last executing test programs: 8m7.327330166s ago: executing program 3 (id=1725): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x18, &(0x7f0000000500)=""/24, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0x128, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x114, 0x1, [@m_sample={0x110, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0xba, 0x6, "a5d96797b8977366509544b6e5d9e285ed9f12abc39c1a1798b842373a514edacff20d202e961ac6618313bb254c922ffc76cc46c11571446ee78726fa9032a3356be1455584451dd3a6384d3fe8254a621a64dd5716eecedbf1e8c34322e198dc9953690f7fe21701c4ed50c0b332f33f6f48dab3db44f327deab50d491a0f484b67ccc65ed18f57f877ef712965e99ed8b565ce89195c93e53223ec41f880853d9b36d57b1098c52c78acca326103e33e383dec353"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 8m6.68964726s ago: executing program 3 (id=1730): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="40007a800c000300a3656b9a83cb8cce140001"], 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x810) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100025ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000122040028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="deba0b1d0420000008002900bb310600"], 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) 8m5.516025815s ago: executing program 3 (id=1735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200400600000008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0xf7, r3, 0x1, 0x6b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) close(0x3) 8m2.884152404s ago: executing program 3 (id=1737): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x31, 0x1, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x8840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x4004001}, 0x880) 8m2.444841659s ago: executing program 3 (id=1741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x4076cbba9945d516, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd13, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6461d4b2df0d00000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000580)={@empty, @empty}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4) socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x894a, &(0x7f0000000600)={'veth0_to_team\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000680), 0x4) recvmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xc040ff0b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x15, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0xffffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x29, &(0x7f0000000880)=""/41, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x6, 0x56c2, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x0, 0x5, 0xc, 0x1}, {0x3, 0x2, 0x1}, {0x2, 0x3, 0x9, 0x9}, {0x3, 0x2, 0x0, 0x9}], 0x10, 0x5}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x15, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0xffffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x29, &(0x7f0000000880)=""/41, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x6, 0x56c2, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x0, 0x5, 0xc, 0x1}, {0x3, 0x2, 0x1}, {0x2, 0x3, 0x9, 0x9}, {0x3, 0x2, 0x0, 0x9}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r10}, &(0x7f0000000740), &(0x7f0000000a80)=r11}, 0x20) bind$inet6(r8, &(0x7f00000005c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="03000088c90bdd63d38b9639575bfa9a5c26d2c6875d874a87129f396448f214d5c6c0798e302f9adc3bf63d0511ca2f90c41ee8447e8afec600874481ec574318d06ffce19a052493a1c6ddcd25e38eb1e62272499b97d23bc58fdc27e3", @ANYRES64=r5, @ANYRESDEC=r1, @ANYBLOB="6b381e03c54a3229c0c6d328e358fc02ebda25f504cf5f0705afc8c1069c424bc237ced3df346c44ed128c179b6096335c6625c8200e96ea4b916ccedc6958ca146551ae82ca97203c3bc2fd57c6d37041fa9fd9043bd675901d5478f389e8037fc091aa35d923e1c630b4f1ad233e3f5b88a0ac369f730ba99f7d1224d464d1d1840a184ef334ff03b308c013604fc3e35e"], 0x4) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="03000088c90bdd63d38b9639575bfa9a5c26d2c6875d874a87129f396448f214d5c6c0798e302f9adc3bf63d0511ca2f90c41ee8447e8afec600874481ec574318d06ffce19a052493a1c6ddcd25e38eb1e62272499b97d23bc58fdc27e3", @ANYRES64=r5, @ANYRESDEC=r1, @ANYBLOB="6b381e03c54a3229c0c6d328e358fc02ebda25f504cf5f0705afc8c1069c424bc237ced3df346c44ed128c179b6096335c6625c8200e96ea4b916ccedc6958ca146551ae82ca97203c3bc2fd57c6d37041fa9fd9043bd675901d5478f389e8037fc091aa35d923e1c630b4f1ad233e3f5b88a0ac369f730ba99f7d1224d464d1d1840a184ef334ff03b308c013604fc3e35e"], 0x4) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000b282341606d34ab93f990a9d02dcff8fcd20a2681b375ebfb0000", @ANYRES32=r2, @ANYBLOB="890c0200446c0400440012800b00010069703667726500003400028006000f000d00000008000500ff030000060010004e270000080015005273090008001500217506000500160002000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) (async) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000b282341606d34ab93f990a9d02dcff8fcd20a2681b375ebfb0000", @ANYRES32=r2, @ANYBLOB="890c0200446c0400440012800b00010069703667726500003400028006000f000d00000008000500ff030000060010004e270000080015005273090008001500217506000500160002000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 8m1.287585523s ago: executing program 3 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@initdev, @initdev, 0x0}, &(0x7f0000000100)=0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000640)='cgroup.freeze\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000008c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r9 = socket$netlink(0x10, 0x3, 0x12) writev(r9, &(0x7f0000000900)=[{&(0x7f0000000940)="b6", 0x1}], 0x1) pread64(r8, &(0x7f0000000680)=""/165, 0xa5, 0x9) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000600)="d0bf2692d1858e"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0x3c, 0x400, r4, 0x8, '\x00', r6, r8, 0x5, 0x1}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000340)={0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000003c0)={r11, 0x401, 0x0, 0xffffffffffffffff, 0x1}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000440)={r12, 0xffffffffffffffff, 0x800}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000004c0)={r12, 0xffffffffffffffff, 0x80000}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socket$packet(0x11, 0x3, 0x300) 7m45.985964447s ago: executing program 32 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@initdev, @initdev, 0x0}, &(0x7f0000000100)=0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000640)='cgroup.freeze\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000008c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r9 = socket$netlink(0x10, 0x3, 0x12) writev(r9, &(0x7f0000000900)=[{&(0x7f0000000940)="b6", 0x1}], 0x1) pread64(r8, &(0x7f0000000680)=""/165, 0xa5, 0x9) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000600)="d0bf2692d1858e"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0x3c, 0x400, r4, 0x8, '\x00', r6, r8, 0x5, 0x1}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000340)={0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000003c0)={r11, 0x401, 0x0, 0xffffffffffffffff, 0x1}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000440)={r12, 0xffffffffffffffff, 0x800}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000004c0)={r12, 0xffffffffffffffff, 0x80000}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socket$packet(0x11, 0x3, 0x300) 4m11.986126395s ago: executing program 4 (id=3414): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x52) close(r3) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x9) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 4m11.284059415s ago: executing program 4 (id=3420): accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="2cf9d5559df29db27c2e0cdea9fe9f6f29e56ec5a7aa2c6bdaf2e73c379f35da971aa90896d6205378fc90fc7745eb7360ff25aa156d6bb53d2f6a4111abe1aca988ba5d53", 0x45, 0x4004875, &(0x7f0000000140)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@fwd={0x10}, @restrict={0xa}, @float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x61, 0x0, 0x61]}}, &(0x7f0000000200)=""/165, 0x42, 0xa5, 0x1, 0x400}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@fwd={0x10}, @restrict={0xa}, @float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x61, 0x0, 0x61]}}, &(0x7f0000000200)=""/165, 0x42, 0xa5, 0x1, 0x400}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r2, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/219, 0xdb, 