last executing test programs: 3m13.543862785s ago: executing program 0 (id=9486): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0xffffffffffffffff, 0x80000001, 0x7}, 0x54}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000002c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3m13.005617413s ago: executing program 0 (id=9489): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x27, @remote, 0xad7}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2000000000000309, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r9, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x38}}, 0x2400c090) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0xfffffffb, 0xa0e, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0xb, 0xbd, [@rand_addr=0x64010100, @broadcast]}, @generic={0x82, 0x4, "22eb"}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x8, 0xff, 0x2, 0x4, 0xfff, 0xa073, 0xffff, [{0x8, 0x59be, 0x1ff, 0x2}, {0x7, 0xf, 0x101, 0x70000}, {0x6, 0x4, 0x5, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_U32_POLICE={0x4}]}}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@mpls_getnetconf={0x3c, 0x52, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r12}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4663}, @NETCONFA_IFINDEX={0x8, 0x1, r15}, @NETCONFA_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r11, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) 3m11.946359815s ago: executing program 0 (id=9495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r5, 0x11, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x10, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@deltclass={0x40, 0x29, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xffff, 0xf}, {0xffe0, 0xffe0}, {0x3, 0xfff1}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_tbf={0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008881}, 0x894) 3m11.173804563s ago: executing program 0 (id=9501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800200600fe8000000000000040000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020002907800000402080a0000000300000000"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)={0x78, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x78}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3dc, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x50, 0x3, "b01630dd4187b28767f19a33013556cd20dbf61d7da01ccd8f7dadbb6ad4fc0dacd8b31b3097575db13aadb6e258151fd0974a6900af437625908d8c0ea91aac233c6b1b1781f73af09f6167"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "54e5135c1025c6a42c6e0755e7bfcfb8ea2d355d2b56e4"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcbf}]}, @TIPC_NLA_BEARER={0x1bc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71bcc4ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x172}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0xfffff952}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xda, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf609, @private1, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @remote, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xc}}}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda12}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3bc6cc16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46624f69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x800}, 0x15) 3m10.608989849s ago: executing program 0 (id=9506): ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'dvmrp1\x00', {0x2, 0x0, @initdev}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000040)='dvmrp1\x00', 0x20400, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x4]}, {0x1, 0x0, 0x8, 0xfffffffffffffff9}}, 0x80000000, &(0x7f00000000c0), &(0x7f0000000100)=0x1}, {[0x2, 0x8, 0x1, 0x7]}, 0x2, 0x23, &(0x7f0000000140)=""/35}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000280)={0x574, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "e8402d38f2ada6deb610408a926fcb17a30a19514cb35f04"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "ce0a47cc50efebdf08dd670d86d81cc129c6d0339989089d12a11c75aa449edff984ff31330fa56a13bf"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xcb, 0x3, "9a2c8b6babb57b0d933b412c1d9afa1cd171cc658f319f39415bcd158c1a4c13091f92958d44f3f75777aaabd018f7a2618fe8f13b1dfc80909969a0f43b322f735a316ebb1ef44adcf4ee3539e7b2e6c1a8241855c5eab39fe5d3dc57f591efe318b5f0aa73e4fb34420ed23347aa1d7f454aed228873064f77c48f82a8bd9c2b5e9794f9e833098e56bad44467ff57353ef53772b633aa80079a7e05e8aa4840a7cc926e396cf994f226b26c4b477c599887383ddaa9204bfee8032b4c7e0337957fed211821"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "dc2b00bac22fbd91b8fed8d8ade8abf323ecded6"}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @private0, 0x10d777d1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private2, 0x44000000}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private2, 0x4}}}}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "fa7e4223616efebe312189518f70aa854b2e41011fe3bef64a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4b8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6e3e66aac009843d5eecb081095846277cf1b02d6800cf6758795f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc047}, @TIPC_NLA_NODE_ID={0x97, 0x3, "2a0142f53e1baea7ab87d7815cd02564083b566a12b77dba2675bb0ffab54f118c1c377d92371e5985ceeb011acef1d60af29b087e4b2675d0e4cb0c52f1fd5a85eed039d5e6bf3fc9cca7d910ef08249d2926aebe14ceb0f5d3b58756a84be6529e245fb51946d096f54f3da095d94d1479cfb93c12ba36224e32883773639ad9bcb77dfe79ab7ec9ee05b8bc9f5e54304b0f"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "9ecd894f04ef038f6461ceeb75e07bf0070521900ef5"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "0c851800287548138f9de531a02a435d4ac2a360aba123a27b9fc4"}}]}]}, 0x574}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x800, 0x0, 0x2, 0x28000, r0, 0x10, '\x00', 0x0, r0, 0x2, 0x0, 0x1, 0x0, @value=r0}, 0x50) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000900)={'macvtap0\x00', {0x2, 0x4e23, @local}}) bind$llc(0xffffffffffffffff, &(0x7f0000000940)={0x1a, 0x6, 0x72, 0x5, 0x6, 0xe, @random="cee486d3b347"}, 0x10) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048014}, 0x40011) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r2, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0x200, 0x401, 0x4}}}]}, 0x3c}}, 0x40408c0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x78, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa014}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044}, 0x4088090) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, 0xfffffffffffffffc, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r0, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000e00)=[0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001180)={'gre0\x00', &(0x7f0000001100)={'syztnl2\x00', 0x0, 0x8, 0x784f, 0xa, 0xfd, {{0x12, 0x4, 0x1, 0x17, 0x48, 0x64, 0x0, 0x6, 0x4, 0x0, @remote, @local, {[@generic={0x82, 0x11, "53d86cbbef8ef9edd04b209c232575"}, @timestamp_addr={0x44, 0x14, 0x11, 0x1, 0x8, [{@multicast1, 0x4}, {@private=0xa010102, 0x2}]}, @generic={0x89, 0x9, "3faf52dc00934b"}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000011c0)={@dev, 0x0}, &(0x7f0000001200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001240)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001380)={'gretap0\x00', &(0x7f00000012c0)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x2, 0x9, {{0x1c, 0x4, 0x1, 0x16, 0x70, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x24, 0x2e, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote}, {@rand_addr=0x64010102}, {@broadcast, 0x4}]}, @generic={0x7, 0xb, "a84cee2065d9bc84ab"}, @ssrr={0x89, 0x1b, 0xca, [@remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2]}, @cipso={0x86, 0x11, 0x2, [{0x7, 0xb, "34a00f3b29a507675d"}]}]}}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000013c0)={0x0, @empty, @private}, &(0x7f0000001400)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001440)={0x0, @dev, @multicast1}, &(0x7f0000001480)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000014c0)={'vxcan1\x00', 0x0}) getpeername$packet(r0, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001540)=0x14) getsockname$packet(r0, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000015c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000016c0)={'syztnl0\x00', &(0x7f0000001600)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0xc0c2, 0xc2a, {{0x1c, 0x4, 0x0, 0x2, 0x70, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0x2f, 0x3, 0x5, [{@broadcast, 0x7}, {@loopback, 0x16}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x4}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @rr={0x7, 0x1f, 0xbd, [@multicast1, @multicast1, @multicast2, @empty, @multicast1, @multicast2, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001980)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000001700)={0x220, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x20000) syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x110, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffff7fff}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 3m10.187504142s ago: executing program 0 (id=9509): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) write(r0, &(0x7f00000002c0)="72d52a06e3fa78a0797176325c58e4c7cc513f0bd36375a0a7bef3bc1f10382d3439316270cf1efd0443d1935403ee9c934501533ecc84f0e11836099e09b2c288510f2dce0a6585c42e94c1728b31d1fcaed1c9de9549cfde2a9ed022386a86a4a026d9e947b64c9a4c942adb0e3a7cafaeb9c56bab50a51aa194635df276546538817832c7d3512cbe5bab2800d6791a992413b4bc78", 0x97) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003ffffffffffe2aaaaaab2aa02080045000b2040000000032f907800001fe1e0000001a000e558000c9078410900008f3dc1b88727"], 0x32) 2m55.024243361s ago: executing program 32 (id=9509): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) write(r0, &(0x7f00000002c0)="72d52a06e3fa78a0797176325c58e4c7cc513f0bd36375a0a7bef3bc1f10382d3439316270cf1efd0443d1935403ee9c934501533ecc84f0e11836099e09b2c288510f2dce0a6585c42e94c1728b31d1fcaed1c9de9549cfde2a9ed022386a86a4a026d9e947b64c9a4c942adb0e3a7cafaeb9c56bab50a51aa194635df276546538817832c7d3512cbe5bab2800d6791a992413b4bc78", 0x97) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003ffffffffffe2aaaaaab2aa02080045000b2040000000032f907800001fe1e0000001a000e558000c9078410900008f3dc1b88727"], 0x32) 2m11.472729886s ago: executing program 5 (id=9773): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e24, @private=0xa010102}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0xf, 0x400}, 0x21}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x120, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001300)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0xf38, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x228, 0x3, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x170, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "28df93ec29d2a579be685a0eb1f2896b8e951768d077a23d22e3b01ef7a4b0296cc0ee3bfe5792f494e84ef3f741214f6d01b27eaa773d10e81faafef1918121a7a411d6eca10a619c813bd2d7b7ee8038102d85193e023473ecb3ee65dfc2388ad8e14f8cfb4a7c4127afa4ce4469ac1691fa9ede11fa5ad0b148e93c61d03fafd4f1d185ffd0df47c5135f77662ba4c4b6e9ec8c3c74b2950c18548019cb048e80d7033e9e1a25ac72be1b9db771e984395914"}, @NFTA_DATA_VALUE={0x48, 0x1, "e8b2cbd35d16407b360f12e56a5208e40c94211a8a943599030bb1056b3d81932398b0a5f7ae7c5cc5b3afe93f3a16b950c2501cdbde31a66d4b52173cf9a96894740ed7"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb1c}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xbb13}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x98c000}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xcbc, 0x3, 0x0, 0x1, [{0xb30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "ba48659e0945cffb915234ca973abb7f8d17bdadeaaaf84b834dee3a762fd79bb1ef06b1e361be86454e25f3e160db9e6d5fde3cdb86f116c817de34af9304293877ac001aef581619b2c6b712c23432ad56dfd44e90a75e72e19a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x34c, 0xb, 0x0, 0x1, [{0x1bc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1b0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x81, 0x1, "4446d74a28f73891ca1d29d0f4ca6985a3f91db65bef8911d191f5aa69e4b08991a19c05e22bc9d17173e470e0bd24eb922206cfb4254a86d7c2b429d0268d0cca1a9e3b6baa1df024bed4cbc6dd4f421ab5fa7fbf7d63ed5588695fd2dd1f00b64d5840d546b354075e4b1ce0d8be68ebf96f171b87a4a25e40f1148e"}, @NFTA_DATA_VALUE={0x23, 0x1, "57aa7afd302c32e9d7625add3c279bb60f7fec8753eb2dfd2820ba0b30ee9f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "b65b176f0e2892d5a7383a19107c84d8d2188ea5400d201202da7bd5e1572faa6430d553d11009358cb7e3a229976a1058d6582d0e72f84369f9a3ddeea72735d25453d7b5731245fc598746b600730d6eb0a9f4f462db643b97d0cbc42cb9d6477c83a24a62c122421319276bf6d7df4f2cf5a17dba52ebacf301208bd4433877b066eb1740ccd33b5ae07622bb645f013af4b132efc9a5006711"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x148, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x138, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPRESSIONS={0xf0, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xd4}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_EXPRESSIONS={0x18, 0xa, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1d0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x15c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x148, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "f728987d86dfbead3f5dd6c0345a0ca76e05c8462f8f52a54c8cac5ba994e3b6e8d064e793276cfcd459ecf128d28e08c53dc073b7781979a7d7efe609339d4a9354899b191ba566f340c6050e39f441bbccf17e53859190f8b616adb2b29d12292c3b856b1c35ede6"}, @NFTA_DATA_VALUE={0x4f, 0x1, "cde1b3a6a9923339b860fdd1e9af9b1ef923c07751a5e8118d6a8b860aa844f6c681fb5e8cefa9bd21aff34bcfe2bd9a4ad04c45544d8b12936d342139ecf89d4c422390bc4ddc27eeb3c6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x110, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x62, 0x1, "029ae045be5bda61e5a3af23560ff4fb59bc9e20010b1b7e9cf664019fca3ee956ce886e30c987dae85bdd7ef63654f4d08c381a305d86c8550997478cc43c684fb84a447a7385e3ecfa233a22e52a997449c41f554cbe9602f3e4b2e7aa"}, @NFTA_DATA_VALUE={0x5f, 0x1, "133e8b779df2c4ece88780e0e47d37d2f0428f8d858b8c046ff235397d56cf656fe5bcb23b57cc141961dd85a1de8c699907629105cf5cc0ac36d325755a3c1857c055667bc262e0dc206d884cc84d1512b328bedee2cf14ad95e9"}]}, @NFTA_SET_ELEM_KEY_END={0x264, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x86, 0x1, "31435723db0922236bd58240f77828b72c1545981eb5989e8aa75e78a6f83c922e0d3c75d2d1d6e68fbc6efcf0c5e9f516032acf246df311df712c5363252d5fc8a8460a5b58dad206ddc1bcf410c207953db4b0d8bfb244fba07b99aeea3b6f4a5d8fc8b2e94cbd9d91a1b7f01ea9eee51b6801c1d5533a52e40ccb160908761f85"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "85f4dde033f5ef9cb5ad635e08fb619a0c828aa6344f468a13f47b"}, @NFTA_DATA_VALUE={0x14, 0x1, "49021e3f11aebe2b21eef873b3b248b2"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xec, 0x1, "ff12f4ed4063174930c1f7476d90f4001deac89af8fd493877932b0bfe8796b221eabb4e303b664712cb33fddd59cd8c37f380fba4f3837ffedb74eb0b520e6675be64602db4ed9761d690af19a8f78ed6b2df3810ee8ee848d4b043f373f6c6c68b0418f1a531791d1dfd6aef8654bc0869a39e85bef9e9e0af718796a22700518451cde201ceda942a1511774f184447d87fdbd7694aa0b2cd80a21d9b45a7e7f928d7e4ebe75bbd46a56fd0cec38f4e324ac80e06d7ee4dc330ac44181c19aa86352d83eb51a50d9fa9a27cb656408af4d477473c966c49dffb78bfadd81e72a53bc06bb75376"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x1d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "f8ccff23af95af58cc6abbeb4fe707a9ba1df66dfb45a8631d732710cc1c92f16b16df51f8a19d3015ad0c18e9bddd28f4f6312c6151f29ee2ad650160d4869c086d48de329b351beeb0f01bbb9f4c4dc8cca44dc00c0268380f5bd2ae42af3998b7a8e53c4d70f969343d3f3a3980eee49de32509bd01abbcbfb09217d34da352972ce54bf1e072c0bf3813959649818beca4106b24ba59e2031841306ad0370c31e19c8a26028285c0091be97d77e1323aaee15c1202a2fdc4e7c105ea34c4148f0845756bde581c6027c02f6eae4a8eccd60343bbcc525ff93cde56f0bb505f70f8de"}, @NFTA_DATA_VALUE={0xaa, 0x1, "3f8693de79d05b708a30c908eec66e3a3be6f6b56f1bc62b6bccd3b8f7bc1c869ecee2e8f8fc23c4a7ae29c7b4947cd4aa522bfa84f7cd8350687c32d3890bc50a1efc8610f2116aaac5693a585b3a59d04c57403cc62707ea1f6dc5683ccea4a5ac6ef0c986b9f336e3d730e56e9381dcfc194236fe6fb388f27dfb73497a044258af070f3b708b38a38a30d0eff845a8284b8c47e763a2024353beab980c935060abbfcadb"}, @NFTA_DATA_VALUE={0x3e, 0x1, "7fc8ba95707b07088c0f4817f0bc0211553477ff008231b7bf8c4076d480214820eb62353191b18ba47733b68c7cc45ee0dd3728daf939550279"}]}]}, {0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x168, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "c1edd8e6bc5711d7eccbabfa937be1a5b7b4b45993d30de4dd63ac0bb0a5ba00e2140f4e6306fb82178d8fc0176fc8ff671ae11a2a47b4f54cc6f14600755be6893c1c7030c67319d7ea0eb65e8e4ac0ff01e7f6d17c247a13f820e484fc3c2b91356c066255121232ddc8d4c152b916e5788788b1d94e6c2be320ebf01c66208337265f90bca1140e7442f97b5250dd30452760e69c055d92e628b53cdd95ce6494465c8e467294b035315bd349c2e4a8ff2b556d79abb02c1b"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf60}, 0x1, 0x0, 0x0, 0x8800}, 0x44004) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000013c0)=0x5, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xcc, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9a}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8002}, 0x20040004) connect$tipc(r3, &(0x7f0000001780)=@nameseq={0x1e, 0x1, 0x7e4080beaccdf361, {0x2, 0x1, 0x3}}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c880) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000019c0)={'wpan4\x00'}) ioctl$sock_SIOCDELDLCI(r10, 0x8981, &(0x7f0000001a00)={'nicvf0\x00'}) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000001a80), r8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r10, 0x4048587b, &(0x7f0000004080)={{r10, &(0x7f0000001ac0)='ip6gretap0\x00', 0x8001, &(0x7f0000001b00)={@align=0x7fffffff, {0x9591, 0x6, 0x10000, 0xe}}, 0x10000, &(0x7f0000001b40), &(0x7f0000001b80)=0x2b}, 0x6, &(0x7f0000003fc0)=[{0x2, 0x800, &(0x7f0000001bc0)='netdevsim0\x00', &(0x7f0000001c00)="2097c73e7f125d912a0fd00480c45d2e54927101d87607bc12da66de367ae192fe7e0cdeb6e37bc1a4011713ddd74dd01bebaea392b63d5bf10e91f93e6a17010a0e17eb71a66d1ac5745c76a69e66f874f1389d9f4294818ad379e48847f1814d8e1dd8bdc01e1f17bc662262f5394e0a3dbd3c38e1849cdebad7ef9d287e2467443a4fb16d8706dd89ebcfaa95a54bce2b4489178f4d1eec7dfd3095ceb3f00aa10e90e9830393817e0d0b8b438dab99723272db504839c2e05187a11e1930a0aa", 0xc2, 0x10}, {0x1, 0x0, &(0x7f0000001d00)='numgen\x00', &(0x7f0000001d40)="ab73429292f7213fb033cda55de2cb", 0xf, 0x8}, {0x2, 0x81, &(0x7f0000001d80)='+\'\\\'}%*$\'[-@^-.-\x00', &(0x7f0000001dc0)="13425d4ac9aa5691c745d413c86fbb2baf2a969d3a25e67522248560282ba4459dd133f9e203bde075bb23f4bf3bfa985e1588cbcaa963c198fec9ec52db92551a85b50ce16f4aac944bb1dd3ff10c0f5ad2dfdeb204fdb98903b5c8b9b5e0702bfb31bac6ca867b5d07d17c3e277d689874efeecc06d6ce2b685febfef7a29df8da15b3337721601227c57cb46c52d135c405ca5713078bcdfac3e0158a8e4384cea08f1602aaf328bc1115bb7a8d22ca346e201d88e580216a9a9b715f7163873e83141289f0396806a2e90747798e612556718acb5fd358e312cba2b1a7d3d2dd95f2b6c0693571843d3bab00d23ba12b7f5bc2fe96d3dffa6a3ab8f4c76bf6c15e341cc925cb172f25e447e376cf6d717dc99903f2745cb90cdcaf09ebf6d2b19d4b77c7e3fa35e65451c8e36a7fe860f1cbc02183d03d07e533c5c3bbbff58d6a1b3ccc82dac95411a45330110c37ac833419bf262d2855efb3f453cee45d2aeeca8c5697b3f6e4f4c359b2f34a872d0640d1b23c2ce977cc46d8b5cd1cce91e8e02669a51963adf33264e380e98e7928a3d00b35e27f313e81e2d6cf470a84ce4287944ce80f6ad87db80527b7c2a935e4ca65b4177a2f9a9b018a2522c816039a64a7a075cd3f571899a1f4401677492523a373733cfb8721f612d2bc1b0dbfc8a4fda7af1c91a5f31c2952c6ec037d400464f4c9787fccad1ddf9b0ad75830e82923519884df0916aefb875a6317010e67e96e82ade20c2e8591ca78edd10bfc104444c986803b390ae55bdf34cd11ea1ce1fe0037c62312e7b609fd9c060a5e2a9549cff37395615624dc1d69673997ca02dd59af84eef4adbd15254e94f74cde7050ee73fc68b722af7e7e0ff3c728f073ccbad87c451deffdf7911bba26e8448f92b2e70c6c8c81d34d2c32575db38a8a2b3d182d99460df7399b6f438609131ab7c92d300e7e73efe6291aea638047854dd5ecc4329232987553b2f363fcaf50e1111f4cabd8c37ef2bd96b704cfa13b76ccde2d2a56103c3eed1a2b2a7c9d4403859b02783b8e48e3088120d717dcab8874a9df72bb7dab6cd7948c939342af581d858a948827ab02663e46794e710fa372031f7b7a751f5f0e98e72c14985722d78850cb1475ff1f2c9e434396c86f189cac984bddeab2b82dbccac0c7ab85176f847501cf13baf1aa291b62cc5cc06928ca5eae4e561e90d3dec79b5560efcdf489d46936d8238d8396cc5e9050d0e4ada87fd817c10ea6502fac3f3eefd36e01a02dcd0d015a7cdff10d85e709c75fcfbacd40324f3d9243b99d7299800d64f49229d1ed771f037047f2779fc93a48df1f1ce403d141d3435308b4f0d7de3844bae1888b4426e3fc81b83334aeec7dca89eb93848e909bc14f7f982b394754d97ad1608f399125cc6643cffb87d22782b7d9835a115d90ee8c50625fab289398de825c2ac0a5622e80ca715ef9f6c7d34c202596124ccdca7c41e0ddf5128471b25b38141c6a5f7586e10d4fb70ccb5fd21072c22647bc3b395d0ce7936f1e342e518b68063d78a4313a0bc52c9f4e8fef51221faeaec4c8035a048cf0ae59ed08d4745c49dd78f3eae0d6023fcf717bd79603eec7a29c7a55a1c96fd5949a6b2de3b8e3fc1ceddb1e40965b20edd3a5c8c43fb5c30b5819e6fc6bb07d539752434f2e96562c5bfcaaf3343c9b5d661379811d7faa8c4452053f3e56101928bcdc87d406b34fbfe2361b31a463a39911c0fffe78893cb8ffb7a7a177c3409e65d7f6781457dbbdce18ac3323b664846d0713176d86722c9410ed4ce3163f9c54b3c657f74af786abd8f0d1a9e4f8fe805c11148fc336f81522e4c620afda08e620f8f9e915050a6482811182196bde639edcb148505a587aa1b15daa94bb9166614b4b010b09503d5c1175e8931be4c714a00d081373150c31c4cd4d7484bcd41a84d94acab114020e7ca8769b94205d0d834fea7ca8ec10db17f46e5a62a6facca3aa78ede7cf3bbd983791deee31460379c0a395b54aaaa6de0741e1385d581ac993526fb5b5813549c9c871e67b62b1f29d84b4e6ff3ac34648952b6952efe8e2b7f5a33710db1f64d08f27f5c6d03bb49f95155aa0ee8f765a2078d1a4393e8e0c00d2051caa0c3d8faa3f221059321728c852ea1f766b8a46b3301a581796d9008e8d8ae37487888d151d5f1fbb7197ca29381d3bd9b48de0a8881d3cb861e59c59b6a6327ace5518750d2ca592d2b37c877ab0c65ae41bad4ac96e455834fe6ceada7627bebd70ade57dbb3d4940e5a55d5e9cf8dc8dbf70201126b3c34a70cbcead76a296d7a222c7443c5809f5401aec97987b9144ef5a9e882005d2b845976b55dc1e73f2e866ac7b25c1790b3f65d0c0aa230899c980ca01fc225f988ee1c7e00d5a7be4b1a433e12fc84ca93de94201347eb9db3ad5b977cad48336254ee7622cdaea1a9a4888649de42a85ecd17e9840b2657de8d3a624c160f4b3f4989cb10335bf2f25d17a0e4c776cfd7e43cf0b2a1e03a678ed0cfdd77554a861ad7ff4ade6ca699fc6e111972ed298b458ab1bd2dde9b3c6de9d2f451bfb42459e7e79f80072f5e532444b222efcb75f5d26956ea5ea226fcddcb6ac917c894ac8d463377ede07173f63ae4edb4d6c4c6cf35d060b37ac0a53c3241910f10f98dcef55e447d0cc5e6955180fa710d45e008e04a68bc47a9dc3d1a24c227801ee292ff1a2fcfe125571740a6783a3af698ee8c6ad57c0244f93fb670c8c23c4564071da10e77f190eb213e6e6c43600a597f53af61a8b40b2ff18b89d04e2d18288b3f316368d3684b0714d9728e1068510cb904f3db6010f09a3eb0b98b1cd3064bf66687b70feb47ab2945507636d74972d51fcaddc9e3667b2b36ba5923691d1b384c1ac544c6f405ef37939264645e66266f4e7aa10b234f24a648717b44faafbe32badfc4e84550592f61657b0e2dbb4d819e78fe84f06ab16ef5b6d8ac360302bb118b127b1190dffc605c493b1121abe82ade9694dcb707e076571266ddbf97d417a92c03920712343d58189dac1150d90befc5ead06f27255c708f671b7b7343720591a9313d0fe47dff52c7d76a3e0b8fce119bfa03be250c0b8a21c54685eed6c1531d13510b7a556cc086ab39e0dd2ed753f8a2ec33a9aa90fa7cb73456bdd8cf12e6279435510a6f922eb6e1f4c6ea77b7c90223992526ae0269ef066a8aec22f9f68bb84c9ac84a3f032002569897014397e7f7cafb7b59ff24e3b783aab77928e426a48e27bb84ed020d3d2e7037b878e2228b829c7fd6f4c952d488e40df0244583b998f2f8e0c0386ce433b96912ae4222a79c6f2ebca4b487e8db80ed916b5b9ca14f88d5c59ebce936b5a4ab4be2915be17e4741bad25413107c8a54c1789302edd07addafe267e19f7cb5b2b2e589ed650b73f3f17c727583a0d0e02b3e190f15114a0527f6854974d25d92142c9e86fc97c8fc46840f452d9da5e9703f959234f89bd9d2d050e0fb26e6a2518208595592ac7966664e45a098355a3bad3a8df47d3e1ab7e6da85978ecf7a2078ff2341b907889a8e84b1b60c1496dbad0ee052da116f61a4ab486b714006ee77f3264229155d049f931a3da3550098a22ec92666274eeb5458943766e5437b7448d5b23e6e65e89d158d4c6e81e90b10c3e93764f52a903f45d61bd98ccf7e1114dfc26a528e05c3c684534abb7068fdf5fd4becfce56583ee375d08966eb774d1c6c7d809d2093eabc81182d069f012e6a73b1901d9a61f30ba397fcb04f5ccabe2279418ec48f4ed07afd23795779b2aea36847cd97effaa2dc3154f59eea02e73c07416f0ddc42c884c3fe3e8b49f4e2f56e908254571a530f105b88480050c4c9a157ef2fc39be1088df4e8fce65140f6b89dff481f4025f9689942510167da9a529c9aeaa1f0255f8eaf0d51bc9aa2c332636f6db6265eeefb18be2a867a7129e77d62cf99369f1ce5a580159fb8b5431bc7e721d8b3adcfb1ad22c5481550afcc000c839581b9cfaf53fa46651abed0b0338ce080753f77203590990c422f7825c9ba32cfa2e5c3096b5afc9649ccd2c5d32acbd18e3d8daebe1ccb400d5fdb8376846e48a77a5bb07b00f879b9b8654ef938ecf0b3bd8f691ba88e2d2356229d798d8ce7f7205432d8dbb294b50658b2a9d09bc8151c13b693b4a33c9bdd276a5b3298e338782f943f2d0c53a4cdfc34959ec9f9abd634de0eb3fdb55eb2fad9e3ab3079994b5ad8b6a79fd2307fa1d04e31ed5542b4d8d3e81f1755842891adf8dd171047996007769cf63392582caff3ee1952f688728568d1501aa50a6b40c227d7aeaa7837c959b0c123df9dc0b3a41a8fd4a746518a4fca9935244d0e6de25e4e85bd0db7530650dc99f0f59883aeac8af13eda31bba6f601d5584eda6128bd34c9cc90a03969a24a6afb475c193cc0d47d84299cd70ada417cc8adef631aa373c5023218c3ffc7a7ed2ca0c53df7643ab3d2ebf0ca05b3b83c0614db4b3557c2bd4887847887ab599b6bb6cd72ef2291814458deecffcfbcc4e2b12cfdda8a2cd8305a51bf6d9943829b6f9cf738b18bd6c6ae48b8fa2aa45a70104a7cd2b532b3b52dee61e5adb42b20d2648af77e0d23853de2578805046a9052f9e35f13c03b26bdb2fc4d3f98ca032890d87b8fcc11b223cab5fd1487f91bce606e1f00cb5c1a7a4b71c3f31a44fd9a79fcc2167ff101ba899251a2b012e8a93f17a2d3dd2ab6b0d346734cb1eb761b06ac6c2b7e8fabb6765196585144738b47351d984e7a169e68e1c8f7b39c771b813dd096735a27bb8bb9f79429c4db252ed97b0b590b1ca00e41581f7afa310bc8b74b3c7c2773d2e4c5e5c40fbc3edc6cc6497afabb6da19b44c54b19d2fad7c50fd816d838fcbfa7b90821b89bcae4dc962d22f2346707624a47fb650691b4760027a65cbb15be0910db39d951e176f3127ba6f93250225ec4b9f2a35e12d55f43b5bea5e57145960a0974dad782436fde1883650444d96fba333b9ab970e905a2b4fadbd6583a7345b0f07c34a72b92ec0b1372058ae2b709e20a682bc61803f50ce8fa77334f595a24c0a978f7f7745ca7f28f193d5c923f3af174e1918a798e488f2920df8e84bc658aa1351308c8fe89843bc5280cbeeced8d8be39da03b3a2437eb44028923d1b2181258a6e35b4365a8441ed35f84e569b8b808619bd8d2f40bdf01516e2b5e0cf2559f484079ab1599c239352a26ea15c25e00b1d75f1b72d46c38959f5c413ac7207121d438eecc0ddfa4c89df9115b538cb4e327fd1857029f765d03de6c2488782db4801791a49b6b5eee2d8108d7822605f1a7b4ea76b55acb1e41ec6478712faa73ed21959b787bed6df6bd1eb6630f468e4fb55f00a905a95c22c66e89f0ff7c6a9de6df2de1d20c31aaf9e1dff47317a34422ca9d96ea38b3d39ab2348764d83c1194d5aa3e9cafa422b03e08d8ecc94a5c816bdab51615561fb31b443e5c05348b6ed9a109cb4fdd918bd1fcfe54a45da4e0448d5695eee9f2c1bc017486a7b2fd0e5a3bef9406be4efae7c4cc5d0ff320df1d5ae59a45d95cf1d6881acaa0b2a1b27ba6d23696b125b49faabdddccba4eede5d793286df0ab7bbd436707d28cf80c7db4c14f82d6fe802539ee63988ca3120884406807605456f0a5841767d911017923b00dbc176c45378b9f83aa397d3762cd20c2df31d2f367cde73f65e25e6dfe657071c76db985b1af91442a8138fcf9ab73b078ad15afc6406effda", 