6e4665d78141be9a687c01a577769", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000055000004000000ff0300000000000000882170f115a066cbdff15375ad5e5e43206c186e62932269597fd77f679bb398f6e4665d78141be9a687c01a577769", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x38}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) (async) sendmsg$inet6(r9, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r12, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd841}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40004}, 0x20000094) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104010000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a2c0012801100010062726964676500000000766500000000140005800500190002000000080025000800ff00140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5m23.456930886s ago: executing program 3 (id=2982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0xffffffffffffff6f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r2 = socket(0xf, 0x800, 0xf9f7) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x7, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000a80)={{0x0, 0x8, 0x8, 0xffffffffffffffff, 0x9, 0x4, 0xffffffff, 0x146f, 0xfffff72b, 0x7ff, 0x3, 0x198, 0x9, 0x5, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003a40)={{r4, 0x0, 0x8, 0x4, 0x85f, 0x7, 0x7, 0x300000, 0x9c, 0x80, 0x7, 0x80, 0x101, 0x4, 0x10001}}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0) 5m23.339508102s ago: executing program 3 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001a0000042abd700bfddbdf2500000000aaf370c6025766d221b31c3c003f8fbf6dacbf6af861c282641ab740793fe6d28ea1e338bd1dac0e8b454dcb253a797bdc89b00d32bb25068c0cce4fb3aa29631d3f58"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m23.190563679s ago: executing program 3 (id=2987): r0 = socket$netlink(0x10, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r5, 0x0) sendmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f0000000480)=@nfc={0x27, r3, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000540)="0013b9027870", 0x6}, {&(0x7f0000000580)="e9bf2d1940ef8a2380be180d643d6f2c109bf38024b181b109dd96829c6ceb070663894e0a2fd4b8f6bc3342e373a89f713058ba31612e0f64a9de23f2c741448e8d515d03c36df563084d1570a187c61aef199d9524afd44b4eb72ed59dc7f6d09441ee98aba4e066635bbb7c4f9e8c0556690980461f5ad8f206243114441c3ccfdee027ac6f67b08184fa418d92ecb01993271a4efc20a118eeac57df25d26694a284dfe8aa58ec9a00d0d26b74edaf0a8beecc163958684bc05d992c3061eec714f248c5f6d037b4bf018159", 0xce}, {&(0x7f0000000700)="c0b58792b1edaf9fe8b05a3cde2c8d2e9de091fd44400b687bccf9262b481d8a8a055acac26d71b67d1959c343b47c09b6def3eb6f46c6e4ae92754c9efbc1fe024ff74ad470a7ec4317c25e6bb73be0c022d23470dd5e88fd8a462ee016cda0d8257516e5bc9c7eb8afcca735e561f8b32e36766bb6789da85883767e31cf8eb34c05091d9fa1f47f95adaa19f0c3b60524f86d0258257383c1174d5a281321cf15196b", 0xa4}, {&(0x7f00000007c0)="e39ac5cad66a0c12ec5b468aa669464643a3bf7498775711afc373df016aa43f21ad2f14bdb6b87b31c6645a73a1ef446384cf3dda48bc4a6a0a413d819062686bd1dad8cb18dfb6ef256443b1d62b3ca172182d8ac9ce168d5ed60b0e4b98a169d997504bf64ff1a39b1eae3bd017c68b5baa2bb0bbe7e0a59fbd59a265044481b351338b3ae13a5e0215fc94fd66533fa8e3a7ac57d0c799b32dcf5ea035823ad5156b4833709de9e78caca98415ee3fa3217bbae6a1d948b93b2147205138eef4f960084c68e2e785061b95561a0b07929ccada87edefc70f0dd2a57c6bca31a021c8e887", 0xe6}, {&(0x7f00000008c0)="bccc8cf594401f600d8dfaea1a45015fa98549a9efb461030a055d8338622e76aa1d204940ad72a217dda93d7e0a7e42451577ebd578aaf021c6b23cdabbe69f002177a26e5f08476ec3a0b5447dd36a4a64f97f22763a921ab3a4daa13f8ddeabf9dae82671c8cbc68d572769a5e50d592fe589d030042ea7974941cee50ae66b3ffdb77eb24922eed3d8dddde2", 0x8e}, {&(0x7f0000000980)="c238fd38f0b8df7a08020ad58e4d7447249c414dbef0df8183249eff289045eaf1e213ce55cf9eff057dd4dcb9be8faea5759554716d", 0x36}, {&(0x7f00000009c0)="96c47eee155e9e6e1f5d9633b5d6f0fe5e59e773d076294a3965872cb9b4baee1f8c5069f36ceddfd0dd03c8d08821eb600d8f03f7a6a602f842ec434f78c4156d67e3494b1ddeb41760663b2d6278d0eb65a25525c2827bbab9874d3d5f8d50333d990502079b20340506dc2c2b52e384df23e00331707b8ce2a24d165349a53d316daa4a99eb062b9441105487dc1c6db9a60833d88f42d1fcd748e9be533200ff03b5605cf4c564cf640d5563919164c1337c914053e3d54ecf1773a7ee1c30c199e094ce594a40685bbdd4f65203918f965814c6", 0xd6}, {&(0x7f0000000ac0)="daec7c543daeb7e34ac71ff857b685a62da4b629c2ba594f3c7db617b6a92da2b83f0af742b72c8f46a3f3461d65b9b3c02df5db46", 0x35}, {&(0x7f0000000b00)="8d146f92b07d4daaf0755dbf10811bae1a40c719703382ed9e69ccae6d06ed7959", 0x21}], 0x9, &(0x7f0000000c00)=[{0xa8, 0x109, 0xe, "b8de579dabd4766098786e7d248e2f5ea1d7813233a98a5d9b76547bd084f38bd1077b9edefea3c2da0abf3b3258ee597fa67ced870db7b58b1f11e4bec81cbe0ccd13a8123e4321084e6c7fb674118dc47e8839066678fbbfd460716214d60687ffa868dd5dd8ecc1b1384cf4c3b1b53961322b0a7a140ea47cd7af6d403bcee3ccb2bed756cbcfaac77a08956ea0590b7c807f95f0d0ed"}, {0x20, 0x116, 0x4, "69c35e2a68105850270f6ff053"}, {0xe0, 0x113, 0x4, "9e6d82f0501180b9e163c371e58fb773e943389fd9016d5e2badd9b25c637131737618c91aa627fe6f147ac973b64ae3e12d3d3918832684a88e3c6194d0c43a5c5aac2ff02a8c7881fdd0b3e765fe412313f5077ee99e75719ce64c50490bb509e5a476fa25f4dc8fede0d1a2c9e8f4cf2b2b6ccfe24c7245d7f2c72937084a07c473f620777aa9e999e9db67de95b853f09a06aa282a4e10c4ba4f1536860d4c9ee543cce178710dcaa517bb7ed961fb02c3e933003ca9dd246aea591792730eee98d945f7ee4f3f6439c7"}, {0xd8, 0x114, 0xfffff801, "cfe32f52e2ae72f7ddcd513aabd2c7b5c6196b9b1b652fc01debe05f27ad5fdf414153a1fc65e7a13ae563a1f152963aeab1f169b55fd2d9f4d01381b4d3b43573a31755bbdd878a5dea27bc09c2073ec07c32fd9dcbccef476d6acdab36be5783dae95aa9903660356bebf0fbceeda3a1e6f3e63afd69f1861d668940670a2f99b37ae08a1d3d4c1b55ad330d304168b8ba4c06040a39abe42c72c01cb2094b229d5d1e4db95d528e3cad887dfd8d3a5f47264a17d67117b53179e499d0e834b28f6c"}, {0x58, 0x88, 0x0, "e008a5ae6f8ec576cffe7cc9c273732b8250f340fe4fa1191a4fb677d347dcbed143257b03688d1bf29d334a20f0c89e7795cc2cec477fe03a3a266667cb1e0fd6e7"}], 0x2d8}}], 0x1, 0x20000002) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r9, 0x7}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) read(r0, &(0x7f0000000100)=""/129, 0x81) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8) r11 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r11, 0x29, 0x17, 0x0, 0x0) 5m22.93878408s ago: executing program 3 (id=2990): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r2 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c1400fe0000000000000000"], 0x1c}}, 0x0) 5m22.680877381s ago: executing program 3 (id=2992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) write(r1, &(0x7f00000001c0)="dbd269d4dead0ac3cd2e4b4a69a36d7800aae3de00628a81c92972eb8a834474910f856d8205b5eb74f9b8b7cc9c806a1e264d6f9fde5b4b655cb62ef497f321f71a647c7e4bc59dc0168fdfe51b9ddecd03709c74fba4ca29e65ec9b149a63247a6a739270e9e", 0x67) (async) r2 = socket(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) (async) getsockopt(r2, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x38, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}]}, 0x38}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) 5m21.689627859s ago: executing program 3 (id=3001): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000700)="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", 0xfdef}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) 5m6.657672616s ago: executing program 34 (id=3001): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000700)="f3aa82759ac798172d9a0b81ce423913d33af2cd35426aa174efaca4cf53f8fcb932c4a14908e2ea9f6c57968e7dc31921e889e6d97b021089c4a5ad4e3e0f734183f5ebd3ae5dff9f5b463d0460061df1fafa468d9618c6e5c8ded39d075b2820f5e9e2517556b1f4d2b30fb490a8a5c251ee232e9475bdccbcb0bb94a5b319ad68bc08dfc75d1ca4fdd5502bec946bf635fcd5cc3c41e2456a46ed63fc987dda67d2a6a94827ab0b93eb3c06f29d7dc20707681d89d74c75445049f8b5c354307a5336d8b17548344043cfda08a00bd4385defa6434dc8735927678a51e10f6c23943c10d4106726ce56091c59d0df9ac5c2e5d97019f9190fe0b015c82733a6052847ec46069f9c6e526b4845237279fd4a5ffc1a8044d2a67233c37daad9b8f8564142c45694ea73ab5f2779faa2820cb6d8ce4d11ddf4df00872f7a46c3bf77645a8646a3f325afd1e91ae758a3fe43620e40", 0xfdef}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) 1m57.928493749s ago: executing program 6 (id=3872): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000640)={r2, "71a32e920ea786e22a0b0b428dd12e40"}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) 1m54.688185063s ago: executing program 6 (id=3875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008045) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 0x4e23, 0x0, 0xa, 0xc0, 0xa0, 0x9b, 0x0, r5}, {0x1, 0x2, 0x17f224ec, 0x3, 0x6, 0x7, 0x10001, 0x40}, {0x100000001, 0x8, 0x6, 0x1}, 0x1, 0x6e6bb4, 0x0, 0x1, 0x3, 0x1}, {{@in6=@loopback, 0x4d6, 0x6c}, 0x2, @in6=@loopback, 0x3503, 0x4, 0x1, 0x0, 0x8001, 0x0, 0x7}}, 0xe8) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x180}, 0x0) 1m53.19608186s ago: executing program 0 (id=3878): r0 = socket(0x2, 0x3, 0xff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x94}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x2}, &(0x7f0000000240)=0x8) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) socket$inet(0x2, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000004) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001680)=ANY=[], 0x18}}], 0x2, 0x4045000) 1m51.03258213s ago: executing program 6 (id=3880): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x2400804c) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) 1m48.605599058s ago: executing program 0 (id=3883): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff050003"], 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000000001"], 0x30}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m45.732175954s ago: executing program 6 (id=3887): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@loopback={0xe000000000000000}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004014}, 0x40080c0) 1m44.922068073s ago: executing program 0 (id=3888): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r0, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3], 0x44}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5ea39063071e922d8afb0b492ca6119fb0f33777da93adbaf7027c0a1f7399bef09dd3620bea7a043f72b5bed07fbb935e5d29abfdc43ff8f535e618bd1b7a40de2dbfb9a4fec192d385dcfa5ee348d4bd6f7bc8c6b937f11fd7eee6b293e398d2be48b977e44495034e1cdcd1735f3f9b2b8ea0be3e046376164ff5e5a5f464080f62f8c9a2bacef94664b6d326c89f176dbdbbd85d93f58e2a8d953039a04a437b14e04cd09b2ec7da00501e979d4f72a3f4fc355fb96f516e2b98fc45babd8780b2e2717247276", 0xf7}], 0x1}, 0x4000804) 1m42.838113787s ago: executing program 6 (id=3889): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0x1}]}}}}}}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_rxfh={0x26, 0x8, 0x0, 0x9, 0x4, "226ac5", 0x5}}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x2}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000ffe5001800128010000600000800020000000000cc3f376b6f7468b26290267610b7d2ef9359d6caf550cd29d735f4abbb75add72c68be93a3f5788231af33a75a36a45d56880aa41ed25bc9f34cd766adb1ef7c92a11958466b8b19dd1f8d72988451858745041142ace54fe2fdcc4f64dc147fa16a93e4aabf6d91b4fea613c4f5c0f200eef493b7790a203629ea8095ba1c9bbcf44c5a9d5a26afc3985ddc9b2299c8114632f4570d44061ceedecd4ad12fbc85660dac5c7b25946910885c5a12f267ee3142c9c846b03f4c898c5a"], 0x38}, 0x1, 0x7500}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000036000100000000000000000002"], 0x114}], 0x1, 0x0, 0x0, 0x2000000}, 0x4) r11 = socket(0x11, 0x3, 0x0) setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg(r11, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r12, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1m38.068682474s ago: executing program 0 (id=3896): syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) 1m34.357079582s ago: executing program 6 (id=3899): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18}}}}}}, 0x0) 1m34.082867641s ago: executing program 0 (id=3900): r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8}, 0x8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f00000001c0)={{0x38000000, 0x2, 0x7f, 0x1}, &(0x7f0000000040)=[{}, {}]}) ioctl$FIONCLEX(r1, 0x5450) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@remote}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000016c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f00000003c0)={0x12b4, 0x1, 0x5, 0x600, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0xbf4}, 0x80, 0x7, 0x7, 0x2, 0x1c, 'syz1\x00', "5aa08fc0e1559cbd8092b9e52394fd858a30e813e245c8328e481366559ad77a", "391c36a7447caa502f776c76e705ed2bce426446ec997f0307f25c18eb7c1ef7", [{0x3, 0x0, {0x2, 0x6}}, {0x5, 0x9, {0x1, 0x5}}, {0x5, 0xf, {0x1, 0x200}}, {0x7, 0x3, {0x1, 0x9}}, {0xe6e, 0x8, {0x0, 0x200}}, {0x1ff, 0x0, {0x3, 0xffff}}, {0x2, 0x4, {0x2, 0x6}}, {0x6, 0x4, {0x2, 0x2}}, {0x8, 0x3, {0x1, 0x6}}, {0x5, 0x80, {0x3, 0x7}}, {0x1, 0x4, {0x1, 0x3fc00000}}, {0x8, 0x3, {0x0, 0x80}}, {0x9, 0x0, {0x1}}, {0x401, 0x4, {0x1, 0xf}}, {0xff80, 0x2, {0x3}}, {0x0, 0x9, {0x0, 0x7}}, {0x8cb9, 0x4c, {0x1, 0xfa}}, {0xa4, 0x7, {0x0, 0x80}}, {0x8000, 0x400, {0x0, 0x8}}, {0xe4b7, 0x4, {0x1, 0x3}}, {0x0, 0x4fd, {0x3, 0xeefd}}, {0x3, 0x3, {0x1, 0xe}}, {0x8571, 0x1ff, {0x1, 0xffffffff}}, {0x9, 0x9203, {0x1, 0xfd4}}, {0x7fff, 0x0, {0x3, 0x7ff}}, {0x80, 0x1, {0x3, 0x8}}, {0x3, 0x3, {0x3, 0x6}}, {0xf, 0xa, {0x0, 0x5}}, {0x2, 0x9, {0x1, 0x2}}, {0x1, 0x0, {0x1, 0x5}}, {0x2, 0xfffa, {0x2, 0x7ff}}, {0x3ff, 0x1000, {0x3, 0xfffffffa}}, {0x4f, 0x6e5, {0x2, 0xad}}, {0x7, 0x400, {0x1, 0x3}}, {0x2, 0x22, {0x1, 0x1}}, {0x7, 0x101, {0x2, 0x1000}}, {0x0, 0x9f2b, {0x1, 0x81}}, {0x7, 0x7, {0x0, 0xf993}}, {0x2d, 0x1, {0x1, 0x4}}, {0x9, 0x3, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x8, 0xb, 0xa, 0x5, 0x16, 'syz0\x00', "270bc017c3838ac3ce29ecd1e8f42f3f96a760892035c9076daee49b4b4e2dc5", "ef434b933e84eff3981b3719bd65a660a48548566a9d8ba4a04e3c6ec5123b1e", [{0x3f, 0x9, {0x2, 0x1}}, {0x1000, 0x3, {0x3, 0x4}}, {0xd4, 0x9, {0x2, 0x8}}, {0x3, 0xbea, {0x3, 0x8000}}, {0x1, 0x1, {0x3, 0x3}}, {0x800, 0x9, {0x3, 0x92}}, {0x7ff, 0x4, {0x0, 0x8fb}}, {0x8, 0x0, {0x2, 0x5}}, {0x5, 0x6, {0x2, 0x1}}, {0x2c7, 0x6, {0x0, 0x3}}, {0x5b, 0x40, {0x1, 0x6}}, {0x1, 0x7, {0x0, 0x4}}, {0x5, 0x4, {0xc59a30879b2b4949, 0x1}}, {0xb6, 0x5}, {0x9, 0x3, {0x0, 0xb0}}, {0x7, 0x9, {0x0, 0x2}}, {0x1, 0xfff7, {0x2}}, {0x7, 0x3, {0x2, 0x3}}, {0x1, 0xd2, {0x0, 0x4}}, {0x2800, 0x8, {0x3, 0x65}}, {0xf6, 0x6, {0x1, 0x9}}, {0x7, 0x101, {0x3, 0x7}}, {0x6, 0x8, {0x2, 0x2}}, {0x8, 0x3, {0x1}}, {0x80, 0x3, {0x3, 0x4}}, {0x9, 0xb7cb, {0x1, 0x6}}, {0x9, 0x6, {0x3, 0x4}}, {0x0, 0x7, {0x6}}, {0x1, 0x3, {0x1, 0x3}}, {0x0, 0x101, {0x0, 0x8}}, {0x10, 0x7, {0x2, 0x8}}, {0x5, 0xfff8}, {0x1, 0x0, {0x2, 0x92}}, {0x1000, 0x47a, {0x1, 0x17405754}}, {0x8, 0x8001, {0x1, 0x8}}, {0x479, 0x9, {0x3, 0x5}}, {0x4, 0xf8c3, {0x0, 0xbfa}}, {0x8, 0x9, {0xb00243da81ea8b59, 0x2}}, {0x1, 0x9, {0x1, 0xfffffeff}}, {0x3, 0x477, {0x3}}]}}}, {{0x254, 0x1, {{0x0, 0xa}, 0x2c, 0x9d, 0x4eef, 0x2, 0x16, 'syz1\x00', "4951e3697d6ee514079b0392be9b751feea6363c63a9c7b4ca64223488281ef3", "a031ec0503edcbb634484ecb58f218bd3889d93a1faa5530bdaf749704e809c9", [{0x6, 0xace3, {0x3, 0x1}}, {0xe00, 0x5, {0x2, 0x101}}, {0x96, 0x5, {0x3, 0xfff}}, {0x4, 0x6, {0x1, 0x7fff}}, {0x0, 0x3ff}, {0x57f0, 0x1580, {0x2, 0x80000000}}, {0xf81e, 0x8, {0x0, 0x6}}, {0x6, 0x5, {0x2, 0x200}}, {0x5, 0x9, {0x3, 0xc9}}, {0x2, 0x80, {0x1, 0x2}}, {0xfff, 0x6, {0x1, 0xbbc}}, {0x3, 0x6, {0x2, 0xab}}, {0x1, 0x7, {0x0, 0x4}}, {0x101, 0x5, {0x1, 0x1}}, {0x2, 0x3, {0x0, 0xffffff81}}, {0x5, 0x8, {0x0, 0xb2}}, {0x43d3, 0x2, {0x1, 0x3}}, {0x5, 0x4, {0x2, 0xe89}}, {0x7, 0x9, {0x3, 0x81}}, {0x1, 0x0, {0x1, 0x2}}, {0x6, 0x8, {0x0, 0x27c66bfa}}, {0x4, 0x6, {0x2, 0x79244e28}}, {0xe, 0xfff, {0x1, 0x1d1}}, {0x5, 0x1}, {0x200, 0x9, {0x2, 0x7}}, {0x8000, 0x8, {0x2, 0x3}}, {0xb4, 0x9, {0x1, 0xd1}}, {0x1, 0x7fff, {0x3, 0x8}}, {0x200, 0xcb51, {0x0, 0x4b}}, {0x9, 0x3a, {0x0, 0x49d}}, {0x6, 0x9, {0x3, 0x8}}, {0x8, 0x6, {0x1, 0x7}}, {0xa, 0x1, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x6}}, {0x6, 0x2a, {0x1, 0x8}}, {0x0, 0x5, {0x2, 0x500000}}, {0x0, 0x5, {0x2}}, {0x0, 0x2, {0x1, 0x2}}, {0x6, 0xdc88, {0x3, 0x2}}, {0x4, 0x6, {0x3, 0xffff8000}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x6, 0x2, 0x5, 0x2, 0x25, 'syz1\x00', "723d1f94410a9972b58fec762c658bfc44549ac11cfc2eca1a5f50e93872a432", "6a9bb54e1a99b2ef398326f58d4add4bd57e7ac451781378f91c67c1cb389cb1", [{0x2d3b, 0x2, {0x3, 0x4}}, {0x9, 0xdcbd, {0x1, 0x7}}, {0x10, 0xfffd, {0x1, 0x6}}, {0x6da, 0xff, {0x1, 0x80000000}}, {0x5, 0x621d, {0x2, 0x10001}}, {0xa4, 0x8, {0x0, 0x800}}, {0x8, 0xc6, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0x6}}, {0x6, 0xff14, {0x1, 0xf}}, {0x2, 0x3, {0x1, 0xa8}}, {0x3, 0x1, {0x2, 0x1}}, {0xcd, 0x1, {0x3, 0x8}}, {0x8, 0x2, {0x3, 0xfffffffd}}, {0x4787, 0x6, {0x2, 0x3}}, {0x3, 0x4, {0x1, 0xffff0000}}, {0xdc, 0x100, {0x2, 0x3}}, {0xe, 0x5, {0x3, 0x1}}, {0x0, 0x8001, {0x0, 0x6}}, {0x56e, 0xfffa, {0x3, 0x8}}, {0x6, 0x4, {0x2, 0x8480}}, {0x336a, 0x4, {0x3, 0x6}}, {0x0, 0x8, {0x0, 0x5}}, {0x7, 0x7, {0x1}}, {0xe, 0x7, {0x1, 0xc799635}}, {0x0, 0x6, {0x0, 0x8cf2}}, {0x14a, 0x8, {0x3, 0xffffffff}}, {0x4, 0x40, {0x0, 0x1}}, {0x7, 0x8, {0x1, 0xad5}}, {0x6, 0x7, {0x1, 0x3}}, {0x1, 0x1, {0x0, 0x200000}}, {0x8, 0x4, {0x0, 0x1}}, {0x401, 0x2, {0x1, 0x3}}, {0x9, 0x6, {0x1, 0x1}}, {0xfe, 0x7fff, {0x0, 0x401}}, {0xe37, 0xa9, {0x1, 0xf}}, {0x7ff, 0x8, {0x3, 0x6}}, {0x10, 0x1be, {0x1, 0xff}}, {0x3, 0x4, {0x1, 0x365}}, {0x5, 0x3, {0x2, 0x1}}, {0x5, 0x2, {0x1, 0x44}}]}}}, {{0x254, 0x1, {{}, 0x81, 0x5, 0xe102, 0x6, 0x7, 'syz0\x00', "d45d237e1d7f6d42fc2ffa1a829696fb186fdf0da0b9d6673e7312fbaa65c4b9", "52f321ed525ce2e1c0b04a63dbfba98462f96ba974b332ae357b23a202e1477e", [{0x0, 0x0, {0x3, 0x9}}, {0xfffa, 0x0, {0x2, 0x22e8}}, {0xc51, 0x5, {0x0, 0xff}}, {0x2, 0x1ff, {0x0, 0x8}}, {0x4, 0x6, {0x2, 0x1}}, {0x9, 0x1000, {0x2, 0x9}}, {0x3, 0x0, {0x2, 0x306a}}, {0x3, 0x8f0, {0x3, 0x1eeff5d4}}, {0x8, 0x8, {0x0, 0x6}}, {0x2, 0x1, {0x1, 0x63}}, {0x5382, 0x1, {0x0, 0x80000000}}, {0x5, 0x9, {0x2, 0x200}}, {0xd, 0x4, {0x0, 0x8000}}, {0xb, 0x7}, {0x514, 0x0, {0x3, 0x7ff}}, {0x80, 0x3, {0x2, 0x101}}, {0x5, 0x8, {0x1, 0x2}}, {0x3, 0x416, {0x2, 0xa}}, {0x8, 0xff01, {0x2}}, {0x4bb, 0x9, {0x0, 0x31fc}}, {0xffff, 0x5, {0x3, 0x1}}, {0x7, 0x7, {0x3, 0x8}}, {0x2, 0x9, {0x2, 0x9}}, {0xd, 0x800, {0x3, 0x6}}, {0xfff9, 0x100, {0x3, 0x6}}, {0xf, 0xfff9, {0x1, 0x9}}, {0xf801, 0x3, {0x1, 0x9}}, {0x1, 0x1, {0x0, 0xe04b}}, {0x5, 0x3, {0x2, 0x4}}, {0x9, 0x96, {0x1, 0x2}}, {0xfff, 0xa8}, {0xc4, 0x0, {0x3, 0x2}}, {0x9, 0x7, {0x0, 0x8}}, {0x6, 0xf1c, {0x0, 0x3}}, {0x4, 0x1, {0x0, 0x185}}, {0xffff, 0xc5, {0x1, 0x9}}, {0x81, 0x2, {0x0, 0xbc36}}, {0x2, 0x0, {0x1, 0x3}}, {0x3, 0x200, {0x3, 0x8}}, {0x6, 0x6, {0x1, 0x80000000}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x34, 0x4, 0x7, 0x1d, 'syz1\x00', "f4ff2c6ade0ad41e5c1c3edebe52d4e5b23c94bfa020e4fb3de03c261785241c", "a7fc4bbb1ca5aa9a8d7a98e6a2580408c65967c0f7517657f0065afc50cbbd68", [{0x7ff, 0x6, {0x1, 0x33}}, {0x3, 0x3, {0x7e347ba15cf959d7, 0x4}}, {0x5, 0x1, {0x1, 0x304}}, {0x80, 0x1, {0x1, 0xfa5}}, {0xd3, 0x6, {0x1, 0xfff}}, {0xb, 0x7, {0x3, 0x7fff}}, {0x8000, 0x5, {0x0, 0xfffffffa}}, {0x8, 0x6, {0x3, 0x43e9}}, {0x8, 0x5, {0x1, 0x7ff}}, {0x2, 0x9, {0x3, 0x10000}}, {0xf, 0x7, {0x2}}, {0x9, 0x85d5, {0x2, 0x80000001}}, {0x4, 0x5, {0x3, 0x8}}, {0x6, 0x8001, {0x1, 0xf}}, {0x0, 0x3, {0x0, 0x4}}, {0xffff, 0x9, {0x3, 0xc9f}}, {0xfff8, 0x7fff, {0x3, 0xb}}, {0x2ba1, 0xac42, {0x3, 