0x0, &(0x7f0000000400)=""/180, 0xb4}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r2, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/219, 0xdb, 0x0, &(0x7f0000000400)=""/180, 0xb4}}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) recvfrom$inet(r3, &(0x7f0000000540)=""/148, 0x94, 0x40000021, &(0x7f0000000600)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}], 0x6c) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000007c0)={r2, &(0x7f00000006c0)='(g)\x00', 0x4800, &(0x7f0000000700)={@align=0x4, {0xdabd, 0x5, 0x7ff, 0x401}}, 0x8, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)}) getpeername$unix(r4, &(0x7f0000000800), &(0x7f0000000880)=0x6e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'dvmrp0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000900)={@remote, @rand_addr=0x64010100, r5}, 0xc) (async) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000900)={@remote, @rand_addr=0x64010100, r5}, 0xc) socket$phonet(0x23, 0x2, 0x1) (async) r6 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x38, &(0x7f0000000940)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000980)={0x0, 0xa4, "eeabe0a99a0ad9efd4f8ce4ce0b773583910c76c635b0700f51c36858e18323ff956a65513ad596992a4ff97c80569446da5b56ea48558215336f3266e986123756b3fad6eb021529e7c8acf414d6bfa2fc297599c1dc21432a3bb40a9ff794212e71baaa8960fc3672323a4ae78a925ae271754f6417b22a5623070b7fd25d222531427e139cd4ce4a8c8dac1fe1f5428bc164e54409d00307f1539ca334443e5e10115"}, &(0x7f0000000a40)=0xac) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r3, 0x84, 0x81, &(0x7f0000000a80)={r7, 0x7}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r3, 0x84, 0x81, &(0x7f0000000a80)={r7, 0x7}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000ac0)="3765f3ec874d16f136eb14694bc8037accb0355cc230446c9b65993cf24174a9e8f379e5234ff08b7de2343fef508f7ef9614cf856060c46cda8336e9f40b0dedd9df07e90e69439a66d96f9194ca265", 0x50, 0xc041, &(0x7f0000000b40)={0xa, 0x4e23, 0x4, @mcast2, 0xe}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00'}, 0x18) recvmsg(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/251, 0xfb}, {&(0x7f0000000d80)=""/173, 0xad}, {&(0x7f0000000e40)=""/61, 0x3d}], 0x4, &(0x7f0000000ec0)=""/160, 0xa0}, 0x40) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000fc0)={@mcast2, @private0, @loopback, 0x9, 0x1, 0x9d2, 0x400, 0x2, 0x4700001, r1}) ioctl$FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, &(0x7f0000001040)={0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r4) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000001140)={0x1, 0x1bb4e9418883dd51, 0x40, 0x8, @vifc_lcl_ifindex=r5, @remote}, 0x10) (async) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000001140)={0x1, 0x1bb4e9418883dd51, 0x40, 0x8, @vifc_lcl_ifindex=r5, @remote}, 0x10) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001180)={r5, @multicast2, @multicast1}, 0xc) socketpair(0x27, 0x1, 0x9c8, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002500)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000002600)=0xe8) sendmsg$unix(r4, &(0x7f0000002680)={&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="4b4b532f3478d459d5c5ea12b2710983936849180d43ca1d94b253ba7ea23870f1939183865c3e2917ccae73716227f1524fbad8c98419baa4f3402b70af60c09251cd7d8deafbbbb3d0d55899808189a98f95835ae890401af44f82dc8fa4e2fc34c5a3e657f92e441617cf0c", 0x6d}, {&(0x7f00000022c0)="e5474676275fd570cb16b94566394cee1a258d98d0816da1eb68c087028ccb0520b83fd4030ae60eac0cbfa69752736d18d6a2b70574e88d20ee1c59f107cdfc6cd8018f82bbde3f41810581dd4c272a0031ae7ed3cafdcfb113383a8aa6a5ed4e6b3e1be37a99dd43f531b6d621240bae2bd09599ba3756d8901e88672745f6cd561aabd6da16bf46b1b18508b15f55ee3658fc34027248a755e50c38ca8349fa69940f4c77b27d2bff3239515f5f19", 0xb0}, {&(0x7f0000002380)="1344af517a22ca8cc0414cb257bad0842530d97cbbc5052475be3a7584985dd0598b338a170bfb57424a00869f4c76a814068b6fd93444f534231908835cb9192cdad1ea0150af65cf8c33136d4781840266fd32625f1371c4069a21bc61a382c21340651321b6e6874e543e6b026b55f330264b273bff68fc9809048045ae794763cf475a0acbee31b57dd8be261046b3351f0bd985df4b59b2be85ff4308633c10fc6fb2765586e4a0e41d7440e569ea163c9a9316bbd8e1a5852947fe20733367ae3fb65bdc0bc2ad64be2e5596c702", 0xd1}], 0x4, &(0x7f0000002640)=[@rights={{0x20, 0x1, 0x1, [r8, r3, r6, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}], 0x40, 0x20004041}, 0x100) (async) sendmsg$unix(r4, &(0x7f0000002680)={&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="4b4b532f3478d459d5c5ea12b2710983936849180d43ca1d94b253ba7ea23870f1939183865c3e2917ccae73716227f1524fbad8c98419baa4f3402b70af60c09251cd7d8deafbbbb3d0d55899808189a98f95835ae890401af44f82dc8fa4e2fc34c5a3e657f92e441617cf0c", 0x6d}, {&(0x7f00000022c0)="e5474676275fd570cb16b94566394cee1a258d98d0816da1eb68c087028ccb0520b83fd4030ae60eac0cbfa69752736d18d6a2b70574e88d20ee1c59f107cdfc6cd8018f82bbde3f41810581dd4c272a0031ae7ed3cafdcfb113383a8aa6a5ed4e6b3e1be37a99dd43f531b6d621240bae2bd09599ba3756d8901e88672745f6cd561aabd6da16bf46b1b18508b15f55ee3658fc34027248a755e50c38ca8349fa69940f4c77b27d2bff3239515f5f19", 0xb0}, {&(0x7f0000002380)="1344af517a22ca8cc0414cb257bad0842530d97cbbc5052475be3a7584985dd0598b338a170bfb57424a00869f4c76a814068b6fd93444f534231908835cb9192cdad1ea0150af65cf8c33136d4781840266fd32625f1371c4069a21bc61a382c21340651321b6e6874e543e6b026b55f330264b273bff68fc9809048045ae794763cf475a0acbee31b57dd8be261046b3351f0bd985df4b59b2be85ff4308633c10fc6fb2765586e4a0e41d7440e569ea163c9a9316bbd8e1a5852947fe20733367ae3fb65bdc0bc2ad64be2e5596c702", 0xd1}], 0x4, &(0x7f0000002640)=[@rights={{0x20, 0x1, 0x1, [r8, r3, r6, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}], 0x40, 0x20004041}, 0x100) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f00000026c0)) 4m10.6901826s ago: executing program 4 (id=3427): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0xffffffffffffffd5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet6(0xa, 0x800000000000002, 0x53d) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r4 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'bond0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000900)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c80)=@o_path={0x0, r5, 0x4000, r4}, 0x18) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000006c0), 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r2, &(0x7f0000000740)="dc", &(0x7f0000000780)=@udp}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000b40)=@newqdisc={0xbc, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1e3], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0xbc}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000940)="f11fbb8829b1e3cabcf88a010946bacf02d7f5ba42b4c369a0d48bc9d71c2eb5228190a7c4ef909a8a1bf96cb3337157222b227abc68dadef349fbf88119631a240b188b9ca995ee00183d54d5bc0b51cdbc5e8c25372612dc788f9b0ca39ddd5b30c0c2800a956c505cafad6643f19550a01f787b95ac00773e3773d51ae5a929d645bf9e76f8c05319b505e23be94df1902112db08a85020c6126b18aee60f1280ab2040519f69174a988d3fb8059629c8179766369eea815b1840cb1d168bedb1d7b37b5d1f8f697177147d8207acba63e25e00a86f3f920bc6d044", 0xdd, 0x4c850, &(0x7f0000000a40)={0x11, 0x15, r1, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000008000000000000000000000085000000170000009500000000000000b9c81898c05b7ee29033721a023001446765344bf9fe5c1d0c03891492e253add63fae26809d4b944cf5863f003d03cd9b2764bed3c732679ac4f16ad27a79a499a07c4806b2fbe3d4b5470ede41958f8020f7c3b3eee654d4"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x4001}, 0xfea3) 4m10.438651236s ago: executing program 4 (id=3430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) r4 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000000c0), &(0x7f0000000100)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000001c0)=@tcp=r4, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdb309cd3f4000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00R\x00', @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) 4m9.86985018s ago: executing program 4 (id=3436): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="f9", 0x1}], 0x1}, 0x24000004) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)="cd", 0x1}], 0x1}, 0x240448c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0xe0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6000000055000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01000000ef010101000000000000000000000000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="0c007d800800020004b0a9069b00ff0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20002880) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 