0x1000, 0x20}, {0x0, 0x1, &(0x7f0000002dc0)='quota\x00', &(0x7f0000002e00)="9d0e85899ce8ca3abad51ab845558e96569e7197c93a5b129753a5d8e677ae9b554a9450240ef53b2cbab3e3b06e0cba3a99ef40b95beec6dae656dff8ccee392d22d37ddf238951d73bc17832fcd0ef91ec57005b20d0a1fca4c669a04dbfb5f31a433566c75518a91fa76e455506687d8710eafed7a16c9b2cc7fcfc5c2a2b2ffb0acff2152535e2192a4bf3f1d4834d766a1259507aae97694acf4ba472c83330b59f06520cfacf333e4b460a7be7e778b1c95f3b66e53abfa85e8d7903b2e4f58503b15f2a42cb5229e13ecbeab2284dfc8f59f70957bd08292ce8f13c4179", 0xe1, 0x32}, {0x2, 0x99b, &(0x7f0000002f00)='quota\x00', &(0x7f0000002f40)="11487241a9f1e88b164b43925841be36fc4381cd54cb63e77b477710c5d4825965cf31f0c20f3e9104b259e21ec32a3ebdc21a3b43f5e9157eb43563d7565b6369d5195b03a68910ce8332b62f3590d640f2ba2e8241390ff36b53302b2b42dc5e548b9d59dfe50be90657b2f8933890b187d4583d26ff55f75587e06b240230e79804d104d61ecfa7b006de187ff05096b5c7dbcdff0142433b6a99ded076fda180226e204aa5c5a007e194009c5a3a2a5b05415d4b0e389758bbc2da73fe3f1ab62d8ac7bb996285dee2751007adf91ad898ffe024fd49a28514007030fe75ea49be2da122548005e7ef34aedc688f0912c2ab0a6f9378ce6b97cc8f3133fcf302a2a6edf3dd80a7b6c7b631198d562848ab40616bd0195e09b2107997a7a0946a42e63ec593d0a101f926a10aff049162c9dd647388eca6b37999511d9d55a8a4a59c2e20629ad4ebc1a052cde78c4407e39fe5a08e544b88584c6e758a1e6c97902bc64b7c94228bbff80911a2f178b39e1fee7deeda4616c10a95a802444bec21c498f681ed1bd13cdebf63f0f06a15bbd84ee4f9a8217fecc8574a7bc04028a11fdb291fd2e33fdf31027e1d36b3949b65a38711fadd4a26890245f160a2a7e3152b5c23b0a4338483bfd6d0296b4ab13859bad1be9867f80cc103f9827c674f02123a7577f83aef5ed0bbd5713d1d7974cca874607ad51b2d80f5e6e476f08a737469aaf95e082b3f2a1daa37afd8f827aa9f5208c37208f09770e578085095a8cfbb62da711b12dc3d6288e3e20e4a15b8e7ccfa9a9cc271f7a470febeb82bd0697cec9d93cdbe926674009e7e2be18bbe975cd32afe7d58836f78f8d5b7498d90cd2ca4a08e1ab08e2dab8761ed65e4f72933f8dc999b85cd8c6b07c1a9a4612e2c0ff28da0f9dfcdbfe7bf07652864b9810cffa2503513341bc65ac68471bf7fd8f4c72b53351cfde720bcb3fb5623601438133d36700b5c455a7b8a3e32f5458892fb0134fc1f1d3bd6a3e876ff203b2ab11a062c13f0a7c107b8c1701bb60f788a786f9f46108bb253903744421c02137cb8b363d3cd2f47b976f25f8b9abe726d15685b6a1bcadb2f11407b32e8bf83a1425119cb05b3295dc5eddd62bfe24402d8e6a5e818f8456aff50a15076cccc040560851c820d3bd7732da13cec370c67d2e289d0704e5f337a1080633540fcf5ba092a9a4ec39971f4a120d2cf7e9c18048af1b4ae7110c5a04081f7aaf861e68aad539f944835cd40f1a4d4a3aa8bf9d4f9d5c03c8fcc90fc6a8a8708d4b618b6a6063a4afd6a149064ad0256851c1ce0ea64f088e01ca80b62a92356600d2d3f5084a0a49188068d5444271c6fdda85a9efc2f791dff36d32f295d20723363d912c23e91c81f7f21900a3b9717bc18ccec420bd25398b271cd7d496a9a0820abf85b679e5b077394b8d9631d4522e560f89394d64b4c7d6c0b8dc52f21d06d4a5f8fe56d61bb3bd1b924915d44e2334675d69d8adc8452c80f9f16bc79b4039a40dfb1a91cf1c7e7669fa362b04244fc3f4fe4ec3de2ad1490a7150994ab6de1a7fdb751663444a96a9bf4d89eeaf553c3346ac56c6ed121cc99487d6ed0a4db7792e24c1f5689cef1d629c6655b3b58a6c02fdcf6d119af4e3cb98c8a76859370bc47b7e000cb4eb5955bf085c154ab846599a0bffe0992bc4538c0eee2ef46df67bc74f759147dc2ab37b4238cb2cdce6b352ed13d0f687bb9291e45a2d585f43981fc058807f77cd38b8c4d8226f0790ba20c51afdf8786b86ff51923bcbb1d21553fee1af378f63e3cc8438fd04cfe2d7765867cc4268f0efdc4327e352397689ff11ba6c808ab3e820bb8b4cb6e7e5cae02a8375e2448b845cc88f5fd397288c6444ce33c14392b562534032d723a87f03d5c6f81ff2ba9bba6762dfbf75f121d1333f7599f731c41d37b01c0d53d1119812c954685259c83b35b402d476d8e3a1defc933befe2f592bc271a98b805fabda918956da6f414df6936a619cddc2423d18cd4446508b29f099f148671d412c9517137adbcf19cb9bec7a7c5dd51eb45c3a31f2abb38f15b75d06e6793793162e84bcfa55ffb95630150a1660206d007d639f7d010c4f5cd3a93f76ce5ab47511c89685718203db60436638ccf7b356a077663f4335890ef5113504a61f0eaa365b9625552219959cd570cf21d09fd208ee8c09186ab62b6ca1dbd8d31fc6e2bcf05279f731095ff53e1b8ddd30bdee76212859ee2e84505c89a0c2e97c7d5b1addff550a918296f12e54af25cda1254b44cf0439d88fc701c95c8df38bf4e86860b163652c394b63a3e84c2064227e7a3d6867ffa9b7fac7968f87a21e0a1916a24191435e15ebd2dfc50be96a3209c8cb5970bc7913a4fd39d867a0ebc2af8020c5e2d4ed6694be9c06d3f065d59293ca5bbde577c3f16a86e2ce3f923fe420cb0b52bf44fc0c838702e15d0c19e035850e8beb2b2980bc8c5062bc20504af64f7c4fcc3dc5dce74a2fd3e78ba26b561193e43b07ddf460219811bc319053159e80f9fb896e49fdd7017ce30edc82a1907014e70159cdb829883e9e8c06cea445fef485d294d5710f7660cd0ca1c2e845f84af6cabc95ac77650c07e9d3c93f2601afdfa79e796a80465be00bd1bd4934d0774b49ce4ad981ffa1ae524507abc808f59348d553f97ffe7f245c2ae5040f29b90fa3af4403186f56ca7c132526b29c8cb0b7ef8382bd94c9f92be54f65fade55ca6fb53a1fd60c3846705a6f65374d589b6635b91a2b34cfc6b209d6e377796456f02f390fbf5ddc11017e57be2810e1e382fa774dabb32a3bcecd5dd3e9feca51ee9d27cff5318d62bcb8f371bedbe8fa2d78201326edec407f628d62c493c3a05767b676d89297f028b737826a8b6fb354d279e0db9ef5e7dbe5ec8e47912bad8b9e25a703bd7bb377240a075e8ac513a1578ae2c23fe85e0c8c833143c3ff00d52e677fb08645bb8182b28a7ecb69ccfaa61cd912af3103ba3f7340a66644e568b6938aa084ec7beeb50819df5a269a65de6b204a5020724d244df537d22160497442f5d458d29feb3ee6d6568820ea1802a5831fa54d87886a8a464e0b8bbb34084c0d23807e457787002d6450e8e74d05a66874863106e796a6b4343b86312b2d378277b9285abb9b723794dbde918f3c93ddf70c7d413380f89427900f8b9a7cc20edd32564846e7e4ff147b422966d9700795001af895c680bfcb2e98620dd17659eb8d8dd8022ee3ad28a668b106eb25527cac83fcc6ba4a01de2870e677463dffc2aadd8827bf06b8999a5070a99722ada9e51a88cd57599015e976f13d2113163325fc09ae5683d3ae93903dc6b115b1ae836dd05decd9c31e620670aaee073e71246c63930e5511c19f62cd53b2b36a8c1c67fb577057988af44127f4329694a888eead781bc893f32c57f3f41fe5526c3525df41ad262ccfa07eeba7aeae1ce82bad365a51aab047feeb325aad73cc537f60891735d035fddc9c31b597de27671534844bef416ebd2acfcf077e26b681f6dd8485a19f81604eea8241d440ab4d4ed6fa5458a7ab31b340c77a1eff7fa2a62c812e964cdede6a46b1dea0f84714cd478a52042bb80c23cafe97c7eca18ebb5440e1d9125a278cfc59e040fbe5af59bd857a1d797312c00bf3e1ef94e8b3ece5ac558593efb663eb3e0dd16717de3647d740c0c9186bfde3a3695e353a0320657b6c3cb948667233e8a47c27ee4445749588956f434f8e165b4324cee3dc670c4749809c9ca2ed4ced6c7859b62707d0de1f6278b5224f07e37e7e1559d391e6fa39fc4d0c57f32d2c225c9e96d8b1f0a662f338a4f7396d7892c387c1cc1a2f6775cd9250178ce354e8ed38135040fb4f3f1f4fb08f2377010f20b72878878781a998e47940de8b19434a74fb0e5396c8c26b78f60980390384e6575f519ad55e65de9ff6b6bc6f74cfc62c230020eca4082ec3b12fc65293b785096ccd45d32e21f9b960f49355f52bce4a635ab61610dc5410a736061e8c95731ef2f12d9af10573b2a003214ba66fa3fe711a09352c933985a76af98d52177ed9fc18f82edc9ec1809446045ff175e0b821c891f968aa4feae1efce233ad3c9cfa49ac8413a50d3964e6bc0748ea18123918dbaf034074f383636f35df5858e26029c428f9d3579f28d9e984045049295487ed09b9551bdcffc9fe730f3de380e4c1a45824d933bb75707fdaa17669902f9e6397dc376cadf54ef795a37069b57c430b83c52c096b7d9a4d14b6b34a6b460b06734009d722cd7a697d27f38299ce0303433d776e9984796886ce0b133033f8bfed02fb00f8fe7f5a1eec92243937fa361aa04d9d963c08dcbf8072a96ac718201ca1e1d6267768bc3625c745285cb5a383a9bb17cd570f521885f60d51f6b41c827ef4aad1ee35444e8c6c56f23a017478b63c2e0186312b0ab6bf310c5edc95f8381e1ca7a8cb71003f7b8618246dc1dd2db41bdaa116eec28047acfae7ffe584dbc58ca47a90e77b3567d3569d77e726645ba9a3fef9a22316bc7eca60439e41ad05eff915e8b823caaa339cc9869e44b07d20a05366fd3cfd470062653928fda0ae2027f06e51e58ed3b357dde61f280c744136782413c67c6b060527fcb00965cb4384cda29acb4c9ea490088f197626efceb7e83cad3c4f4dcd6bf749120da95cbaf8e8f800301fea438f4d059ba6646fd4360a673d9f6d6b75a56e4c09eb0ea23298af2e405cc0828e2bf25f80a8373b702dca85516dda6a6e84d941ff001fd072a72dff12f240c46b735700516268ccde9a3d59fc4b9b88df19323c104eb94928591472a644462f0fc7d92339d8ea47a9b2a6f200c062ec602c4ddfdf32dae2f5164e0188c78bd7899c19fac984952300a6a4aca591e23f97ba684e0b49ff97f3f42aae9277449e9a0e8befd68c1b892de93d862eb73b18b5b5a942a624cf657bcecf505930da39e3faac11bd3ca2bde7950ebc65aacfa6f5fc70a98512788177d499d759e32ec55d663efc15b9eccd5a7c6eb7369f2b95b7f927e588d2db32ccce81e6bfbc7a22ceb23dab9146e6ed08206958d2a1b6798a632db09d77edc11dc975020cd10fd720e1f879cfcf17181db032fc32f7000aedd42708c2d0a21e5e3da8340279615cf42c87ec852c878e69f7209675d0fd54049f7c06ed645d79c5cd098768e8edbfb207136846c08c56df5451f12236c6ef99d6d0094fdbbac07e111b63382697a814bce1f16378edf2a04c25a01a0ecd89397040267d48793ff4eeebf8eb31fe3931c1cbecb6b1861d998a3555b94936759af8db21d81e9a3830c6b4be965e32c120da237b1fc3d8eb301ce5ae12d9788724dbea819689022f525225e627ab02a30d836457dff97e122566ce3bfa60af9d9fbda9dd3dc2bfccb6705526eb01495f32818fb63a494ffbe320257f13bd037a8533eb569941e51704f89ebb4e518579d158493cd8a9fc2ef785ed88c8794c05dc48deb883358a6aacdb62cdc78f95b4aae653407ee9c070c6467a556041b72eb8eb65a9fa3e79327752ff30d685cb40e3519517bd41c431afc0344726d644536520431d535572beef8e82a24df2b9450b8c2660a177173aee48967cc10280f62cfdfed10183596099de4b38926ad3290c90809198e61557da3238e84476cacd5263fdec2b7ffaae66bdfceb99ff78363d641c14fac26633eae7c8b58ef94a92fd7eb9f2adfab6cdf18e2e6e759eb102134ec6b4163bbc02d6070edb8819da9", 0x1000, 0x20}, {0x2, 0x8, &(0x7f0000003f40)='dummy0\x00', &(0x7f0000003f80), 0x0, 0x1a}]}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000004100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004180)={0xffffffffffffffff}) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000041c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000004300)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004200)={0x9c, r12, 0x420, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe607}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r16}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8041}, 0x20008801) 2m9.721410935s ago: executing program 5 (id=9780): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000480)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x4b, 0x11, 0x1, @private0, @mcast2, {[], {0x0, 0x4e22, 0x4b, 0x0, @opaque="f7a8080887faa66d31fff63a5b1fc73bb065e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f7218561783ca6bb213639ed583dece835a51fa9c5a076757"}}}}}}, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r6, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x7c}, 0x1, 0x0, 0x0, 0x14000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) 2m5.165683044s ago: executing program 5 (id=9785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000080034000401000008000300", @ANYRES32=r3], 0x2c}}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xb82) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009040)=@deltclass={0x44, 0x29, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xa, 0x3}, {0xfff3, 0xe}, {0xfff1, 0x6}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041051}, 0x844) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x60, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c05}, 0x401c5) 2m0.150287506s ago: executing program 5 (id=9791): r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000002800)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/131, 0x83}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/94, 0x5e}, {&(0x7f0000002640)=""/11, 0xb}, {&(0x7f0000002680)=""/99, 0x63}], 0x9, &(0x7f00000027c0)=""/60, 0x3c}, 0x40) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="7a7262eb", 0x4}], 0x1}}], 0x3, 0x2090) (async, rerun: 64) write(r4, &(0x7f0000001e00)="39270725d9", 0x5) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) (async, rerun: 32) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000000)=0x10, 0x2) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x20000010) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r3, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r2, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005"], 0xf8}}, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 1m57.451875308s ago: executing program 5 (id=9795): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004081}, 0x8000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='nicvf0\x00') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x79}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0xef31ec7ef6d6ccd4}, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000480)={'vcan0\x00', 0xe2c}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x324, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0xf, 0x2a, [@supported_rates={0x1, 0x1, [{0x0, 0x1}]}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x167, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x0, 0x2, 0x26, 0x9}}, @mic={0x8c, 0x18, {0x8c8, "604e7c1e300a", @long="31d79c2703cdf8ec64d7172833667d35"}}, @random_vendor={0xdd, 0x63, "e90201dd5f0665eee06cb305cb41a64bd72615c3490ec2b1b383a080643e8029e30385a42f94a8e7179e8b53fe976910d7a2bac9d09324ecdbbd6caec27f07d81b1a3ca38b8b03591986ec16cb15ac9f0ea656e1e81138fb3ba56b1fdb7be4698ffd10"}, @ssid={0x0, 0x16, @random="e3b630a620fd5dca069fb992ccbad5cc2ede10da44c9"}, @dsss={0x3, 0x1, 0xac}, @preq={0x82, 0x46, {{0x0, 0x0, 0x1}, 0x72, 0x6c, 0x9, @device_b, 0x2, @void, 0x5, 0x25f7, 0x4, [{{0x1, 0x0, 0x1}, @device_a, 0xe9}, {{}, @device_a, 0x1}, {{0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0xca7d}]}}, @rann={0x7e, 0x15, {{0x1, 0x74}, 0x0, 0x8, @broadcast, 0x4, 0xa, 0x101}}, @preq={0x82, 0x4c, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x80, 0x6, 0x8, @device_a, 0xe, @value=@device_b, 0xfffffffd, 0x3, 0x4, [{{0x1}, @device_b, 0x10000}, {{}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0xe0000}, {{}, @device_b, 0x3}]}}]}, @NL80211_ATTR_IE={0x13b, 0x2a, [@random={0x1, 0xfb, "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"}, @supported_rates={0x1, 0x1, [{0x16}]}, @peer_mgmt={0x75, 0x16, {0x0, 0x1, @void, @val=0x27, @val="bb1d4ca90ec7219916e454779a00d8eb"}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x4, 0x0, {0x54, 0x7f, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x8000, 0x9}}, @challenge={0x10, 0x1, 0x31}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0x4a1, "85442f12cb1c", @short="91cdfe8bc34a8a43"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0xa}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x8000}, 0x4884) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000008c0)) bind$can_j1939(r3, &(0x7f0000000900)={0x1d, 0x0, 0x0, {0x0, 0x1}, 0xfe}, 0x18) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000a80), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @remote, @private}, &(0x7f0000000c00)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x164, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004}, 0x4880) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40400}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000001180)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x16c, r12, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40031}, 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000011c0)={0x8}, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x94, r0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xe}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x8}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xd}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x60, 0x1}, {0x6, 0x1}, {0x16}, {0x48, 0x1}, {0x18}, {0x60, 0x1}, {0x0, 0x1}, {0x20}, {0x9, 0x1}, {0x6}, {0x9}, {0x36}, {0x6c}, {0x24, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0xb}, {0x1b}, {0x6c, 0x1}, {0x48, 0x1}, {0x48}, {0x2}, {0x1, 0x1}, {0x18, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x9, 0x1}, {0x36, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40}, @NL80211_ATTR_BSS_BASIC_RATES={0x1c, 0x24, [{0x24}, {0x6}, {0x1}, {0x5}, {0x24, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x18}, {0x5}, {0x18, 0x1}, {0x16}, {0x48, 0x1}, {0x60}, {0x30, 0x1}, {0x48}, {}, {0x1, 0x1}, {0xb, 0x1}, {0x1a, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x24}, {0x5}, {0x9, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x529}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x94}}, 0x20000000) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000001380)=0x9534, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000013c0)={'ipvs\x00'}, &(0x7f0000001400)=0x1e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000001440)={0x6, 'veth1_to_bridge\x00', {0x2}, 0xf8}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x40, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb8}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) 1m53.73145801s ago: executing program 5 (id=9799): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x50, 0xffffffffffffffff, 0xffffd000) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x5, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1m37.807256174s ago: executing program 33 (id=9799): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x50, 0xffffffffffffffff, 0xffffd000) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x5, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1m32.318238506s ago: executing program 3 (id=9830): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x108, &(0x7f0000000080)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@snap={0xaa, 0x0, "3ef9", 't`E', 0xc, "bf66f681bb224ce030f6359af9806b8060d1f84cd5c6cc3825d463f03e2011900bc7e24cd207afe7b3af5f8c54f93dd4dc121d0aa5bb08531445d60b15d603de7ca4ef67de9f455da37ca8fc9a79f18bd650690f77b153b1d673bb8ece92f1430b5b611a7afc32d6b3ea9ce4ba789cf27d173ec37a306640b7991fb35467261617914c0d4a6133d87f5feeaf57e9c5fbb0fdc96dbc15cc42e2b806aa119ed232e47f71c64b3ac4c3a0f8a6ced3d7fb4af72d1dad85a9be8f1ac8f4c2655b862f72cd419c183ab8bb54fe6eb271541db5c5f310f91c761bddff679cd455bf3785d356b78448211244ef1bc4fa05de385079"}}}}}, 0x0) 1m31.460894326s ago: executing program 4 (id=9832): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@get={0x1, &(0x7f00000002c0)=""/88, 0xf}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e1d, @multicast2}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e21, 0xfffffff8, @mcast2, 0xa}, @in6={0xa, 0x4e22, 0x572, @local, 0xfff}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @private=0xa010102}], 0x84) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x803, 0x6}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @str='wlan0\x00'}]}, 0x20}}, 0x0) 1m30.134299942s ago: executing program 1 (id=9833): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001004010000000000000000000000000a68000000060a0b0400000000040000000200000038000480340001802e00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a3073797a320000000004000580140000001100010000000000000000000000000a"], 0x90}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000012c0), 0x2602, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x500, @random, 'wg1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001300), 0x8080, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0xfffffffa, 0x5}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) recvmmsg(r7, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x1c, 0x0, &(0x7f0000000080)) recvmmsg(r9, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) 1m29.955109799s ago: executing program 3 (id=9834): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x700, 0x700, 0xffffffff, 0x40, {{0x17, 0x4, 0x2, 0x20, 0x5c, 0x66, 0x0, 0xd9, 0x29, 0x0, @multicast2, @multicast2, {[@noop, @lsrr={0x83, 0xb, 0x52, [@empty, @broadcast]}, @ssrr={0x89, 0x27, 0xea, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast2, @loopback, @broadcast, @broadcast, @empty, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x9, "fe5e383ce2736f"}, @generic={0x89, 0x7, "ea3f67d0c7"}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x5f, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x6, 0x9d45, 0x38, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1, 0x8000, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x6, 0x0, 0x42, @remote, @local, 0x80, 0x1, 0x6, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x5, 0xcb88, {{0x2d, 0x4, 0x1, 0x5, 0xb4, 0x64, 0x0, 0x95, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010102, {[@timestamp={0x44, 0x28, 0x13, 0x0, 0xa, [0x9, 0x0, 0x9, 0x1, 0x800, 0x2, 0xffffffff, 0x3, 0x8f]}, @cipso={0x86, 0x42, 0x2, [{0x7, 0x11, "dc64e5515e74450e832129d0e9729e"}, {0x0, 0x10, "2ff7c07015dae347f2cf61a71aac"}, {0x2, 0xe, "16d6f1613699f39fdb1200af"}, {0x1, 0xd, "d0271b8efb78f159ed7a43"}]}, @end, @noop, @timestamp={0x44, 0x10, 0xb9, 0x0, 0x7, [0x168, 0x10000, 0xffff]}, @rr={0x7, 0x23, 0xe, [@empty, @broadcast, @multicast1, @remote, @loopback, @loopback, @local, @local]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'erspan0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x40, {{0x35, 0x4, 0x2, 0x1, 0xd4, 0x67, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x1b, 0xc3, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @loopback, @broadcast]}, @cipso={0x86, 0x3a, 0x1, [{0x6, 0xe, "2bbff590fb80db75c38aa837"}, {0x5, 0xf, "70ce541fa27e04f6edd6d8176b"}, {0x1, 0xc, "eb13a7cbd77dd6436975"}, {0x2, 0x2}, {0x0, 0x9, "2b7c1750f25ef7"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xf, [@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0xba, 0x1, 0x3, [{@local, 0x6}, {@broadcast, 0x9}, {@broadcast, 0x4}]}, @timestamp={0x44, 0x28, 0x3d, 0x0, 0x5, [0xff, 0x10000, 0x3, 0xd5f, 0xdc3, 0x1800, 0x7, 0x1, 