0xeca}}, {0x5, 0x0, {0x2, 0x5}}, {0x2, 0x8000, {0x1, 0x4}}, {0x3, 0x0, {0x0, 0x6}}, {0x9, 0x8, {0x3, 0x2}}, {0x9, 0x6, {0x2}}, {0x3, 0x10, {0x0, 0x9}}, {0x101, 0x1d, {0x2, 0x2}}, {0x0, 0x100, {0x3, 0x5}}, {0x10, 0x8, {0x1, 0x4}}, {0x2, 0x8, {0x0, 0xfffffff8}}, {0x8000, 0xfa69, {0x2}}, {0x0, 0x2, {0x3, 0xffff6ed2}}, {0xd69, 0x2, {0x3}}, {0x8, 0x9, {0x3, 0x4}}, {0x3, 0x9, {0x1, 0x5}}, {0x3, 0x33d2, {0x2, 0x8}}, {0xff, 0x89a, {0x0, 0x79937000}}, {0x5, 0xd2, {0x2, 0x87a}}, {0x9, 0x2, {0x1, 0xf3d0}}, {0x0, 0x8000, {0x3, 0x2}}, {0x4, 0x7fff, {0x3, 0x72}}, {0x401, 0x6, {0x1, 0xca4}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x2, 0x2, 0xcde, 0xa, 0x23, 'syz0\x00', "80bb3b242b692cbb9d5c10d835e25944bb7b19d301a4b08b84f4f7dab86b899f", "e09d729d3a71509be45112dc697d73fe49c82218504f2ca8f8450da77724b706", [{0x800, 0xaab6, {0x2, 0x4}}, {0x3, 0x3ff, {0x0, 0xffffffff}}, {0x6, 0xfff8, {0x2, 0x8001}}, {0x3, 0x9, {0x1, 0x4}}, {0x8, 0x6, {0x0, 0x6}}, {0x8, 0xd, {0x2}}, {0x3, 0x2, {0x0, 0x4}}, {0x8000, 0xa05e, {0x3, 0xfffffffc}}, {0x1, 0x9, {0x0, 0x1}}, {0x6, 0xfe00, {0x1, 0x9}}, {0x5, 0x1ae2, {0x1, 0x2}}, {0x8, 0xbc, {0x2, 0x8c7}}, {0x3, 0xe, {0x3, 0x8}}, {0x0, 0x800, {0x0, 0xfffffffb}}, {0x6baa, 0x9, {0x0, 0x6}}, {0x6, 0x2, {0x0, 0x7}}, {0x3800, 0x7, {0x2, 0x8}}, {0x0, 0x8, {0x3, 0xffff7fff}}, {0x7, 0xfff, {0x0, 0x3}}, {0xfffc, 0x2, {0x2, 0xfff}}, {0x9, 0xe, {0x1, 0x6}}, {0x4, 0x7, {0x3, 0x1}}, {0xf800, 0x8, {0x2, 0x3}}, {0x7, 0x9, {0x3, 0x1ff}}, {0x3ff, 0x3ff, {0x2, 0x4}}, {0xd, 0x48f, {0x2, 0xbe8}}, {0xf0b6, 0x3, {0x0, 0x22}}, {0x200, 0x3, {0x2, 0x5}}, {0xf, 0xfff9, {0x3, 0xff}}, {0xd8f, 0x7, {0x3, 0x8}}, {0x4, 0x3, {0x1, 0xffff}}, {0x0, 0x3ff, {0x1, 0x8}}, {0x9, 0x9, {0x2, 0xac}}, {0x7, 0xd13, {0x1, 0x3}}, {0x7, 0x3, {0x2, 0x1}}, {0x7800, 0xff, {0x3, 0x9}}, {0x7f, 0x9, {0x2, 0xfffffffc}}, {0x0, 0x8001, {0x2, 0x40}}, {0x1, 0x8, {0x0, 0xcc3}}, {0x7, 0x0, {0x3, 0xc7c}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x16, 0x26, 0xf, 0x37f5, 0xd, 'syz0\x00', "02ef4bc54176dc93294a44473df4fcf3a66769dd30d0e4b30103ad1968d66e04", "44a52c90e46e5b47851c57b0ac22bdc09454fca17f48b3f4eeee591c7e0edeb8", [{0x9, 0xfff9, {0x0, 0x9}}, {0x8, 0x0, {0x1, 0x1ff}}, {0x2, 0x4, {0x3, 0x4}}, {0xd8c5, 0xf, {0x0, 0xab}}, {0x5, 0x5, {0x1, 0xfffffff8}}, {0x7, 0x5, {0x2, 0x1}}, {0xb, 0x8, {0x3, 0xfff}}, {0x8000, 0x5ac8, {0x0, 0xd}}, {0x7fff, 0x6, {0x3, 0xfffffffe}}, {0x4, 0xc, {0x1, 0xff}}, {0x400, 0x9, {0x0, 0x5}}, {0x200, 0x31, {0x1}}, {0x1, 0x2, {0x2}}, {0xfff, 0x9, {0x3, 0xd}}, {0x100, 0x3, {0x3, 0x2}}, {0x7, 0x8, {0x2, 0x5}}, {0xc, 0x2, {0x1, 0x5}}, {0x2, 0x5, {0x3, 0xea2}}, {0x9, 0xfff, {0x2, 0x8}}, {0x7, 0xcee2, {0x0, 0x1}}, {0xf80, 0x9, {0x2, 0xfffffffa}}, {0x2, 0x8000, {0x0, 0xd5f}}, {0x12a2, 0x8, {0x7e0139ef07cb7429, 0x2}}, {0xa, 0x7, {0x0, 0x40000}}, {0x7, 0xfe01, {0x2, 0xfffffff7}}, {0x9, 0x6, {0x0, 0x3}}, {0xff, 0x339, {0x2, 0x10001}}, {0x9, 0x2, {0x2, 0x11}}, {0xff, 0xffcc, {0x3, 0x23db2022}}, {0x5, 0x800, {0x1, 0x9}}, {0x2, 0x0, {0x6, 0x81}}, {0xc527, 0x1, {0x2, 0x101}}, {0x0, 0xf, {0x0, 0x4}}, {0x9, 0x43f, {0x2, 0xf}}, {0x101, 0x5, {0x2, 0x7}}, {0x5, 0x10, {0x0, 0x9}}, {0x8, 0x63e, {0x1}}, {0x3ff, 0x4, {0x2, 0x800}}, {0xe, 0x1e85, {0x3, 0x400}}, {0xc984, 0x95c3, {0x0, 0x4}}]}}}]}, 0x12b4}}, 0x4040000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f00000019c0)={&(0x7f0000001700)=0x3, 0x8, &(0x7f0000001740)=[{}, {}, {}], &(0x7f0000001980)}) ioctl$int_in(r1, 0x5452, &(0x7f0000001a00)=0xcdd) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000001a40), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001b80)={r3, &(0x7f0000001a80)='.\xb2-&\\\\\\\\/\x00', 0x20001, &(0x7f0000001ac0)={@align=0x6, {0x0, 0x0, 0x5, 0xffffffff}}, 0x7, &(0x7f0000001b00)={@_ha_fsid}, &(0x7f0000001b40)=0x81}) write$cgroup_devices(r4, &(0x7f0000001bc0)={'a', ' *:* ', 'r\x00'}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x58, 0x1, 0x8, 0x401, 0x0, 0x0, {0x83adb0d52f87797a, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4037}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000001d40)=0x81) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001d80)={{r3}, {@val, @max}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001dc0)={'ip6_vti0\x00', 0x2}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001e00)={0x0, 0x2ca2a47, 0xc30d239cddcb4a13, 0x572, 0x3, 0x0, [{0x7fffffffffffffff, 0xfffffffffffffc00, 0x6, '\x00', 0x1000}, {0x5, 0x2000000000, 0xf, '\x00', 0x400}, {0x2, 0xf8d, 0x7}]}) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000001f40)={&(0x7f0000001f00)=[{0xff, 0xa86, 0x0, 0x9}, {0x8000000000000001, 0xde, 0x3ff, 0xffffffff}], 0x2, 0x20, 0x7, 0xc000000000000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x2, 0x5, 0x1ff, 0x3, 0x1, 0x1ff, 0x15, 0x300, 0x7]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48800) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000020c0)={{r4}, "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"}) r6 = accept4$alg(r4, 0x0, 0x0, 0x80800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f00000030c0)) r7 = openat$cgroup_pressure(r4, &(0x7f0000003100)='cpu.pressure\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000003140)={0x9, 0xffffffffffffffcf, 0x3, 0x0, 0x0, [{{r7}, 0x8}, {{r6}, 0x5}, {{r3}, 0xf000000000000000}]}) ioctl(r6, 0x1, &(0x7f00000031c0)="629716fd224bdc2e8762cea918") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003200)={0x0, @loopback, @empty}, &(0x7f0000003240)=0xc) 1m28.859041946s ago: executing program 0 (id=3904): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x100800) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xf1, &(0x7f00000003c0)=""/241, 0x1f00, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2a170, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[r3, r3], &(0x7f0000000600)=[{0x4, 0x1, 0x0, 0x6}, {0x5, 0x5, 0xc, 0x9}, {0x0, 0x5, 0x3, 0xa}, {0x2, 0x1, 0x1, 0xa}, {0x0, 0x1, 0x2, 0xa}], 0x10, 0x7}, 0x94) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x9, 0xa}, {0x0, 0xfff1}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000800000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES8=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m18.267542675s ago: executing program 35 (id=3899): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18}}}}}}, 0x0) 1m12.446139512s ago: executing program 36 (id=3904): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x100800) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xf1, &(0x7f00000003c0)=""/241, 0x1f00, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2a170, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[r3, r3], &(0x7f0000000600)=[{0x4, 0x1, 0x0, 0x6}, {0x5, 0x5, 0xc, 0x9}, {0x0, 0x5, 0x3, 0xa}, {0x2, 0x1, 0x1, 0xa}, {0x0, 0x1, 0x2, 0xa}], 0x10, 0x7}, 0x94) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x9, 0xa}, {0x0, 0xfff1}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000800000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES8=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 41.60564957s ago: executing program 5 (id=3936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x71, 0x425, 0x5070bd28, 0x7e, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000a00000e0998cee3b28c17c0762054e3f6e4ad7b2800020073797a3100797a31000000004c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x40) 41.498384596s ago: executing program 4 (id=3937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00030064756d6d7930000008001f0004000000180012000a00010064756d6d79000000"], 0x4c}], 0x1}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$netlink(r5, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYRES16=r7], 0x30}], 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) sendto$inet6(r8, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x0) 38.352324094s ago: executing program 7 (id=3938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB="311affc9", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x4008801) 37.693996844s ago: executing program 5 (id=3939): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) 37.32340791s ago: executing program 4 (id=3940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000080)=@raw=[@generic={0xe, 0x5, 0x4, 0x10, 0x7}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xdd, &(0x7f0000000380)=""/221, 0x41000, 0x6, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xf, 0xde, 0x864}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0x4, 0x2}, {0x4, 0x3, 0xc, 0x9}, {0x0, 0x2, 0x7, 0x7}], 0x10, 0x5}, 0x94) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r12, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) 35.256744563s ago: executing program 5 (id=3941): setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x2, "d84d"}, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES64, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.073106059s ago: executing program 7 (id=3942): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000400)) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @loopback}}}}}}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40480d4}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x4c, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0xfffffff8}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f00000003c0)={r12, 0xcb}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) 33.21183037s ago: executing program 5 (id=3943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x20000004) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/net\x00') r3 = accept4$unix(r1, 0x0, &(0x7f0000000040), 0x80000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0x400d4) 29.955704009s ago: executing program 5 (id=3944): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, 0x0, 0x0, 0x20040000, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080", @ANYBLOB], 0x158}}, 0x4000) listen(r2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0xfffff96d, 0x4) ioctl$FIONCLEX(r0, 0x5450) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00347df3905fa33170c052d477ac950000080000000200000fffffffff0e000000000000000300000007000000030000180000000000000000000000002e0098bdb8c4d40c968d43debc6848d81c5fbba9b3907280b6debe7798bab2486370888cedf58f4e6f59486c60e3e8ff4b9a4b449d1bac8a58f3ecc8887283e5b956c93d0d430d1416917f47d561bc895d60dd5428989c91ca61e902e9e99b6903db74e826311f693715f8beb87b3a55df7d384b7b7b00febe9c9a5ce9f5de9c7161dfde613abaa8d8b1b5311a5b22efc920722ddb124472de0dc6c1a4ddd07c96bb27b2a600821b77fc34b38ee7f4394d81dd4fc78ab09a36ba5663abae2e1d837ff4e79fa8381f104e6e31d12322eae20bfe6ad7031f6e9da72ee301d0ed739b8c7c33e92de9648fedab249e711655c9b81e4162395a09d7711f87ea039b"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x5, 0xf9c9, 0x8, 0x80, 0xffffffffffffffff, 0x8, '\x00', r8, r6, 0x3, 0x1, 0x5, 0x7}, 0x50) sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$nl_route(0x10, 0x3, 0x0) 29.950395419s ago: executing program 7 (id=3945): socket$netlink(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000000280)=""/77, &(0x7f0000000300)=0x4d) write$bt_hci(r5, 0x0, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x0, 0x3}}}, 0x10) socket$kcm(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x50}}, 0x0) tee(r2, r1, 0x1, 0x4) sendfile(r7, r0, &(0x7f0000000040)=0x4, 0x7) 28.591791283s ago: executing program 4 (id=3946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r0, 0x1) 26.196196881s ago: executing program 5 (id=3947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) (async, rerun: 64) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r4) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x4c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r10, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x60}}, 0x20000840) (async, rerun: 32) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private, 0x8000}]}]}}}}}}}, 0x0) bind$nfc_llcp(r11, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r12, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_buf(r11, 0x118, 0x3, 0x0, &(0x7f00000003c0)) 25.375953329s ago: executing program 4 (id=3948): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) r1 = socket(0x27, 0x5, 0xfffffffd) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getsockname$packet(r1, 0x0, &(0x7f0000000640)) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000180)=0x1e) (async) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) 24.67008197s ago: executing program 7 (id=3949): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0xd91c43227af62dda, 0x0, &(0x7f0000002800)) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{&(0x7f0000000400)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000440)="8b39277f4e0fa5a8ef4f77a3e3b2", 0xe}, {0x0}, {0x0}, {&(0x7f0000002440)="f8dcdacf69197c77bc49f16623d849645f66c90076c0a86eb7a2939b52b4db849f7a2cd071d4034e5fa6c0ebc0ca7c45d42aa99d1c6b3af3d85aeba49a83fac17f587a1883e3d13131a18a1c7f3389afa4edd3e9b5ff983a0dad9fb3dc4fe5c49d89b7a50b1823ae159cf1ed741ed8966e01bcbd21d8", 0x76}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="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", 0xfe}], 0x1, &(0x7f0000002840)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe405}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x68}}, {{&(0x7f00000028c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000002900)}, {&(0x7f0000002980)="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", 0xcc0}], 0x2, &(0x7f0000003a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x10}}], 0x28}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)="de68d85534d8c1f74bb0d8376db3d3c8d676c00e29c9bd91fba2bb476b410b912a09d716daf15a02dc85ee2e843b30233481721270b8be8ba420d01d1c4b602b75808ff87edb14eaa09b98bb500d998c12e164f6e8e285f889d66e08d620a3e2e8fff9538c7c57a00f64f0727218353e339419bd1ee55f0f2540228617055e706cd9dd103a90095cba1731376ba0b91190a4e918fd49aeb55c3bfedfbbd6b24c0480219bdb0284ae319ca9c8223f832a8a7fdd3088dda1d8be895640e4f0cbf4c1f189941782", 0xc6}], 0x1, &(0x7f0000003cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x15, [@multicast2, @private=0xa010100, @local, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x2, [{@local, 0x2}]}, @lsrr={0x83, 0xf, 0xc6, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x3, 0xa5}, @lsrr={0x83, 0x17, 0xb6, [@rand_addr=0x64010102, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x5, 0x0}, @broadcast]}, @cipso={0x86, 0x17, 0x3, [{0xa1150dfc070f6169, 0xc, "7291983330623c9c07a0"}, {0x0, 0x5, "a38943"}]}]}}}], 0x108}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x38}}, {{&(0x7f0000004280)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000044c0)=[{&(0x7f00000042c0)="1d65c6453f445eb4db5643d4940069f902afd0770fecd77f20b863fcc1d2169b0012edc090a40a2816858114849cdce0820b4817fc9af5d75172c39a8f91b861d9b89e39bdcf16b1d06df4ecf0940525460ae475505473e525b7676b0499776dd879d39461db073cc016605f2bc733d57388b5b9cf2af7467373a0d8105ecabadcfbd40a418d8a3ec171073c6c3fcc08089d2d783adbad1ad7bd206ab4bc25374f7b03f711117e07c3cf40d196595519c97cfd5e04cf2d857fddf856eea62ad893dcd20c368940160c4178408821c40c7baa307cd5cd9b", 0xd7}], 0x1, &(0x7f0000004500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x68}}, {{&(0x7f0000004580)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x7, 0x40480c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000a09900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008000500000000000800040000000000"], 0x48}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) getsockopt$inet_mreqn(r0, 0x0, 0xd91c43227af62dda, 0x0, &(0x7f0000002800)) (async) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{&(0x7f0000000400)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000440)="8b39277f4e0fa5a8ef4f77a3e3b2", 0xe}, {0x0}, {0x0}, {&(0x7f0000002440)="f8dcdacf69197c77bc49f16623d849645f66c90076c0a86eb7a2939b52b4db849f7a2cd071d4034e5fa6c0ebc0ca7c45d42aa99d1c6b3af3d85aeba49a83fac17f587a1883e3d13131a18a1c7f3389afa4edd3e9b5ff983a0dad9fb3dc4fe5c49d89b7a50b1823ae159cf1ed741ed8966e01bcbd21d8", 0x76}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="93a958290cfc989d2f6ffdfab935665c879d3cf3318e9e718e5e445b2b316af88b7ecfecaa91e65583d9953b67af3d8e9bc87d8b769db630da7a9c4bb284a674189f67edb16328e80505140f955e007cce55b0b1f7a2048d360b1f3b75cfb7ce9894d21aac179a80479c0753e335f735ca6c2be400984ac756f1981520fcbb12f71075c68dd7d2e81a5c3832ee4517b7942aee20c35111985b6152f4070de17e0468051abf8f4d2dd179b8cbfaa743ed2694b68716b8581ceb80f2694655e829f5a9fa71abe6ac69c0ca454a8f20749a0cb726201c30dc4825a629e800d28e77c96cb03373ea3f2d5b52edc8605158bacf536f76fe4aa5827a11b46bf1c4", 0xfe}], 0x1, &(0x7f0000002840)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe405}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x68}}, {{&(0x7f00000028c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000002900)}, {&(0x7f0000002980)="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", 0xcc0}], 0x2, &(0x7f0000003a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x10}}], 0x28}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)="de68d85534d8c1f74bb0d8376db3d3c8d676c00e29c9bd91fba2bb476b410b912a09d716daf15a02dc85ee2e843b30233481721270b8be8ba420d01d1c4b602b75808ff87edb14eaa09b98bb500d998c12e164f6e8e285f889d66e08d620a3e2e8fff9538c7c57a00f64f0727218353e339419bd1ee55f0f2540228617055e706cd9dd103a90095cba1731376ba0b91190a4e918fd49aeb55c3bfedfbbd6b24c0480219bdb0284ae319ca9c8223f832a8a7fdd3088dda1d8be895640e4f0cbf4c1f189941782", 0xc6}], 0x1, &(0x7f0000003cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x15, [@multicast2, @private=0xa010100, @local, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x2, [{@local, 0x2}]}, @lsrr={0x83, 0xf, 0xc6, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x3, 0xa5}, @lsrr={0x83, 0x17, 0xb6, [@rand_addr=0x64010102, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x5, 0x0}, @broadcast]}, @cipso={0x86, 0x17, 0x3, [{0xa1150dfc070f6169, 0xc, "7291983330623c9c07a0"}, {0x0, 0x5, "a38943"}]}]}}}], 0x108}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x38}}, {{&(0x7f0000004280)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000044c0)=[{&(0x7f00000042c0)="1d65c6453f445eb4db5643d4940069f902afd0770fecd77f20b863fcc1d2169b0012edc090a40a2816858114849cdce0820b4817fc9af5d75172c39a8f91b861d9b89e39bdcf16b1d06df4ecf0940525460ae475505473e525b7676b0499776dd879d39461db073cc016605f2bc733d57388b5b9cf2af7467373a0d8105ecabadcfbd40a418d8a3ec171073c6c3fcc08089d2d783adbad1ad7bd206ab4bc25374f7b03f711117e07c3cf40d196595519c97cfd5e04cf2d857fddf856eea62ad893dcd20c368940160c4178408821c40c7baa307cd5cd9b", 0xd7}], 0x1, &(0x7f0000004500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x68}}, {{&(0x7f0000004580)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x7, 0x40480c0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000a09900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008000500000000000800040000000000"], 0x48}}, 0x0) (async) 23.096066003s ago: executing program 4 (id=3950): r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r2 = socket(0x28, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x20000040) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r6, 0x400) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES64=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095", @ANYRES64=r2, @ANYBLOB="1800000000000000000000000000000018020000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") 22.495817261s ago: executing program 7 (id=3951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x700, 0x8, 0x43, {{0xb, 0x4, 0x3, 0x16, 