4m8.856691001s ago: executing program 4 (id=3449): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x2c, 0x2f, 0x107, 0x0, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x46, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x82d6}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @pad1, @ra={0x5, 0x2, 0x63}]}, 0x30) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x4, 0x4, 0x4, 0x10, 0x4210, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0xfffffff7, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="18120000", @ANYRES32=r6, @ANYBLOB="00000000000010000003000000fcffffbfa400000000000007040000f8ffffffb70500000000000085000000190000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x15c}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8, r6}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000001000030526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r3, @ANYBLOB="6800128009000100766c616e0000000058000280060001000200000006000500813aea877c000000100004800c00010009000001810000003400030000000c00010003000000080000000c00010009000000040000000c00010000000000010000800a000200aaaaaaaaaaaa00"/120], 0x9c}}, 0x0) 3m53.715058578s ago: executing program 33 (id=3449): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x2c, 0x2f, 0x107, 0x0, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x46, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x82d6}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @pad1, @ra={0x5, 0x2, 0x63}]}, 0x30) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x4, 0x4, 0x4, 0x10, 0x4210, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0xfffffff7, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="18120000", @ANYRES32=r6, @ANYBLOB="00000000000010000003000000fcffffbfa400000000000007040000f8ffffffb70500000000000085000000190000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x15c}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8, r6}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000001000030526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r3, @ANYBLOB="6800128009000100766c616e0000000058000280060001000200000006000500813aea877c000000100004800c00010009000001810000003400030000000c00010003000000080000000c00010009000000040000000c00010000000000010000800a000200aaaaaaaaaaaa00"/120], 0x9c}}, 0x0) 1m33.403188295s ago: executing program 2 (id=4881): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000ac0)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000001100)="83c8cfef3a") write(r0, &(0x7f0000001140)="190004000800aaaaaa0103000000", 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x7, 0x6, &(0x7f0000001240)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91"], &(0x7f0000001300)='GPL\x00', 0x5, 0xc3, &(0x7f0000001340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r6}, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)={0x64, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x220, 0x250, 0x250, 0x220, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0x0, 0x0, 0xff000000, 0x5deed7bed6b454ff], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_bond\x00', 'bond_slave_1\x00', {}, {}, 0x6, 0x8, 0x1, 0x40}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x99a0, 0x4163150, '\x00', {0x80000001}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x87, 0x5, 0x4, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x3}, {0x1, 0x3, 0x2}, {0x3, 0x2, 0x4}, 0x8001, 0xb0000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r3) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000001000)={&(0x7f0000001040)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1400000000000039290010003b0000000000001400000000"], 0x18}, 0x922bac8556bda5ce) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="56c82088d4532330000000", @ANYRES16=r9, @ANYBLOB="20002dbd7000ffdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000b80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="44000000100005060100000000000000000000000000000000000000000000000c00030064756d6d79300000100012000a00010064756d6d7900000008001f0002000000"], 0x44}}, 0x0) r13 = socket$inet(0x2, 0x2, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f0000000f80)={0x0, 0x8001, 0x10}, &(0x7f0000000fc0)=0xc) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000cc0)={'dummy0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) 1m33.031523613s ago: executing program 2 (id=4887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0xb, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r4 = socket(0xa, 0x3, 0xff) sendmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000007c0)="c0beeda5a486001300f2ceff3bcd14ee4a98a520780c268eef47650f17d0e9a03233378888c474c5", 0x28}], 0x1, &(0x7f0000000800)=[@rights={{0x10}}], 0x10, 0x448f569fa84bd46c}, 0x20000840) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000200)=""/165, &(0x7f00000002c0)=0xa5) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) close(0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 1m32.151594996s ago: executing program 2 (id=4900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0xb10, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0xa78, 0x178, 0x178, 0xa78, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x2}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0xf13}], 0x4, 0x2a}, {[{0x3, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x40000003, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x5}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0x5}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x2}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb70) socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f0000000180)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 1m31.922062505s ago: executing program 2 (id=4904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x20000800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf252d000000080002004f12744c84f328c672469243aef87f02b223d2c3d53a0c83d9eca9", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3000000008000200", @ANYRES32=r3, @ANYBLOB="0a0001007770616e310000000a0001007770616e3300000008000200", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x4) 1m31.307484172s ago: executing program 2 (id=4912): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000ca795dc79ef27ea2b72414c9d70e2ce13afe33ccb823dc00000039211c31d6dda7400d1a79fbf5dcc383003529660d5428e310b6b6b972f9e700101b5d166f075f029404ce8a0ec5f01d15a198e85a3f2ac3d2644382ec8714be27c6be6d57de6a8212ec83872eb67a48e4c3347dbc6a58138529bb506733a5c02c4b2f532c20cf33633461efa59ab09b7b63301078fa87b55f7ecfdadbdf52abd3ed474882e5986a22543d9e0d8a7e1c939f1f4d065ae8", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x7ff, r0}, 0x38) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socket$kcm(0x23, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) (async) r4 = socket(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$unix(r3, &(0x7f00000005c0), &(0x7f0000000640)=0x6e) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) 1m30.171106644s ago: executing program 2 (id=4927): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61123000000000006113680000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x31, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4ffd, 0x4) (async) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00), 0xfffffff8, r3}, 0x38) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r4, 0x1}, 0xc) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a8010004000000314000000080017004e214e2414000200fc00000000000000000000000000000414000100200100000000000000000000000000f8"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000440)={&(0x7f0000000480)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x80000001, 0x30}, 0xc) (async, rerun: 32) writev(r5, &(0x7f0000000580)=[{&(0x7f00000005c0)="e9", 0x1}], 0x1) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001f003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f00000000c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) 1m15.012133298s ago: executing program 34 (id=4927): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61123000000000006113680000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x31, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4ffd, 0x4) (async) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00), 