0x0]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={0x0, @multicast2}, &(0x7f0000000a40)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'ip6gre0\x00', &(0x7f0000000b40)={'ip6_vti0\x00', 0x0, 0x2d, 0xf5, 0x9, 0x1, 0x0, @private2, @local, 0x80, 0x7800, 0x800, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x5, 0x2, 0x28, @dev={0xfe, 0x80, '\x00', 0x23}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000, 0x700, 0x1, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x248ac17c0805fa11}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x1d8, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c090) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000f40), r16) write$tun(0xffffffffffffffff, &(0x7f0000000f80)={@val={0x0, 0x94}, @void, @ipv6=@generic={0xf, 0x6, "7be04b", 0xd2, 0x11, 0xfe, @private1, @loopback, {[@dstopts={0x5c, 0xc, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x8c, 0x3, [0x5, 0x2, 0x800, 0x0, 0x8, 0x3, 0x4]}}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0xa9, [0x1f]}}, @jumbo={0xc2, 0x4, 0x2}, @pad1]}, @dstopts={0xc, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0x80}]}, @fragment={0x87, 0x0, 0x2, 0x1, 0x0, 0x1a, 0xac}], "223fbd555363701841678f354b68fccbddd868d022096f2edc0ada10f8dc782248c3ad4371afc5f1bdd868b8fac892ff0e4a7ee5b877dd49b4f03b04d12493a5e8e83eac9636cea527ad57cb3be7e207b498"}}}, 0xfe) r17 = accept4(r0, 0x0, &(0x7f0000001080), 0x80000) bind$xdp(r17, &(0x7f00000010c0)={0x2c, 0x1, r4, 0x1a}, 0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000001100)={'vlan1\x00', 0x6}) ioctl$VFAT_IOCTL_READDIR_SHORT(r17, 0x82307202, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001380)={'veth0_vlan\x00', 0x4}) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r17) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x90, r18, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xef9d}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0xfffffffb}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x20008004) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r17, 0xc0385868, &(0x7f0000001680)={r17, &(0x7f0000001580)='-\x00', 0x20040, &(0x7f00000015c0)={@align=0xfffffffffffffd23, {0xa, 0xfffb, 0x7, 0xfffffffffffffff7}}, 0xae, &(0x7f0000001600)={@_ha_fsid}, &(0x7f0000001640)=0x800}) sendmsg$nl_route_sched(r19, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001840)={&(0x7f0000001700)=@deltaction={0x104, 0x31, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf247}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb653}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}]}]}, 0x104}}, 0x20000040) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000018c0)=@x25, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001940)="2ce17674b9ef7961e61777bc0b0eff7a3521972c49401cb63bacac64c1f501a2674d5eab529b1d1b8983600cd5da3417c011d1d91d58b675f30253145af138a50376e79e7641f438449c54d3853ad604c362ba1ad829ac9d730427f61cc43e437582d3b94d28b472af2003562533473a60f561787c54842f263e50372da4af35d26a901a09a41461a4c99260bd394da27ef62ffc3d9f7acace7d572b7b5b5c6f334ab0cf0613fe5cca479deae4c92bb1bb2c88d760055e7529f87eebeecc18d287320e5875c4f044dca3207a8ce396fba7b017c382938bdd7a97b380", 0xdc}, {&(0x7f0000001a40)="849ab838054aef62fd042e8d2f35e6968b0600cb8e9395fa511c9f1df6800f8a9152c9e53c80c5b2cd94afacf169f267cf664041c9300f05d993067252fd508257ed625138dfcda24e67a7877c1474aad22c59dd29be831edd510fea65878a29efb66f9267abe7b7c1e67034d83a47", 0x6f}, {&(0x7f0000001ac0)="1fdc95036ba8f099fd588874547d62fd1af931388546ce6e2fe770ed41c4ff45080d39679d2b97707f29b84a4168eadaa8050f452ab4fee4ed103c751ef4de819e02c31aaf0ea0b6995c2104d8f40b81c55c497f3416a695057d8786d8c1e011b553592a79470aacc6a9efafbe9f66b7c86a952342f400248931a049b03bba53ab0376bd8b4d373f75bec25214c76a84cfbb30ce5993c0001349a86746279545862861ac46f94b1a4dca2608c8d2309dc84d877207b485ea91ad82216cb06d7df2c53b214ca29585369735c38502da92c154076c6232af65617b5db6c2d3417835865e97bd0664dcb04b72fcdf65e0c75b799b7c9280d33a", 0xf8}, {&(0x7f0000001bc0)="4f499bc976c72129f1f795431c4ebb624c3e24022f6f9496857dcc8e0710b9649674cfb28394474271543c817a1a94a965eee42b4da4b360d484b9b51ad08cfe937f5829fbac822268fba0a80137026b2eaec3f855693c79040fe8533d0b6de25cdaddb76e3cdf34722bd289aabdfc994bc41b3763e46ea181dfecf72ab01cce22f6f9005b1940e7e9a8711a3e74c15f44f9e60d24e3c60d1ad2edf101d1d57bfc9fb74560b3cbf8d04923623d583fc503c4b65be0f6552f74aba3c393b838aeef337a8d5d26a0ad8dd07cdd7d697d9b4f3a3e38", 0xd4}, {&(0x7f0000001cc0)="3aff11917f38a5b124185a81aa8aa985d79af740ac4719e1a85526476dfab13ad04ef9bb0b9269e08159926a6ce192ea0d3076e49d72572ef0e3dadaee935c04a2efa4c429f2c83f2454b4", 0x4b}], 0x5, &(0x7f0000001dc0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x90}, 0x8844) 1m29.014253381s ago: executing program 4 (id=9836): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="140cb3fa0200000010003507d25a806f8c6394f9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0xccde, 0x4) listen(r2, 0x50) sendmsg$inet(r2, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a", 0x5}], 0x1}, 0x4000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000086dd600004ba0014060000000000000000000000ffff7f000001fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d761b93d088318edb5a339c79efabbb8816cbb1ee43a822785b59975493ad863eddca7318327c4f28a3a97478c59aed3147fa41b09f6d97d4ca69fa2715fb2a745e455281fb072c37618e5770be734a761973b35e197d5c7e497c07bee12d91a44e3d534098bfef9bd3c88e6454a93c3c66c053f56965f12fd77bd79f1949d42a4da4551570efad519e47b19d96daf63f4d7055d239a49d632d34ca56edfcd8dc2770863bc8440c357f9e6ca80e8001570712b36357fc11db4f3001a0b6f28939eea"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b0409000000fbdbdf257a000000", @ANYRES32=0x0, @ANYRES64=r3, @ANYRESOCT=r3], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m27.956331014s ago: executing program 3 (id=9837): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c00000000001010400000000000000000200000074000180140001800800010000000000080002"], 0xc0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2c0000004100070127bd7000fefdffff047c00000800268004000800100001800c0010"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r6], 0x38}}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r8, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) 1m26.401867772s ago: executing program 4 (id=9838): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000002a050000000000000000000000584400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) 1m25.404045526s ago: executing program 1 (id=9840): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x1, 0xffffffff, 0xaf19, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010100}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xf8, 0xf8, 0x1f0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8001, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xb}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x1, 0x2, 0x9, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r4, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffff19, &(0x7f0000001180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffe0, 0xb}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r10 = accept4$nfc_llcp(r0, &(0x7f0000000140), &(0x7f0000000200)=0x60, 0x1800) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 1m23.314638222s ago: executing program 4 (id=9842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xfd}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010097", 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x702, 0x71, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a00)={&(0x7f0000001780)={0x1260, 0x21, 0x100, 0x70bd29, 0x25dfdbfc, {0x1c}, [@generic="aa0cbab487aedadd582b8b65eaf16f55d7c1c4636f664c9898e358d6809a361fd05ed63ded", @generic="70113a6ea83db34fd52215c01265df4c33be89be967d8c6e5acf2d56792cc300d44417c2a351f10e0886465b50b33535dfba20c274a7f537c87aef2e66aa5ea54a7d9ea7979cf669560f48e805940af5cd8bd3d37d428b747877c8ce6584e9f8cfcf3259eb5f1cab15e1b75a13bb5a1ec840d36bf8124f5dd6bf21110d5e7bf2089d27f41bfb0557d82c0ec0eb96489e24b28255eaaeb24910c3b3e0", @nested={0x24, 0x3a, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x6c}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x33}, @nested={0x4, 0xd6}]}, @nested={0x1164, 0xd5, 0x0, 0x1, [@nested={0x4, 0x1a}, @typed={0x8, 0xfd, 0x0, 0x0, @u32=0x5}, @generic="33e968f66422f8649888556799c58e8e46fe259c63956720af7f3de546a6a0af0ffcff8d26a2ca229a62711941ae2ba705ec8777bf565709a892bb01cf6ea7ba6717b0452e1ca22dbeedcc5dc2386e784515408616192d0e6d3f14ad95620cea06cb2720bf5a84d3618f85e9f8a1c541f059cbbd6e6fed1a724caf973b09f57813faaec58848567f8d4e99ab638a129b5900cf4131b33423ed01bd172cf924ab46b87a3eabbe39324cb2726cc4d4cea9e9c14f3c578ba8d6b6ff74acd24c7ccbd9629a7a81642fbadaceb969a4e1035fe4f6f0639f37fd138ee45f50623c8ea43302175374889a01aa8f0c87ebdf2fe60bdd51c4d1aad0a19ac9377bec57b2a147d3987e1a059d561203847b21488ed3a389cc73a8773b9dc22fa1188d518d0c92d981c7b2cbbb112c6a34c4942084f8db9a62ea7e95f7a1e45fc6e17f8e46c48b5ec30812f57528687ed0a8ad910a17cba1865883e26c7850d3aedec2a185a136cfd3d703a38887dd9a968dd95862e02e1d8ecb71b1698d59a8ead59c2dd7a4fc101c406563a6b695627b154299af3ff5b1a146617fb1ad8fd6379f406e80e0262dd34c83bd28ac9bb6cf229b15f1f37b7812659dc7694f13040c86271ef396e9bc2d474ea7e97f96d710820b4d3f85690057b67687bb08e6e98ea4ffec802711664cda1251810dd741c58db7de5ade872ed63c0c11804f6910150ea1bfd24a146dd086c100171072c24f501189a3ddfd49c4ef6383a7412a2044a55093c7e53d6d2d116207aa05504ccf9ce6added4d6b82be61716c4d06fbd6e4cb2027b9c75fcbcfc5550aa493b709634b913293696414eb095c1c998cfa15824933fa43e003397ea7b7c470400a53a48a35130cca05b6b376c6bc337061a7fdd34790772dd2eaab46d3bd404f0cac12c83c8d5dc918488db96bc6c4e4950634b83e9531657a5f7d06304ad6f9a5b33f9d8afe6c6f566b4ea66b0cb95ecaf636485a800f7bea298d1c0229acbde98ee0428ed60e4f0b57a9bb73cc25bcc456f4b8b00c6527f18c6e0fecd0749577f94f12f1287da28e1a77e8e46756f0e9459f286db8aa197016c81fa4644cc01dc7cdae36f68bb0c63a927116ad7cd10e66f219c8d547c3f98c44653923d820fe389e88754f2abdb2dd1cc495f1a39eaaf9c32d9745211d7ed0ca06eb1186f607b45592ce1e98779c7c18ea726f2451272ec828c6bb571092ec068b53218db9b531c7a6d221247c8cda63f62b7190933a2bec899315ec2a522231d02277defa13adf13fdb872e30c3f19284965ddb864b6ab41baca8c613a548c9bd00ce4d5cd19f910dc8e011fb7ddfe7bb3cf7cfd434939f69b5d511c95c83db88dee38a930833c3dbde8882f154c6d0a832aaff373c96d8a32ff925cf50cf6dffe5df357bd475bb1e53a40bb04215e275fb07a961f8e1fd560b0f2ae08fb2d2b3bb6f31025deb7f40778cf0519a9660a48639557d10d62a4f9d606527839aaf8cffae96da420687a6fdc13be7d974e3bcd0f9b246b9e8888d5087c03122808e31ecb6df27ab03c53113353d940ad2a18b1ee01827f758ae619fe2cfdf44a4d828fbe36640761c3fd0b2f49b2bace1d23ec5d7443fbe0f86d0d340750b5f5de09470cbc6955033fa4767806357bd1083b34c7f8ecad108791167955e8dfc93b6e79f4ae1828faeb6555e30022a38905215d99a4b476263e8c5080cc01534fc87af7fad37da37d91dd47cb29f27801ffaa2351263fc3b06071b7c45a665dbf01db45572e9fbe35f5f15308db24e07de78c9c6bac3ca82093de9b39519861fbf2c12b0c2015f15288f7854676e714bce694dc074be0bf88433d9c08708ea8b27b272ce32e73efbf128a9259bbf608f2d462359156b6b3136cf47b352e92d643774d09d458f2a40090b89b5de2a4e5b9a79729933a7c86d3a2c32f9bd5ebdaad2f245ff6bb025efc4f6d5582ba39609e715fed668b464a77835f8b60ab894b7f1571b629df832685c880c200e0e37e86c228696245a719f1361819c889dd23887177ed4c365867f269b4730000cfb0a157e2946b39c08b157d77d10a540a5063f2ba547575400793a1abae63c894cefa8f2a311104071f62462b0ea68ece149c1f02d1a040c779a2c45e2a29a867a577e84a40221092566a77afbcdf6a16796d19b89981407a55a2316f6d9c5809766077a590a80a635f2b482354d6630caf5275748214b07b63fcc50025253785db15bcff51dcd6a23d5d4a458a25b6b003fed2d3bf28e914fe0ec5522fbcf032b3356ad6fe836b7880c3d6f0698d0beba012e5e24d1da45f5a3ec8aa3bfea1ef9441b77788f44d8c10c1a049445cd532720b96415ad7d42f67b3f1f23c9e1e28209abbe280514e4b22af0e9e883e04f20b8769e0f3d654c0575545474c6da1c98b4da12265eecfb5cef2d882b3a0fef519fd24e7a0cbd040224e1389a71abd0fd96e87de18c8b871200001afdfb6b37d8aad03d637ee7b590a5f07bca314db0a9f1dd753c9ca8dedd70134dad87f128730e0e5613eee3a398d41cfcc93bd020ea07e8f76523e35b6a0932e81ef399eac593eda6fa06425aee1f10890ef7dc8dc0eaffc98c5a854732cc46e7cc5808b9445dcf00257807b95d8324f9e4e6549972eeb8b6e3e6c64923591ed618b8054522ea5f696e31f995cca08ba5b36df7420a787a6c2ea99fd64e79e7b65b2ab8d49a11068e45ab7683d4c234c32a2ff52dd25476dcbd2b18d8843d3a86d276a30f56b97e7c5b7d944f24bb267a9fc6ae3e9acb21e93742d52da93fa1874e321587c76ba72001921f12eb11d5f2e056dd95f938b5d114e2b111bb8a5ae9ee953a4088feedf3e07f84cdff6e980c3afc09932044cd56c387c95944b417820852df2fe921095c4a00022f4e041b5a8dbd84ec22988c37acd78aec64e0bb9a0d6e7c753729239e3ecc77e3d49413fdde4b7ce6ca6e9680b80a46b4511271c17367e4cdd782db2ce390570cd16f02398a66de7310b2d2730246713d1ff4fe20c7eb87cc20447a425ef7ee6ba3466005afde489cab2a64b873fee82f888132c0f319aec24731dfb29d69a156160ad9ea18ae931685f5e0fbac0315aa59b9768d65759af56dcf71a2df4bcc58b960825d72a179de42ad66ee6482251c4b521a3d036085584fc91956bb1188dad195ca454738510edbd2e32faf466ad01ef5266a38adaa04b6b2accb8e8235b78cfa997ea3d087bc4a24bd0608f55436e8e04870802b4b2a4b96d2cc9438d3dedea9088c48e26f67d4b3433fab36fb6f0e6b8c46948d9cd68c04d7064469eb9d014619461bb93f6a0c2f97051aba5389f3d4af11f9398355819a9bf9ff9fcfd76a518e4c02c1288ebfb4f807b98c6f347cf4bcbfb18b9f51812f18f661f5fa0a113cf1b75c980c61c4093bdf6632534874e62e8f0949b90e2098d15ebeb659d63e990a31c8cfa76fad36fb5c0d12a0e4125ce2a6321167e77445061663b3cc733d7eb35b63ca1f1dd416866589a584efa1d8369b1587e69cc8a216d5205e27f1ccd707ddab0ab29fd0ba2537f04ae7c744b95c1570000cfb2fd25138db25ca4fa253c8509a2ddb8c592d9f69f6975ab9e4c7717be556dfee75c8a10883ad3488f21f6ad8473e69d5e57d801a0f69568d1e702056be5e6a26d38bd344c1ba49d670e46e7c9d6223961f31e5ebe8f58b97175c2007eb45f9c868fa2377849f8842e88be0da0df2ccb39a4ef16f81c8f9049b71d3969ed1f111bfc9014217cbbbbd38985f4a6d4677b1ea1d56c5ddecd25eeaccd70f25d91d438ae7a77aabde2627ec88d40cda7620836cb7199968f57aaae8b06a8da9bd8d7ee27853eefc642f825314967d1d008478aa56b8185ce4e0dc782baf7b36eb963f524e68d56d7801282601dde6796e2491c72d5a9ac4088da072ffa7fae749dcf9c1a06cc2a1a190fdd22e9364c4031682e100de0d4bf0c023f918d12dd63523395bdad06ea5b2e0141a7724f41d6f35229beca7058ab8c98feb0c4c7e48cc96a99f0ed44b2b98343812d8c5679f0f6d35f9c6ab829b3c9a68dba75ea71a4766ea48bbfd646e1ebd0881b0dac3d8730243ed15f02c7ce8d67133310c7105491d185a7d1b859865a7c7ad93fe1c790e49d5c4f2f8bc89032aca28c4dee3d80a1cf3c6b1139b2fb979e3950402e2b86533296321fcb234ff681a0c8b9acd366ddbb22e08b1193928ccd50c76fc6d5ed23c4d23ea801d7b5ba8ac871fc447f8ac621597c35d1a0e56eef20969e2fc03435d6a489e2dcf17b0b0761e5480e720326c552a988c09511deecc498d3160ca8ea98a30cd0c79e55295b35ab4d4d5763bfa8ad7f72731b10863fd92ac7434f7e542f75fd2405a043a9281ec51023a7c040c0dc4a2b1c763a2ba8666e2d9e788fb5c7753c446d486135f88e16eee3567abfa8d085aff76b8557c4cbc93f7f8c4f5c3c007d825e3fbc8c891d0032cb02ab851780c8e1e83d9b161c880ae0943bf6f2f0295da972afefee2b647ddfabc7ad3251d51a847ca76d2e9abbe87316c55fb903c25acacfc90ab40814fc50bfe28b22dac1386997151bd3240a5fd65a8b0031166011f7842e2223d5846d00d8b3f4fe3fc06353c97e93718e134d65a218e606e4c22fe892af6e0b5d9ced06918c51086e851e008c9ad3de8ad0ee2616b5d40b5d90c4431e4fecbc8d77ca41aeb1e580d9bf294ac08de04e4e8c7e131e1e60aa494e1901f8416a1e4dc294227ab208e24a545b8b7adc21552c893ca378ba8a0a5c33b1f4d85dfe1533d760eedc13155f52e27b086e876270131b784d3b2488e3eeb9dd6684b77887975659dc1ce2df82f2faae846cba6ebdce308f4f74a2f5fdaed64b393a94c93314cd4dd1c52104608ce016a15c2b32326f58f0d4599cbd8092ee40d3ad2f7113bc5431d2e5bb3bcd5e8e823010b1b4db3d2421a98d4612af61ab213b3065a282e7581a26e6af1dd1b7be31ca510a889f9eafc44fc76898915b8ff0ee1b5ab03f131a603ca223bab54250d3699b8e470d45addc1c3217e0839ea0a4ea24dc90547e528a9af97c93902d3e1cd6d6b0dcb90c54e790169bd5a95218682b2175476a17bf88c392a9e48104c583eaa2ddb05a3fe461c3e2aee8de87d337387cf6e829b612d24a157be04f5c06bb7189ea3cead9cbaa77fa85fdad025eb342a7c4b0bea6bf68c6a49ee331906e2b5181943db861c21d9d2c9b360ff8f01eb325af6397dc9441b3f735e2b5daf90268b075bf719983fbec4a54d7ccd6c92483eabd612bc18647d42bd35c6551189d383e328735df8694b05f341878cedb11e170cc3e3ef93d57edab38cb2a2f2a8c0978cb7bbf0bf138af61dda10dfa1567a37940f9b4031b8f6f16759be96676136d9588894afbfc8e770102ddbd789c1aa332a643502141fd9bfebd3aba45d70a3bff3fafb55ede29e426faadaaf03f36a105f8d4b23e7a54bf430a99156ab56b31a9b5e7d57d65252bdb79afc84334ae159a10e80df62ceaf25034b65763a5d4c4d250d472f9a538e800ea863ee0214ad9c176a7c962a30c5829df05d76d2ba973d08713ff4a24d287e405492c7fa9702393ebb28b7af5e49850357d8163547b9990460590201837ba6d813f3fe88beddac6ae8af249fa71d8ff5fb329ae51d2930b4d2e74463ad383f8b4b64b1f2f7e21efb6ba1e8c3863b1933fb70a727c5f7d9bdf8a0c6f898ccb8fa1367a007b64c69d42ff8f8c59c2fdd1663d2eed11b6c4ceac73680cf4f0e90cd4f62ed8a64ac09d079c459f2ccf74323dcf3b4cfb", @generic="e782807443eb8be2106c9b6566123ba0a2c2970d79040f9443cc6568210987ac8e98726202c91c28dc9bf5a55aa4878c59f4fbf0dea1c84e962ff118179d49a4e11d2ebad3491d0a31b855f70890f8a062a453c5", @typed={0xfc, 0xa4, 0x0, 0x0, @binary="208a9d30b41d493323f4ff8958efd556cbe817f12abfd3e76430c9864ef1039412014446f16fdcb9c747381405559a8cf88f7870bca2f3634d354ed09c46a4fd77c4029964bef3716b5dfd0db58761947957bc0bd433af017821dbe547b94a8100b62c6f1ce0aad68f4cca4eb0fa9130842dff7666a1b13c84007257107402e3143b5db3991288460c52a83213f71294a1812fd735ef54c91bbc6839474776df88f3243d7ccb33dd2fa94ab69d165ddd3ef792267bbecb3097c4ad3b9cc6f26f8b071c61ce88462966ed3651c77ad0c583c8a5429c8ef172e091c4c5026bb8c83a1015a4f0f77f56a3ca2c53a88e33bad0f0e7323f70b86e"}, @nested={0x4, 0x151}]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m23.312669565s ago: executing program 3 (id=9843): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000300)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000480)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', r1}, 0x50) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, 0x0) sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40812) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x48) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x8, 0x7a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) (async) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000140)={0x8000000000002e6, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, @multicast}]}) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r11, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000580)=r10}, 0x20) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x85, &(0x7f0000000040)={r15, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000600)={r15, 0xb9fd}, &(0x7f0000000680)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES8=r12], &(0x7f0000000240)=""/169, 0xcc, 0xa9, 0x0, 0xb}, 0x28) (async) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x3000) 1m22.47853336s ago: executing program 1 (id=9844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x5, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be647061dd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000400001}, 0x60) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m21.469658404s ago: executing program 3 (id=9846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000001800ff801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @local}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @dev, @dev}, &(0x7f0000000940)=0xc) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x0, 0x68, 0x8, 0x4, 0x0, @local, @empty, 0x10, 0x1, 0x9, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x700, 0x7888, 0x8, 0x7ff, {{0x34, 0x4, 0x0, 0x6, 0xd0, 0x64, 0x0, 0x78, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x30, 0x5, [{0x5, 0x9, "1a52c7ec0ed8ea"}, {0x5, 0xd, "f6e390509a0e45ccdb54e8"}, {0x7, 0x4, "9838"}, {0x1, 0x7, "4572d81d94"}, {0x6, 0x9, "dc667be5930a26"}]}, @timestamp={0x44, 0x1c, 0xdb, 0x0, 0x7, [0x10000, 0x70000000, 0x5548fd38, 0x5, 0x3, 0x2]}, @rr={0x7, 0xf, 0x45, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0xca, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @loopback, @loopback]}, @cipso={0x86, 0x2a, 0x2, [{0x1, 0x9, "af0c6f0fa4f9c5"}, {0x1, 0x9, "18f4711e8da25e"}, {0x7, 0xf, "f8b6400cb12c803896c62524a9"}, {0x1, 0x3, '0'}]}, @timestamp={0x44, 0x20, 0xcc, 0x0, 0x4, [0x7, 0x652, 0x1ff, 0x10001, 0x10000, 0x3, 0x3]}]}}}}}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x2}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20048004) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000cc0)={'tunl0\x00', 0x0, 0x40, 0x700, 0x8001, 0x0, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x67, 0x0, 0xf9, 0x4, 0x0, @local, @private=0xa010101, {[@ssrr={0x89, 0x13, 0xb0, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x24, 0xd0, 0x0, 0x1, [0x9, 0x167, 0x6, 0x401, 0x9, 0x15, 0x40, 0x8]}, @timestamp={0x44, 0x18, 0xa2, 0x0, 0x1, [0x5, 0xffffffff, 0x5, 0x8001, 0xcc32]}, @rr={0x7, 0xf, 0xe3, [@multicast2, @loopback, @private=0xa010100]}, @ssrr={0x89, 0x1b, 0x4, [@rand_addr=0x64010100, @private=0xa010102, @broadcast, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e40)={'ip_vti0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x7, 0xf916, {{0x16, 0x4, 0x0, 0x23, 0x58, 0x64, 0x0, 0x6, 0x21, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp={0x44, 0x8, 0xae, 0x0, 0x6, [0xfffff259]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x2e, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @rand_addr=0x64010100, @private=0xa010101]}, @noop, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x6, [0x6, 0x5, 0x100400]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x6}]}}]}, 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x0, 0xb, 0x12, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0x8, 0x0, 0x10, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000001000)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x2, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x40, 0x7, 0xfffffff0, 0x3ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000011c0)={'syztnl0\x00', &(0x7f00000010c0)={'gretap0\x00', 0x0, 0x80, 0x700, 0x3c8, 0x0, {{0x2c, 0x4, 0x0, 0x24, 0xb0, 0x67, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x5c, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@rand_addr=0x64010100, 0xffffffff}, {@empty, 0x3}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x7, 0xd, "14d19c565a437169b3be75"}, {0x7, 0xa, "7bb15ead9015b1e5"}, {0x6, 0x6, "72b842a3"}]}, @ssrr={0x89, 0x23, 0x92, [@private=0xa010100, @multicast1, @local, @loopback, @loopback, @rand_addr=0x64010101, @broadcast, @local]}, @rr={0x7, 0x2b, 0x60, [@rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, @private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @local]}, @lsrr={0x83, 0xb, 0x49, [@private=0xa010100, @empty]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f0000001200)={0x1160, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x43c}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0xba, 0x7}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdb7}}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x549e}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe9e}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7b9}}}]}}, {{0x8, 0x1, r3}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x7, 0xbc, 0xbb3}, {0x9, 0xc0, 0x8, 0x8001}, {0x7, 0xfd, 0x0, 0x2f}, {0x2000, 0x0, 0x1, 0x1}, {0x9da, 0x80, 0x20, 0x8}, {0x2d, 0x8, 0x6, 0x8000}, {0x3, 0x1, 0x7, 0x74}, {0x0, 0x1, 0x4, 0x9}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r12}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe8f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x500000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1, 0x9, 0x80000001}, {0xa, 0x7, 0x33, 0x200}, {0x8d2f, 0xcf, 0x5, 0x10001}, {0x7, 0x5, 0x9a, 0xbb3}, {0x8, 0xf8, 0x7, 0xf}, {0x4, 0x4, 0x92, 0x6}, {0xbe, 0x6, 0xe3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r18}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7b89263e}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x7, 0x0, 0x3}, {0x1, 0x0, 0x4, 0xff}, {0x8, 0x3, 0xf, 0x6}, {0x45e5, 0xfd, 0x3, 0x8c02}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x1160}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1m21.170130336s ago: executing program 4 (id=9847): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffb, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x22, 