0x2c, 0x66, 0x0, 0x76, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp={0x44, 0x14, 0x84, 0x0, 0xa, [0x7, 0x4, 0xfffff2d0, 0x2]}, @ra={0x94, 0x4}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40050, &(0x7f00000000c0)={0x11, 0x8100, r7, 0x1, 0x84, 0x6, @local}, 0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r11, &(0x7f0000000300)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) getpeername$packet(r5, &(0x7f00000008c0), &(0x7f0000000900)=0x14) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r4) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x15, 0x9, 0xffffff43, 0x8000, 0x429c, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r16 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r16, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) close(r16) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd57}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @exit, @ldst={0x1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x6, '\x00', r3, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x1, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0xffffffffffffffff, r10, r11, r12, r13, r14, 0xffffffffffffffff, r1, r15], &(0x7f0000000780)=[{0x2, 0x1, 0x4, 0x4}, {0x1, 0x5, 0x1, 0x2}, {0x5, 0x5, 0xb, 0x2}, {0x3, 0x4, 0xd, 0x4}, {0x3, 0x5, 0xf, 0x7}, {0x4, 0x3, 0x8, 0x4}], 0x10, 0x3}, 0x94) 18.976175892s ago: executing program 4 (id=3952): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r3, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x459c}}], 0x18}}], 0x1, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8, 0x1, 0x400000}]}}}]}, 0x48}}, 0x20000050) 16.184291063s ago: executing program 7 (id=3953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb70259b40363cf91600", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$sock(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xed, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x7, 0x4}, {0xfffffff9, 0x43, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xfffffff8, 0x400}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x0, 0xc, 0x1, 0x2, {0x1, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0x7f, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_deladdr={0x44, 0x15, 0x300, 0x70bd26, 0x25dfdbfc, {0xa, 0x10, 0xf2, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xf1}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x175}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040816}, 0x24008094) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r10, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x8, 0x7, 0x733b, 0xa4, 0xea8, 0x3e}, 0x9c) 9.374940479s ago: executing program 37 (id=3947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) (async, rerun: 64) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r4) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x4c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r10, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x60}}, 0x20000840) (async, rerun: 32) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private, 0x8000}]}]}}}}}}}, 0x0) bind$nfc_llcp(r11, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r12, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_buf(r11, 0x118, 0x3, 0x0, &(0x7f00000003c0)) 2.160221085s ago: executing program 38 (id=3952): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r3, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x459c}}], 0x18}}], 0x1, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8, 0x1, 0x400000}]}}}]}, 0x48}}, 0x20000050) 0s ago: executing program 39 (id=3953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb70259b40363cf91600", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$sock(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xed, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x7, 0x4}, {0xfffffff9, 0x43, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xfffffff8, 0x400}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x0, 0xc, 0x1, 0x2, {0x1, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0x7f, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_deladdr={0x44, 0x15, 0x300, 0x70bd26, 0x25dfdbfc, {0xa, 0x10, 0xf2, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xf1}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x175}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040816}, 0x24008094) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r10, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x8, 0x7, 0x733b, 0xa4, 0xea8, 0x3e}, 0x9c) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.6.2258'. [ 441.976996][T14627] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2258'. [ 442.792265][T14672] netlink: 'syz.0.2263': attribute type 4 has an invalid length. [ 443.070853][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 443.134480][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 444.053677][T14711] geneve2: entered promiscuous mode [ 444.091819][T14711] geneve2: entered allmulticast mode [ 445.203799][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2288'. [ 445.369385][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 445.433311][T14767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.506558][T14767] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2290'. [ 445.827863][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2296'. [ 445.880245][T14787] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2297'. [ 446.205704][T14793] netlink: 'syz.3.2300': attribute type 63 has an invalid length. [ 446.240240][T14793] netlink: 'syz.3.2300': attribute type 63 has an invalid length. [ 446.796203][T14818] __nla_validate_parse: 6 callbacks suppressed [ 446.796223][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 447.017645][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 447.335826][T14838] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2311'. [ 447.587020][T14846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.655026][T14848] xt_hashlimit: size too large, truncated to 1048576 [ 447.723972][T14846] netlink: 'syz.3.2312': attribute type 1 has an invalid length. [ 448.274751][T14846] bond8: entered promiscuous mode [ 448.336548][T14846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 448.706821][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 270 seconds [ 449.177407][T14898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2320'. [ 450.111073][T14933] netlink: 'syz.3.2328': attribute type 1 has an invalid length. [ 450.213872][T14935] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2328'. [ 450.505612][T14933] 8021q: adding VLAN 0 to HW filter on device bond9 [ 450.763408][T14949] netlink: 'syz.5.2329': attribute type 1 has an invalid length. [ 450.798833][T14949] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2329'. [ 450.963854][T14960] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2334'. [ 450.990938][T14959] netlink: 'syz.0.2335': attribute type 5 has an invalid length. [ 451.051470][T14959] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2335'. [ 451.095270][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 451.128789][T14961] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2335'. [ 451.594040][T14977] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 452.251712][T14999] __nla_validate_parse: 2 callbacks suppressed [ 452.251732][T14999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2342'. [ 452.308806][T15006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2343'. [ 452.605507][T15012] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2347'. [ 452.886759][T15021] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20001 [ 453.264799][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 453.599776][T15053] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2359'. [ 453.651746][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 453.744447][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 454.012498][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 454.079720][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 454.167487][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 454.317020][T15078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.604677][T15086] netlink: Setting conntrack mark requires 'commit' flag. [ 454.668160][T15086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.681946][T15092] netlink: 'syz.3.2370': attribute type 2 has an invalid length. [ 454.717254][T15092] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 454.766645][T15096] netlink: 'syz.6.2369': attribute type 1 has an invalid length. [ 454.788846][T15096] netlink: 'syz.6.2369': attribute type 2 has an invalid length. [ 454.832402][T15096] netlink: 'syz.6.2369': attribute type 1 has an invalid length. [ 454.896497][T15096] netlink: 'syz.6.2369': attribute type 2 has an invalid length. [ 454.951599][T15096] netlink: 'syz.6.2369': attribute type 1 has an invalid length. [ 458.107345][T15204] __nla_validate_parse: 30 callbacks suppressed [ 458.107366][T15204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2398'. [ 458.299901][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.338554][T15211] xt_policy: output policy not valid in PREROUTING and INPUT [ 458.368524][ T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.416034][ T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.446954][ T60] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.872882][T15217] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2403'. [ 459.771907][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2410'. [ 459.966633][T15254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2410'. [ 460.478807][ T8955] udevd[8955]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 460.625472][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 461.372956][T15299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.731336][ T6279] udevd[6279]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 462.729513][T15345] netlink: 'syz.6.2437': attribute type 10 has an invalid length. [ 462.832369][T15345] syz_tun: entered promiscuous mode [ 462.894533][T15345] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 463.298926][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2441'. [ 463.417224][T15377] netlink: 'syz.4.2444': attribute type 21 has an invalid length. [ 463.500181][T15374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2440'. [ 463.830583][T15395] xt_l2tp: invalid flags combination: 8 [ 465.544207][T15424] netlink: 'syz.3.2455': attribute type 4 has an invalid length. [ 465.863373][T15432] syzkaller0: entered allmulticast mode [ 466.173406][T15366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.199600][T15374] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 466.771305][T15457] syzkaller0: entered promiscuous mode [ 466.785514][T15457] syzkaller0: entered allmulticast mode [ 467.051835][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2464'. [ 467.190642][T15468] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2466'. [ 467.448904][T15475] netlink: 'syz.0.2471': attribute type 1 has an invalid length. [ 467.823195][T15496] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2474'. [ 468.463904][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 468.481570][T15514] netlink: 'syz.3.2478': attribute type 3 has an invalid length. [ 468.497022][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 468.512692][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 469.217929][T15538] sctp: [Deprecated]: syz.3.2486 (pid 15538) Use of int in max_burst socket option. [ 469.217929][T15538] Use struct sctp_assoc_value instead [ 469.330415][T15538] sctp: [Deprecated]: syz.3.2486 (pid 15538) Use of int in max_burst socket option. [ 469.330415][T15538] Use struct sctp_assoc_value instead [ 469.511170][T12742] hsr0: entered promiscuous mode [ 469.524604][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2489'. [ 469.686629][T15556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2490'. [ 469.743243][T15556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2490'. [ 469.873309][T15559] netlink: 'syz.0.2490': attribute type 1 has an invalid length. [ 469.913980][T15559] nbd: error processing sock list [ 470.354986][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 470.718767][T15580] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2497'. [ 470.741616][T15583] netlink: 'syz.4.2498': attribute type 2 has an invalid length. [ 471.066684][T15595] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2501'. [ 471.612053][T15616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.664414][T15618] sock: sock_set_timeout: `syz.3.2509' (pid 15618) tries to set negative timeout [ 472.101975][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 472.144075][T15633] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 473.006810][T15666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.234168][T15672] netlink: 'syz.5.2527': attribute type 7 has an invalid length. [ 473.611632][T15689] __nla_validate_parse: 4 callbacks suppressed [ 473.611653][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 473.978535][T15710] bridge0: port 1(veth1_to_bridge) entered blocking state [ 474.036740][T15710] bridge0: port 1(veth1_to_bridge) entered disabled state [ 474.071220][T15710] veth1_to_bridge: entered allmulticast mode [ 474.126288][T15710] veth1_to_bridge: entered promiscuous mode [ 474.176195][T15710] bridge0: port 1(veth1_to_bridge) entered blocking state [ 474.183599][T15710] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 474.241798][T15710] bridge0: entered promiscuous mode [ 474.256990][T15710] bridge0: entered allmulticast mode [ 474.801116][T15737] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2544'. [ 474.829483][T15737] openvswitch: netlink: Flow key attr not present in new flow. [ 474.863971][T15737] netlink: 52707 bytes leftover after parsing attributes in process `syz.0.2544'. [ 475.302794][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2548'. [ 475.314612][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 475.444649][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2549'. [ 475.481672][T15751] 8021q: adding VLAN 0 to HW filter on device bond13 [ 475.525042][T15751] 8021q: adding VLAN 0 to HW filter on device bond13 [ 475.537374][T15751] bond13: (slave vti0): The slave device specified does not support setting the MAC address [ 475.550899][T15751] bond13: (slave vti0): Error -95 calling set_mac_address [ 475.761207][T15755] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 476.731136][T15699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.961761][T15761] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2552'. [ 477.032366][T15764] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 477.373013][T15764] 8021q: adding VLAN 0 to HW filter on device bond11 [ 477.548566][T15791] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 477.565529][T15775] bond11: (slave gretap0): making interface the new active one [ 477.570613][T15791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2558'. [ 477.601611][T15775] bond11: (slave gretap0): Enslaving as an active interface with an up link [ 477.904354][T15793] netlink: 'syz.6.2559': attribute type 3 has an invalid length. [ 478.078780][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'. [ 478.110966][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2559'. [ 478.144856][T15800] netlink: 'syz.0.2560': attribute type 10 has an invalid length. [ 478.724654][T15811] pim6reg: entered allmulticast mode [ 478.787062][T15818] netlink: 'syz.0.2565': attribute type 5 has an invalid length. [ 478.937582][T15821] __nla_validate_parse: 1 callbacks suppressed [ 478.937603][T15821] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2568'. [ 479.073172][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'. [ 479.200943][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 300 seconds [ 479.245707][T15831] netlink: 'syz.4.2571': attribute type 83 has an invalid length. [ 479.306825][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2573'. [ 479.370549][T15843] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2573'. [ 479.637298][T15841] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.652522][T15849] netlink: 'syz.0.2575': attribute type 4 has an invalid length. [ 479.694522][T15841] syzkaller0: entered promiscuous mode [ 479.708075][T15841] syzkaller0: entered allmulticast mode [ 479.713799][T15850] netlink: 'syz.0.2575': attribute type 4 has an invalid length. [ 480.751542][T15869] xt_hashlimit: size too large, truncated to 1048576 [ 481.664524][T15896] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 481.727355][T15896] netlink: 'syz.3.2589': attribute type 2 has an invalid length. [ 481.767565][T15899] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2592'. [ 481.962227][T15903] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 482.130861][T15905] syz_tun: entered allmulticast mode [ 482.143853][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 482.279445][T15912] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2597'. [ 482.489750][T15924] netlink: 'syz.5.2599': attribute type 11 has an invalid length. [ 482.889020][T15924] netlink: 5160 bytes leftover after parsing attributes in process `syz.5.2599'. [ 483.470771][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.491016][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2607'. [ 483.510986][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.537524][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.585867][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.619205][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.646449][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.672322][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.699407][T15965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.725478][T15965] x_tables: ip_tables: osf match: only valid for protocol 6 [ 483.795462][T15965] syzkaller0: entered promiscuous mode [ 483.807183][T15965] syzkaller0: entered allmulticast mode [ 484.043466][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2611'. [ 484.181705][T15970] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2612'. [ 484.222708][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2611'. [ 484.347235][T15981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2616'. [ 484.543766][T15991] syzkaller1: entered promiscuous mode [ 484.576175][T15991] syzkaller1: entered allmulticast mode [ 484.783463][T16003] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 485.003217][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 485.151877][T16013] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 485.568917][T16023] : renamed from bond0 (while UP) [ 485.737668][T16026] syzkaller0: entered promiscuous mode [ 485.804377][T16026] syzkaller0: entered allmulticast mode [ 486.093975][T16045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.559113][T16054] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2635'. [ 486.868622][T16064] netlink: 'syz.4.2640': attribute type 21 has an invalid length. [ 486.921087][T16066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2640'. [ 486.947505][T16064] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2640'. [ 487.160872][T16072] syzkaller1: entered promiscuous mode [ 487.185229][T16073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2643'. [ 