0xfffffff8, r3}, 0x38) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r4, 0x1}, 0xc) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a8010004000000314000000080017004e214e2414000200fc00000000000000000000000000000414000100200100000000000000000000000000f8"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000440)={&(0x7f0000000480)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x80000001, 0x30}, 0xc) (async, rerun: 32) writev(r5, &(0x7f0000000580)=[{&(0x7f00000005c0)="e9", 0x1}], 0x1) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001f003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f00000000c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) 2.227377917s ago: executing program 7 (id=5824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', 0x1}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', 0x1}, 0x18) (async) 2.075120771s ago: executing program 7 (id=5826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x84, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x21, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.002366471s ago: executing program 7 (id=5828): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001780)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000001880)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x7, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f00000019c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x2}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002a00)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="99", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x9b61, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, 0x9}, 0x1c, &(0x7f0000002980)}}], 0x3, 0x4000090) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000500)=""/4057, &(0x7f0000001500)=0xfd9) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000040000000000000000004600007110530000000000950000000000006f4f345a6db48ce22dc4c5108105f72f7271b9233c403bd9c4b3918d71101535cd1024878f3e8b6edeb1d4f4857559f879003f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c014) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000015c0)={0x1, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, [0x6, 0x8, 0x1, 0xf, 0x9, 0x0, 0x0, 0x1, 0xc74, 0xbab8, 0x1f64, 0x1, 0x200, 0x2, 0xffffffffffff8000]}, &(0x7f00000016c0)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001700)=@assoc_value={r7, 0x1}, &(0x7f0000001740)=0x8) sendmmsg(r0, &(0x7f0000008540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) 1.810638139s ago: executing program 7 (id=5830): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000540)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x1f6, &(0x7f0000000840)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x1f6, &(0x7f0000000840)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000009c0)={r6, &(0x7f0000000a00), &(0x7f0000000a40)=""/73}, 0x70) sendto(r4, &(0x7f0000000240)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) (async) sendto(r4, &(0x7f0000000240)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r9, &(0x7f0000001840)=[{&(0x7f0000001880)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)="ec", 0x1}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000001940)=0x6, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002002000000008000500000000002c0004800800010000000002200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) (async) sendmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002002000000008000500000000002c0004800800010000000002200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) close(0x3) (async) close(0x3) 1.599092199s ago: executing program 1 (id=5834): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000140), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="02f409e6735baf66effb6e432938ededb234ad4614952d6d847a217d59fdc6181ef56b3dc4b7dfc7b391b27c8681ab304da5941a9a5386cef03bc435dd74f24093fb16610b0b3bfbce41cfc27f97f985a0b4838e9efc4eaedeb381d52fa5c1c52ee3f10f977b044bc7d70a191660126ad000b46c1aaf79a7c34dfca76ebf4db86121d7aa0b0d9f994f52150fbca1564749482d3185b6d1ea5fece48e8b6b98fc5fb56195420088140eae4a1d60a5a45a38835b393935", 0xb6}, {&(0x7f0000000300)="70cca9146a16e012aec9ba8da332db466661633c5412238c0c0e22566388a4794d2f15ce1223", 0x26}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1470}, 0x20004001) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) 1.598404693s ago: executing program 5 (id=5835): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="040000000100"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) 1.538898704s ago: executing program 5 (id=5836): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000100)=0x10) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x25, 0x7}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000240)=0xfef, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/13, 0xd}, {&(0x7f0000001440)=""/161, 0xa1}], 0x5}, 0x1ff}, {{&(0x7f0000001580)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001600)=""/150, 0x96}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/104, 0x68}], 0x3, &(0x7f0000002780)=""/205, 0xcd}, 0x200}, {{&(0x7f0000002880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002900)=""/198, 0xc6}], 0x1, &(0x7f0000002a40)=""/89, 0x59}, 0x1}], 0x3, 0x10102, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000002b80)=0xfe, 0x4) r4 = accept$inet6(r3, &(0x7f0000002bc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002c00)=0x1c) writev(r4, &(0x7f0000002dc0)=[{&(0x7f0000002c40)="74d1ab75ca36d425026726d107bf57b970d59c5eb78b6a91a626d128203b097179bccba258555116f1b27a5b9b6b5fd1b179be08b551d09ef9bb4ccf3b876d9eb15bfa953ed0694e0ffe68fd443edcc62ea615fbb3cf20c59dac64a9296fe204e365c03c3c4319805364ecc4fa06afb37c7a50a52e64fad828c10de0928c8a4c2365bbb65ca3e1b08084dd0013a42732c1f3c0d7aaec8732f503a8d14b2814b62d275e0f7ac6b297", 0xa8}, {&(0x7f0000002d00)="43f99aa13828a820b9c5e4df02413f39a420a8fb9cf38f39354a089e5ead7e77a6b846907942e8a982ec229277539912d7fc96d9c8e21005f70ba24de39444fa5771504d48d1550b5767ca8aa6fe4edf84b1c37ecd9a8cc13a07bcbd3642b0ee32a3531142f34a63b543234f8fa38e0f227aab448b872d25c404013a010aeb9ce31975fd78cc52740134235c9f1ec566bb9f3e707f0c05e3fdaba77bf3d56c2a600a2bbcff", 0xa5}], 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000002e00), &(0x7f0000002e40)=0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002e80)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) clock_gettime(0x0, &(0x7f0000002f00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002f40)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000003040)={&(0x7f0000002ec0), 0x10, &(0x7f0000003000)={&(0x7f0000002f80)={0x3, 0x924, 0x6, {r5, r6/1000+60000}, {r7, r8/1000+10000}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0xb, 0x1, 0x0, 0x0, "764fc99c7f73d669f3de1db25a1f78d5378d158a045334e4821980094f6fa51c56e3e126a4e09acf6c7154cbd5f691a887d68e0855934aae08f76e094e4f24fd"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000003080)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000030c0)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000003140)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000003240)={&(0x7f0000003100)={0x1d, r9}, 0x10, &(0x7f0000003200)={&(0x7f0000003180)={0x1, 0x0, 0x7fffffff, {r10, r11/1000+10000}, {0x0, 0xea60}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x1d, 0x2, 0x0, 0x0, "5e1a494a349258b6a279b7414863f5418b70eb494f61dc11c56112ae8b995263a542cf38428a742a5f5d9be8e2c684a6488c8c64b473997e1ae77c5fd1264c48"}}, 0x80}}, 0x20000000) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000003280)={0x7, 0xbb8d, 0x9, 0x7f}, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT(r12, 0x4004f506, &(0x7f00000032c0)) r13 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000003300)=[{r12, 0xc030}, {r3, 0x10}, {r2, 0x2100}, {r13, 0x80}, {r1, 0x2}], 0x5, &(0x7f0000003340)={0x77359400}, &(0x7f0000003380)={[0x1838]}, 0x8) sendto$x25(0xffffffffffffffff, &(0x7f00000033c0)="1c6c306527e15bc6238055b002ddd9253c49a2f4376d67ded9daa6660981d1c350003f9b25068ed0f8f530fb", 0x2c, 0x4000014, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000003400)={{r12}, "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"}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) 1.457044599s ago: executing program 1 (id=5837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="14", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0d}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 