0x0, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800"], 0x38}}, 0x2) 1m20.580601236s ago: executing program 1 (id=9848): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0x4e, 0x0, &(0x7f0000000bc0)) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xf40, 0x4) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='bbr\x00', 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m18.600133075s ago: executing program 1 (id=9849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) gettid() r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x5, 0x8000, r2, 0x6, '\x00', r3, r4, 0x1, 0x1, 0x2, 0xb, @value=r4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 1m18.372416978s ago: executing program 4 (id=9850): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'wg1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x25c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200002, 0x2, 0x2}) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0xfffffcad) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=@can_newroute={0x5c, 0x18, 0x1, 0x2, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0xff, 0x1, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "3828dd70ef838fdd"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2}, 0x1, 0x1, 0x0, 0x0, '\a\x00'}, 0x3}}]}, 0x5c}}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000a80)={0xa, {{0xa, 0x4e23, 0x2, @empty, 0x4}}, 0x1, 0x7, [{{0xa, 0x4e23, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}}, {{0xa, 0x4e23, 0x8, @empty, 0x6e}}, {{0xa, 0x4e20, 0x7, @remote, 0x800}}, {{0xa, 0x4e20, 0x2, @private2, 0x7}}, {{0xa, 0x4e24, 0xd73b91ac, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x65df}}, {{0xa, 0x4e21, 0x1000, @remote, 0x724}}, {{0xa, 0x4e22, 0x200, @mcast1, 0xfffffff8}}]}, 0x410) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x3, 0xff, 0xd8, 0x4, 0xb6, 0x4, 0x2, 0x2, 0x65, 0xf1}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x3, @loopback, 0x4}, @in6={0xa, 0x4e21, 0xffff, @mcast1, 0xd96}, @in6={0xa, 0x4e22, 0xcd9, @remote, 0x73}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r7], 0x4b) 1m17.974092055s ago: executing program 3 (id=9851): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) 1m16.526906686s ago: executing program 1 (id=9852): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x33) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1m3.128122113s ago: executing program 34 (id=9850): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'wg1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x25c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200002, 0x2, 0x2}) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0xfffffcad) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=@can_newroute={0x5c, 0x18, 0x1, 0x2, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0xff, 0x1, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "3828dd70ef838fdd"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2}, 0x1, 0x1, 0x0, 0x0, '\a\x00'}, 0x3}}]}, 0x5c}}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000a80)={0xa, {{0xa, 0x4e23, 0x2, @empty, 0x4}}, 0x1, 0x7, [{{0xa, 0x4e23, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}}, {{0xa, 0x4e23, 0x8, @empty, 0x6e}}, {{0xa, 0x4e20, 0x7, @remote, 0x800}}, {{0xa, 0x4e20, 0x2, @private2, 0x7}}, {{0xa, 0x4e24, 0xd73b91ac, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x65df}}, {{0xa, 0x4e21, 0x1000, @remote, 0x724}}, {{0xa, 0x4e22, 0x200, @mcast1, 0xfffffff8}}]}, 0x410) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x3, 0xff, 0xd8, 0x4, 0xb6, 0x4, 0x2, 0x2, 0x65, 0xf1}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x3, @loopback, 0x4}, @in6={0xa, 0x4e21, 0xffff, @mcast1, 0xd96}, @in6={0xa, 0x4e22, 0xcd9, @remote, 0x73}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r7], 0x4b) 1m1.179150026s ago: executing program 35 (id=9851): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) 1m0.392537925s ago: executing program 36 (id=9852): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x33) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 34.262263629s ago: executing program 2 (id=9868): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1, @in6=@private0, 0x4e22, 0x7, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x29}, {0x9, 0x4, 0x40, 0xb, 0x4, 0x0, 0x6, 0x9}, {0x1, 0x6, 0x1, 0x9e3}, 0x3, 0x0, 0x3, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in6=@mcast2, 0x3500, 0x2, 0x2, 0x81, 0xfff00000, 0x3, 0x3ff}}, 0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) 32.505401464s ago: executing program 2 (id=9869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x48}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 31.105903625s ago: executing program 2 (id=9870): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000280)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000900)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000280)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000900)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e00)={&(0x7f0000000f00), 0x10, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x60}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x5, @vifc_lcl_ifindex=r5, @rand_addr=0x64010102}, 0x10) 22.44132136s ago: executing program 2 (id=9871): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) 21.072357091s ago: executing program 2 (id=9872): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x200000000000011, 0x2, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x80000000}]}, 0x34}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x8, @void}, 0x10) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) (async) sendto$packet(r5, &(0x7f0000000800)="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", 0x103, 0x4040805, &(0x7f0000000380)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async, rerun: 64) r7 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) bind$can_raw(r7, &(0x7f00000001c0), 0x10) (async) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @loopback}, &(0x7f0000000240)=0xc) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) (async, rerun: 64) read(r1, &(0x7f0000000580)=""/186, 0xba) (async, rerun: 64) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c4000000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25020000000c00018008000100", @ANYRES32=r3, @ANYBLOB="7000018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="140002167f6c696e30000000000000000000031a5497baec194a401e1e0aeac7d0132cdffd00"/49, @ANYRES32=0x0, @ANYBLOB="080003000200000020000180140002006970365f76746930000000000000000008000100", @ANYRES32=r13, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r14}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15.412164348s ago: executing program 2 (id=9873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071106a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0x40000, 0x6}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) 0s ago: executing program 37 (id=9873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071106a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0x40000, 0x6}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) kernel console output (not intermixed with test programs): : 249 > 1 [ 1141.857827][ T7253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.873321][ T7253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.898264][ T7253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.931337][ T7253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1142.485999][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.035927][T28069] syz_tun (unregistering): left allmulticast mode [ 1143.051153][T28069] syz_tun (unregistering): left promiscuous mode [ 1143.092713][T28069] bridge0: port 3(syz_tun) entered disabled state [ 1143.440323][ T7305] bond13: Unable to set down delay as MII monitoring is disabled [ 1143.453704][ T7305] bond13 (unregistering): Released all slaves [ 1143.659080][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9070'. [ 1143.770951][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9070'. [ 1143.849367][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9070'. [ 1143.984763][ T5622] Bluetooth: hci0: command tx timeout [ 1145.230482][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9080'. [ 1145.325913][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9082'. [ 1145.583327][ T7366] netlink: 'syz.2.9082': attribute type 1 has an invalid length. [ 1145.869085][ T7374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9083'. [ 1146.064674][ T5622] Bluetooth: hci0: command tx timeout [ 1146.689235][ T7394] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1146.751180][ T7396] netlink: Unknown conntrack attr (type=11526, max=9) [ 1146.787901][ T7396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.880078][ T7398] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9087'. [ 1147.911791][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.959284][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.011584][ T7241] bridge_slave_0: entered allmulticast mode [ 1148.052659][ T7241] bridge_slave_0: entered promiscuous mode [ 1148.092357][ T7426] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1148.130039][ T7426] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1148.145946][ T5622] Bluetooth: hci0: command tx timeout [ 1148.258182][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.285722][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.312434][ T7241] bridge_slave_1: entered allmulticast mode [ 1148.354485][ T7241] bridge_slave_1: entered promiscuous mode [ 1148.459352][ T7443] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9100'. [ 1148.485346][ T7446] netlink: 'syz.3.9101': attribute type 17 has an invalid length. [ 1148.515106][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1148.549895][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1148.734399][ T7453] ip_tables: iptables: counters copy to user failed while replacing table [ 1148.810443][ T7241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.870165][ T7241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.164156][ T7468] netlink: 'syz.2.9105': attribute type 2 has an invalid length. [ 1149.208657][ T7241] team0: Port device team_slave_0 added [ 1149.338825][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1149.412868][ T7468] : entered promiscuous mode [ 1149.471960][ T7241] team0: Port device team_slave_1 added [ 1149.717904][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1149.735810][ T7487] netlink: 'syz.4.9109': attribute type 5 has an invalid length. [ 1149.750769][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.768226][ T7487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1149.778277][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.854175][ T7241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.981198][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.994572][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.037747][ T7241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.097961][ T7487] geneve3: entered promiscuous mode [ 1150.111251][ T7487] geneve3: entered allmulticast mode [ 1150.225095][ T5622] Bluetooth: hci0: command tx timeout [ 1150.380451][ T7241] hsr_slave_0: entered promiscuous mode [ 1150.402032][ T7241] hsr_slave_1: entered promiscuous mode [ 1150.428176][ T7241] debugfs: 'hsr0' already exists in 'hsr' [ 1150.445342][ T7241] Cannot create hsr debugfs directory [ 1150.572700][ T7512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9115'. [ 1150.769335][T12860] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1150.905862][ T1091] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1151.006986][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1151.071367][ T7521] xt_check_target_common: 1 callbacks suppressed [ 1151.071469][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.127371][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1151.141344][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.164332][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.202500][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.232154][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.249155][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.275024][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.330611][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.396080][T12860] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1151.418679][ T7521] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1151.439692][T12860] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1152.293931][ T7241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1152.333408][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.376577][ T7241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1152.479913][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1152.532366][ T7551] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9127'. [ 1152.562849][ T7551] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9127'. [ 1152.592334][ T7241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1152.639729][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1152.672105][ T7241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1152.722223][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1152.798019][ T7569] vlan2: entered promiscuous mode [ 1152.804291][ T7569] geneve1: entered promiscuous mode [ 1152.810823][ T7569] vlan2: entered allmulticast mode [ 1152.819228][ T7569] geneve1: entered allmulticast mode [ 1153.079070][ T7583] netlink: 216 bytes leftover after parsing attributes in process `syz.3.9134'. [ 1153.311204][ T7590] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9135'. [ 1153.362761][ T7241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.410007][ T7241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.514295][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.521560][ T9495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.599571][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.606819][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.821132][ T7599] syzkaller0: entered promiscuous mode [ 1153.848196][ T7599] syzkaller0: entered allmulticast mode [ 1154.356226][ T7617] "syz.1.9144" (7617) uses obsolete ecb(arc4) skcipher [ 1155.250136][ T7653] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1155.306319][ T7653] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1155.323012][ T7655] netlink: 'syz.1.9152': attribute type 7 has an invalid length. [ 1155.387775][ T7658] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1155.895589][ T7684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9158'. [ 1155.942828][ T7241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.200565][ T7241] veth0_vlan: entered promiscuous mode [ 1156.291881][ T7689] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1156.310982][ T7241] veth1_vlan: entered promiscuous mode [ 1156.329090][ T7689] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1156.458308][ T7241] veth0_macvtap: entered promiscuous mode [ 1156.508249][ T7241] veth1_macvtap: entered promiscuous mode [ 1156.558957][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.583781][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.628420][ T7682] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1156.765411][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.794639][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.831978][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.928306][T21961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.288595][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9164'. [ 1157.388330][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9165'. [ 1157.397108][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.397281][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.600262][ T7261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.623053][ T7261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.719069][ T7721] xt_CT: No such helper "snmp_trap" [ 1157.810654][ T7726] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9168'. [ 1157.983103][ T7734] ipt_rpfilter: unknown options [ 1158.052672][ T7733] xt_hashlimit: size too large, truncated to 1048576 [ 1158.272120][ T7740] syz.0.9173: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1158.280129][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1158.359390][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.0.9173 Not tainted syzkaller #0 PREEMPT(full) [ 1158.359419][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.359451][ T7740] Call Trace: [ 1158.359460][ T7740] [ 1158.359472][ T7740] dump_stack_lvl+0xe8/0x150 [ 1158.359511][ T7740] warn_alloc+0x24c/0x270 [ 1158.359548][ T7740] ? stack_depot_save_flags+0x33/0x800 [ 1158.359580][ T7740] ? __pfx_warn_alloc+0x10/0x10 [ 1158.359609][ T7740] ? kasan_save_track+0x3e/0x80 [ 1158.359657][ T7740] ? __kasan_kmalloc+0x93/0xb0 [ 1158.359686][ T7740] ? xsk_setsockopt+0x52a/0x960 [ 1158.359709][ T7740] ? do_sock_setsockopt+0x17c/0x1b0 [ 1158.359733][ T7740] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1158.359755][ T7740] ? do_syscall_64+0x174/0x580 [ 1158.359780][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.359813][ T7740] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1158.359870][ T7740] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1158.359900][ T7740] ? __kasan_kmalloc+0x93/0xb0 [ 1158.359929][ T7740] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1158.359955][ T7740] ? __kmalloc_cache_noprof+0x150/0x660 [ 1158.359983][ T7740] vmalloc_user_noprof+0xad/0xe0 [ 1158.360008][ T7740] ? xskq_create+0xbf/0x170 [ 1158.360031][ T7740] xskq_create+0xbf/0x170 [ 1158.360055][ T7740] xsk_init_queue+0x8a/0xe0 [ 1158.360080][ T7740] xsk_setsockopt+0x52a/0x960 [ 1158.360100][ T7740] ? __fget_files+0x2a/0x420 [ 1158.360140][ T7740] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1158.360170][ T7740] ? __pfx_aa_sk_perm+0x10/0x10 [ 1158.360204][ T7740] ? aa_sock_opt_perm+0xff/0x1a0 [ 1158.360247][ T7740] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1158.360269][ T7740] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1158.360304][ T7740] do_sock_setsockopt+0x17c/0x1b0 [ 1158.360332][ T7740] __x64_sys_setsockopt+0x13d/0x1b0 [ 1158.360359][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.360382][ T7740] do_syscall_64+0x174/0x580 [ 1158.360405][ T7740] ? trace_irq_disable+0x3b/0x140 [ 1158.360431][ T7740] ? clear_bhb_loop+0x70/0xc0 [ 1158.360456][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.360477][ T7740] RIP: 0033:0x7f0880f9e0d9 [ 1158.360510][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.360527][ T7740] RSP: 002b:00007f0881dae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1158.360548][ T7740] RAX: ffffffffffffffda RBX: 00007f0881225fa0 RCX: 00007f0880f9e0d9 [ 1158.360564][ T7740] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1158.360576][ T7740] RBP: 00007f0881035024 R08: 0000000000000004 R09: 0000000000000000 [ 1158.360588][ T7740] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.360601][ T7740] R13: 00007f0881226038 R14: 00007f0881225fa0 R15: 00007ffc8a944e68 [ 1158.360643][ T7740] [ 1158.360691][ T7740] Mem-Info: [ 1158.386296][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1158.988637][ T7740] active_anon:5890 inactive_anon:0 isolated_anon:0 [ 1158.988637][ T7740] active_file:0 inactive_file:43946 isolated_file:0 [ 1158.988637][ T7740] unevictable:0 dirty:67 writeback:0 [ 1158.988637][ T7740] slab_reclaimable:14455 slab_unreclaimable:159524 [ 1158.988637][ T7740] mapped:29627 shmem:529 pagetables:1378 [ 1158.988637][ T7740] sec_pagetables:0 bounce:0 [ 1158.988637][ T7740] kernel_misc_reclaimable:0 [ 1158.988637][ T7740] free:1246987 free_pcp:10007 free_cma:0 [ 1159.084166][ T7253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1159.107262][ T7253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1159.126568][ T7253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1159.169286][ T7253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1159.234179][ T7740] Node 0 active_anon:23560kB inactive_anon:0kB active_file:0kB inactive_file:175580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118508kB dirty:264kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20292kB pagetables:5372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1159.277472][ T7740] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1159.326248][ T7253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1159.333808][ T7740] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.368289][ T7740] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1159.382263][ T7740] Node 0 DMA32 free:1050628kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23560kB inactive_anon:0kB active_file:0kB inactive_file:175580kB unevictable:0kB writepending:264kB zspages:0kB present:3129332kB managed:2548488kB mlocked:0kB bounce:0kB free_pcp:31760kB local_pcp:10556kB free_cma:0kB [ 1159.418608][ T7740] lowmem_reserve[]: 0 0 0 0 0 [ 1159.423511][ T7740] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.543986][ T7740] lowmem_reserve[]: 0 0 0 0 0 [ 1159.582881][ T7740] Node 1 Normal free:3930112kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7808kB local_pcp:0kB free_cma:0kB [ 1159.666946][ T7740] lowmem_reserve[]: 0 0 0 0 0 [ 1159.708761][ T7740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1159.820578][ T7740] Node 0 DMA32: 970*4kB (UME) 285*8kB (UM) 251*16kB (UM) 170*32kB (M) 132*64kB (UME) 47*128kB (UME) 16*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 4*2048kB (M) 248*4096kB (UM) = 1062784kB [ 1159.995780][ T7740] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1160.014647][ T7740] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3930164kB [ 1160.076780][ T7740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.119343][ T7740] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1160.162245][ T7740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.201999][ T7740] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1160.212819][ T7740] 44471 total pagecache pages [ 1160.219053][ T7740] 0 pages in swap cache [ 1160.223583][ T7740] Free swap = 124996kB [ 1160.238522][ T7740] Total swap = 124996kB [ 1160.242876][ T7740] 2097051 pages RAM [ 1160.247750][ T7740] 0 pages HighMem/MovableOnly [ 1160.252701][ T7740] 428250 pages reserved [ 1160.276435][ T7740] 0 pages cma reserved [ 1160.578174][ T7780] netlink: Failed to add L helper -22 [ 1160.616008][ T7780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.704026][ T7255] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.777895][ T7255] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.865011][ T7793] netlink: zone id is out of range [ 1160.884639][ T7793] netlink: zone id is out of range [ 1160.907002][ T7793] netlink: zone id is out of range [ 1160.924167][ T7793] netlink: zone id is out of range [ 1160.944242][ T7793] netlink: zone id is out of range [ 1160.951874][ T7255] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.973226][ T7255] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.131127][ T7255] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.162741][ T7255] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.506349][ T7253] Bluetooth: hci3: command tx timeout [ 1161.679469][ T7255] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.691901][ T7255] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.901779][ T7752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.233048][ T7261] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.254625][ T7261] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.406259][ T7261] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.436457][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9183'. [ 1162.444054][ T7261] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.474622][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9183'. [ 1162.513974][ T7255] bridge_slave_0: left allmulticast mode [ 1162.528585][ T7255] bridge_slave_0: left promiscuous mode [ 1162.548991][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.564472][ T7816] netlink: 'syz.0.9186': attribute type 83 has an invalid length. [ 1162.617427][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9183'. [ 1162.800601][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.009259][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.083189][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.584838][ T7253] Bluetooth: hci3: command tx timeout [ 1163.689861][ T7255] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1163.699362][ T7255] bridge3 (unregistering): left promiscuous mode [ 1163.778190][ T7255] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.793382][ T7255] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.808367][ T7255] .