487.220274][T16072] syzkaller1: entered allmulticast mode [ 487.339414][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2645'. [ 487.567365][T16089] xfrm1: entered allmulticast mode [ 488.255772][T16112] ip6gre1: entered promiscuous mode [ 488.314925][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 488.349984][T16112] ip6gre1: entered allmulticast mode [ 488.584318][T16135] netlink: 'syz.4.2657': attribute type 4 has an invalid length. [ 488.848875][T16137] vlan1: entered allmulticast mode [ 488.859101][T16137] veth0_vlan: entered allmulticast mode [ 488.881831][T16135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 490.516668][T16186] __nla_validate_parse: 4 callbacks suppressed [ 490.516692][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2674'. [ 490.962092][T16207] netlink: 'syz.6.2678': attribute type 6 has an invalid length. [ 491.230835][T16211] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 491.460203][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 492.070727][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2685'. [ 492.293707][T16240] openvswitch: netlink: Message has 4 unknown bytes. [ 492.526213][T16252] geneve3: entered promiscuous mode [ 492.550085][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 492.847619][T16261] openvswitch: netlink: IPv4 tunnel dst address is zero [ 492.888511][T16261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.303162][T16284] netlink: 'syz.5.2698': attribute type 12 has an invalid length. [ 493.346812][T16284] netlink: 'syz.5.2698': attribute type 29 has an invalid length. [ 493.425281][T16284] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2698'. [ 493.470469][T16287] netlink: 'syz.4.2701': attribute type 2 has an invalid length. [ 493.504176][T16284] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2698'. [ 493.518830][T16287] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2701'. [ 494.389068][T16328] netlink: 'syz.5.2709': attribute type 13 has an invalid length. [ 494.416168][ T5272] veth0_vlan: left promiscuous mode [ 494.946893][ T5718] veth0_vlan: entered promiscuous mode [ 495.317686][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2712'. [ 495.417756][T16353] netlink: 'syz.0.2715': attribute type 2 has an invalid length. [ 495.445419][T16347] netlink: 64935 bytes leftover after parsing attributes in process `syz.6.2712'. [ 495.470881][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 495.644129][T16361] netlink: 'syz.3.2716': attribute type 1 has an invalid length. [ 495.743581][T16367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2716'. [ 495.820375][T16371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2716'. [ 496.122492][T16367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.129663][T16377] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2719'. [ 497.582770][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2728'. [ 497.635447][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2728'. [ 498.009980][T16439] sctp: [Deprecated]: syz.0.2731 (pid 16439) Use of int in maxseg socket option. [ 498.009980][T16439] Use struct sctp_assoc_value instead [ 498.284034][T16434] syzkaller0: entered promiscuous mode [ 498.322419][T16434] syzkaller0: entered allmulticast mode [ 499.115722][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2735'. [ 499.248258][T16473] x_tables: unsorted entry at hook 3 [ 499.282759][T16473] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2736'. [ 499.346916][T16473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2736'. [ 503.520219][T16508] ipt_rpfilter: unknown options [ 503.617888][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2744'. [ 503.716801][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2745'. [ 503.845160][T16518] x_tables: duplicate underflow at hook 1 [ 504.129386][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 504.184477][T16531] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2750'. [ 504.194535][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'. [ 504.967397][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2757'. [ 505.312613][T16559] vcan1: entered promiscuous mode [ 505.388006][T16559] vcan1: entered allmulticast mode [ 505.650460][T16579] veth0_macvtap: Caught tx_queue_len zero misconfig [ 506.045584][T16592] netlink: 'syz.3.2766': attribute type 21 has an invalid length. [ 506.061098][T16588] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 506.100070][T16592] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2766'. [ 506.127836][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2765'. [ 506.163621][T16592] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2766'. [ 506.381056][ T7051] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc2 [ 507.428698][T16633] syzkaller0: entered promiscuous mode [ 507.434665][T16633] syzkaller0: entered allmulticast mode [ 508.936486][T16592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.296966][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 330 seconds [ 509.682925][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.697170][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.739695][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 509.776040][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 509.804667][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.473633][T16642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.720412][ T7053] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.786415][ T7053] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.803158][T16657] netlink: 'syz.6.2780': attribute type 1 has an invalid length. [ 511.856305][T16657] netlink: 16143 bytes leftover after parsing attributes in process `syz.6.2780'. [ 511.914856][ T4927] Bluetooth: hci3: command tx timeout [ 512.137339][T16655] netlink: 'syz.6.2780': attribute type 3 has an invalid length. [ 512.427320][ T7053] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.504669][ T7053] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.540834][T16681] xt_hashlimit: size too large, truncated to 1048576 [ 512.818827][T16690] netlink: 'syz.6.2786': attribute type 25 has an invalid length. [ 512.985071][T16683] xt_hashlimit: size too large, truncated to 1048576 [ 513.008913][ T7053] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.050074][ T7053] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.300258][ T7053] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.348824][ T7053] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.370783][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2788'. [ 513.430452][T16699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2789'. [ 513.517420][T16697] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2788'. [ 513.886275][T16646] wg1 speed is unknown, defaulting to 1000 [ 513.995744][ T4927] Bluetooth: hci3: command tx timeout [ 514.470421][T16718] macsec0: entered promiscuous mode [ 514.530310][T16718] macsec0: entered allmulticast mode [ 514.546552][T16718] veth1_macvtap: entered allmulticast mode [ 515.009252][ T7053] bridge_slave_1: left promiscuous mode [ 515.057970][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.138630][ T7053] ¾x9ÿ: left allmulticast mode [ 515.178348][ T7053] ¾x9ÿ: left promiscuous mode [ 515.204162][ T7053] bridge0: port 1(1¾x9ÿ) entered disabled state [ 515.555017][ T7053] pimreg: left allmulticast mode [ 516.075881][ T4927] Bluetooth: hci3: command tx timeout [ 516.653843][ T7053] bond2 (unregistering): (slave erspan1): Releasing active interface [ 516.665086][ T7053] erspan1 (unregistering): left promiscuous mode [ 516.756423][ T7053] bond11 (unregistering): (slave gretap0): Releasing active interface [ 516.888824][ T7053] bond1 (unregistering): (slave bridge2): Releasing active interface [ 516.902853][ T7053] bridge2 (unregistering): left promiscuous mode [ 516.910448][ T7053] bridge2 (unregistering): left allmulticast mode [ 516.932685][ T7053] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 516.959422][ T7053] bond6 (unregistering): (slave bridge4): Releasing active interface [ 517.043009][ T7053]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.077781][ T7053] bond_slave_0: left allmulticast mode [ 517.100435][ T7053]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.122206][ T7053] bond_slave_1: left allmulticast mode [ 517.129513][ T7053]  (unregistering): Released all slaves [ 517.169757][ T7053] bond1 (unregistering): Released all slaves [ 517.244403][ T7053] bond2 (unregistering): Released all slaves [ 517.289979][ T7053] bond3 (unregistering): Released all slaves [ 517.325229][ T7053] bond4 (unregistering): Released all slaves [ 517.366518][ T7053] bond5 (unregistering): Released all slaves [ 517.454478][ T7053] bond6 (unregistering): Released all slaves [ 517.534540][ T7053] bond7 (unregistering): Released all slaves [ 517.570223][ T7053] bond8 (unregistering): Released all slaves [ 517.610103][ T7053] bond9 (unregistering): Released all slaves [ 517.632284][ T7053] bond10 (unregistering): Released all slaves [ 517.698136][ T7053] bond11 (unregistering): Released all slaves [ 517.752229][ T7053] bond0 (unregistering): Released all slaves [ 518.156246][ T4927] Bluetooth: hci3: command tx timeout [ 518.565299][T16805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 519.065610][T16812] block nbd5: server does not support multiple connections per device. [ 519.116476][T16812] block nbd5: shutting down sockets [ 519.214325][ T7053] IPVS: stopping backup sync thread 5901 ... [ 519.504514][T16833] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 520.792937][T16875] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 520.943620][T16877] netlink: 'syz.0.2821': attribute type 21 has an invalid length. [ 521.059421][T16886] netlink: 'syz.5.2822': attribute type 1 has an invalid length. [ 521.096037][T16886] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2822'. [ 521.273859][T16875] bond10: entered promiscuous mode [ 521.307088][T16875] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.370478][T16877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2821'. [ 521.743423][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2825'. [ 521.790851][T16892] bond10: (slave bridge8): making interface the new active one [ 521.800359][T16892] bridge8: entered promiscuous mode [ 521.814032][T16892] bridge8: left promiscuous mode [ 522.056446][T16905] lo: Caught tx_queue_len zero misconfig [ 522.067436][T16905] netlink: 'syz.5.2824': attribute type 4 has an invalid length. [ 522.209736][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.240034][T16646] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.259449][T16646] bridge_slave_0: entered allmulticast mode [ 522.280639][T16646] bridge_slave_0: entered promiscuous mode [ 522.413364][T16900] tipc: Enabling of bearer rejected, failed to enable media [ 522.481284][T16646] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.517864][T16646] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.550167][T16646] bridge_slave_1: entered allmulticast mode [ 522.588941][T16646] bridge_slave_1: entered promiscuous mode [ 522.845889][T16939] ip6t_srh: unknown srh match flags 5F28 [ 522.905014][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.960092][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.989336][T16943] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 523.023393][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2830'. [ 523.083232][T16940] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2830'. [ 523.094930][T16940] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2830'. [ 523.138629][T16943] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 523.307134][T16646] team0: Port device team_slave_0 added [ 523.521996][T16646] team0: Port device team_slave_1 added [ 524.033108][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.052260][T16973] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2839'. [ 524.079496][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.205805][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.232825][T16975] ip_tables: iptables: counters copy to user failed while replacing table [ 524.323681][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.403985][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.444438][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2840'. [ 524.620642][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.840471][ T7053] hsr_slave_0: left promiscuous mode [ 524.890543][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 524.894875][ T7053] hsr_slave_1: left promiscuous mode [ 524.967645][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.004123][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.223670][ T7053] veth1_macvtap: left promiscuous mode [ 525.258870][ T7053] veth0_macvtap: left promiscuous mode [ 525.281524][ T7053] veth1_vlan: left promiscuous mode [ 525.300790][ T7053] veth0_vlan: left promiscuous mode [ 525.319924][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2847'. [ 526.224290][ T7053] team_slave_1 (unregistering): left allmulticast mode [ 526.232812][ T7053] team0 (unregistering): Port device team_slave_1 removed [ 526.270571][ T7053] team_slave_0 (unregistering): left allmulticast mode [ 526.280197][ T7053] team0 (unregistering): Port device team_slave_0 removed [ 526.548713][T16988] veth9: entered promiscuous mode [ 526.554026][T16988] veth9: entered allmulticast mode [ 526.656638][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 526.986533][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2851'. [ 526.998320][T17036] sctp: [Deprecated]: syz.4.2852 (pid 17036) Use of int in max_burst socket option. [ 526.998320][T17036] Use struct sctp_assoc_value instead [ 527.062019][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2851'. [ 527.094011][T17036] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2852'. [ 527.117372][T17038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2853'. [ 527.214951][T16646] hsr_slave_0: entered promiscuous mode [ 527.233790][T16646] hsr_slave_1: entered promiscuous mode [ 527.282028][T16646] debugfs: 'hsr0' already exists in 'hsr' [ 527.299657][T16646] Cannot create hsr debugfs directory [ 528.049866][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'. [ 528.139622][T17080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2858'. [ 528.171650][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'. [ 528.269064][T17069] x_tables: duplicate underflow at hook 2 [ 528.372369][T17071] 8021q: adding VLAN 0 to HW filter on device bond14 [ 528.794630][T17114] netlink: 'syz.5.2864': attribute type 11 has an invalid length. [ 528.823472][T17114] netlink: 4304 bytes leftover after parsing attributes in process `syz.5.2864'. [ 528.924505][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2865'. [ 529.235990][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 529.370572][T17134] netlink: 'syz.5.2869': attribute type 1 has an invalid length. [ 529.503191][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 529.513686][T17134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.933595][T17152] syzkaller1: entered promiscuous mode [ 529.954177][T17152] syzkaller1: entered allmulticast mode [ 530.632949][T16646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.681426][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.704541][T16646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.754676][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.780413][T16646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.810704][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.844379][T16646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.887690][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.198730][T17225] pim6reg: entered allmulticast mode [ 531.366021][T16646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.505954][T16646] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.567767][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.575025][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.618418][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.625651][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.017218][T17217] netlink: 'syz.5.2886': attribute type 13 has an invalid length. [ 532.038388][T17217] veth1_macvtap: left promiscuous mode [ 532.063613][T17217] macsec0: entered allmulticast mode [ 532.244629][T17265] netlink: 'syz.6.2894': attribute type 2 has an invalid length. [ 532.278618][T17265] __nla_validate_parse: 5 callbacks suppressed [ 532.278639][T17265] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2894'. [ 532.352838][T17265] netlink: 'syz.6.2894': attribute type 2 has an invalid length. [ 532.459799][T17265] : entered promiscuous mode [ 532.677062][T17277] x_tables: duplicate underflow at hook 2 [ 533.215545][T17313] netlink: 'syz.6.2902': attribute type 1 has an invalid length. [ 533.236954][T17305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 533.250630][T17313] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 533.276220][T17305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 533.377046][T17321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.579534][T16646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.705633][T17338] tipc: Started in network mode [ 533.716956][T17338] tipc: Node identity 7f000001, cluster identity 4711 [ 533.748090][T17338] tipc: Enabling of bearer rejected, failed to enable media [ 533.819094][T17338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2907'. [ 533.850772][T16646] veth0_vlan: entered promiscuous mode [ 534.031140][T16646] veth1_vlan: entered promiscuous mode [ 534.246810][T16646] veth0_macvtap: entered promiscuous mode [ 534.300488][T16646] veth1_macvtap: entered promiscuous mode [ 534.330042][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 534.364533][T16646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.444272][T16646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.744944][ T7048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.782304][ T7048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.867532][ T7051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.902916][ T7051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.048256][ T7048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.083426][ T7048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.192729][ T7051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.235196][ T7051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.286201][T17391] netlink: 'syz.4.2923': attribute type 62 has an invalid length. [ 535.351310][T17391] xt_CONNSECMARK: invalid mode: 0 [ 535.731895][T17404] bond15: invalid ARP target 0.0.0.0 specified for addition [ 535.745081][T17410] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2778'. [ 535.783305][T17404] bond15: option arp_ip_target: invalid value (0) [ 535.798204][T17404] bond15 (unregistering): Released all slaves [ 536.626706][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.640324][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.648564][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.663043][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.685956][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.763602][T17452] syzkaller0: entered promiscuous mode [ 