1.389938936s ago: executing program 6 (id=5838): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4040840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r4, 0x307fd3c255191db1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fcff00ff", @ANYRES16=r4, @ANYBLOB="000226bd7000fedbdf25050000000c0006000300000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.287166775s ago: executing program 1 (id=5839): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 1.127569318s ago: executing program 6 (id=5841): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/163, 0xcc}, {&(0x7f0000002580)=""/4106, 0x100a}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f00000001c0)={'veth0_to_bridge\x00', @ifru_settings={0xb9e5, 0xf, @fr=&(0x7f0000000180)={0x7, 0x0, 0x6, 0x762d, 0x40, 0xfffe, 0xd2}}}) 1.104395381s ago: executing program 1 (id=5843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@newtfilter={0x50, 0x2c, 0x609, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x9}, {0x300, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "54c56911865797bec18298086cd93ad8"}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 995.441817ms ago: executing program 1 (id=5844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000032e1481a1a674ffe8ba4c2ddb4a65fc7100bf6"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000180)=""/32, &(0x7f00000001c0)=0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010427fd7000fdffffff00000000", @ANYRES32=r0, @ANYBLOB="29000000000400001c00128009000100626f6e64001000000c00028008001f0004"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000032e1481a1a674ffe8ba4c2ddb4a65fc7100bf6"], 0x50) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000180)=""/32, &(0x7f00000001c0)=0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000200)=0x1, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010427fd7000fdffffff00000000", @ANYRES32=r0, @ANYBLOB="29000000000400001c00128009000100626f6e64001000000c00028008001f0004"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 847.611872ms ago: executing program 6 (id=5845): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200)='bond0\x00', 0x1c3000, &(0x7f0000000240)={@align=0x6, {0x7, 0x44a8, 0x2, 0x7}}, 0x8, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x800}) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x0, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x29) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route_sched_retired(r0, &(0x7f00000010c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f00000007c0)=@newtclass={0x8a0, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x1, 0xa}, {0xfff1, 0x7}, {0xe, 0x3}}, [@c_cbq={{0x8}, {0x85c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x4}, 0xffffffdf, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0x7, 0x7, 0xfff5, 0x4400ce04}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1f, 0x1, 0x13, 0x4, 0x7429, 0x40, 0x1, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x3, 0x951e, 0x5, 0x800, 0x6, 0x1, 0x9, 0x2, 0x0, 0x0, 0x5e, 0x10001, 0x5, 0x7, 0x7, 0xf, 0x5, 0xfffffff8, 0x200, 0x7, 0x6, 0x800, 0x1ff2, 0x6, 0x8, 0xfff, 0x400, 0x7, 0x7, 0x101, 0x4, 0x8000, 0x4, 0x7, 0x4, 0x3, 0x400, 0x4, 0xa7e, 0x2, 0x7, 0x7, 0x9, 0xb, 0x3, 0x432a754f, 0x4, 0x0, 0x9, 0x2, 0x1, 0x3, 0x3, 0x10000, 0x2, 0x4, 0x5, 0x7, 0xd, 0x1, 0x4, 0x401, 0x40b86757, 0x3, 0x7, 0x2, 0x9d, 0x69, 0x2, 0x0, 0xa16f, 0x57, 0x9, 0x3, 0x6, 0x3c, 0x46, 0x9, 0x2, 0x1, 0x0, 0x72d, 0x0, 0x0, 0x0, 0x5, 0x7, 0x1000, 0x28000000, 0xe9, 0x8, 0x100, 0x6, 0x340, 0x5, 0x4, 0xa, 0xf720, 0x2, 0x3, 0x7, 0xd, 0x9, 0xc6, 0x0, 0x2, 0x8, 0x10001, 0x8, 0x0, 0x1, 0x1, 0x9, 0x7, 0x7f, 0x3, 0x0, 0x7f, 0x4, 0xfff, 0x4, 0x200, 0x4c5, 0x0, 0x6, 0x7ff, 0x3, 0x400, 0x1, 0x7fff, 0x400, 0x7fffffff, 0x22, 0x9, 0x9, 0x1be5, 0x8, 0xfffffff9, 0x4, 0x5, 0x7, 0x2, 0x5, 0x3, 0x8000000, 0x9a1, 0x5, 0x5, 0x813d, 0x3, 0x80, 0x0, 0x1000, 0x2, 0xfffffffd, 0x401, 0x8, 0x10000, 0xfffff682, 0x1ff, 0x5, 0x5, 0x7c9, 0xffff5d30, 0x2, 0x1, 0x6, 0xe28a, 0x81ec, 0x8, 0x9, 0x2, 0x0, 0x2, 0x2, 0x6db9, 0x6, 0x7, 0x8, 0x81, 0x0, 0xabd7, 0xfffffff2, 0x1471, 0x0, 0x1, 0x2, 0xed, 0x101, 0xffffff01, 0x3, 0x45712361, 0x5, 0x9, 0x80000000, 0x1, 0x7, 0x7, 0x3, 0x10000, 0xba, 0x2, 0xad44, 0x2, 0x7c6, 0x401, 0x7, 0x3, 0xffff3bb6, 0x3b95, 0x8, 0x3, 0x0, 0x62f34c20, 0xb, 0x80000001, 0x7, 0x8, 0x3, 0x81, 0x3, 0x0, 0x1, 0xfffffff5, 0x8, 0x400, 0x7f, 0x7fffffff, 0x40, 0x9, 0x154, 0x10001, 0x5, 0x37a2, 0x4, 0x7c38, 0x8, 0x3, 0x6, 0x3, 0x10001, 0x81, 0xa, 0x7a2b, 0xeb, 0x6, 0xa, 0x10001, 0x1, 0x4, 0xee6, 0x5, 0x6, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x10000, 0x5, 0x6, 0x4, 0xffffffff, 0x1, 0x5, 0x9, 0xd82, 0x8, 0x10001, 0xde3, 0x3, 0x9, 0x800, 0x2, 0x0, 0x6, 0x1000, 0x2, 0x200, 0x10000, 0x5, 0x2, 0x3, 0x8, 0xbed, 0x1, 0x3, 0x2, 0x10001, 0x9, 0x0, 0x800, 0x4, 0x9, 0x10001, 0x1, 0x8, 0x2, 0x0, 0x2, 0x10, 0x757, 0x1, 0x9, 0xff, 0x8, 0x1, 0x9, 0x5, 0x70, 0x80, 0x5, 0x21, 0x2, 0x3, 0x8, 0x0, 0x5, 0x2821, 0xde3c, 0xe, 0x8, 0x40, 0x4, 0x7fffffff, 0x1, 0x0, 0x5, 0x0, 0x6, 0x9, 0x2, 0xa, 0x4, 0x4, 0x6b3, 0x4, 0xa9, 0xc092, 0x0, 0xfffffffb, 0x1, 0x4827, 0x0, 0x0, 0xffff, 0x5, 0x3, 0xbc, 0x7, 0xa, 0x0, 0x9, 0xff, 0x2, 0x6, 0x8, 0x22, 0x7, 0xfffffffa, 0xd6d9, 0x3e8d, 0x3, 0x68ec, 0x4, 0xfffffff9, 0x3, 0x8, 0x6, 0x3, 0x1, 0x5, 0xfffffff7, 0x1000, 0x943, 0x5, 0x8, 0xc, 0x0, 0x3, 0x7f, 0x5, 0x886a, 0x4, 0x2, 0x75, 0x1, 0x7fffffff, 0xa, 0x6, 0x352ab497, 0x414, 0x92, 0xffff, 0x1, 0xc7f, 0x9, 0x5, 0x4, 0xffffffff, 0x3, 0x2, 0x400, 0x0, 0x6, 0x6bd6, 0x3, 0x1, 0x5, 0xf0, 0x7, 0x1, 0x65, 0x5, 0x168, 0xec, 0x4, 0x5, 0x1, 0x3, 0x2, 0x622, 0x3, 0x5da, 0xc93e, 0x2, 0x2, 0x2, 0x2, 0xfffff800, 0x100, 0x5, 0x80, 0x0, 0x5, 0x9, 0x1d9e, 0x4, 0x0, 0x1, 0x10000, 0x1, 0x3, 0xc, 0x4, 0x3, 0x6, 0x5, 0x3, 0x4, 0x9, 0xfffffff9, 0x3, 0x9, 0x80000000, 0x7, 0xa, 0xfffffffd, 0xf59, 0x9, 0x4, 0x165, 0x0, 0x7, 0x1, 0x3, 0xe99, 0x2, 0xfffffffc, 0x8bd, 0x8, 0x100, 0xa, 0xd5, 0x3, 0x8, 0x7f, 0x800, 0x0, 0x1, 0x8000, 0x100, 0x4, 0x8, 0x9, 0xf, 0x6, 0x7fffffff, 0x4fdbd546, 0x898, 0x80000000, 0x3, 0x6, 0x4, 0x6b5, 0x5a19, 0x15, 0x7, 0x8, 0x8, 0x5, 0x1ff, 0x36a9, 0x1bfc, 0x2, 0x0, 0x6, 0x6e4, 0x6, 0x3, 0x0, 0x6, 0x9f1]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x33, 0x1, 0x1e, 0x1, 0xfffffff1, 0x6cdcdcf5, 0x4, 0xf}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x44004049}, 0x20008044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001100)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001400)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0xe, 0x0, &(0x7f00000001c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x50}}, 0x0) 847.162562ms ago: executing program 0 (id=5846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000540)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 782.666528ms ago: executing program 7 (id=5847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x3d49) read$alg(r3, &(0x7f00000005c0)=""/116, 0x74) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000040)={@initdev, @multicast2, @dev}, &(0x7f0000000080)=0xc) 671.162196ms ago: executing program 0 (id=5848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001804090400000000000000000a001400"/36], 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001804090400000000000000000a001400"/36], 0x24}}, 0x0) 567.710327ms ago: executing program 1 (id=5849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x73009}}, 0x20}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000580)={0xa, 0x4e21, 0xfa, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}, 0x1c) r4 = getuid() r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000d7000000200000003500feff2000000095"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xacf}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x1f0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_comp={0x100, 0x3, {{'deflate\x00'}, 0x5c0, "c1d6ddea2107fc6606bb3ea1eabaae35882fe96bfccc27ab145dc0d65abe14af5e74471861e3924870a381a683c5fe36bba371d764370446a971da6a0bf904f3f5bbdaec84db5520fce8938b51dc9b4da44bebe47eee6166120c7b3a51e17b057c3037549b8f4e31a52a6119f0acf8f1d815960359e731df7f82cf0b1ecb81696a22ad0f634ecfa71a2a280c2db0082a3593bc30af61fbd341cc356841a5d71f2165483b98f3ae65f2b6eb7429fd2575d6b3869b0d223d5a"}}]}, 0x1f0}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 564.088798ms ago: executing program 6 (id=5850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) 562.298035ms ago: executing