` (unregistering): Released all slaves [ 1163.841945][ T7255] bond1 (unregistering): Released all slaves [ 1163.877620][ T7255] bond0 (unregistering): Released all slaves [ 1163.908604][ T7255] bond2 (unregistering): Released all slaves [ 1163.936128][ T7255] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1163.962857][ T7255] bond3 (unregistering): Released all slaves [ 1164.001299][ T7255] bond4 (unregistering): Released all slaves [ 1164.030637][ T7255] bond5 (unregistering): Released all slaves [ 1164.058035][ T7255] bond6 (unregistering): Released all slaves [ 1164.091041][ T7255] bond7 (unregistering): Released all slaves [ 1164.391584][ T7841] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9187'. [ 1164.509825][ T7255] IPVS: stopping master sync thread 3372 ... [ 1164.687105][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1164.800242][ T7849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9190'. [ 1165.046973][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9192'. [ 1165.063257][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9192'. [ 1165.150412][ T7859] netlink: 'syz.4.9191': attribute type 1 has an invalid length. [ 1165.353499][ T7866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9194'. [ 1165.665018][ T7253] Bluetooth: hci3: command tx timeout [ 1165.784095][ T7859] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1165.829565][ T7869] IPVS: length: 146 != 8 [ 1166.059789][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.092338][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.146028][ T7756] bridge_slave_0: entered allmulticast mode [ 1166.245792][ T7756] bridge_slave_0: entered promiscuous mode [ 1166.523978][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.627151][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.693998][ T7756] bridge_slave_1: entered allmulticast mode [ 1166.777802][ T7756] bridge_slave_1: entered promiscuous mode [ 1167.240556][ T7756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.350221][ T7756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.745890][ T7253] Bluetooth: hci3: command tx timeout [ 1167.758749][ T7756] team0: Port device team_slave_0 added [ 1167.824156][ T7756] team0: Port device team_slave_1 added [ 1168.248917][ T7907] ip6t_REJECT: ECHOREPLY is not supported [ 1168.296757][ T7909] ip6t_REJECT: ECHOREPLY is not supported [ 1168.582390][ T7883] geneve3: left promiscuous mode [ 1168.647995][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1168.690894][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.722065][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.773583][ T7756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.999312][ T7255] hsr_slave_0: left promiscuous mode [ 1169.043662][ T7255] hsr_slave_1: left promiscuous mode [ 1169.061137][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.083643][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.121826][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.148018][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.252347][ T7255] veth1_macvtap: left promiscuous mode [ 1169.272068][ T7255] veth0_macvtap: left promiscuous mode [ 1169.289140][ T7255] veth1_vlan: left promiscuous mode [ 1169.302304][ T7255] veth0_vlan: left promiscuous mode [ 1170.376472][ T7255] team0 (unregistering): Port device team_slave_1 removed [ 1170.405710][ T7255] team0 (unregistering): Port device team_slave_0 removed [ 1170.690465][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.697604][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.740213][ T7756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.779041][ T7919] tipc: Enabling of bearer rejected, failed to enable media [ 1170.866402][ T7936] netlink: 'syz.0.9205': attribute type 2 has an invalid length. [ 1170.911574][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1171.122195][ T7942] netlink: 356 bytes leftover after parsing attributes in process `syz.2.9206'. [ 1171.150087][ T7940] netlink: 'syz.3.9207': attribute type 1 has an invalid length. [ 1171.498046][ T7756] hsr_slave_0: entered promiscuous mode [ 1171.518907][ T7756] hsr_slave_1: entered promiscuous mode [ 1171.532646][ T7756] debugfs: 'hsr0' already exists in 'hsr' [ 1171.545886][ T7756] Cannot create hsr debugfs directory [ 1171.600989][T21961] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1171.712696][ T7255] IPVS: stop unused estimator thread 0... [ 1171.721398][T12860] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1171.885495][T12860] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1171.975588][T12860] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.124503][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1173.308241][ T7756] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.901375][ T7756] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.142670][ T8018] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1174.199183][ T8024] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9225'. [ 1174.213561][ T8026] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20000 [ 1174.261935][ T8026] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.9227'. [ 1174.325739][ T7756] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.361436][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9227'. [ 1174.885751][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9230'. [ 1174.916678][ T7756] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.182623][ T8055] openvswitch: netlink: Unknown key attributes 1 [ 1175.252101][ T8051] tipc: Started in network mode [ 1175.275468][ T8051] tipc: Node identity ac14140f, cluster identity 4711 [ 1175.333298][ T8051] tipc: New replicast peer: 255.255.255.255 [ 1175.363921][ T8051] tipc: Enabled bearer , priority 10 [ 1176.239944][ T8079] netlink: 'syz.0.9236': attribute type 1 has an invalid length. [ 1176.338676][ T8082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9236'. [ 1176.703272][ T7756] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1176.832552][ T7756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.890191][ T7756] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1176.942188][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9239'. [ 1176.999204][ T7756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.189862][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.264270][ T8110] xt_TCPMSS: Only works on TCP SYN packets [ 1177.386078][T29800] tipc: Node number set to 2886997007 [ 1177.416953][ T7756] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1177.482217][ T7756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.529675][ T7756] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1177.643788][ T7756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1177.669617][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9246'. [ 1178.240467][ T7756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.363738][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.601805][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.609118][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.918158][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.925440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.303128][ T8179] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1179.373287][ T8179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1180.592855][ T8230] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1181.781323][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9274'. [ 1181.822891][ T8273] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1181.894283][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.630973][ T7756] veth0_vlan: entered promiscuous mode [ 1182.773095][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9280'. [ 1182.803545][ T7756] veth1_vlan: entered promiscuous mode [ 1183.273168][ T7756] veth0_macvtap: entered promiscuous mode [ 1183.342126][ T7756] veth1_macvtap: entered promiscuous mode [ 1183.498251][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.556701][ T8322] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9282'. [ 1183.663617][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.772191][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.805640][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.987543][ T8334] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9287'. [ 1184.069050][ T8333] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9287'. [ 1184.318336][T21959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.495039][ T1091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.748319][ T7255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.800333][ T7255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.924207][T21959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.966910][T21959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.582851][ T8388] IPv6: Can't replace route, no match found [ 1185.598664][ T9495] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xf [ 1185.754879][ T8390] netlink: Conntrack attr has 1 unknown bytes [ 1185.780284][ T8390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.838108][ T8390] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9300'. [ 1186.058090][ T8405] netlink: 3080 bytes leftover after parsing attributes in process `syz.1.9304'. [ 1186.073173][ T8405] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.9304'. [ 1186.137820][ T8406] dvmrp8: left allmulticast mode [ 1186.530273][ T8414] netlink: 'syz.2.9308': attribute type 2 has an invalid length. [ 1186.565792][ T8415] netlink: 'syz.2.9308': attribute type 2 has an invalid length. [ 1186.673838][ T8414] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1186.703036][ T8418] netlink: Conntrack attr has 4 unknown bytes [ 1186.734135][ T8420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9308'. [ 1186.747217][ T8418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.864036][ T8419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.891819][ T8418] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1186.914057][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1186.931381][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1186.942419][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1186.957639][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1186.970702][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1187.024184][T29800] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1187.601661][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1187.984487][ T8451] openvswitch: netlink: IP tunnel dst address not specified [ 1187.997966][ T8448] netlink: 'syz.2.9316': attribute type 21 has an invalid length. [ 1188.039718][ T8448] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9316'. [ 1188.049951][ T8451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1188.086019][ T8448] netlink: 'syz.2.9316': attribute type 5 has an invalid length. [ 1188.102026][ T8448] netlink: 'syz.2.9316': attribute type 6 has an invalid length. [ 1188.111295][ T8448] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9316'. [ 1188.518460][ T8469] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9321'. [ 1188.829117][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9323'. [ 1189.024690][ T7253] Bluetooth: hci2: command tx timeout [ 1189.312421][ T8486] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9326'. [ 1189.463368][ T8496] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1190.095879][ T8510] netlink: NAT attribute has 4 unknown bytes [ 1190.118999][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.852383][ T8512] hsr0: entered allmulticast mode [ 1190.868382][ T8512] hsr_slave_0: entered allmulticast mode [ 1190.889010][ T8512] hsr_slave_1: entered allmulticast mode [ 1191.105128][ T7253] Bluetooth: hci2: command tx timeout [ 1191.188225][ T8539] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 1191.473312][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.482451][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.490736][ T8423] bridge_slave_0: entered allmulticast mode [ 1191.501027][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1191.513744][ T8423] bridge_slave_0: entered promiscuous mode [ 1191.524125][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.533289][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.542291][ T8423] bridge_slave_1: entered allmulticast mode [ 1191.552406][ T8423] bridge_slave_1: entered promiscuous mode [ 1191.608801][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.625358][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.640207][ T8548] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1191.853556][ T8423] team0: Port device team_slave_0 added [ 1191.901607][ T8423] team0: Port device team_slave_1 added [ 1192.043023][ T8559] netlink: 'syz.0.9340': attribute type 13 has an invalid length. [ 1192.321310][ T8568] netlink: 'syz.0.9340': attribute type 2 has an invalid length. [ 1192.352976][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9342'. [ 1192.450882][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.461278][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.500605][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.528984][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.539114][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.565611][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1192.650718][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.994396][ T8423] hsr_slave_0: entered promiscuous mode [ 1193.023600][ T8423] hsr_slave_1: entered promiscuous mode [ 1193.069132][ T8423] debugfs: 'hsr0' already exists in 'hsr' [ 1193.099506][ T8423] Cannot create hsr debugfs directory [ 1193.185807][ T7253] Bluetooth: hci2: command tx timeout [ 1193.816996][ T8604] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9349'. [ 1193.909380][ T8607] bridge_slave_1: left allmulticast mode [ 1193.930619][ T8607] bridge_slave_1: left promiscuous mode [ 1193.949448][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.977626][ T8608] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1194.019405][ T8607] bridge_slave_0: left allmulticast mode [ 1194.039615][ T8607] bridge_slave_0: left promiscuous mode [ 1194.097858][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.927408][ T8423] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.940076][ T8423] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.116602][ T8423] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1195.153207][ T8423] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.265035][ T7253] Bluetooth: hci2: command tx timeout [ 1195.319148][ T8423] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1195.331419][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802072a000: rx timeout, send abort [ 1195.343229][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802072a000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1195.510458][ T8423] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.529690][ T8638] netlink: 'syz.0.9359': attribute type 10 has an invalid length. [ 1195.839639][ T8423] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1195.885489][ T8423] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.586235][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9366'. [ 1196.655810][ T8423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1196.767798][ T8423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1196.799185][ T8423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1196.843315][ T8423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.878425][ T8423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1196.923641][ T8423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1196.959543][ T8423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1197.019972][ T8423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1197.462929][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.524236][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9371'. [ 1197.579953][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.619097][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.626388][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.667203][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1197.698068][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.705331][ T7255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.858260][ T8690] tipc: Enabling of bearer rejected, already enabled [ 1198.031613][ T8694] vlan2: entered allmulticast mode [ 1198.046539][ T8694] bridge_slave_0: entered allmulticast mode [ 1199.241865][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.331892][ T8423] veth0_vlan: entered promiscuous mode [ 1199.357853][ T8423] veth1_vlan: entered promiscuous mode [ 1199.434330][ T8423] veth0_macvtap: entered promiscuous mode [ 1199.469954][ T8423] veth1_macvtap: entered promiscuous mode [ 1199.568938][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.638348][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.689000][ T7261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.724088][ T7261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.877850][ T1108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.971464][ T1108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.188718][ T30] audit: type=1107 audit(1787022034.827:22): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 1200.198692][ T8750] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9383'. [ 1200.288450][ T8755] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1201.424014][ T8713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1201.659326][ T7255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.700645][ T7255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.944093][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.977746][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.120808][ T8770] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9389'. [ 1203.001484][ T8795] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9398'. [ 1203.137605][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9399'. [ 1203.360324][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1203.380913][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1203.391973][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1203.408004][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1203.418214][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1203.970296][ T8827] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9405'. [ 1204.020239][ T8828] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9405'. [ 1204.535636][ T8843] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1204.904076][ T8859] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9414'. [ 1205.112919][ T8864] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9413'. [ 1205.137317][ T8867] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1205.174478][ T8867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.302062][ T8867] syzkaller0: entered promiscuous mode [ 1205.337436][ T8867] syzkaller0: entered allmulticast mode [ 1205.508000][ T5622] Bluetooth: hci5: command tx timeout [ 1205.783224][ T8877] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 1205.809116][T22750] IPVS: starting estimator thread 0... [ 1205.873184][ T8886] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9421'. [ 1205.925403][ T8884] IPVS: using max 27 ests per chain, 64800 per kthread [ 1206.058596][ T8890] ip_tables: iptables: counters copy to user failed while replacing table [ 1206.087746][ T8889] ip_tables: iptables: counters copy to user failed while replacing table [ 1206.591489][ T8897] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9424'. [ 1206.958547][ T8912] IPVS: Unknown mcast interface: caif0 [ 1207.121931][ T8915] xt_ecn: cannot match TCP bits for non-tcp packets [ 1207.586302][ T5622] Bluetooth: hci5: command tx timeout [ 1208.027843][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9431'. [ 1208.455431][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.529135][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.602519][ T8801] bridge_slave_0: entered allmulticast mode [ 1208.697150][ T8801] bridge_slave_0: entered promiscuous mode [ 1208.774016][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.844374][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.908733][ T8801] bridge_slave_1: entered allmulticast mode [ 1208.971346][ T8801] bridge_slave_1: entered promiscuous mode [ 1209.099101][ T8921] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.9430:8921 [ 1209.235842][ T8921] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1209.243972][ T8921] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1209.251977][ T8921] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1209.259966][ T8921] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1209.267953][ T8921] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1209.275971][ T8921] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1209.283953][ T8921] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1209.651420][ T8953] syzkaller0: entered promiscuous mode [ 1209.682775][ T5622] Bluetooth: hci5: command tx timeout [ 1209.718211][ T8953] syzkaller0: entered allmulticast mode [ 1210.010981][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.758730][ T5622] Bluetooth: hci5: command tx timeout [ 1214.432826][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.647623][ T8801] team0: Port device team_slave_0 added [ 1214.690186][ T8801] team0: Port device team_slave_1 added [ 1214.801169][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.813492][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.857041][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.905104][ T8997] 8021q: VLANs not supported on ip6_vti0 [ 1214.971734][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.979772][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.070860][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.167344][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ff8d800: rx timeout, send abort [ 1215.388042][ T8998] syzkaller0: entered promiscuous mode [ 1215.422739][ T8998] syzkaller0: entered allmulticast mode [ 1215.666491][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055a13800: rx timeout, send abort [ 1215.676532][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ff8d800: abort rx timeout. Force session deactivation [ 1216.175883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055a13800: abort rx timeout. Force session deactivation [ 1220.440987][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1220.507758][ T8801] hsr_slave_0: entered promiscuous mode [ 1220.540368][ T8801] hsr_slave_1: entered promiscuous mode [ 1220.581259][ T8801] debugfs: 'hsr0' already exists in 'hsr' [ 1220.599944][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9450'. [ 1220.604768][ T8801] Cannot create hsr debugfs directory [ 1220.634191][ T9066] net_ratelimit: 47 callbacks suppressed [ 1220.634210][ T9066] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1220.664391][ T9057] team0: No ports can be present during mode change [ 1220.777435][ T9071] netlink: 648 bytes leftover after parsing attributes in process `syz.4.9450'. [ 1222.279798][ T9081] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1222.836636][ T9092] syzkaller0: entered promiscuous mode [ 1222.848980][ T9092] syzkaller0: entered allmulticast mode [ 1223.380219][ T9058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1223.701845][ T9100] netlink: 'syz.0.9460': attribute type 25 has an invalid length. [ 1227.243830][ T8801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1227.293679][ T8801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.312680][ T8801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1227.358097][ T8801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1227.421948][ T9100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1227.447027][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1227.832372][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1227.860339][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1227.883174][ T9098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.930617][ T9098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1228.490248][ T8801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1228.503813][ T8801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.518301][ T8801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1228.531062][ T8801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1228.784455][ T9098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.822280][ T9098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1229.227233][ T8801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.250849][ T8801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.279443][ T8801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1229.300421][ T8801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1229.432077][ T9098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.481885][ T9098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1229.882460][ T8801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.917636][ T8801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.940840][ T8801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1229.991683][ T8801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1230.230131][ T9155] syzkaller0: entered promiscuous mode [ 1230.243712][ T9155] syzkaller0: entered allmulticast mode [ 1230.290763][ T9163] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1230.326213][ T9163] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1230.660562][ T9176] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9474'. [ 1230.724083][ T9176] openvswitch: netlink: Flow key attr not present in new flow. [ 1230.889734][ T9178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9475'. [ 1234.680950][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1234.695881][ T9098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.714571][ T9098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1235.188046][ T7261] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.388860][ T9495] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.226845][ T7261] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.276481][ T7261] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.621832][ T8801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1236.686237][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1236.723268][ T8801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1236.755679][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1236.776752][ T8801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1236.811892][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1236.841588][ T8801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1236.850996][ T9259] netlink: 'syz.0.9489': attribute type 1 has an invalid length. [ 1236.892548][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.626025][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.882088][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.943311][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9495'. [ 1237.998268][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.005515][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.223229][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.230516][ T7261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.636337][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.685569][ T9311] tipc: Started in network mode [ 1238.714968][ T9311] tipc: Node identity 7f000001, cluster identity 4711 [ 1238.756419][ T9311] tipc: New replicast peer: 127.0.0.2 [ 1238.787594][ T9311] tipc: Enabled bearer , priority 10 [ 1238.859397][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9503'. [ 1239.027007][ T5622] Bluetooth: hci5: command 0x0405 tx timeout [ 1239.042875][ T9326] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1239.082624][ T9326] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1239.484094][ T9342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.573475][ T9342] netlink: 'syz.4.9508': attribute type 12 has an invalid length. [ 1239.588386][ T9342] netlink: 'syz.4.9508': attribute type 29 has an invalid length. [ 1239.630221][ T9342] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9508'. [ 1239.649517][ T9349] sock: sock_set_timeout: `syz.4.9508' (pid 9349) tries to set negative timeout [ 1239.654926][ T9342] netlink: 'syz.4.9508': attribute type 2 has an invalid length. [ 1239.731069][ T9350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9510'. [ 1239.976188][T30542] tipc: Node number set to 2130706433 [ 1240.038970][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1240.077664][ T9359] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9512'. [ 1241.151725][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9518'. [ 1241.583133][ T9407] netlink: 165 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1241.718689][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.031006][ T8801] veth0_vlan: entered promiscuous mode [ 1242.088083][ T8801] veth1_vlan: entered promiscuous mode [ 1242.436041][ T8801] veth0_macvtap: entered promiscuous mode [ 1242.501983][ T8801] veth1_macvtap: entered promiscuous mode [ 1242.603290][ T9443] netlink: 'syz.4.9529': attribute type 12 has an invalid length. [ 1242.677160][ T8344] IPVS: starting estimator thread 0... [ 1242.756840][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.775512][ T9450] IPVS: using max 26 ests per chain, 62400 per kthread [ 1242.820341][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.915131][ T7261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.978467][T21961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.438829][ T9470] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1243.723951][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1243.894310][T21961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.029474][ T9495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.039114][ T9473] netlink: 'syz.3.9537': attribute type 10 has an invalid length. [ 1244.122913][ T9478] netlink: 'syz.4.9539': attribute type 21 has an invalid length. [ 1244.170692][ T9478] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9539'. [ 1244.233464][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9539'. [ 1244.440793][ T9478] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9539'. [ 1244.571391][T21961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.657427][T21961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.856386][ T7261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.893621][ T7261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.170469][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9543'. [ 1245.299226][ T9504] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1245.333965][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1245.435227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.447879][ T9504] bond1 (unregistering): Released all slaves [ 1246.087623][ T9520] netlink: 'syz.1.9548': attribute type 2 has an invalid length. [ 1246.373668][ T9535] netlink: 'syz.2.9550': attribute type 9 has an invalid length. [ 1246.440637][ T9536] netlink: 252 bytes leftover after parsing attributes in process `syz.2.9550'. [ 1246.641840][ T7253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1246.657417][ T9536] netlink: 'syz.2.9550': attribute type 2 has an invalid length. [ 1246.661656][ T7253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1246.681206][ T7253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1246.689887][ T9536] netlink: 'syz.2.9550': attribute type 9 has an invalid length. [ 1246.702099][ T7253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1246.718210][ T7253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1246.771660][ T9547] IPVS: length: 239 != 24 [ 1247.761629][ T9561] bond1 (unregistering): Released all slaves [ 1247.830151][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1247.842435][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9555'. [ 1247.902986][ T1091] veth0: left allmulticast mode [ 1247.954907][ T1091] veth0: left promiscuous mode [ 1247.970798][ T1091] bridge0: port 3(veth0) entered disabled state [ 1248.035372][ T1091] bridge_slave_1: left allmulticast mode [ 1248.059169][ T1091] bridge_slave_1: left promiscuous mode [ 1248.083354][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.106909][ T9580] netlink: 'syz.2.9557': attribute type 1 has an invalid length. [ 1248.124943][ T1091] bridge_slave_0: left allmulticast mode [ 1248.145529][ T1091] bridge_slave_0: left promiscuous mode [ 1248.152049][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.188725][ T1091] pim6reg: left allmulticast mode [ 1248.583355][ T1091] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 1248.791818][ T5622] Bluetooth: hci1: command tx timeout [ 1248.972666][ T1091] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1249.077910][ T1091] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1249.242005][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.263217][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.281537][ T1091] bond0 (unregistering): Released all slaves [ 1249.301298][ T1091] bond1 (unregistering): Released all slaves [ 1249.330331][ T1091] bond2 (unregistering): Released all slaves [ 1249.359057][ T1091] bond3 (unregistering): Released all slaves [ 1249.388271][ T1091] bond4 (unregistering): Released all slaves [ 1249.412719][ T1091] bond5 (unregistering): Released all slaves [ 1249.463390][ T1091] bond6 (unregistering): Released all slaves [ 1249.496238][ T1091] bond7 (unregistering): Released all slaves [ 1249.537863][ T1091] bond8 (unregistering): Released all slaves [ 1249.580229][ T1091] bond9 (unregistering): Released all slaves [ 1249.608888][ T1091] bond10 (unregistering): Released all slaves [ 1250.106917][ T1091] tipc: Disabling bearer [ 1250.115380][ T1091] tipc: Left network mode [ 1250.343832][ T9602] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1250.817339][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9564'. [ 1250.868092][ T5622] Bluetooth: hci1: command tx timeout [ 1251.344288][ T9631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9568'. [ 1251.418827][ T9631] netlink: 'syz.3.9568': attribute type 1 has an invalid length. [ 1251.442547][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9569'. [ 1252.130612][ T9646] netlink: 'syz.3.9573': attribute type 3 has an invalid length. [ 1252.154561][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9573'. [ 1252.373231][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1252.407283][ T5622] Bluetooth: hci5: link tx timeout [ 1252.418201][ T5622] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1252.599388][ T9660] sctp: [Deprecated]: syz.1.9576 (pid 9660) Use of int in maxseg socket option. [ 1252.599388][ T9660] Use struct sctp_assoc_value instead [ 1252.946735][ T5622] Bluetooth: hci1: command tx timeout [ 1252.992083][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1253.052039][ T9671] netlink: 'syz.3.9578': attribute type 16 has an invalid length. [ 1253.438445][ T9676] xt_hashlimit: size too large, truncated to 1048576 [ 1253.792473][ T9684] siw: device registration error -23 [ 1253.944394][ T9689] netlink: 'syz.2.9583': attribute type 4 has an invalid length. [ 1253.982978][ T9689] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9583'. [ 1254.176402][ T9689] .`: renamed from bond0 (while UP) [ 1254.295047][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9583'. [ 1254.484778][ T5622] Bluetooth: hci5: command 0x0405 tx timeout [ 1254.760331][ T1091] hsr_slave_0: left promiscuous mode [ 1254.798726][ T1091] hsr_slave_1: left promiscuous mode [ 1254.805933][ T9709] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9587'. [ 1254.824210][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.844542][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.963503][ T9714] x_tables: duplicate underflow at hook 2 [ 1255.027262][ T7253] Bluetooth: hci1: command tx timeout [ 1255.223655][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9590'. [ 1255.361942][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1255.377461][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1255.386014][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1255.397286][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1255.409573][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1255.544237][ T1091] veth1_macvtap: left promiscuous mode [ 1255.575397][ T1091] veth0_macvtap: left promiscuous mode [ 1255.608960][ T1091] veth1_vlan: left promiscuous mode [ 1255.634171][ T1091] v: left promiscuous mode [ 1256.436880][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.509367][ T7253] Bluetooth: hci4: command tx timeout [ 1257.852567][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.903658][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.942773][ T9541] bridge_slave_0: entered allmulticast mode [ 1257.998355][ T9541] bridge_slave_0: entered promiscuous mode [ 1258.007702][ T9768] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1258.038984][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.073567][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.112605][ T9541] bridge_slave_1: entered allmulticast mode [ 1258.150670][ T9541] bridge_slave_1: entered promiscuous mode [ 1258.227905][ T9778] bridge_slave_1: left allmulticast mode [ 1258.262948][ T9778] bridge_slave_1: left promiscuous mode [ 1258.348458][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.464149][ T9778] bridge_slave_0: left allmulticast mode [ 1258.526383][ T9778] bridge_slave_0: left promiscuous mode [ 1258.568564][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.788368][ T9793] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1258.868431][ T9779] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1259.249597][ T1091] IPVS: stop unused estimator thread 0... [ 1259.266913][ T9798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9599'. [ 1259.298064][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.376719][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9599'. [ 1259.480872][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.603615][ T7253] Bluetooth: hci4: command tx timeout [ 1259.826203][ T9817] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9601'. [ 1259.902164][ T9541] team0: Port device team_slave_0 added [ 1259.993284][ T9541] team0: Port device team_slave_1 added [ 1260.253887][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.313340][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.477654][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.602872][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.667197][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.812899][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.237682][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9608'. [ 1261.491131][ T9541] hsr_slave_0: entered promiscuous mode [ 1261.570261][ T9541] hsr_slave_1: entered promiscuous mode [ 1261.624334][ T9541] debugfs: 'hsr0' already exists in 'hsr' [ 1261.651687][ T9541] Cannot create hsr debugfs directory [ 1261.668832][ T7253] Bluetooth: hci4: command tx timeout [ 1262.832326][ T9877] netlink: 'syz.2.9612': attribute type 10 has an invalid length. [ 1262.915530][ T9877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9612'. [ 1263.438589][ T9541] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.554306][ T9877] team0: entered allmulticast mode [ 1263.570538][ T9877] team_slave_0: entered allmulticast mode [ 1263.581454][ T9877] team_slave_1: entered allmulticast mode [ 1263.609712][ T9877] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1263.748462][ T7253] Bluetooth: hci4: command tx timeout [ 1263.890750][ T9541] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.355066][ T9541] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.440059][ T9913] netlink: 'syz.3.9619': attribute type 21 has an invalid length. [ 1264.484964][ T9913] netlink: 'syz.3.9619': attribute type 22 has an invalid length. [ 1264.560914][ T9913] netlink: 'syz.3.9619': attribute type 23 has an invalid length. [ 1264.710326][ T9913] netlink: 'syz.3.9619': attribute type 25 has an invalid length. [ 1264.728948][ T9913] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9619'. [ 1264.879141][ T9541] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.153687][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.235291][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.267501][ T9720] bridge_slave_0: entered allmulticast mode [ 1265.332673][ T9720] bridge_slave_0: entered promiscuous mode [ 1265.439409][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.491943][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.567211][ T9720] bridge_slave_1: entered allmulticast mode [ 1265.630508][ T9944] openvswitch: netlink: Flow actions attr not present in new flow. [ 1265.643155][ T9720] bridge_slave_1: entered promiscuous mode [ 1266.006411][ T9950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9625'. [ 1266.081301][ T9720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.242027][ T9720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.435252][ T9720] team0: Port device team_slave_0 added [ 1266.472219][ T9720] team0: Port device team_slave_1 added [ 1266.790239][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.863677][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.050328][ T9720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.139435][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.201377][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.271238][ T9720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.290300][ T9541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1267.302804][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1267.325577][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9628'. [ 1267.402777][ T9541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1267.454009][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1267.511322][ T9541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1267.578588][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1267.719799][ T9541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1267.786514][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1268.004152][ T9720] hsr_slave_0: entered promiscuous mode [ 1268.121963][ T9720] hsr_slave_1: entered promiscuous mode [ 1268.207969][ T9720] debugfs: 'hsr0' already exists in 'hsr' [ 1268.274571][ T9720] Cannot create hsr debugfs directory [ 1268.441342][T10018] netlink: 'syz.1.9636': attribute type 1 has an invalid length. [ 1268.452272][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9637'. [ 1268.463496][T10018] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9636'. [ 1268.782929][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9638'. [ 1269.129835][T10024] hsr_slave_1 (unregistering): left promiscuous mode [ 1269.179019][T10039] sctp: [Deprecated]: syz.3.9641 (pid 10039) Use of int in maxseg socket option. [ 1269.179019][T10039] Use struct sctp_assoc_value instead [ 1269.217232][T10040] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1269.251340][T10039] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1269.553184][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.903408][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.192477][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.199740][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.408072][T10057] syzkaller0: entered promiscuous mode [ 1270.455145][T10057] syzkaller0: entered allmulticast mode [ 1270.550316][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.557595][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.446956][ T9720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1271.492426][T10095] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9650'. [ 1271.504187][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1271.562277][ T9720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1271.642548][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1271.723691][ T9720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1271.784117][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1271.850744][ T9720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1271.890047][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1272.361009][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9653'. [ 1272.433207][T10129] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9653'. [ 1272.543908][T10121] veth3: entered promiscuous mode [ 1272.592345][T10121] veth3: entered allmulticast mode [ 1272.791254][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9656'. [ 1272.952644][T10134] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9656'. [ 1273.014120][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.196828][T10136] syzkaller0: entered promiscuous mode [ 1273.257998][T10136] syzkaller0: entered allmulticast mode [ 1273.637984][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.726794][ T9720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.916012][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.923239][ T9495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.077437][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.084704][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.872326][T10176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1275.380752][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9663'. [ 1275.436170][T10190] netlink: 'syz.2.9663': attribute type 10 has an invalid length. [ 1275.519547][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9663'. [ 1275.661968][T10190] geneve2: entered promiscuous mode [ 1275.683852][T10190] geneve2: entered allmulticast mode [ 1275.890405][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.301177][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9667'. [ 1276.653142][T10232] syzkaller0: entered promiscuous mode [ 1276.734585][T10232] syzkaller0: entered allmulticast mode [ 1276.963158][T10245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9670'. [ 1277.280409][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9670'. [ 1277.306872][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.422552][T10256] x_tables: duplicate underflow at