536.776785][T17452] syzkaller0: entered allmulticast mode [ 537.456200][ T5607] team0: Port device syz_tun removed [ 537.641572][T17479] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.649377][T17479] bridge0: port 2(bridge_slave_1) entered listening state [ 537.674072][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2940'. [ 537.738163][T17479] batman_adv: batadv0: Interface activated: wlan0 [ 537.819506][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 537.898258][T17479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.941339][T17479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.013725][T17479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.057291][T17479] bridge0: port 3(vlan0) entered blocking state [ 538.063786][T17479] bridge0: port 3(vlan0) entered listening state [ 538.157369][T17500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.259994][T17500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.319416][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.608941][T17530] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2946'. [ 538.692035][ T7048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.727195][ T7048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.796838][ T4927] Bluetooth: hci4: command tx timeout [ 538.841924][ T1322] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 538.891165][ T5900] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 538.903237][ T1322] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 538.946731][ T5900] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 539.018823][ T1322] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.066197][ T1322] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.241257][ T7048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.280086][ T7048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.349561][T17567] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2952'. [ 539.368147][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 360 seconds [ 539.395288][ T5900] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 539.455456][T17571] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2952'. [ 539.459169][T17448] wg1 speed is unknown, defaulting to 1000 [ 539.557589][T17557] netlink: 'syz.5.2952': attribute type 32 has an invalid length. [ 539.618059][ T7048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.652164][ T7048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.781914][ T6322] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.830324][T17584] syzkaller0: entered promiscuous mode [ 539.886237][T17584] syzkaller0: entered allmulticast mode [ 540.568889][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'. [ 540.599098][T17614] dvmrp0: entered allmulticast mode [ 540.875294][ T4927] Bluetooth: hci4: command tx timeout [ 541.013491][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 541.099342][ T3099] IPVS: starting estimator thread 0... [ 541.215180][T17639] IPVS: using max 27 ests per chain, 64800 per kthread [ 541.254417][ T7048] veth1_to_bridge: left allmulticast mode [ 541.278797][ T7048] veth1_to_bridge: left promiscuous mode [ 541.301365][ T7048] bridge0: port 1(veth1_to_bridge) entered disabled state [ 541.335325][ T7048] pim6reg: left allmulticast mode [ 541.780175][ T7048] bond7 (unregistering): (slave geneve2): Releasing active interface [ 541.846481][ T7048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.858966][ T7048] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 541.871768][ T7048] bond0 (unregistering): Released all slaves [ 541.884233][ T7048] bond1 (unregistering): Released all slaves [ 541.907499][ T7048] bond2 (unregistering): Released all slaves [ 541.926507][ T7048] bond3 (unregistering): Released all slaves [ 541.944392][ T7048] bond4 (unregistering): Released all slaves [ 541.972424][ T7048] bond5 (unregistering): (slave batadv_slave_0): Removing an active aggregator [ 541.984247][ T7048] bond5 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 542.003025][ T7048] bond5 (unregistering): Released all slaves [ 542.022824][ T7048] bond6 (unregistering): Released all slaves [ 542.044500][ T7048] bond7 (unregistering): Released all slaves [ 542.063876][ T7048] bond8 (unregistering): Released all slaves [ 542.084653][ T7048] bond9 (unregistering): Released all slaves [ 542.108506][ T7048] bond10 (unregistering): (slave veth5): Releasing active interface [ 542.116961][ T7048] batadv1: entered promiscuous mode [ 542.127763][ T7048] bond10 (unregistering): (slave batadv1): Releasing active interface [ 542.141993][ T7048] bond10 (unregistering): Released all slaves [ 542.160226][ T7048] bond11 (unregistering): Released all slaves [ 542.177122][ T7048] bond12 (unregistering): Released all slaves [ 542.193755][ T7048] bond13 (unregistering): Released all slaves [ 542.212089][ T7048] bond14 (unregistering): Released all slaves [ 542.256857][ T5718] wg1 speed is unknown, defaulting to 1000 [ 542.276672][ T5718] syz2: Port: 1 Link DOWN [ 542.306217][ T5718] wg1 speed is unknown, defaulting to 1000 [ 542.494559][T17662] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2972'. [ 542.571654][T17662] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2972'. [ 542.643129][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 542.874406][ T7048] IPVS: stopping backup sync thread 12348 ... [ 542.919339][T17671] bond1: entered promiscuous mode [ 542.944494][T17671] bond1: entered allmulticast mode [ 542.957580][ T4927] Bluetooth: hci4: command tx timeout [ 542.961089][T17671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.109940][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.117614][T17448] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.128115][T17448] bridge_slave_0: entered allmulticast mode [ 543.149270][T17448] bridge_slave_0: entered promiscuous mode [ 543.225594][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.244638][T17448] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.259575][T17448] bridge_slave_1: entered allmulticast mode [ 543.280704][T17699] netlink: 'syz.3.2979': attribute type 1 has an invalid length. [ 543.289619][T17448] bridge_slave_1: entered promiscuous mode [ 543.296270][T17699] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2979'. [ 543.320290][T17683] batman_adv: batadv0: Interface deactivated: wlan0 [ 543.332885][T17699] nbd: couldn't find device at index 3 [ 543.573518][T17448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.606625][T17448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.649219][T17683] batman_adv: batadv0: Interface deactivated: wlan0 [ 543.811933][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 543.903530][T17448] team0: Port device team_slave_0 added [ 543.945597][T17448] team0: Port device team_slave_1 added [ 544.038611][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2985'. [ 544.052807][T17719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.065015][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2985'. [ 544.281109][T17733] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2990'. [ 544.291243][T17448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.304958][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.335121][T17448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.341851][T17735] netlink: 'syz.5.2989': attribute type 39 has an invalid length. [ 544.366553][T17448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.391788][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.481620][T17448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.648872][T17746] netlink: 'syz.4.2993': attribute type 2 has an invalid length. [ 544.659280][T17746] netlink: 'syz.4.2993': attribute type 1 has an invalid length. [ 544.929355][T17448] hsr_slave_0: entered promiscuous mode [ 544.941754][T17448] hsr_slave_1: entered promiscuous mode [ 544.949043][T17448] debugfs: 'hsr0' already exists in 'hsr' [ 544.957213][T17448] Cannot create hsr debugfs directory [ 545.035389][ T4927] Bluetooth: hci4: command tx timeout [ 545.095716][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2996'. [ 545.126287][T17761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2996'. [ 545.193562][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2996'. [ 545.203273][T17761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2996'. [ 545.249040][T17769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2998'. [ 545.273595][T17769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2998'. [ 545.652248][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 545.676728][T17782] syzkaller0: entered promiscuous mode [ 545.689116][T17782] syzkaller0: entered allmulticast mode [ 545.876033][T17788] netlink: 'syz.6.3003': attribute type 1 has an invalid length. [ 546.340326][ T7048] hsr_slave_0: left promiscuous mode [ 546.356058][ T7048] hsr_slave_1: left promiscuous mode [ 546.376146][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.391630][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.426919][ T7048] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 546.449344][ T7048] batman_adv: batadv0: Removing interface: ipvlan2 [ 546.480410][ T7048] veth1_macvtap: left allmulticast mode [ 546.489253][ T7048] veth1_macvtap: left promiscuous mode [ 546.500436][ T7048] veth0_macvtap: left promiscuous mode [ 546.513673][ T7048] veth1_vlan: left promiscuous mode [ 546.529979][ T7048] v: left promiscuous mode [ 547.414452][ T7048] team0 (unregistering): Port device team_slave_1 removed [ 547.458434][ T7048] team0 (unregistering): Port device team_slave_0 removed [ 547.529886][ T1322] smc: removing ib device syz2 [ 547.570717][ T1322] smbdirect: ib_dev[syz2] removed [ 547.882805][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 548.429871][T17840] __nla_validate_parse: 1 callbacks suppressed [ 548.429892][T17840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3014'. [ 548.861507][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3015'. [ 548.895188][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3015'. [ 548.907225][T17843] netlink: 'syz.5.3015': attribute type 3 has an invalid length. [ 549.129608][T17862] syzkaller1: entered promiscuous mode [ 549.148034][T17862] syzkaller1: entered allmulticast mode [ 549.603944][T17878] ip_tables: iptables: counters copy to user failed while replacing table [ 550.170085][T17448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.211836][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.235141][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 550.251043][T17448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.303894][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.396539][T17448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.440558][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.480114][T17448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.519936][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.898438][T17448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.027170][T17937] bond0: Caught tx_queue_len zero misconfig [ 551.055931][T17448] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.201275][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.208558][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.269028][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.276282][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.433580][T17944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3032'. [ 552.119414][T17971] netlink: 'syz.6.3035': attribute type 39 has an invalid length. [ 552.133100][ T7048] IPVS: stop unused estimator thread 0... [ 552.620286][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3038'. [ 552.803185][T17448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.946277][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3041'. [ 552.981386][T18006] tipc: Invalid UDP bearer configuration [ 552.981446][T18006] tipc: Enabling of bearer rejected, failed to enable media [ 553.010455][T17448] veth0_vlan: entered promiscuous mode [ 553.049035][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 553.067817][T17448] veth1_vlan: entered promiscuous mode [ 553.231660][T17448] veth0_macvtap: entered promiscuous mode [ 553.269642][T18019] sctp: [Deprecated]: syz.5.3045 (pid 18019) Use of int in max_burst socket option. [ 553.269642][T18019] Use struct sctp_assoc_value instead [ 553.290828][T17448] veth1_macvtap: entered promiscuous mode [ 553.378830][T17448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.429779][T17448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.485246][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.529802][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.581964][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.617664][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.875670][T18041] netlink: 'syz.4.3049': attribute type 21 has an invalid length. [ 553.889202][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.902364][T18041] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3049'. [ 553.913062][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.986359][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3051'. [ 554.054245][T18051] sit0: Caught tx_queue_len zero misconfig [ 554.095705][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.130040][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.405435][T18068] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 555.013470][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 555.031684][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 555.048125][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 555.067772][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 555.075629][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 555.913764][T18124] netlink: 'syz.0.3068': attribute type 1 has an invalid length. [ 556.236323][T18133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3069'. [ 556.916367][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3076'. [ 557.080186][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3076'. [ 557.148164][T18172] bridge0: port 3(vlan2) entered blocking state [ 557.167753][T18172] bridge0: port 3(vlan2) entered disabled state [ 557.196139][T18172] vlan2: entered allmulticast mode [ 557.200181][ T4927] Bluetooth: hci0: command tx timeout [ 557.215300][T18172] geneve0: entered allmulticast mode [ 557.231999][T18172] vlan2: entered promiscuous mode [ 557.238048][T18172] geneve0: entered promiscuous mode [ 557.490024][T18178] netlink: 'syz.6.3078': attribute type 1 has an invalid length. [ 557.796076][T18085] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.824922][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.834483][T18085] bridge_slave_0: entered allmulticast mode [ 557.856800][T18085] bridge_slave_0: entered promiscuous mode [ 557.875006][T18085] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.890086][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.898297][T18085] bridge_slave_1: entered allmulticast mode [ 557.906662][T18085] bridge_slave_1: entered promiscuous mode [ 558.009555][T18085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.059314][T18085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.188048][T18085] team0: Port device team_slave_0 added [ 558.218334][T18085] team0: Port device team_slave_1 added [ 558.338510][T18085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.355676][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.427397][T18085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.470679][T18085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.503369][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.546286][T18085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.616024][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 558.717945][T18085] hsr_slave_0: entered promiscuous mode [ 558.742668][T18085] hsr_slave_1: entered promiscuous mode [ 558.769845][T18085] debugfs: 'hsr0' already exists in 'hsr' [ 558.799993][T18085] Cannot create hsr debugfs directory [ 559.275828][ T4927] Bluetooth: hci0: command tx timeout [ 559.324178][T18242] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3090'. [ 559.361388][T18243] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3090'. [ 559.486822][T18242] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 559.548839][T18242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.798607][T18085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.828182][T18085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.863951][T18085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 560.175565][T18085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.198482][T18085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.209360][T18085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 560.310654][T18270] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3095'. [ 560.427281][T18085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.463600][T18085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.488970][T18085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 560.697715][T18284] Cannot find add_set index 0 as target [ 560.708368][T18085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.757048][T18085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.805026][T18085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 560.980163][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.001327][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.012481][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.021911][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.033586][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.211848][T18306] netlink: zone id is out of range [ 561.239640][T18306] netlink: zone id is out of range [ 561.267538][T18306] netlink: zone id is out of range [ 561.292849][T18306] netlink: zone id is out of range [ 561.317939][T18306] netlink: zone id is out of range [ 561.333734][T18306] netlink: zone id is out of range [ 561.358329][ T5618] Bluetooth: hci0: command tx timeout [ 561.368330][T18306] netlink: zone id is out of range [ 561.380074][T18306] netlink: zone id is out of range [ 561.390148][T18306] netlink: zone id is out of range [ 562.127371][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3108'. [ 562.302472][T18085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 562.346757][T18350] netlink: 'syz.5.3109': attribute type 2 has an invalid length. [ 562.391001][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.437406][T18085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 562.487563][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.515829][T18085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 562.556463][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.579761][T18085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 562.619166][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.116259][ T5618] Bluetooth: hci2: command tx timeout [ 563.236172][T18358] syzkaller1: entered promiscuous mode [ 563.261294][T18358] syzkaller1: entered allmulticast mode [ 563.435205][ T5618] Bluetooth: hci0: command tx timeout [ 563.686834][T18085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.826961][T18085] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.900998][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.908248][ T7051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.963258][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.970584][ T7051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.989851][T18416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3122'. [ 564.047110][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 564.048487][T18418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3122'. [ 564.353303][T18294] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.390019][T18294] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.423621][T18294] bridge_slave_0: entered allmulticast mode [ 564.446827][T18294] bridge_slave_0: entered promiscuous mode [ 564.459095][T18294] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.467713][T18294] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.479306][T18294] bridge_slave_1: entered allmulticast mode [ 564.512297][T18294] bridge_slave_1: entered promiscuous mode [ 564.759667][T18444] netlink: 'syz.5.3128': attribute type 1 has an invalid length. [ 564.795012][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3128'. [ 564.816416][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3128'. [ 564.898315][T18294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.941867][T18294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.956987][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 564.971710][T18085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.143713][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3131'. [ 565.175529][T18455] veth0_to_bond: Caught tx_queue_len zero misconfig [ 565.190688][T18294] team0: Port device team_slave_0 added [ 565.196588][ T5618] Bluetooth: hci2: command tx timeout [ 565.239753][T18294] team0: Port device team_slave_1 added [ 565.415905][T18294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.449574][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.540452][T18294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.543039][T18470] netlink: 'syz.6.3135': attribute type 1 has an invalid length. [ 565.587046][T18294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.615357][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.702784][T18294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.905512][T18294] hsr_slave_0: entered promiscuous mode [ 565.922595][T18294] hsr_slave_1: entered promiscuous mode [ 565.945038][T18294] debugfs: 'hsr0' already exists in 'hsr' [ 565.950823][T18294] Cannot create hsr debugfs directory [ 566.131982][T18481] netlink: 'syz.0.3139': attribute type 2 has an invalid length. [ 566.172987][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 566.349334][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3141'. [ 566.586351][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3143'. [ 566.710796][T18489] can: request_module (can-proto-0) failed. [ 566.870526][T18085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.121464][T18514] veth0: entered promiscuous mode [ 567.137378][T18294] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 567.164251][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.182741][T18294] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 567.214981][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.223881][T18514] net_ratelimit: 498 callbacks suppressed [ 567.223902][T18514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.276616][ T5618] Bluetooth: hci2: command tx timeout [ 567.284024][T18294] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 567.331489][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.350416][T18294] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 567.410503][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.536099][T18524] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 567.614567][T18294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.636675][T18513] veth0: left promiscuous mode [ 567.731796][T18544] netlink: 'syz.5.3150': attribute type 2 has an invalid length. [ 567.743113][T18294] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.768986][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.776229][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.842630][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.849879][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.912107][T18551] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3148'. [ 567.947636][T18554] vlan1: left allmulticast mode [ 567.953007][T18554] veth0_vlan: left allmulticast mode [ 568.160301][ C1] bridge0: port 3(vlan0) entered learning state [ 568.168609][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 568.190399][T18085] veth0_vlan: entered promiscuous mode [ 568.229429][T18085] veth1_vlan: entered promiscuous mode [ 568.327840][T18085] veth0_macvtap: entered promiscuous mode [ 568.344368][T18085] veth1_macvtap: entered promiscuous mode [ 568.356561][T18564] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 568.376441][T18564] x_tables: duplicate entry at hook 1 [ 568.387512][T18085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.421988][T18085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.455046][ T7051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.485718][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.507917][ T7053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.548503][ T7053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.006914][T18294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.355320][ T5618] Bluetooth: hci2: command tx timeout [ 569.372694][T18294] veth0_vlan: entered promiscuous mode [ 569.391675][T18294] veth1_vlan: entered promiscuous mode [ 569.440237][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 390 seconds [ 569.467707][T18294] veth0_macvtap: entered promiscuous mode [ 569.482454][T18294] veth1_macvtap: entered promiscuous mode [ 569.520701][T18294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.557718][T18294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.578608][ T7051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.589407][ T7051] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.600510][ T7051] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.659708][ T7055] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.412941][T18524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.642340][ T7051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.668549][ T7051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.826801][ T7048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.860382][ T7048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.961580][ T7048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.972626][T18597] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 571.001510][ T7048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.149424][ T7048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.174597][ T7048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.406571][T18609] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 571.421562][T18609] bond3 (unregistering): Released all slaves [ 571.561200][T18619] team0: Device ipvlan0 failed to register rx_handler [ 571.698943][T18627] netlink: 'syz.4.3169': attribute type 1 has an invalid length. [ 571.724750][T18627] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3169'. [ 571.836703][T18632] netlink: 'syz.5.3171': attribute type 1 has an invalid length. [ 571.861469][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3098'. [ 571.879347][T18632] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3171'. [ 572.028255][T18640] netlink: zone id is out of range [ 572.035098][T18640] netlink: zone id is out of range [ 572.040881][T18640] netlink: zone id is out of range [ 572.046758][T18640] netlink: zone id is out of range [ 572.052048][T18640] netlink: zone id is out of range [ 572.063728][T18640] netlink: zone id is out of range [ 572.079836][T18640] netlink: zone id is out of range [ 572.093021][T18640] netlink: zone id is out of range [ 572.131469][T18640] netlink: zone id is out of range [ 572.208482][T18643] gtp0: entered promiscuous mode [ 572.221966][T18643] gtp0: entered allmulticast mode [ 572.424571][T18655] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 572.809200][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3180'. [ 573.049724][T18672] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3180'. [ 573.800204][T18709] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 573.849494][T18709] bond1 (unregistering): Released all slaves [ 574.058101][T18717] Bluetooth: MGMT ver 1.23 [ 574.167506][T18719] net_ratelimit: 78 callbacks suppressed [ 574.167528][T18719] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 574.304358][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3195'. [ 574.521918][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3197'. [ 576.351391][T18692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.693259][T18740] openvswitch: netlink: Message has 1 unknown bytes. [ 576.720726][T18742] netlink: 'syz.0.3202': attribute type 11 has an invalid length. [ 576.801898][T18744] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3199'. [ 577.011930][T18754] syzkaller1: entered promiscuous mode [ 577.048048][T18754] syzkaller1: entered allmulticast mode [ 577.070825][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 577.359587][T18782] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3209'. [ 577.533697][T18784] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3211'. [ 577.635092][T18798] netlink: 'syz.7.3214': attribute type 11 has an invalid length. [ 578.178498][T18823] netlink: 'syz.7.3222': attribute type 1 has an invalid length. [ 578.178526][T18824] netlink: 'syz.0.3220': attribute type 2 has an invalid length. [ 578.178547][T18824] netlink: 'syz.0.3220': attribute type 2 has an invalid length. [ 578.350210][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'. [ 578.499704][T18835] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3224'. [ 578.763216][T18851] netlink: 'syz.4.3228': attribute type 2 has an invalid length. [ 578.973676][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 579.241161][T18869] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 579.252644][T18871] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3234'. [ 579.286328][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 579.342169][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 579.356656][T18874] netlink: 'syz.5.3233': attribute type 16 has an invalid length. [ 579.608647][T18888] batman_adv: batadv0: Adding interface: veth0 [ 579.629416][T18888] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.654978][T18889] netlink: 'syz.7.3238': attribute type 39 has an invalid length. [ 579.719629][T18888] batman_adv: batadv0: Interface activated: veth0 [ 580.010372][T18903] netlink: 'syz.0.3244': attribute type 10 has an invalid length. [ 580.094085][T18903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.588885][T18939] xt_TCPMSS: Only works on TCP SYN packets [ 581.123129][T18956] netlink: 'syz.5.3256': attribute type 1 has an invalid length. [ 581.218747][T18956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 581.233545][T18958] veth0_to_bond: left allmulticast mode [ 581.274564][T18958] bond5: (slave veth0_to_bond): making interface the new active one [ 581.326528][T18958] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 581.339347][T18959] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 581.430174][T18962] syzkaller0: entered promiscuous mode [ 581.467289][T18962] syzkaller0: entered allmulticast mode [ 581.814078][T18995] vlan2: left allmulticast mode [ 581.832667][T18995] geneve0: left allmulticast mode [ 581.855622][T18995] vlan2: left promiscuous mode [ 581.880980][T18995] geneve0: left promiscuous mode [ 581.901704][T18995] bridge0: port 3(vlan2) entered disabled state [ 581.912493][T18991] __nla_validate_parse: 5 callbacks suppressed [ 581.912510][T18991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3264'. [ 581.997006][T18995] bridge_slave_1: left promiscuous mode [ 582.017441][T18995] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.032882][T18999] xt_hashlimit: size too large, truncated to 1048576 [ 582.042945][T18995] bridge_slave_0: left allmulticast mode [ 582.051463][T18995] bridge_slave_0: left promiscuous mode [ 582.070003][T18995] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.588051][T19022] tipc: Started in network mode [ 582.604939][T19022] tipc: Node identity 32c16632ad92, cluster identity 4711 [ 582.641863][T19022] tipc: Enabled bearer , priority 0 [ 582.681842][T19029] validate_nla: 1 callbacks suppressed [ 582.681861][T19029] netlink: 'syz.5.3274': attribute type 10 has an invalid length. [ 582.772733][T19036] netlink: 'syz.7.3275': attribute type 21 has an invalid length. [ 582.853082][T19027] syzkaller0: entered promiscuous mode [ 582.884306][T19027] syzkaller0: entered allmulticast mode [ 582.910661][T19027] tipc: Resetting bearer [ 582.973022][T19036] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3275'. [ 583.034361][T19019] tipc: Resetting bearer [ 585.686688][T19019] tipc: Disabling bearer [ 585.793797][T12742] tipc: Node number set to 2673042994 [ 585.970777][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3281'. [ 586.312041][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 586.413780][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 586.538648][T19104] netlink: 'syz.4.3290': attribute type 39 has an invalid length. [ 586.720380][T19099] IPVS: Error joining to the multicast group [ 587.294929][T19129] xt_hl: Unknown TTL match mode: 255 [ 587.654398][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3303'. [ 587.666665][T19147] nbd: must specify at least one socket [ 587.673730][T19147] netlink: 'syz.5.3303': attribute type 11 has an invalid length. [ 587.752471][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3304'. [ 587.784896][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3304'. [ 587.895743][T19154] netlink: 'syz.7.3305': attribute type 10 has an invalid length. [ 587.961284][T19155] Bluetooth: MGMT ver 1.23 [ 588.043192][T19156] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 588.110053][T19153] syz.7.3305 (19153) used obsolete PPPIOCDETACH ioctl [ 588.149062][T19154] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 588.245544][T19160] netlink: 'syz.4.3307': attribute type 9 has an invalid length. [ 588.310402][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3308'. [ 588.431746][T19170] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3307'. [ 588.503529][T19165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3309'. [ 588.532541][T19176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3310'. [ 588.820863][T19182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.139418][T19199] SET target dimension over the limit! [ 589.221219][T19189] tbf_change: 23 callbacks suppressed [ 589.221240][T19189] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 589.497162][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 589.513908][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3319'. [ 589.538326][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3320'. [ 589.569079][T19209] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 590.060679][T19241] x_tables: duplicate entry at hook 2 [ 590.258414][T19239] bond3: entered allmulticast mode [ 590.272910][T19239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.347972][T19258] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 591.022227][T19289] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 591.053997][T19289] syzkaller1: linktype set to 823 [ 591.280407][T19301] openvswitch: netlink: IP tunnel TTL not specified. [ 591.897373][T19333] netlink: 'syz.7.3355': attribute type 14 has an invalid length. [ 591.905386][T19336] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 591.936193][T19333] netlink: 'syz.7.3355': attribute type 13 has an invalid length. [ 591.959035][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.983532][T19337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.999131][T19338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.022104][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.221405][ T30] audit: type=1107 audit(1786343556.701:10): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 592.266548][T19349] sit1: entered promiscuous mode [ 592.371581][T19349] sit1: entered allmulticast mode [ 592.733893][T19370] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 593.063549][T19392] __nla_validate_parse: 13 callbacks suppressed [ 593.063572][T19392] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3374'. [ 593.111969][T19394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 593.130296][T19394] bond0: (slave bond5): Enslaving as an active interface with a down link [ 593.188566][T19401] netlink: 'syz.4.3377': attribute type 1 has an invalid length. [ 593.306726][T19401] bond1: entered promiscuous mode [ 593.325234][T19401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.338622][T19397] syzkaller0: entered promiscuous mode [ 593.365796][T19397] syzkaller0: entered allmulticast mode [ 593.535741][T19414] netlink: 'syz.4.3379': attribute type 83 has an invalid length. [ 593.549210][T19413] netlink: 'syz.4.3379': attribute type 83 has an invalid length. [ 593.756019][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 593.838437][T19425] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3384'. [ 593.869670][T19425] ip6tnl0: Caught tx_queue_len zero misconfig [ 594.013984][T19436] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3386'. [ 594.593889][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3390'. [ 595.828283][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3400'. [ 596.149491][T19503] bond6: option all_slaves_active: invalid value (4) [ 596.169403][T19509] netlink: 'syz.7.3406': attribute type 1 has an invalid length. [ 596.208486][T19510] netlink: 'syz.7.3406': attribute type 1 has an invalid length. [ 596.226243][T19503] bond6 (unregistering): Released all slaves [ 596.386822][T19509] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 596.397442][T19510] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 596.857632][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 597.102454][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.112615][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.120648][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.128620][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.136591][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.144524][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.152521][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.160505][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.168466][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.176454][T19555] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.220401][T19561] bridge6: entered allmulticast mode [ 597.238106][T19561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3423'. [ 597.410961][T19566] xt_TCPMSS: Only works on TCP SYN packets [ 597.691657][T19577] macvlan0: entered promiscuous mode [ 598.207565][T19611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3438'. [ 598.220799][T19609] ipvlan1: entered promiscuous mode [ 598.238542][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.245849][ C1] bridge0: topology change detected, propagating [ 598.252761][ C1] bridge0: port 3(vlan0) entered forwarding state [ 598.255124][T19609] ipvlan1: entered allmulticast mode [ 598.259287][ C1] bridge0: topology change detected, propagating [ 598.273297][T19609] veth0_vlan: entered allmulticast mode [ 598.311188][T19611] bridge0: port 1(bridge_slave_0) entered listening state [ 598.433288][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3442'. [ 598.452364][T19620] syzkaller0: entered promiscuous mode [ 598.479283][T19620] syzkaller0: entered allmulticast mode [ 598.523725][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3443'. [ 598.679992][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 598.820331][T19632] syzkaller0: entered promiscuous mode [ 598.850921][T19632] syzkaller0: entered allmulticast mode [ 599.117077][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3451'. [ 599.160103][T19662] netlink: 'syz.5.3451': attribute type 9 has an invalid length. [ 599.255463][T19664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3452'. [ 599.281778][T19664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3452'. [ 599.311282][T19667] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3452'. [ 599.376535][T19664] ip6erspan0: entered allmulticast mode [ 599.528133][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 420 seconds [ 599.868774][T19693] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 599.938848][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3461'. [ 599.949275][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3461'. [ 599.969146][T19693] bond6 (unregistering): Released all slaves [ 600.444981][ T7051] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.469304][ T7051] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.491726][ T7051] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.522127][ T7051] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.609197][T19725] ip6gretap0: entered promiscuous mode [ 600.621391][T19725] batadv0: entered promiscuous mode [ 600.629522][T19725] batadv0: left promiscuous mode [ 600.640769][T19725] ip6gretap0: left promiscuous mode [ 601.298399][T19763] x_tables: duplicate underflow at hook 1 [ 601.306888][T19764] x_tables: duplicate underflow at hook 1 [ 601.529904][T19771] netlink: 'syz.6.3485': attribute type 2 has an invalid length. [ 601.537956][T19771] netlink: 'syz.6.3485': attribute type 2 has an invalid length. [ 602.660559][T19786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.680183][T19803] netlink: 'syz.5.3492': attribute type 1 has an invalid length. [ 603.061198][T19828] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 603.103116][T19831] net_ratelimit: 44 callbacks suppressed [ 603.103137][T19831] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 603.118344][T19828] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 603.141842][T19833] team0: entered promiscuous mode [ 603.162291][T19833] team_slave_0: entered promiscuous mode [ 603.173106][T19833] team_slave_1: entered promiscuous mode [ 603.832998][T19870] __nla_validate_parse: 13 callbacks suppressed [ 603.833017][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3513'. [ 603.877037][T19870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3513'. [ 603.895526][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3513'. [ 603.913852][T19870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3513'. [ 604.101847][T19882] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3516'. [ 604.131775][T19885] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3516'. [ 604.313240][T19891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3521'. [ 604.363521][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3521'. [ 604.483818][T19897] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 604.738416][T19904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.785611][T19904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.822066][T19904] bond0 (unregistering): Released all slaves [ 604.861407][T19910] batman_adv: batadv0: Interface activated: wlan0 [ 604.868863][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.886293][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.910034][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3528'. [ 604.934945][T19917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.953287][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3528'. [ 605.152193][T19924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.159553][T19924] IPv6: NLM_F_CREATE should be set when creating new route [ 605.348770][T19931] gretap0: entered promiscuous mode [ 605.359467][T19931] vlan2: entered promiscuous mode [ 605.693279][T19944] atomic_op ffff888028b93998 conn xmit_atomic 0000000000000000 [ 605.997995][T19956] batman_adv: batadv0: Interface deactivated: wlan0 [ 606.029928][T19956] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 606.052488][T19956] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 606.203376][T19970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.213082][T19966] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 607.216691][T20022] ip6gre1: entered allmulticast mode [ 607.426511][T20033] geneve3: entered promiscuous mode [ 607.444579][T20033] geneve3: entered allmulticast mode [ 607.477322][T20031] syzkaller0: entered promiscuous mode [ 607.495046][T20031] syzkaller0: entered allmulticast mode [ 607.515739][ T7055] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 607.553493][ T7055] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 607.584085][ T7055] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 607.612196][ T7055] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 607.679500][T20043] vlan3: entered allmulticast mode [ 607.712240][T20043] veth1_virt_wifi: entered allmulticast mode [ 607.926517][T20048] veth0_to_team: Caught tx_queue_len zero misconfig [ 608.075569][T20058] netlink: NAT attribute has 1 unknown bytes [ 608.096808][T20058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.149365][T20060] syzkaller1: entered promiscuous mode [ 608.180365][T20060] syzkaller1: entered allmulticast mode [ 609.013541][T20091] __nla_validate_parse: 10 callbacks suppressed [ 609.013562][T20091] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3582'. [ 609.212647][T20091] bond0: (slave gre0): Device is not bonding slave [ 609.247065][T20091] bond0: option active_slave: invalid value (gre0) [ 609.281462][T20091] bond0 (unregistering): Released all slaves [ 609.342504][T20111] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 609.667289][T20130] netlink: 808 bytes leftover after parsing attributes in process `syz.4.3593'. [ 609.739745][T20133] netlink: 'syz.0.3594': attribute type 1 has an invalid length. [ 609.772819][T20133] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3594'. [ 609.818416][T20133] sit0: entered promiscuous mode [ 609.874551][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'. [ 610.073522][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3596'. [ 610.303988][T20159] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3599'. [ 610.335653][T20162] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3600'. [ 610.416393][T20164] syzkaller0: entered promiscuous mode [ 610.438983][T20164] syzkaller0: entered allmulticast mode [ 610.615305][T20176] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 611.018901][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3608'. [ 611.043362][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3608'. [ 611.071151][T20197] vlan0: entered promiscuous mode [ 611.090474][T20201] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3609'. [ 611.109341][T20203] netlink: 'syz.4.3610': attribute type 75 has an invalid length. [ 611.316035][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.323967][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.340799][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.350415][ T4927] Bluetooth: hci2: link tx timeout [ 611.360592][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.388280][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.427286][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.480411][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.510925][ T4927] Bluetooth: hci2: link tx timeout [ 611.520522][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.523737][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.537180][ T4927] Bluetooth: hci2: link tx timeout [ 611.543532][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.552562][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.560617][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.568000][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.575278][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.582451][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.591016][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.598731][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.606084][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.613274][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.622364][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.630042][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.637681][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.645312][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.652519][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.660131][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.667611][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.684862][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.704612][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.733173][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.767969][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.809482][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.835834][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.885590][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.915589][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.953030][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 611.980828][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 612.003348][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 612.020991][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 612.028993][ T4927] Bluetooth: hci2: link tx timeout [ 612.034347][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 612.056789][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 612.066164][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 612.128247][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 612.161872][T20210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 612.326117][ T4927] Bluetooth: hci2: link tx timeout [ 612.331551][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 612.342803][T20245] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 612.870003][T20277] netlink: 'syz.5.3630': attribute type 10 has an invalid length. [ 612.929745][T20277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.988117][T20277] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 613.035172][ T4927] Bluetooth: hci2: command 0x0405 tx timeout [ 613.143473][T20282] xt_recent: Unsupported userspace flags (000000b1) [ 613.263895][T20295] netlink: 'syz.5.3636': attribute type 10 has an invalid length. [ 613.433235][T20295] netlink: 'syz.5.3636': attribute type 10 has an invalid length. [ 613.513160][ T4927] Bluetooth: hci2: link tx timeout [ 613.524785][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 613.876400][ T4927] Bluetooth: hci2: link tx timeout [ 613.881609][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.241092][T20338] bridge0: port 3(syz_tun) entered blocking state [ 614.248730][T20338] bridge0: port 3(syz_tun) entered disabled state [ 614.256545][T20338] syz_tun: entered allmulticast mode [ 614.268152][T20338] syz_tun: entered promiscuous mode [ 614.275367][T20338] bridge0: port 3(syz_tun) entered blocking state [ 614.283267][T20338] bridge0: port 3(syz_tun) entered forwarding state [ 614.299822][T20344] xt_hashlimit: size too large, truncated to 1048576 [ 614.307333][T20339] xt_hashlimit: size too large, truncated to 1048576 [ 614.318536][ T4927] Bluetooth: hci2: link tx timeout [ 614.323773][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.810073][ T4927] Bluetooth: hci2: link tx timeout [ 614.815342][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 615.117622][ T4927] Bluetooth: hci2: command 0x0405 tx timeout [ 615.253613][T20365] __nla_validate_parse: 15 callbacks suppressed [ 615.253633][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3656'. [ 615.529779][T20386] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3660'. [ 615.580669][T20386] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3660'. [ 615.631192][T20386] wg2: Caught tx_queue_len zero misconfig [ 615.790188][T20398] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 615.802451][T12742] IPVS: starting estimator thread 0... [ 615.925586][T20401] IPVS: using max 28 ests per chain, 67200 per kthread [ 616.177635][T20408] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 616.242691][T20408] bond0 (unregistering): Released all slaves [ 616.346052][T20417] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 616.613428][T20442] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3672'. [ 616.666561][T20437] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3670'. [ 616.720119][T20437] bond0: entered promiscuous mode [ 616.730356][T20437] bond_slave_0: entered promiscuous mode [ 616.736728][T20437] bond_slave_1: entered promiscuous mode [ 616.742934][T20437] bond5: entered promiscuous mode [ 616.762661][T20437] gretap0: entered promiscuous mode [ 616.779444][T20437] debugfs: 'hsr0' already exists in 'hsr' [ 616.786087][T20437] Cannot create hsr debugfs directory [ 616.793497][T20437] hsr0: entered promiscuous mode [ 616.882048][T20457] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3676'. [ 617.223101][T20468] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3678'. [ 617.490800][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3684'. [ 618.534368][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3693'. [ 618.774997][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3693'. [ 620.139267][T20527] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 621.141218][T20538] Cannot find del_set index 0 as target [ 621.484465][T20543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 621.927333][T20555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3705'. [ 622.504986][T20570] veth0: entered promiscuous mode [ 623.323068][T20572] veth0: left promiscuous mode [ 624.256490][T20589] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 625.567556][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 626.996171][T20603] IPVS: persistence engine module ip_vs_pe_À not found [ 627.054280][T20605] hsr_slave_1 (unregistering): left promiscuous mode [ 629.650884][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 450 seconds [ 631.110309][T20643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3732'. [ 634.265440][T20657] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3734'. [ 634.502228][T20655] team0: left promiscuous mode [ 634.596538][T20655] team_slave_0: left promiscuous mode [ 634.669782][T20655] team_slave_1: left promiscuous mode [ 635.192259][T20655] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.421766][T20655] team0: Cannot enslave team device to itself [ 637.223393][T20675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3739'. [ 638.868624][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3742'. [ 639.515939][T20687] tipc: Disabling bearer [ 642.252829][T20701] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 642.342710][T20701] netlink: 'syz.4.3746': attribute type 4 has an invalid length. [ 642.846153][T20706] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 642.914954][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3747'. [ 642.970334][T20701] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3746'. [ 643.066670][T20706] netlink: 'syz.4.3746': attribute type 4 has an invalid length. [ 643.501897][T20706] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3746'. [ 646.112327][ T10] hid-generic 0005:0B57:05DF.0002: item fetching failed at offset 0/1 [ 646.312520][T20726] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3751'. [ 646.411634][ T10] hid-generic 0005:0B57:05DF.0002: probe with driver hid-generic failed with error -22 [ 646.665656][T20733] netlink: 182 bytes leftover after parsing attributes in process `syz.4.3753'. [ 647.103225][T20734] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3752'. [ 647.407731][T20734] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3752'. [ 647.611943][T20734] netlink: 'syz.7.3752': attribute type 5 has an invalid length. [ 648.305110][T20734] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3752'. [ 649.550262][T20743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3755'. [ 649.769933][T20744] netlink: 'syz.0.3754': attribute type 7 has an invalid length. [ 650.729281][T20744] netlink: 'syz.0.3754': attribute type 1 has an invalid length. [ 651.315805][T20749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3754'. [ 652.049483][T20744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3754'. [ 652.168204][ T4927] Bluetooth: hci3: command 0x0406 tx timeout [ 655.195570][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 655.891263][T20744] ip6gre1: entered allmulticast mode [ 658.370138][T20783] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 659.510613][T20796] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3766'. [ 659.703743][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 480 seconds [ 660.259873][T20783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.433957][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3767'. [ 660.555208][T20782] bridge: RTM_NEWNEIGH with invalid ether address [ 661.478542][T20804] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000 [ 662.403305][ T4927] Bluetooth: hci4: command 0x0406 tx timeout [ 664.189074][T20812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.871597][ T5618] Bluetooth: hci2: link tx timeout [ 665.878065][ T5618] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 665.890916][ T5618] Bluetooth: hci2: link tx timeout [ 665.897026][ T5618] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 665.906483][ T5618] Bluetooth: hci2: link tx timeout [ 665.912578][ T5618] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 667.503265][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3778'. [ 667.931370][ T5618] Bluetooth: hci2: command 0x0405 tx timeout [ 672.366441][T20867] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3785'. [ 672.466766][T20865] openvswitch: netlink: IPv4 tunnel dst address is zero [ 672.606962][T20872] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3784'. [ 672.618717][T20867] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3785'. [ 672.719917][T20865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.152425][T20898] netlink: 'syz.4.3790': attribute type 13 has an invalid length. [ 677.803870][T20898] gretap0: refused to change device tx_queue_len [ 677.849006][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 