program 0 (id=5851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000308000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x3352f000) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r3 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x40010040, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL]}, 0x54}}, 0x0) 509.439866ms ago: executing program 5 (id=5852): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-generic)\x00'}, 0x58) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) (rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000680)=""/78, &(0x7f0000000700)=0x4e) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x6, 0x3, "e8f6"}]}]}, 0x40}}, 0x0) (async, rerun: 32) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) (rerun: 32) write(r2, &(0x7f0000000240)="4c00000011000f140011000200000f0002000000200000", 0x17) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x2, 0x401, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xc4}, {0x7, 0x0}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 460.608075ms ago: executing program 0 (id=5853): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x8000}, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) getsockopt$inet_buf(r0, 0x0, 0x2b, &(0x7f0000000e40)=""/34, &(0x7f0000000e80)=0x22) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000440)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)="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", 0x660}], 0x1}}], 0x1, 0x20000046) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f0000000140)="e607ffff", 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) 200.25952ms ago: executing program 6 (id=5854): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x454, 0x30, 0x1, 0x0, 0x0, {}, [{0x440, 0x1, [@m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0xf4, 0x1a, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2e543b, 0x7, 0xd, 0x9}, 0x99c6cbe97148e9f8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x4, 0x0, 0x10, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa03, 0x1, 0x2, 0xb, 0x4}, 0x2}}]}, {0x65, 0x6, "fa3326201e546cf170e765960887e69f57e6b9731e64ae1bd82099c4fe902d57a45a6c324ccba646b3b43a8bcec023caeedffde86e84dfd1c434b522d2108c505c642aca96d42de6d4f44d563ca4c7c502c9dfc93172a37d4fb536318a6825f5bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x30c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x2e4, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x454}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000001000000000e00000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001400000000014000300"], 0xac}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a3f1800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 199.839904ms ago: executing program 5 (id=5855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="87f5d2a340fd", 0x6}], 0x1}, 0x8010) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x44800) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x4, 0x0, 0x0, 0xa, 0x1}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @const={0x9, 0x0, 0x0, 0xa, 0x2}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000200)=""/91, 0x4b, 0x5b, 0x0, 0xfffffffd}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffeb6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) 198.992498ms ago: executing program 7 (id=5856): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0xfe33) readv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)=""/15, 0xf}], 0x2) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="efce26262f9664e339bcfe37d927424bbfc67f97fa792b31ce79d882", 0x1c}, {&(0x7f0000000640)="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", 0x264}], 0x2) 196.719982ms ago: executing program 0 (id=5857): r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x10, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), 0x237}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r5, 0x0, 0x30, 0xc, @void}, 0x10) (async, rerun: 64) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000980)={r0, &(0x7f0000000880)='-&:(\x00', 0x8180, &(0x7f00000008c0)={@align=0x6, {0x1, 0x4000, 0x1, 0x9}}, 0x52, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x6}) (async, rerun: 64) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x61, '\x00', r1, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xa, 0x10001, 0x5}, 0x10, r4, r5, 0x4, &(0x7f0000000b40)=[r6, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000b80)=[{0x0, 0x5, 0x3, 0x8}, {0x2, 0x4, 0xd, 0xa}, {0x5, 0x5, 0xe, 0xa}, {0x0, 0x2, 0xa, 0x2}], 0x10, 0x2}, 0x94) (async) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 119.644265ms ago: executing program 5 (id=5858): syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xb, 0x9, 0x3, 0x2000000000000119, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(0x0, 0x0, 0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000200)={{0x84, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e20, 0x3, 'fo\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x80000001, 0x2, 0x36}}, 0x44) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0xffff, 0x103, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000500)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000540)=[{{&(0x7f0000000600)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f00000007c0)=""/259, 0x103}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/250, 0xfa}, {&(0x7f0000001b00)=""/12, 0xc}, {&(0x7f0000001b40)=""/138, 0x8a}, {&(0x7f0000001c00)=""/255, 0xff}, {&(0x7f0000001d00)=""/190, 0xbe}], 0x9}}], 0x1, 0x2040000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)) 118.385337ms ago: executing program 6 (id=5859): r0 = socket$inet6(0xa, 0x1, 0x32d) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f00000000c0)=@delchain={0x2228, 0x65, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0x8}, {0x9, 0xfff2}, {0x9, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xf0, 0x2c}}, @TCA_RATE={0x6, 0x5, {0xd1, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x21a4, 0x2, [@TCA_FW_ACT={0x218c, 0x4, [@m_pedit={0x1ed8, 0x12, 0x0, 0x0, {{0xa}, {0x1dcc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xba0aa50ed6690337}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x8000, 0x7, 0x1, 0x8, 0x9}, 0xa9, 0xfd, [{0x6, 0x8, 0x7, 0xf3, 0x1, 0x7fff}, {0x8c32, 0x3, 0x5, 0x12, 0x6, 0x7}, {0x401, 0x60000, 0x5, 0x0, 0x101}]}, [{0x3ff, 0x6, 0x753, 0x5, 0x4, 0xffff}, {0x7c, 0x5, 0x835, 0x6, 0x1, 0x2}, {0x94b, 0x4, 0x0, 0xda, 0x9d, 0x80}, {0x9, 0x7, 0xc3f, 0x6, 0x5cd, 0x9}, {0x0, 0x0, 0x541, 0x4, 0x3ff, 0x3a6}, {0x7, 0xe, 0xa, 0x7f, 0x40, 0xfffff697}, {0x7fffffff, 0x319, 0x8, 0x2, 0x1, 0x5}, {0x2, 0x9, 0x4, 0x4, 0x7, 0xb697}, {0x2, 0x20000000, 0x6, 0x100, 0x6, 0x80000001}, {0x5, 0xf267, 0x70e, 0x4, 0x2, 0x60}, {0x7, 0xafa, 0x2, 0x1, 0x2, 0x4}, {0x81, 0x7, 0x9, 0x5, 0x8, 0x4}, {0x30b34318, 0x0, 0x3, 0x7fffffff, 0x1, 0x3}, {0x3ff, 0x83f, 0x8, 0x0, 0xf, 0x4489}, {0x7, 0x80000001, 0x7, 0x3, 0x6}, {0x9, 0x6, 0x7fff, 0x6, 0x3, 0x80000001}, {0x7, 0x1, 0x8, 0x5, 0x8, 0x3}, {0x9, 0xfffffffc, 0x8, 0x1, 0x7, 0x1}, {0x7, 0x0, 0x3, 0x4, 0x4000000, 0xfffffffb}, {0xffffffff, 0x3, 0x4, 0xf, 0x1, 0x83}, {0x4905, 0x7fffffff, 0x2, 0x4, 0xa0000, 0x6}, {0x7ff, 0x3, 0x2, 0x4, 0xf, 0x3}, {0x8, 0x1, 0x9, 0xfffffffd, 0x6, 0xfffffffc}, {0x0, 0x100, 0xfffffff8, 0x8, 0x7, 0xe}, {0x0, 0x1, 0x7, 0x9, 0x1, 0x7fffffff}, {0x2, 0xf, 0x5d, 0xfffffde5, 0x8000, 0x4}, {0xcf1, 0x1, 0x8, 0x0, 0x2, 0x9}, {0x8001, 0xa4, 0xa, 0x8, 0x0, 0x56}, {0x8, 0x6, 0x8f3, 0x1, 0xfffffffe, 0xfffffff8}, {0x3, 0x8, 0xd2, 0x4, 0x0, 0xd258}, {0x2e79, 0x5, 0xfb, 0x1, 0xf15d, 0x800}, {0x0, 0x0, 0x7ff, 0x80, 0xffffff25, 0x80}, {0x400, 0x7, 0xfff, 0x8, 0x1, 0xa98}, {0x6, 0x3, 0x6, 0x9, 0xfffffff6, 0x10}, {0x400, 0x6, 0x2, 0x9, 0x5, 0x1000}, {0x5, 0x5, 0x1, 0x3c000, 0x49, 0xa}, {0xa, 0x1, 0x21cf, 0x6b2c, 0x4, 0x6}, {0x529, 0x3, 0x1, 0x8, 0x7}, {0x8, 0x68, 0xd63, 0x6, 0x7ff, 0x1}, {0xb, 0xfff, 0x3, 0x2, 0x6, 0x5}, {0x1, 0xffffff7f, 0x0, 0x1, 0x3, 0x7}, {0xfffffff9, 0x1, 0xc0, 0x1, 0x100, 0x5}, {0x101, 0x1, 0x3, 0x0, 0x3, 0x2}, {0x8, 0x6, 0x8, 0x0, 0x1, 0x1}, {0xffffff01, 0x2, 0x4, 0x9, 0xf, 0x3}, {0x3, 0x7, 0x6, 0x5, 0x3, 0x7d57}, {0xff, 0x7, 0x100, 0x7, 0xb57, 0x7}, {0x3ff, 0x2, 0x1ff, 0x7, 0x4, 0x8}, {0x200, 0x7, 0x0, 0x3, 0x0, 0x6}, {0x32, 0x2, 0x3, 0x1ff, 0x2298, 0x1}, {0x2, 0x5be, 0x5, 0x0, 0xfffffffc, 0x8}, {0xd5, 0x4, 0x7, 0x5, 0xd, 0x9}, {0xc6cf4420, 0x1, 0x8, 0x401, 0xb, 0x1}, {0x8, 