hook 1 [ 1277.614419][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.700331][T10262] syzkaller0: entered promiscuous mode [ 1277.734086][T10262] syzkaller0: entered allmulticast mode [ 1278.082900][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9675'. [ 1278.341760][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9675'. [ 1278.456919][ T9541] veth0_vlan: entered promiscuous mode [ 1278.578284][ T9541] veth1_vlan: entered promiscuous mode [ 1278.908572][ T9541] veth0_macvtap: entered promiscuous mode [ 1278.947136][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9677'. [ 1278.990869][ T9541] veth1_macvtap: entered promiscuous mode [ 1279.129587][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.233874][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.523452][T10303] netlink: NAT attribute has 4 unknown bytes [ 1279.541920][T21962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.566548][T10303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1279.601684][T21961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.747427][T21962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.878973][ T9720] veth0_vlan: entered promiscuous mode [ 1279.959424][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.010409][ T9720] veth1_vlan: entered promiscuous mode [ 1280.287102][T10319] netlink: 'syz.1.9682': attribute type 1 has an invalid length. [ 1280.324873][T10319] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9682'. [ 1280.371261][T10319] netlink: 'syz.1.9682': attribute type 1 has an invalid length. [ 1280.462312][T21962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.604369][T21962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.858769][ T9720] veth0_macvtap: entered promiscuous mode [ 1281.042111][T21961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.136263][ T9720] veth1_macvtap: entered promiscuous mode [ 1281.150808][T21961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.392405][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.590309][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9689'. [ 1281.667129][ T7253] Bluetooth: hci3: command 0x0406 tx timeout [ 1281.860260][T10343] bond1: entered promiscuous mode [ 1281.938436][T10343] bond1: entered allmulticast mode [ 1282.022836][T10343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1282.090646][T10362] netlink: 'syz.1.9688': attribute type 3 has an invalid length. [ 1282.158006][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.186930][T10368] netlink: 277 bytes leftover after parsing attributes in process `syz.3.9691'. [ 1282.249983][T10343] syzkaller0: entered promiscuous mode [ 1282.289977][T10343] syzkaller0: entered allmulticast mode [ 1282.395692][T10343] syzkaller0: tun_net_xmit 14 [ 1282.497185][T21962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.579064][T10008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.658994][T10008] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.953414][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9692'. [ 1283.107142][T21961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.599303][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.619076][T10398] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1283.656733][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.913521][T21961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.978760][T21961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.063101][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9698'. [ 1284.701432][T10424] openvswitch: netlink: Key type 338 is out of range max 32 [ 1285.363534][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9703'. [ 1286.391538][T10423] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.131535][T10477] sctp: [Deprecated]: syz.4.9710 (pid 10477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1287.131535][T10477] Use struct sctp_sack_info instead [ 1287.169439][T10479] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9709'. [ 1287.222115][T10423] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.308337][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9709'. [ 1287.875958][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9713'. [ 1288.099411][T10423] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.236772][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9713'. [ 1288.277165][T10504] C: renamed from lo (while UP) [ 1288.326113][T10504] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1288.897251][T10423] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.119696][T10544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9722'. [ 1290.657648][T21961] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.677313][T10566] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 1290.910760][ T1091] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.725840][ T1091] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.910672][ T7255] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.775591][T10612] netlink: 'syz.3.9734': attribute type 30 has an invalid length. [ 1292.783785][T10612] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9734'. [ 1293.173847][T10622] netlink: 200 bytes leftover after parsing attributes in process `syz.2.9737'. [ 1293.462384][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9740'. [ 1293.707620][T10625] nbd5: detected capacity change from 0 to 63 [ 1293.739230][T10633] nbd: must specify an index to disconnect [ 1293.835085][ T5622] block nbd5: Receive control failed (result -104) [ 1294.368947][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9746'. [ 1294.846791][T10687] netlink: 'syz.1.9751': attribute type 1 has an invalid length. [ 1295.321171][T10705] netlink: 'syz.2.9753': attribute type 1 has an invalid length. [ 1295.688872][T10705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1296.487780][T10740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9761'. [ 1296.542749][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9761'. [ 1300.084897][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.403732][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9779'. [ 1303.133690][T10813] team0 (unregistering): Port device team_slave_0 removed [ 1303.557806][T10813] team0 (unregistering): Port device team_slave_1 removed [ 1305.420063][T10840] IPv4: Oversized IP packet from 127.202.26.0 [ 1305.433546][T10838] ip_tables: iptables: counters copy to user failed while replacing table [ 1305.557617][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9788'. [ 1305.591065][T10836] syzkaller0: entered promiscuous mode [ 1305.784502][T10836] syzkaller0: entered allmulticast mode [ 1307.437382][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9789'. [ 1312.426068][ T7253] Bluetooth: hci2: command 0x0406 tx timeout [ 1312.599602][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9792'. [ 1313.264384][T10887] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 1313.529212][T10887] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 1314.592717][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9796'. [ 1315.122716][T10904] FAULT_INJECTION: forcing a failure. [ 1315.122716][T10904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.325171][T10904] CPU: 0 UID: 0 PID: 10904 Comm: syz.2.9798 Not tainted syzkaller #0 PREEMPT(full) [ 1315.325201][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1315.325214][T10904] Call Trace: [ 1315.325223][T10904] [ 1315.325233][T10904] dump_stack_lvl+0xe8/0x150 [ 1315.325274][T10904] should_fail_ex+0x40c/0x560 [ 1315.325309][T10904] _copy_from_user+0x2d/0xb0 [ 1315.325344][T10904] ___sys_sendmsg+0x1c6/0x360 [ 1315.325374][T10904] ? __lock_acquire+0x683/0x2cf0 [ 1315.325415][T10904] ? __pfx____sys_sendmsg+0x10/0x10 [ 1315.325483][T10904] ? __fget_files+0x2a/0x420 [ 1315.325514][T10904] ? __fget_files+0x3a2/0x420 [ 1315.325553][T10904] __x64_sys_sendmsg+0x1b1/0x290 [ 1315.325582][T10904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1315.325628][T10904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.325655][T10904] do_syscall_64+0x174/0x580 [ 1315.325681][T10904] ? trace_irq_disable+0x3b/0x140 [ 1315.325709][T10904] ? clear_bhb_loop+0x70/0xc0 [ 1315.325738][T10904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.325760][T10904] RIP: 0033:0x7f29ad39e0d9 [ 1315.325781][T10904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.325801][T10904] RSP: 002b:00007f29ae262028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1315.325824][T10904] RAX: ffffffffffffffda RBX: 00007f29ad625fa0 RCX: 00007f29ad39e0d9 [ 1315.325840][T10904] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1315.325854][T10904] RBP: 00007f29ae262090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.325867][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.325881][T10904] R13: 00007f29ad626038 R14: 00007f29ad625fa0 R15: 00007ffc5012f1f8 [ 1315.325916][T10904] [ 1320.078660][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9804'. [ 1320.271930][T10942] netlink: 'syz.4.9805': attribute type 8 has an invalid length. [ 1320.566766][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9804'. [ 1320.932695][T10954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9804'. [ 1323.248649][T10959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9808'. [ 1323.867100][T10962] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1324.570529][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 30 seconds [ 1324.593862][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 30 seconds [ 1324.617415][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 30 seconds [ 1324.630827][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 30 seconds [ 1326.564207][T10979] xt_hashlimit: size too large, truncated to 1048576 [ 1328.109958][T10991] netlink: 'syz.2.9815': attribute type 3 has an invalid length. [ 1328.845997][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9816'. [ 1330.679941][T11012] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1331.711589][T11008] FAULT_INJECTION: forcing a failure. [ 1331.711589][T11008] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.784743][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.4.9818 Not tainted syzkaller #0 PREEMPT(full) [ 1331.784776][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1331.784788][T11008] Call Trace: [ 1331.784798][T11008] [ 1331.784808][T11008] dump_stack_lvl+0xe8/0x150 [ 1331.784846][T11008] should_fail_ex+0x40c/0x560 [ 1331.784878][T11008] should_failslab+0xa8/0x100 [ 1331.784912][T11008] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1331.784937][T11008] ? local_lock_release+0x9c/0x160 [ 1331.784960][T11008] ? __alloc_skb+0x1d7/0x7a0 [ 1331.784979][T11008] ? __alloc_skb+0x1d7/0x7a0 [ 1331.785012][T11008] __alloc_skb+0x1d7/0x7a0 [ 1331.785038][T11008] netlink_ack+0x136/0xb30 [ 1331.785061][T11008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1331.785091][T11008] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1331.785124][T11008] ? __pfx_ref_tracker_free+0x10/0x10 [ 1331.785162][T11008] netlink_rcv_skb+0x2a4/0x4a0 [ 1331.785188][T11008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1331.785220][T11008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1331.785261][T11008] ? down_read+0x2be/0x330 [ 1331.785293][T11008] genl_rcv+0x28/0x40 [ 1331.785321][T11008] netlink_unicast+0x7bb/0x940 [ 1331.785356][T11008] netlink_sendmsg+0x813/0xb40 [ 1331.785392][T11008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1331.785423][T11008] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1331.785456][T11008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1331.785480][T11008] sock_sendmsg_nosec+0x13a/0x180 [ 1331.785514][T11008] ____sys_sendmsg+0x54e/0x850 [ 1331.785545][T11008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1331.785586][T11008] ? import_iovec+0x73/0xa0 [ 1331.785623][T11008] ___sys_sendmsg+0x2a5/0x360 [ 1331.785647][T11008] ? __lock_acquire+0x683/0x2cf0 [ 1331.785679][T11008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1331.785744][T11008] ? __fget_files+0x2a/0x420 [ 1331.785770][T11008] ? __fget_files+0x3a2/0x420 [ 1331.785809][T11008] __x64_sys_sendmsg+0x1b1/0x290 [ 1331.785837][T11008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1331.785883][T11008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.785907][T11008] do_syscall_64+0x174/0x580 [ 1331.785940][T11008] ? trace_irq_disable+0x3b/0x140 [ 1331.785965][T11008] ? clear_bhb_loop+0x70/0xc0 [ 1331.785992][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.786013][T11008] RIP: 0033:0x7ff15f19e0d9 [ 1331.786034][T11008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.786053][T11008] RSP: 002b:00007ff160057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.786076][T11008] RAX: ffffffffffffffda RBX: 00007ff15f425fa0 RCX: 00007ff15f19e0d9 [ 1331.786091][T11008] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1331.786105][T11008] RBP: 00007ff160057090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.786117][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.786130][T11008] R13: 00007ff15f426038 R14: 00007ff15f425fa0 R15: 00007ffdf4ea7ef8 [ 1331.786165][T11008] [ 1336.497511][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9828'. [ 1336.774672][T11039] bridge2: entered promiscuous mode [ 1336.908714][T11039] bridge2: entered allmulticast mode [ 1337.024265][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9829'. [ 1337.067909][ T7253] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1337.100539][ T7253] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1337.183269][ T7253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1337.229278][ T8805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1337.263337][ T8805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1339.585203][ T5622] Bluetooth: hci6: command tx timeout [ 1340.217341][ T5275] veth1_vlan: left promiscuous mode [ 1340.563618][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9833'. [ 1341.438681][T11072] netlink: 'syz.1.9833': attribute type 21 has an invalid length. [ 1341.481126][T11073] IPVS: stopping master sync thread 9793 ... [ 1341.546926][T11072] netlink: 'syz.1.9833': attribute type 22 has an invalid length. [ 1341.595075][T11072] netlink: 'syz.1.9833': attribute type 23 has an invalid length. [ 1341.669878][ T5622] Bluetooth: hci6: command tx timeout [ 1341.932714][T11072] netlink: 'syz.1.9833': attribute type 25 has an invalid length. [ 1342.205105][T11072] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9833'. [ 1343.286539][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9837'. [ 1343.751259][ T5622] Bluetooth: hci6: command tx timeout [ 1345.827254][ T5622] Bluetooth: hci6: command tx timeout [ 1347.259341][T11108] Bluetooth: MGMT ver 1.23 [ 1347.364653][T11117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.013766][T11120] xt_l2tp: wrong L2TP version: 0 [ 1349.659824][T11128] xt_hashlimit: size too large, truncated to 1048576 [ 1349.675059][T11134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9847'. [ 1350.251164][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9847'. [ 1352.916534][T11158] netlink: 'syz.3.9851': attribute type 1 has an invalid length. [ 1354.586230][T11165] netlink: 'syz.1.9852': attribute type 1 has an invalid length. [ 1354.953943][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9852'. [ 1355.155390][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 60 seconds [ 1355.170129][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 60 seconds [ 1355.181944][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 60 seconds [ 1355.194346][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 60 seconds [ 1356.245401][ T4980] udevd[4980]: worker [10313] /devices/virtual/block/nbd5 is taking a long time [ 1357.999684][T10008] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1358.036992][T10008] ip6gre1 (unregistering): left promiscuous mode [ 1361.391867][T10008] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1361.515699][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.704570][T10008] bond0 (unregistering): (slave ªªªªª»): Releasing backup interface [ 1363.731031][T10008] ªªªªª»: left allmulticast mode [ 1363.751990][T10008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.827832][T10008] bond_slave_1: left allmulticast mode [ 1363.847776][T10008] bond0 (unregistering): Released all slaves [ 1364.247164][T10008] bond1 (unregistering): Released all slaves [ 1364.500895][T10008] bond2 (unregistering): Released all slaves [ 1364.704228][T10008] bond3 (unregistering): Released all slaves [ 1365.097439][T10008] bond4 (unregistering): Released all slaves [ 1365.522679][T10008] bond5 (unregistering): Released all slaves [ 1365.772720][T10008] bond6 (unregistering): Released all slaves [ 1366.139382][T10008] bond7 (unregistering): Released all slaves [ 1366.355307][T10008] bond8 (unregistering): Released all slaves [ 1366.938404][T10008] bond9 (unregistering): Released all slaves [ 1367.270186][T10008] bond10 (unregistering): Released all slaves [ 1367.571064][T11158] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1368.099866][T11165] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1368.915255][ T5622] Bluetooth: hci5: link tx timeout [ 1368.929327][ T5622] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.277198][T10008] : left promiscuous mode [ 1370.460122][ T7253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1370.592228][ T7253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1370.708581][ T7253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1370.718988][ T7253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1370.731043][ T7253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1370.818561][T10008] tipc: Disabling bearer [ 1370.946941][ T5622] Bluetooth: hci5: command 0x0405 tx timeout [ 1371.118509][T10008] tipc: Left network mode [ 1372.228791][ T7253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1372.378943][ T7253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1372.572327][ T7253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1372.582587][ T7253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1372.593311][ T7253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1372.896862][ T7253] Bluetooth: hci4: command tx timeout [ 1373.835660][ T7253] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.411775][ T7253] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1374.440831][ T7253] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1374.457199][ T7253] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1374.483982][ T7253] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1374.622724][ T7253] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1374.706289][ T7253] Bluetooth: hci7: command tx timeout [ 1374.966326][ T7253] Bluetooth: hci4: command tx timeout [ 1376.715856][ T7253] Bluetooth: hci8: command tx timeout [ 1376.794484][ T7253] Bluetooth: hci7: command tx timeout [ 1377.027675][ T7253] Bluetooth: hci4: command tx timeout [ 1378.784846][ T7253] Bluetooth: hci8: command tx timeout [ 1378.864678][ T7253] Bluetooth: hci7: command tx timeout [ 1379.194485][ T7253] Bluetooth: hci4: command tx timeout [ 1380.864577][ T7253] Bluetooth: hci8: command tx timeout [ 1380.944590][ T7253] Bluetooth: hci7: command tx timeout [ 1382.944906][ T7253] Bluetooth: hci8: command tx timeout [ 1385.237313][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 90 seconds [ 1385.249232][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 90 seconds [ 1385.260985][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 90 seconds [ 1385.286141][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 90 seconds [ 1386.515278][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9865'. [ 1387.088554][T11259] netlink: 'syz.2.9865': attribute type 2 has an invalid length. [ 1388.140088][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.382442][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.580780][T11047] bridge_slave_0: entered allmulticast mode [ 1388.742341][T11047] bridge_slave_0: entered promiscuous mode [ 1389.219052][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.339419][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.495859][T11047] bridge_slave_1: entered allmulticast mode [ 1389.683763][T11047] bridge_slave_1: entered promiscuous mode [ 1390.665780][T10008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.066152][T10008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.893031][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1396.911128][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1396.925034][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1396.960700][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1396.970321][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1397.691494][T11296] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1399.203136][ T5622] Bluetooth: hci1: command tx timeout [ 1401.265576][ T5622] Bluetooth: hci1: command tx timeout [ 1403.344838][ T5622] Bluetooth: hci1: command tx timeout [ 1405.424569][ T5622] Bluetooth: hci1: command tx timeout [ 1412.017817][T10008] IPVS: stop unused estimator thread 0... [ 1415.272065][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 120 seconds [ 1415.295282][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 120 seconds [ 1415.307869][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 120 seconds [ 1415.339011][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 120 seconds [ 1417.049041][T10008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.163386][T11191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.232554][T11191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.328829][T11191] bridge_slave_0: entered allmulticast mode [ 1418.420378][T11191] bridge_slave_0: entered promiscuous mode [ 1419.479931][T10008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.711046][T11191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.948442][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.993231][T11191] bridge_slave_1: entered allmulticast mode [ 1420.061924][T11191] bridge_slave_1: entered promiscuous mode [ 1421.031989][T10008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.546945][T11191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.923129][T11191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.952485][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.343595][T10008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.047184][T11191] team0: Port device team_slave_0 added [ 1424.408222][T11191] team0: Port device team_slave_1 added [ 1426.125707][ T7255] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.581271][T11191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.677444][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.983998][T11191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.683645][T11191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.723914][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.948468][T11191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.221095][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.947117][ T7253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1428.963217][ T7253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1428.972207][ T7253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1428.996115][ T7253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1429.039828][ T7253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1429.276968][T12858] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.665152][ T9495] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.108896][ T7253] Bluetooth: hci2: command tx timeout [ 