678.086732][T20898] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 678.607849][T20897] mac80211_hwsim hwsim21 wlan0: left allmulticast mode [ 679.490508][T20906] batman_adv: batadv0: Interface activated: wlan0 [ 686.795052][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 686.808403][T20958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3805'. [ 688.676201][T20967] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3808'. [ 688.846129][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'. [ 689.185672][T20972] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3808'. [ 689.296349][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'. [ 689.836469][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 510 seconds [ 690.761463][T20977] netlink: 3080 bytes leftover after parsing attributes in process `syz.7.3810'. [ 690.944684][T20977] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.3810'. [ 692.719443][T20979] netlink: 'syz.5.3812': attribute type 46 has an invalid length. [ 693.556313][T20986] xt_HMARK: spi-set and port-set can't be combined [ 694.750878][T20994] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 695.757390][T21001] netlink: 'syz.5.3816': attribute type 16 has an invalid length. [ 696.173629][T21001] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3816'. [ 696.860100][T21005] batman_adv: batadv0: Adding interface: veth0 [ 696.978174][T21005] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.440325][T21005] batman_adv: batadv0: Interface activated: veth0 [ 702.380633][T21029] No such timeout policy "syz0" [ 706.370655][T21051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3827'. [ 708.684369][T21065] netlink: 'syz.4.3830': attribute type 3 has an invalid length. [ 713.520394][T21090] netlink: 'syz.7.3836': attribute type 1 has an invalid length. [ 715.125890][T21090] bond1: entered promiscuous mode [ 715.247371][T21090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.619008][T21107] IPVS: stopping master sync thread 19156 ... [ 717.841298][T21114] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3841'. [ 718.738455][T21128] nbd: couldn't find a device at index 0 [ 719.098865][T21128] IPv6: NLM_F_CREATE should be specified when creating new route [ 719.452938][T21128] netlink: 'syz.6.3844': attribute type 1 has an invalid length. [ 720.777493][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 540 seconds [ 721.768713][ T4977] udevd[4977]: worker [6173] /devices/virtual/block/nbd4 timeout; kill it [ 722.041954][ T4977] udevd[4977]: seq 11329 '/devices/virtual/block/nbd4' killed [ 723.554530][T21146] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3846'. [ 724.350389][T21155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.153744][T21168] netlink: 'syz.7.3851': attribute type 1 has an invalid length. [ 727.634039][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3852'. [ 729.027211][T21168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.830148][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3855'. [ 731.030084][T21186] syzkaller0: entered promiscuous mode [ 731.311126][T21186] syzkaller0: entered allmulticast mode [ 733.640835][T21204] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3856'. [ 733.802608][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3856'. [ 734.226030][T21209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.395167][T21204] team0: Port device team_slave_0 removed [ 738.612144][T21214] netlink: 'syz.6.3858': attribute type 4 has an invalid length. [ 741.950452][T21235] xt_hashlimit: size too large, truncated to 1048576 [ 742.386004][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3864'. [ 742.581525][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3864'. [ 742.646630][T21244] netlink: 'syz.0.3866': attribute type 9 has an invalid length. [ 742.780372][T21243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.344650][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3868'. [ 748.571000][T21270] veth1_macvtap: left promiscuous mode [ 748.632045][T21270] macsec0: entered promiscuous mode [ 751.366516][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 570 seconds [ 752.888004][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 755.480823][T21302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.131381][T21307] netlink: 'syz.0.3878': attribute type 3 has an invalid length. [ 756.483181][T21307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3878'. [ 756.520508][T21307] netlink: 'syz.0.3878': attribute type 3 has an invalid length. [ 756.732192][T21307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3878'. [ 756.865210][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3878'. [ 757.942474][T21315] netlink: Conntrack attr has 4 unknown bytes [ 758.155310][T21315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.653186][T21323] vxcan0: tx address claim with dlc 0 [ 761.773269][T21332] netlink: 'syz.4.3884': attribute type 20 has an invalid length. [ 761.887857][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3884'. [ 763.238923][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 763.588403][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 763.664671][T21332] netlink: 'syz.4.3884': attribute type 20 has an invalid length. [ 763.775809][T21341] netlink: 'syz.5.3886': attribute type 21 has an invalid length. [ 763.840064][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3884'. [ 763.868682][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3886'. [ 763.966692][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 764.187920][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 764.325985][T21341] netlink: 'syz.5.3886': attribute type 21 has an invalid length. [ 764.760667][T21347] netlink: 'syz.0.3888': attribute type 39 has an invalid length. [ 764.860780][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3886'. [ 766.108237][T21349] netlink: 'syz.7.3890': attribute type 10 has an invalid length. [ 766.697956][T21352] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3890'. [ 767.741979][T21349] team0: Port device dummy0 added [ 771.020436][T21363] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 771.581038][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3893'. [ 771.637686][T21361] netlink: 'syz.4.3893': attribute type 3 has an invalid length. [ 772.955063][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 781.507560][T21413] netlink: 'syz.0.3904': attribute type 1 has an invalid length. [ 782.215414][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 600 seconds [ 788.108485][T21430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.830311][T21436] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3910'. [ 795.480639][T21445] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3914'. [ 795.739930][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 795.786554][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 795.803509][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 795.856779][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 795.937050][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 796.543075][T11487] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.499555][T11487] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.156788][ T4927] Bluetooth: hci6: command tx timeout [ 799.638852][T21470] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3918'. [ 800.244660][ T5618] Bluetooth: hci6: command tx timeout [ 800.288078][T21477] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 800.302441][T21477] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 800.313210][T21477] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 800.358808][T21477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 800.371626][T21477] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 802.327742][T21477] Bluetooth: hci6: command tx timeout [ 802.475884][T21477] Bluetooth: hci7: command tx timeout [ 803.383493][T21484] xt_TPROXY: Can be used only with -p tcp or -p udp [ 804.405481][T21477] Bluetooth: hci6: command tx timeout [ 804.570229][T21477] Bluetooth: hci7: command tx timeout [ 806.635055][T21477] Bluetooth: hci7: command tx timeout [ 810.221323][T21383] bond0: (slave syz_tun): Releasing backup interface [ 810.513257][T21527] netlink: 'syz.5.3927': attribute type 2 has an invalid length. [ 812.747078][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 630 seconds [ 821.136545][T11487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.656189][T21564] netlink: 'syz.7.3934': attribute type 2 has an invalid length. [ 823.767432][T21564] netlink: 'syz.7.3934': attribute type 1 has an invalid length. [ 827.361640][T11487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.250338][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3937'. [ 830.215958][T11487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.693670][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3938'. [ 834.663761][T11487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.670318][T21609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.025817][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3944'. [ 841.068329][ T7055] bond0: (slave bond_slave_0): interface is now down [ 841.194335][ T7055] bond0: (slave bond_slave_1): interface is now down [ 841.323342][ T7055] bond0: (slave veth0_to_bond): interface is now down [ 843.385148][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 660 seconds [ 844.157675][ T6321] bond0: (slave bond_slave_0): interface is now down [ 844.164447][ T6321] bond0: (slave bond_slave_1): interface is now down [ 844.541855][ T6321] bond0: (slave veth0_to_bond): interface is now down [ 844.680161][T21644] ipt_REJECT: ECHOREPLY no longer supported. [ 844.754604][T11487] bridge_slave_1: left allmulticast mode [ 844.845635][T11487] bridge_slave_1: left promiscuous mode [ 845.270785][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.079919][T11487] bridge_slave_0: left allmulticast mode [ 846.165313][T11487] bridge_slave_0: left promiscuous mode [ 846.489246][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.161204][ T6323] bond0: (slave bond_slave_0): interface is now down [ 847.534948][ T6323] bond0: (slave bond_slave_1): interface is now down [ 847.785094][ T6323] bond0: (slave veth0_to_bond): interface is now down [ 850.371767][ T7055] bond0: (slave bond_slave_0): interface is now down [ 850.827485][ T7055] bond0: (slave bond_slave_1): interface is now down [ 851.188633][ T7055] bond0: (slave veth0_to_bond): interface is now down [ 852.324381][T21665] netlink: 193 bytes leftover after parsing attributes in process `syz.7.3953'. [ 854.039163][ T7051] bond0: (slave bond_slave_0): interface is now down [ 854.877441][ T7051] bond0: (slave bond_slave_1): interface is now down [ 854.884184][ T7051] bond0: (slave veth0_to_bond): interface is now down [ 855.558470][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 855.766182][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 855.882407][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 855.985050][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 856.146284][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.475033][ T1123] bond0: (slave bond_slave_0): interface is now down [ 857.481990][ T1123] bond0: (slave bond_slave_1): interface is now down [ 857.578308][ T1123] bond0: (slave veth0_to_bond): interface is now down [ 858.314940][T21477] Bluetooth: hci1: command tx timeout [ 860.314686][ T1322] bond0: (slave bond_slave_0): interface is now down [ 860.396558][T21477] Bluetooth: hci1: command tx timeout [ 860.734112][ T1322] bond0: (slave bond_slave_1): interface is now down [ 860.836526][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 860.871839][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 860.886409][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 860.892136][ T1322] bond0: (slave veth0_to_bond): interface is now down [ 860.940524][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 860.960030][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 862.474682][ T4927] Bluetooth: hci1: command tx timeout [ 863.674707][ T4927] Bluetooth: hci4: command tx timeout [ 863.826396][ T48] bond0: (slave bond_slave_0): interface is now down [ 863.973311][ T48] bond0: (slave bond_slave_1): interface is now down [ 863.992324][ T48] bond0: (slave veth0_to_bond): interface is now down [ 864.565576][T21477] Bluetooth: hci1: command tx timeout [ 864.709487][T21477] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 864.735495][T21477] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 864.747457][T21477] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 864.776148][T21477] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 864.789495][T21477] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 865.754996][ T4927] Bluetooth: hci4: command tx timeout [ 866.722444][ T6322] bond0: (slave bond_slave_0): interface is now down [ 866.954755][ T4927] Bluetooth: hci8: command tx timeout [ 867.024863][ T6322] bond0: (slave bond_slave_1): interface is now down [ 867.508025][ T6322] bond0: (slave veth0_to_bond): interface is now down [ 867.835167][ T4927] Bluetooth: hci4: command tx timeout [ 868.368763][T11487] bond1 (unregistering): Released all slaves [ 869.035214][ T4927] Bluetooth: hci8: command tx timeout [ 869.914732][ T4927] Bluetooth: hci4: command tx timeout [ 870.159493][ T7051] bond0: (slave bond_slave_0): interface is now down [ 870.716250][ T7051] bond0: (slave bond_slave_1): interface is now down [ 870.935670][T11487] bond2 (unregistering): Released all slaves [ 870.946336][ T7051] bond0: (slave veth0_to_bond): interface is now down [ 871.121007][ T4927] Bluetooth: hci8: command tx timeout [ 871.381527][T21477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 871.435077][T21477] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 871.507028][T21477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 871.730392][T21477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 871.770589][T21477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 872.211409][T11487] bond3 (unregistering): Released all slaves [ 873.195003][T21477] Bluetooth: hci8: command tx timeout [ 873.299934][T11487] bond0 (unregistering): Released all slaves [ 873.455544][ T25] block nbd4: Possible stuck request ffff888027277000: control (read@0,4096B). Runtime 690 seconds [ 873.515812][ T4927] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 873.571174][ T4927] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 873.605886][ T4927] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 873.635291][ T4927] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 873.646976][ T4927] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 873.796957][ T6323] bond0: (slave bond_slave_0): interface is now down [ 874.000408][T21477] Bluetooth: hci5: command tx timeout [ 874.035794][ T6323] bond0: (slave bond_slave_1): interface is now down [ 874.049061][ T6323] bond0: (slave veth0_to_bond): interface is now down [ 875.525671][T21450] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 875.853290][T11487] tipc: Left network mode [ 876.079406][T21477] Bluetooth: hci5: command tx timeout [ 876.095753][T14122] Bluetooth: hci9: command tx timeout [ 876.662472][ T7051] bond0: (slave bond_slave_0): interface is now down [ 876.842806][ T7051] bond0: (slave bond_slave_1): interface is now down [ 876.990754][ T7051] bond0: (slave veth0_to_bond): interface is now down [ 877.914333][ T9872] syz_tun (unregistering): left allmulticast mode [ 878.158471][T21477] Bluetooth: hci5: command tx timeout [ 878.167406][T14122] Bluetooth: hci9: command tx timeout [ 879.790959][ T183] bond0: (slave bond_slave_0): interface is now down [ 879.850638][ T31] INFO: task udevd:6173 blocked in I/O wait for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 880.074099][ T183] bond0: (slave bond_slave_1): interface is now down [ 880.255820][T21477] Bluetooth: hci5: command tx timeout [ 880.269717][T14122] Bluetooth: hci9: command tx timeout [ 880.317663][ T31] Not tainted syzkaller #0 [ 880.324169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.328578][ T183] bond0: (slave veth0_to_bond): interface is now down [ 880.521953][ T31] task:udevd state:D stack:25864 pid:6173 tgid:6173 ppid:4977 task_flags:0x400140 flags:0x00080002 [ 880.974673][ T31] Call Trace: [ 880.978210][ T31] [ 881.041548][ T31] __schedule+0x17d9/0x56c0 [ 881.245954][ T31] ? __lock_acquire+0x683/0x2cf0 [ 881.381918][ T31] ? __pfx___schedule+0x10/0x10 [ 881.875737][ T31] ? schedule+0x90/0x2b0 [ 881.881274][ T31] schedule+0x164/0x2b0 [ 882.315977][T21477] Bluetooth: hci9: command tx timeout [ 882.365625][ T31] io_schedule+0x7f/0xd0 [ 882.735357][ T31] folio_wait_bit_common+0x836/0xbc0 [ 882.741835][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 882.827894][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 882.850015][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 883.419552][ T31] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 883.807083][ T1322] bond0: (slave bond_slave_0): interface is now down [ 883.813814][ T1322] bond0: (slave bond_slave_1): interface is now down [ 883.827095][ T31] do_read_cache_folio+0x1ac/0x590 [ 883.833718][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 884.100544][ T1322] bond0: (slave veth0_to_bond): interface is now down [ 884.302805][ T31] read_part_sector+0xb6/0x2b0 [ 884.444237][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 884.533240][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 884.837928][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 885.155089][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 885.161480][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 885.491334][ T31] bdev_disk_changed+0x851/0x17a0 [ 885.915703][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 886.152539][ T31] blkdev_get_whole+0x372/0x510 [ 886.368062][ T31] bdev_open+0x324/0xd70 [ 886.374345][ T31] blkdev_open+0x461/0x600 [ 886.798319][ T12] bond0: (slave bond_slave_0): interface is now down [ 886.835306][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 886.842427][ T31] do_dentry_open+0x816/0x1380 [ 887.081474][ T12] bond0: (slave bond_slave_1): interface is now down [ 887.134181][ T12] bond0: (slave veth0_to_bond): interface is now down [ 887.395785][ T31] vfs_open+0x3b/0x340 [ 887.401274][ T31] ? path_openat+0x2e2d/0x3830 [ 887.535384][ T31] path_openat+0x2e44/0x3830 [ 887.754929][ T31] ? kasan_save_track+0x3e/0x80 [ 888.200190][ T31] ? do_sys_openat2+0xcc/0x200 [ 888.224266][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.271060][ T31] do_file_open+0x23e/0x4a0 [ 888.310472][ T31] ? __pfx_do_file_open+0x10/0x10 [ 888.357271][ T31] ? _raw_spin_unlock+0x28/0x50 [ 888.414279][ T31] ? alloc_fd+0x651/0x6c0 [ 888.452195][ T31] do_sys_openat2+0x115/0x200 [ 888.560939][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.785168][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 888.790640][ T31] __x64_sys_openat+0x138/0x170 [ 888.816870][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.824523][ T31] do_syscall_64+0x174/0x580 [ 888.854390][ T31] ? clear_bhb_loop+0x70/0xc0 [ 889.277161][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.352934][ T31] RIP: 0033:0x7f105c6a7407 [ 889.496299][ T31] RSP: 002b:00007fffec8e7270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101