0xf1, 0xc62, 0x4, 0x81, 0x80000000}, {0x626e, 0x800, 0x21b8, 0x6, 0x1000, 0x51}, {0xae2, 0x7, 0x6, 0x5, 0x80000000, 0x5}, {0x0, 0x7ff, 0x8, 0x3, 0x0, 0x6}, {0x9, 0x8, 0x8, 0x842, 0x2, 0x5}, {0x4, 0x20000000, 0x3, 0x101, 0x5, 0x800}, {0x81, 0x7fffffff, 0x21a0, 0x5, 0x0, 0x5}, {0x3, 0x7, 0x3, 0x81, 0x45, 0x8001}, {0x0, 0x4, 0x800, 0xfff, 0x10000, 0x200}, {0x24c3, 0xc39, 0xa000, 0x7, 0xc, 0xfffffff2}, {0x7699, 0x57, 0x5, 0x1ff, 0x6, 0x2}, {0xffffffff, 0xff, 0x0, 0x1000, 0x10001, 0xffff00}, {0xc, 0x8, 0xf7c, 0x8, 0x7, 0xc}, {0x9, 0xffffffff, 0x5, 0x8, 0x6, 0x7}, {0x3, 0x98, 0x0, 0x8, 0x81, 0x6}, {0x5, 0xd62, 0x6, 0x8088, 0x200, 0x7}, {0xf258, 0x6, 0x7, 0x4, 0x9, 0x6}, {0x4, 0x1, 0x8, 0x85, 0xfffffffe, 0x7ff}, {0x7fff, 0x6, 0x39f7798b, 0x5, 0x0, 0x81}, {0x1000, 0x6, 0x6, 0x2, 0x1, 0x7}, {0xc8, 0x7, 0x1, 0x8001, 0x0, 0x76}, {0x9, 0x10001, 0x6, 0xd3c3, 0x8}, {0x1, 0x6, 0x7fff, 0x6, 0x5, 0x8000}, {0x8, 0x3, 0x5000000, 0x7, 0x4f0e3d8b, 0x7f}, {0x3, 0x8, 0xfff, 0x90000000, 0x3, 0xb0e}, {0x10, 0x80000000, 0x9, 0xe, 0xffffffff, 0x3}, {0xfffffffc, 0x6, 0x90f, 0xe, 0x48, 0x6}, {0x2e4d000, 0x2, 0x6, 0x2, 0x0, 0x5}, {0x7, 0x8, 0x5, 0x3ff, 0x101, 0x40}, {0xe, 0x9, 0x6, 0xcb43, 0x8b, 0x200}, {0xc67, 0x9, 0x290c, 0x7, 0x2, 0x9e}, {0x8, 0x8, 0xf76e, 0x3d, 0x0, 0x3}, {0x8, 0xa8f, 0x4b7, 0x1, 0xd, 0xe}, {0x5, 0xaf, 0x3d00000, 0x1, 0x8, 0x10001}, {0xffffff01, 0x10001, 0xa, 0x5, 0x81, 0x5}, {0xfffffff7, 0xc044, 0x7, 0x4, 0x400, 0x9}, {0x6, 0x1, 0xc4, 0x3ff, 0x6, 0x23d0000}, {0x4, 0x25, 0x1, 0xff, 0x81, 0x3}, {0x3, 0x1, 0x7, 0x9, 0x9}, {0x59b, 0x6f7, 0x631, 0x9, 0xd, 0x33}, {0xfffffff4, 0x6, 0xb2, 0x80000000, 0xf, 0x4}, {0x9, 0x401, 0x8000, 0xffffffff, 0x5, 0x1000}, {0xb, 0x8, 0x181a, 0x7fff, 0x10001, 0x1}, {0x0, 0x7, 0x7, 0xfffffffc, 0xde, 0x5}, {0xffffff80, 0x9, 0x7, 0x8920, 0x1, 0x40}, {0x9e1, 0x0, 0x5, 0x3, 0xbb, 0x7e5e}, {0x9, 0x3ff, 0x886, 0x70ea7990, 0x5, 0x7}, {0x5f4, 0x0, 0x3, 0x2, 0x9, 0x9}, {0x1, 0x2, 0xbf, 0x9b, 0xff, 0x3}, {0x4, 0x8, 0xc, 0xff, 0x5, 0x7}, {0x80000000, 0x6, 0x6, 0x6, 0x83, 0x4}, {0xb9, 0x18, 0x750, 0x2, 0x8, 0xc}, {0x10000, 0x5, 0x81, 0x3, 0x3, 0x7}, {0x8000, 0x6, 0x6, 0xfff, 0xced, 0x8001}, {0x5, 0x8e, 0x35bc, 0x2, 0x37c, 0x100}, {0x0, 0x3, 0x5, 0x4, 0x893, 0xc52e}, {0x7fffffff, 0x90, 0x64028215, 0x11c7, 0x400, 0x7fffffff}, {0xd30b, 0x4, 0x3, 0x9, 0x3, 0xffffffff}, {0x5, 0x8, 0x1, 0x80000001, 0x80000000, 0x8001}, {0x9, 0x0, 0xbcfe, 0x6, 0x8, 0xde3e}, {0x0, 0xb30bbdef, 0x1, 0x2, 0xfffffff7, 0x3}, {0x3, 0x7, 0x0, 0xbc37, 0x8, 0x7}, {0xffff8001, 0xc, 0x7, 0xfffffffa, 0xd, 0x4}, {0x9, 0x5, 0xe, 0x400, 0xa, 0x4178}, {0x2, 0x5, 0x4, 0x67d, 0x0, 0x1ff}, {0x0, 0x6c0, 0x5, 0x4, 0x2, 0x2}, {0x5, 0x1, 0x8, 0xa, 0xc0, 0x6}, {0x2fe70b8c, 0x6, 0x400, 0x7, 0x9, 0x3}, {0xfffffffd, 0x2, 0x3, 0x0, 0x21b, 0x6}, {0x6, 0x427, 0x3, 0x847, 0xff, 0x3}, {0x4, 0x7, 0x3, 0x80, 0x9, 0x8}, {0x5, 0x51, 0x2, 0x9, 0x1ff, 0xfffffff9}, {0x81, 0xfffffff7, 0x80000001, 0x8, 0x8057, 0x8001}, {0xd53, 0x40, 0x80000000, 0x6, 0x1, 0x2}, {0x7f, 0xd, 0x7, 0x10, 0xfff, 0x7fffffff}], [{0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x5}, {0x3, 0x313f73f031851ee9}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0xf036a966333b8402, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x7}, {0x7}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x3}, {0x2}, {}, {0x1}, {0x2}, {0x3}, {0x5}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x975981afba6619eb}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x4}, {0x5}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4740621f81cd26eb, 0x1}, {0x0, 0x2}, {0x4}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3, 0x6, 0x2, 0x4, 0x80}, 0x0, 0xeb, [{0x8, 0x997, 0x7, 0x365d, 0x2, 0xc529}]}, [{0x1, 0xfffffff2, 0xffff, 0x1, 0xa03, 0x2}, {0x5, 0x9, 0xa95c, 0x333, 0x5, 0xc3}, {0x4, 0x505, 0x0, 0x4, 0x3, 0x7}, {0xfffffff9, 0x9, 0x9, 0x1, 0x0, 0x6}, {0x9, 0x1, 0x6, 0xffffffff, 0x40, 0x101}, {0xfffff03c, 0xd300, 0x1, 0x8, 0x2, 0x5}, {0x401, 0xff, 0x8, 0x2677, 0x80000000, 0x1}, {0x1, 0x9, 0x1, 0x4, 0x7b6, 0x2}, {0x3, 0x6, 0x1, 0x0, 0x101, 0x6}, {0x400, 0x0, 0x7, 0x2, 0x9, 0x6}, {0x81, 0x401, 0x6, 0x8, 0x80000001, 0x7}, {0x853, 0xc, 0x10001, 0x721f, 0x3, 0x5}, {0x9, 0x17, 0x2, 0x0, 0x628}, {0x4, 0x7f, 0xffff7d6e, 0x9, 0x1}, {0x1, 0x0, 0x4, 0x0, 0x2, 0x9}, {0x0, 0x42e6, 0x400, 0x80000000, 0x2, 0x3}, {0x101, 0x0, 0xaff3, 0x80, 0x8, 0x3c02}, {0x7, 0x97daab93, 0x45f2, 0xa, 0x200, 0x2d}, {0x0, 0xfffffe01, 0x7, 0x1, 0x5}, {0x7ff, 0x3, 0x0, 0x7, 0x8}, {0xffffffff, 0xd, 0x2, 0x5, 0xd}, {0x6, 0x7fffffff, 0x81, 0xca8d, 0x2, 0x24}, {0x3, 0x8, 0x2, 0x25bdfe40, 0x80000001, 0xd7c}, {0x2, 0x6, 0x0, 0x7, 0xa000000, 0x4}, {0xfffffd03, 0x6, 0x10000, 0xffffffff, 0x7, 0x1}, {0xff, 0x7, 0x40, 0xed27, 0x1, 0x5f14a775}, {0x7ff, 0x6, 0x4818, 0x5, 0xb, 0x5}, {0x7, 0x9, 0x101, 0x8, 0x6, 0x7f}, {0x3, 0xfffffff4, 0x7, 0x1, 0x0, 0x3}, {0x6, 0x0, 0x66e, 0x6, 0x681, 0x8}, {0x400, 0x34e6, 0x5, 0xafa4, 0x8, 0x9}, {0x52fb, 0x922, 0x7, 0x0, 0x2, 0xe8}, {0x6, 0xfffffffa, 0x3, 0x3, 0x2, 0x5}, {0x400, 0xd1, 0xfffffffb, 0x5, 0x5, 0x3}, {0x3, 0x3db, 0x3, 0x7, 0xfffffffc, 0x5}, {0x3, 0x9600, 0x2, 0x5, 0x4, 0x6}, {0x2, 0xd138, 0xfffffffe, 0x6, 0x80000001, 0x9}, {0x4, 0x80000000, 0x1ff, 0x0, 0x0, 0x3b1}, {0x7, 0x2, 0x9, 0x4, 0xfffff3a3, 0x6}, {0x17391452, 0x5, 0x3, 0x40, 0x2, 0x4}, {0x20002000, 0x3ff, 0x1, 0x7, 0x3ff, 0x4}, {0x8001, 0x7fffffff, 0x8, 0x7, 0x2, 0x1}, {0x9, 0x9, 0x1, 0x1a95, 0x6, 0x81}, {0x10000, 0x1, 0x10001, 0x0, 0x6, 0x8}, {0xb7, 0x7ff, 0xd, 0x3, 0x1000, 0x2}, {0x10, 0x59, 0x2, 0x10001, 0x0, 0xfffffff4}, {0x7983, 0x7, 0xf0e0, 0x3, 0x9, 0x2}, {0x9, 0x73, 0x10, 0xfffffff9, 0x5, 0x1}, {0xa, 0x0, 0x8, 0x7, 0xfffffffb, 0xc}, {0x9, 0x2, 0xf, 0x6, 0x2, 0x101}, {0x676fc1e3, 0x0, 0x1000, 0x9, 0x9, 0x6}, {0x3, 0x2, 0x9, 0x1, 0xb46, 0x700000}, {0x7fffffff, 0x8, 0x86ee, 0x80000000, 0x10, 0x3}, {0x8000, 0x735, 0xfffffff8, 0x9, 0xf}, {0xfff, 0xcece, 0x3, 0x10, 0x3, 0x100}, {0x401, 0x0, 0x100000, 0x5, 0x6, 0x180}, {0xff, 0xba, 0x9, 0x2, 0x80000000, 0x1000}, {0x10001, 0x8, 0x3, 0x6, 0x5, 0x7}, {0x25, 0xb5, 0x0, 0x8000, 0x4, 0x4}, {0x3, 0x6, 0x9d73, 0x8, 0x8, 0x4}, {0x9, 0x0, 0x0, 0x9, 0x608, 0x5}, {0x8, 0x8, 0x3ff, 0x7fffffff, 0xfffffffc, 0x1c000000}, {0xb, 0xfffffffc, 0x0, 0xa, 0x0, 0x3}, {0x800, 0x7732, 0x0, 0xfffffff7, 0x1, 0x6}, {0x800, 0x4, 0xa, 0xde4, 0x7, 0x81}, {0x0, 0x9d9, 0x6d, 0xffffff4a, 0xa, 0x7fff}, {0x7, 0x477b1609, 0x8, 0x8, 0x7, 0x80000000}, {0x5e6b, 0xfffffff3, 0x1, 0x10001, 0x4, 0x8}, {0xffffffff, 0x4, 0x3ff, 0x5331, 0x100, 0xd7}, {0xfffff17f, 0x7, 0xc2c, 0x4, 0x2, 0x7}, {0x400000, 0xd4d, 0xfffffffc, 0xb6c, 0x10, 0xd0e7}, {0x2fe, 0xffff, 0x7f, 0xe549, 0x3, 0x56}, {0x7, 0x1ff, 0x7ff, 0xa, 0x6, 0x1ff}, {0x9, 0x7, 0x9, 0x1ff, 0x89, 0x9}, {0x759, 0x668d, 0x32a9, 0xd8, 0xffffff26, 0x1000}, {0x7, 0x400, 0x6, 0x3, 0x5, 0x3}, {0x6, 0x7fffffff, 0x8, 0x7, 0x10000, 0x6}, {0x0, 0x4, 0x50d, 0x8, 0x5, 0x8}, {0x9, 0x80000001, 0x3ff, 0x13f, 0x9, 0x6}, {0x3, 0x7fffffff, 0x7, 0x2, 0xc6ad, 0x315ed904}, {0xf3, 0x4, 0x1, 0xbb, 0x2eac6d18, 0x5}, {0xfffffffd, 0xa0000000, 0x10001, 0xc, 0x3, 0x5}, {0x2, 0xae36, 0x6, 0x1, 0x80000001, 0x80000000}, {0x2, 0x6, 0xb607, 0x9, 0x5, 0x2000000}, {0x9, 0x3, 0xffb, 0x9, 0x1, 0x9}, {0x10, 0x2, 0xffffffff, 0x5, 0x45, 0xe9d5}, {0x18d, 0x4, 0xffffffff, 0xd528, 0xa, 0xc0000}, {0xcd8d, 0x8, 0x9, 0xb0e, 0x776, 0xfffffffd}, {0x80, 0x4, 0x1, 0x5, 0x4, 0x5}, {0x3, 0x4, 0x9, 0x2c2f, 0xd5b7, 0x1ff}, {0x5, 0x4, 0xfffffe01, 0xa0000, 0x0, 0x4}, {0x2, 0x6, 0x2, 0xfffff63e, 0x200, 0x7}, {0x6, 0xffffffff, 0x45, 0x8, 0x0, 0xffffffff}, {0x509, 0x6, 0x0, 0x10, 0x3, 0x6}, {0x80000001, 0x2, 0x8e, 0x5, 0x3}, {0x90, 0x1, 0x10001, 0x3, 0x5}, {0x6, 0x7, 0xfffffff7, 0x3, 0xffffb59d}, {0x3, 0x80, 0x1, 0x20c96f12, 0xfffffff9, 0x400}, {0x46, 0x8, 0x7fff8, 0x7, 0x401, 0x3}, {0xfffffff8, 0x9, 0x3, 0x4, 0xf, 0x52}, {0x9, 0x7b45, 0x9, 0x2, 0x7fff, 0x3}, {0x1, 0x5e707520, 0xffffff01, 0x1ae, 0xffffffff, 0x5}, {0x1000, 0xffff3073, 0x3, 0x1, 0x8, 0x9c94}, {0x10, 0x3, 0x40, 0xcd9, 0x8, 0x2b3}, {0x6, 0x8, 0xfffff7c3, 0x7a, 0x6}, {0xe, 0x0, 0x7f1, 0x2, 0x7, 0x8}, {0x5, 0x38000, 0xa5, 0x3, 0xba1c, 0x6}, {0x10, 0x5, 0x4, 0x19204aa1, 0xffff, 0x7fff}, {0x10, 0x2, 0x0, 0x4, 0x5, 0xc0}, {0x7, 0x8, 0x6, 0xb, 0x5f9c470e, 0xa5}, {0xfff, 0x0, 0xc, 0x1, 0x4, 0x2}, {0x7, 0x10, 0x75, 0xa6, 0x1, 0x401}, {0x1, 0x6, 0x2e2b, 0x1, 0xe, 0x1}, {0x3, 0x100, 0x3, 0x4, 0x2, 0x4}, {0x8, 0x3, 0x0, 0x5, 0x6, 0x1}, {0xcf6, 0x4, 0x7, 0x3, 0x7fffffff}, {0x9, 0x6, 0xfffeffff, 0x7b, 0xc, 0xca}, {0x2a000000, 0x6, 0xfffffffd, 0xc600, 