1432.153179][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1432.265285][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1432.288049][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1432.319384][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1432.356667][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1432.745634][ T7253] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1432.773776][ T7253] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1432.790676][ T7253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1432.802872][ T7253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1432.817796][ T7253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1433.185987][ T5622] Bluetooth: hci2: command tx timeout [ 1433.713893][T10008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.226116][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1434.243806][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1434.253802][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1434.278947][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1434.323724][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1434.708280][ T5622] Bluetooth: hci3: command tx timeout [ 1434.944914][ T5622] Bluetooth: hci6: command tx timeout [ 1435.268147][ T5622] Bluetooth: hci2: command tx timeout [ 1436.385655][ T5622] Bluetooth: hci4: command tx timeout [ 1436.786933][ T5622] Bluetooth: hci3: command tx timeout [ 1437.025178][ T5622] Bluetooth: hci6: command tx timeout [ 1437.348255][ T5622] Bluetooth: hci2: command tx timeout [ 1438.174622][T10008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.469686][ T5622] Bluetooth: hci4: command tx timeout [ 1438.864666][ T5622] Bluetooth: hci3: command tx timeout [ 1439.104486][ T5622] Bluetooth: hci6: command tx timeout [ 1440.548874][ T5622] Bluetooth: hci4: command tx timeout [ 1440.945691][ T5622] Bluetooth: hci3: command tx timeout [ 1441.185666][ T5622] Bluetooth: hci6: command tx timeout [ 1441.709266][T10008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.626137][ T5622] Bluetooth: hci4: command tx timeout [ 1443.471687][T10008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.880867][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.935770][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.973859][T11290] bridge_slave_0: entered allmulticast mode [ 1444.024684][T11290] bridge_slave_0: entered promiscuous mode [ 1444.263918][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.373826][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.441660][T11290] bridge_slave_1: entered allmulticast mode [ 1444.488784][T11290] bridge_slave_1: entered promiscuous mode [ 1445.181964][T11290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.365107][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 150 seconds [ 1445.377185][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 150 seconds [ 1445.390392][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 150 seconds [ 1445.402200][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 150 seconds [ 1445.459993][T11290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.949346][ T13] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.398362][T11290] team0: Port device team_slave_0 added [ 1447.103588][ T13] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.213352][T11290] team0: Port device team_slave_1 added [ 1447.765905][T12860] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.045055][ T9495] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.445905][T11290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.528006][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.964479][T11290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.069897][T11290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.104464][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.344446][T11290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.981310][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1450.369950][T10008] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.030657][T11290] hsr_slave_0: entered promiscuous mode [ 1452.092148][T11290] hsr_slave_1: entered promiscuous mode [ 1452.124781][T11290] debugfs: 'hsr0' already exists in 'hsr' [ 1452.162706][T11290] Cannot create hsr debugfs directory [ 1452.375322][T10008] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.999612][T10008] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.958352][T10008] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.416863][ T7253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1456.442886][ T7253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1456.469854][ T7253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1456.488302][ T7253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1456.500506][ T7253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1458.790034][ T7253] Bluetooth: hci7: command tx timeout [ 1460.773328][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1460.854972][T12860] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.865820][ T7253] Bluetooth: hci7: command tx timeout [ 1462.110383][T21961] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.166776][T21961] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.945164][ T7253] Bluetooth: hci7: command tx timeout [ 1463.062881][T21961] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.203922][T10008] bridge_slave_1: left allmulticast mode [ 1463.227959][T10008] bridge_slave_1: left promiscuous mode [ 1463.441338][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.486853][T10008] bridge_slave_0: left allmulticast mode [ 1463.567410][T10008] bridge_slave_0: left promiscuous mode [ 1463.596389][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.082649][T10008] bridge_slave_1: left allmulticast mode [ 1464.142834][T10008] bridge_slave_1: left promiscuous mode [ 1464.174211][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.221880][T10008] bridge_slave_0: left allmulticast mode [ 1464.287045][T10008] bridge_slave_0: left promiscuous mode [ 1464.314150][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.026057][ T7253] Bluetooth: hci7: command tx timeout [ 1475.115229][ T4980] udevd[4980]: worker [10313] /devices/virtual/block/nbd5 timeout; kill it [ 1475.182030][ T4980] udevd[4980]: seq 40966 '/devices/virtual/block/nbd5' killed [ 1475.304602][T10008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.428626][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 180 seconds [ 1475.440215][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 180 seconds [ 1475.453111][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 180 seconds [ 1475.465544][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 180 seconds [ 1475.567315][T10008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.905213][T10008] bond0 (unregistering): Released all slaves [ 1479.388055][T10008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.549822][T10008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.728180][T10008] bond0 (unregistering): Released all slaves [ 1479.892175][T10008] bond1 (unregistering): Released all slaves [ 1480.425886][T10008] bond2 (unregistering): Released all slaves [ 1480.745903][T10008] bond3 (unregistering): Released all slaves [ 1484.148715][T10008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.491181][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.499049][T10008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.679318][T10008] bond0 (unregistering): Released all slaves [ 1485.004077][T11388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.150127][T11388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.276675][T11388] bridge_slave_0: entered allmulticast mode [ 1485.298880][T11388] bridge_slave_0: entered promiscuous mode [ 1486.867980][T11388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.910724][T11388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.054754][T11388] bridge_slave_1: entered allmulticast mode [ 1487.074640][T11388] bridge_slave_1: entered promiscuous mode [ 1488.117184][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1488.140171][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1488.157485][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1488.192010][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1488.205780][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1490.414623][ T5622] Bluetooth: hci1: command tx timeout [ 1492.466602][ T5622] Bluetooth: hci1: command tx timeout [ 1492.664967][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.801411][T11405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.958278][T11405] bridge_slave_0: entered allmulticast mode [ 1493.080761][T11405] bridge_slave_0: entered promiscuous mode [ 1493.742847][ T8805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1493.779725][ T8805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1493.804309][ T8805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1493.819291][ T8805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1493.868287][ T8805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1493.879883][ T8805] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1494.026971][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1494.036903][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1494.097141][ T8805] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1494.106855][ T8805] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1494.577194][ T7253] Bluetooth: hci1: command tx timeout [ 1495.422062][ T8805] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1495.439523][ T8805] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1495.451301][ T8805] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1495.465754][ T8805] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1495.650630][ T8805] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1496.155717][ T8805] Bluetooth: hci2: command tx timeout [ 1496.304955][ T8805] Bluetooth: hci8: command tx timeout [ 1496.636812][ T8805] Bluetooth: hci1: command tx timeout [ 1497.824745][ T8805] Bluetooth: hci9: command tx timeout [ 1498.226789][ T8805] Bluetooth: hci2: command tx timeout [ 1498.397946][ T8805] Bluetooth: hci8: command tx timeout [ 1499.904574][ T8805] Bluetooth: hci9: command tx timeout [ 1500.305415][ T8805] Bluetooth: hci2: command tx timeout [ 1500.469517][ T8805] Bluetooth: hci8: command tx timeout [ 1501.993131][ T8805] Bluetooth: hci9: command tx timeout [ 1502.396106][ T8805] Bluetooth: hci2: command tx timeout [ 1502.556698][ T8805] Bluetooth: hci8: command tx timeout [ 1504.074444][ T8805] Bluetooth: hci9: command tx timeout [ 1505.528502][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 210 seconds [ 1505.541315][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 210 seconds [ 1505.557288][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 210 seconds [ 1505.569823][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 210 seconds [ 1507.358074][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1507.574028][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.622427][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.709153][T11485] bridge_slave_0: entered allmulticast mode [ 1507.826811][T11485] bridge_slave_0: entered promiscuous mode [ 1507.975665][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.172824][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.221016][T11485] bridge_slave_1: entered allmulticast mode [ 1508.291808][T11485] bridge_slave_1: entered promiscuous mode [ 1508.767231][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.994928][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.483981][T11485] team0: Port device team_slave_0 added [ 1509.547645][T11485] team0: Port device team_slave_1 added [ 1509.973348][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.147898][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.371471][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.518820][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.586917][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.830867][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.639772][T11485] hsr_slave_0: entered promiscuous mode [ 1511.716731][T11485] hsr_slave_1: entered promiscuous mode [ 1511.762165][T11485] debugfs: 'hsr0' already exists in 'hsr' [ 1511.843946][T11485] Cannot create hsr debugfs directory [ 1513.774426][ C1] sched: DL replenish lagged too much [ 1514.184123][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1516.914061][ T7253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1517.164560][ T7253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1517.241149][ T7253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1517.286539][ T7253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1517.297836][ T7253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1519.425179][ T8805] Bluetooth: hci3: command tx timeout [ 1520.804050][T10008] hsr_slave_0: left promiscuous mode [ 1520.845285][T10008] hsr_slave_1: left promiscuous mode [ 1520.936157][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1520.954755][T10008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.982822][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.046886][T10008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.504747][ T8805] Bluetooth: hci3: command tx timeout [ 1521.609994][T10008] hsr_slave_0: left promiscuous mode [ 1521.624427][T10008] hsr_slave_1: left promiscuous mode [ 1521.636901][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.655650][T10008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.678112][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.740790][T10008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.781625][T10008] hsr_slave_0: left promiscuous mode [ 1521.803221][T10008] hsr_slave_1: left promiscuous mode [ 1521.855563][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.868087][T10008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.901309][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.956203][T10008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.743802][T10008] veth1_macvtap: left promiscuous mode [ 1522.758042][T10008] veth0_macvtap: left promiscuous mode [ 1522.773888][T10008] veth1_vlan: left promiscuous mode [ 1522.928818][T10008] veth0_vlan: left promiscuous mode [ 1522.954774][T10008] veth1_macvtap: left promiscuous mode [ 1522.963870][T10008] veth0_macvtap: left promiscuous mode [ 1522.998180][T10008] veth1_vlan: left promiscuous mode [ 1523.306563][T10008] veth0_vlan: left promiscuous mode [ 1523.394441][T10008] veth0_macvtap: left promiscuous mode [ 1523.412076][T10008] veth0_vlan: left promiscuous mode [ 1523.584503][ T8805] Bluetooth: hci3: command tx timeout [ 1525.664580][ T8805] Bluetooth: hci3: command tx timeout [ 1535.599190][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 240 seconds [ 1535.612766][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 240 seconds [ 1535.625761][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 240 seconds [ 1535.640105][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 240 seconds [ 1543.593874][T10008] team0 (unregistering): Port device team_slave_1 removed [ 1544.002325][T10008] team0 (unregistering): Port device team_slave_0 removed [ 1545.833874][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.401938][ T7253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1549.455148][ T7253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1549.471094][ T7253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1549.482964][ T7253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1549.507678][ T7253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1551.672140][ T7253] Bluetooth: hci4: command tx timeout [ 1553.744734][ T7253] Bluetooth: hci4: command tx timeout [ 1553.962683][ T8805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1553.980602][ T8805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1554.027903][ T8805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1554.033938][T10008] team0 (unregistering): Port device team_slave_1 removed [ 1554.050655][ T8805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1554.085053][ T8805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1554.396184][ T7253] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1554.483109][ T7253] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1554.492188][ T7253] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1554.502966][ T7253] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1554.542609][ T7253] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1555.077979][T10008] team0 (unregistering): Port device team_slave_0 removed [ 1555.824864][ T8805] Bluetooth: hci4: command tx timeout [ 1555.855683][ T8805] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1555.878906][ T8805] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1555.932477][ T8805] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1555.943637][ T8805] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1555.954919][ T8805] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1556.231262][ T7253] Bluetooth: hci6: command tx timeout [ 1556.715339][ T7253] Bluetooth: hci10: command tx timeout [ 1557.912542][ T7253] Bluetooth: hci4: command tx timeout [ 1558.066681][ T7253] Bluetooth: hci11: command tx timeout [ 1558.308736][ T7253] Bluetooth: hci6: command tx timeout [ 1558.794901][ T7253] Bluetooth: hci10: command tx timeout [ 1560.144962][ T7253] Bluetooth: hci11: command tx timeout [ 1560.385689][ T7253] Bluetooth: hci6: command tx timeout [ 1560.864800][ T7253] Bluetooth: hci10: command tx timeout [ 1562.224926][ T7253] Bluetooth: hci11: command tx timeout [ 1562.465062][ T7253] Bluetooth: hci6: command tx timeout [ 1562.944818][ T7253] Bluetooth: hci10: command tx timeout [ 1564.304678][ T7253] Bluetooth: hci11: command tx timeout [ 1566.245201][ T4941] block nbd5: Possible stuck request ffff88804c9b7000: control (read@0,1024B). Runtime 270 seconds [ 1566.262713][ T4941] block nbd5: Possible stuck request ffff88804c9b71c0: control (read@1024,1024B). Runtime 270 seconds [ 1566.292754][ T4941] block nbd5: Possible stuck request ffff88804c9b7380: control (read@2048,1024B). Runtime 270 seconds [ 1566.325592][ T4941] block nbd5: Possible stuck request ffff88804c9b7540: control (read@3072,1024B). Runtime 270 seconds [ 1569.139024][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1573.985905][ T31] INFO: task syz.2.9873:11343 blocked for more than 143 seconds. [ 1573.993931][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1574.195023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1574.374335][ T31] task:syz.2.9873 state:D stack:26384 pid:11343 tgid:11342 ppid:8801 task_flags:0x400140 flags:0x00080002 [ 1574.923165][ T31] Call Trace: [ 1575.040174][ T31] [ 1575.204421][ T31] __schedule+0x17d9/0x56c0 [ 1575.402157][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1575.535053][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1575.565733][ T31] ? __pfx___schedule+0x10/0x10 [ 1575.626702][ T31] ? schedule+0x90/0x2b0 [ 1575.661169][ T31] schedule+0x164/0x2b0 [ 1575.689228][ T31] schedule_preempt_disabled+0x13/0x30 [ 1575.736815][ T31] __mutex_lock+0x7bf/0x1550 [ 1575.806828][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1575.899810][ T31] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x400 [ 1576.032588][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1576.112738][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1576.176952][ T31] nfsd_nl_unlock_filesystem_doit+0x2af/0x400 [ 1576.275889][ T31] ? __nla_parse+0x40/0x60 [ 1576.404547][ T31] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1576.430251][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1576.489599][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1576.630888][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1576.641453][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1576.702762][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1576.761105][ T31] ? security_capable+0x7e/0x2c0 [ 1576.809670][ T31] genl_rcv_msg+0x614/0x7a0 [ 1576.879159][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1576.929291][ T31] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1577.023923][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1577.084770][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1577.164115][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1577.303896][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1577.338196][ T31] ? down_read+0x2be/0x330 [ 1577.410633][ T31] genl_rcv+0x28/0x40 [ 1577.443323][ T31] netlink_unicast+0x7bb/0x940 [ 1577.522419][ T31] netlink_sendmsg+0x813/0xb40 [ 1577.560676][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1577.646918][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1577.673765][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1577.775149][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1577.794414][ T31] ____sys_sendmsg+0x54e/0x850 [ 1577.815119][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1577.902074][ T31] ? import_iovec+0x73/0xa0 [ 1577.934220][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1577.961729][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1578.041235][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1578.092978][ T31] ? futex_wake+0x51b/0x5f0 [ 1578.164533][ T31] ? __fget_files+0x2a/0x420 [ 1578.215791][ T31] ? __fget_files+0x3a2/0x420 [ 1578.282095][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1578.307072][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1578.476655][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.482975][ T31] do_syscall_64+0x174/0x580 [ 1578.774543][ T31] ? trace_irq_disable+0x3b/0x140 [ 1578.927605][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1578.960055][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.018391][ T31] RIP: 0033:0x7f29ad39e0d9 [ 1579.047502][ T31] RSP: 002b:00007f29ae262028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1579.207901][ T31] RAX: ffffffffffffffda RBX: 00007f29ad625fa0 RCX: 00007f29ad39e0d9 [ 1579.304723][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000006 [ 1579.377152][ T31] RBP: 00007f29ad435024 R08: 0000000000000000 R09: 0000000000000000 [ 1579.457699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.507032][ T31] R13: 00007f29ad626038 R14: 00007f29ad625fa0 R15: 00007ffc5012f1f8 [ 1579.594510][ T31] [ 1579.612702][ T31] [ 1579.612702][ T31] Showing all locks held in the system: [ 1580.660408][ T31] 1 lock held by pool_workqueue_/3: [ 1581.104606][ T31] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1581.331541][ T31] 1 lock held by khungtaskd/31: [ 1581.397612][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1581.608091][ T31] 2 locks held by getty/5374: [ 1581.705099][ T31] #0: ffff8880355970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1582.033568][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1582.155262][ T31] 3 locks held by kworker/0:3/5632: [ 1582.254407][ T31] 3 locks held by kworker/u8:27/21962: [ 1582.500910][ T31] 2 locks held by kworker/0:2/30542: [ 1582.568998][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1582.699507][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1583.064396][ T31] 2 locks held by kworker/1:0/8344: [ 1583.126789][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1583.257023][ T31] #1: ffffc9000351fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1583.381663][ T31] 2 locks held by syz.0.9509/9345: [ 1583.468272][ T31] #0: ffffffff90098e68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1583.580826][ T31] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1583.912912][ T31] 4 locks held by kworker/u8:4/10008: [ 1583.942421][ T31] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0