0x5, 0x4}, {0x6, 0x0, 0xfed, 0x6, 0x7, 0x5}, {0x8, 0xe, 0x7fffffff, 0xe, 0x8, 0x6}, {0x1, 0x0, 0xffffffff, 0x7fffffff, 0xce, 0x1}, {0x9, 0x1, 0x6, 0x10, 0x1000, 0xa}, {0x5c8dc59b, 0x3, 0x6, 0x4, 0x4, 0x5}, {0x413, 0xc, 0x9, 0x6b2, 0x0, 0x7ff}, {0x2, 0xb, 0x3, 0x2, 0x1, 0xff}, {0x0, 0xddc2, 0x1, 0x6, 0xe, 0xbc}, {0x460c, 0x9, 0xffffffff, 0x5fae, 0x1, 0x7ff}, {0x8, 0x5, 0x0, 0xffffffff, 0xdc173800, 0x800}], [{}, {0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x6}, {0x4}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x4f990bfa7b6a2c3e}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4}, {}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0xecb70c22b68f2f7c}, {0x5}, {0x3, 0x1}, {0x3}, {0x4}, {}, {}, {0x4}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {0x5}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0xda37aca2c905f4d7, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0xe3, 0x6, "07867296cd1bc13a0dffc83b4a7d54d2c8e71d5bbc30da5a0a4980ecff87d8ac5285c4ef852d5dc424529f9d60523647d33730b338d21a5a15c0212ca747ee7dd0a309bb48c0ef02151866251d6b5243afe044513f98f0c76704cbd187622dc5f0a97ab89f3aae6d0303a90d59c45183cb842d7d6a870973fb1b7cca755df43d732fd5ef1989b590e15a1f5a33ef9525de6495313efe26800f4e3109eb7f42b77b2f90e1075e542f5681bc312b67dfdd63e2873cdc8e927cca79383fa608d2ac8b1331f2ba938ef1760189b83c308ad934969ef3975c0ccaf52dd409ab828e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x1a4, 0x1a, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "f2db57b02b263ee665b6910bf31a3d29"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xb7b3}, @TCA_CT_LABELS_MASK={0x14, 0x8, "92ba665751ab935f1a6afc1ae68ba18f"}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "1462fd73cec28960800ed239c298e246"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "5cb60783140b72b1cbf489dd076509e9"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}]}, {0xef, 0x6, "bfc5b8b015c10639d3373a22b020d8df5077f1ee75a0a7707d3f78abb9ac1fa1944fcc4d68dee869537a29e829192dfb7a884cd3408fef7ecac306f409c7da2c964e1f1b919e656193dde0b62238a324095ba61974d95b59107ed65eba3fc681b0accb2adbfc2d37b9c5137601c2bd33f1598e5c87728defbc5b278a204a5ad4317b5c5e1bd0eb5d13729a407738aff5bd2097d194fd23b05ef8f3d8d32d229183a2a2ceff6628028758d61766fb992bb2be015ac0d972a39dd04985effb747c3f371b136c5f38ed28d24d3517cde482aa8c2756c0b7933beb022e9ec006282c4381d473d557ba53f51c33"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x54, 0x0, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0xc, 0x7, 0x9, 0x3ff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xc}}]}, {0x8, 0x6, "15336b85"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xb8, 0x3, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*{\xb0,^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xb3, 0x7, 0x6, 0x9}}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}, @TCA_DEF_DATA={0xb, 0x3, ',-#.#:\x00'}]}, {0x54, 0x6, "70f2b2dcca75b9bc3af962d09b4503a3e94f0c775b74d83e347b1cec9455d7ec1e5dea062ec0edf64c49ff908b85dcda24297ebfd49e2dc0d68d1090ace3dc30caf8b1486273c27b5d1239b3df8c88f7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'dummy0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x14, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xf2}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0xf2}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x2228}, 0x1, 0x0, 0x0, 0x44803}, 0x4) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000002380)={0x362, 0x9, 0xa8dc, 0x7f, 0x9, 0x0, 0x7}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002400)={0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x7, &(0x7f0000002440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xff}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x94ccdd79}]}, &(0x7f0000002480)='syzkaller\x00', 0x3, 0x47, &(0x7f00000024c0)=""/71, 0x41000, 0x22, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000025c0)=[{0x3, 0x2, 0x7, 0x6}, {0x0, 0x4, 0x5, 0x7}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000027c0)={@map=0x1, 0x1d, 0x1, 0xd, &(0x7f00000026c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0], &(0x7f0000002780)=[0x0], 0x0}, 0x40) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=@arena={0x21, 0x0, 0x0, 0x24, 0x20400, 0x1, 0xffffffc0, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) (rerun: 32) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002ac0)={0x6, 0x18, &(0x7f00000028c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002980)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002a00)={0x5, 0xb, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002a80)=[{0x5, 0x2, 0x7, 0xb}, {0x4, 0x3, 0xa, 0x6}, {0x3, 0x5, 0x3, 0x8}]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002800)={@map=r8, r4, 0x22, 0x4, r5, @void, @value=r9, @void, @void, r7}, 0x20) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002b80)={0x0, 0x1}, &(0x7f0000002bc0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000002c00)={r10, 0xffffffffffffffff}, &(0x7f0000002c40)=0xc) connect$inet6(r12, &(0x7f0000002c80)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x3) r13 = socket(0x8, 0x6, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r13, 0x84, 0x25, &(0x7f0000002cc0)={r11, @in6={{0xa, 0x4e21, 0xfb, @empty, 0x80000001}}, 0x6, 0x6cc, 0x1}, &(0x7f0000002d80)=0x90) (async, rerun: 64) ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f0000002dc0)="b3df30345b60c19eb73658ba12c6b2f7d8ce1cdbe587ee00bfc7fb4177eebc319646599cd6ea7210414a2514209e033d5f5ac3d8c07ba8ff3b51cef9") (rerun: 64) ioctl$SIOCX25SCALLUSERDATA(r13, 0x89e5, &(0x7f0000002e00)={0x4c, "eb6608c26c592422fee91ecafeea6d424818a364c594a76aeaf1ce52c531377189a32c80a9ac4f42ffcf4d2a0102d155ca90d1edc5f7b1e5ed28434ee8ad81d2a423876dae7ed662ab6dcba14fdaa0d21db7e47d8a79d153a8dc4794972b04e436d11f4d6aefe1d9c9017004cd3511ea565451a8554dca6b0f3167ac4d576b97"}) write(r1, &(0x7f0000002ec0)="102bae0dd6f2baf029078a78c329c48e2813d287b3b574b5d2801bf5bc35206be37924d4a9260e35b83e390122032c3692d364065464ca8f7bdd27f0f736ab87804bf5b6fd3153fcd57316d0844258dd9bc7d3f23e", 0x55) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002f40)=[@mss={0x2, 0x8000}, @window={0x3, 0x6, 0x8}, @mss={0x2, 0x9}, @sack_perm, @mss={0x2, 0x82}, @sack_perm, @window={0x3, 0xf0, 0x479}], 0x7) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003080)={r1, &(0x7f0000002f80)="7ca7c11e9fe5c262a88dd97453fe16f5f2837b5ad0c3330c742162b7436905cf7af9695a84d58a7345d2cc12acb6e9d4be9bb7b769083259b35f3da30f8790a4d56643fcffc31b7f5dcbde5f1654d2a0fd1d5757a6054bae0d117ecab3f255e26758dae9118caeb264a7de6fd724660f444c58011a65bdedcffa85899b5eb4b5bdbd51130aab7098d91914", &(0x7f0000003040)=""/58}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000030c0)) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003100), r14) (async) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003140), 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r15, 0x8030942b, &(0x7f0000003180)={0x7, {0x8, 0x7, 0x7, 0xf83, 0x2}}) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f00000031c0)={0x0, 0x0, 0x8, 0x7, 0xd9, 0x3}) 18.577744ms ago: executing program 5 (id=5860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000fe119078000000000000000000004e20009c90780100eb00000000007b4b143b746ffd777b1c012bd14efb9f49fcdb8f0842a0b64e07aac28582b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000540)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5d4528bd70a0fedbdf25010000000c0002000100000000800000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0000000400000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) 0s ago: executing program 0 (id=5861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="bc00000021000100fffffffffefffffffe80002eab68116c1df14e19d9bb5771c7000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ac1414aa0000000000000000000000006c010000000000000a000a001c00040000004e204e200000ac1e010100"/116], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000080)="8a79e495a4f60461d1986679c8d427441ddc9b88f893d6fb190e40fe98dda8eabe889b839d5b9b544e75f95f5c60f7c5e6d8ce1b0df47dcfa800b41d02132b91373734cd7586ff1c3ddfc7fbdc17dfb24cbb606635c3361def95a5b88bf35ddc6c8308e7c51b0643dfd299d5", 0x6c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448a4}, 0x5890) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3e8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x7, 0x700, 0x3, 0x7, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x5c, 0x0, [{0x7, 0x11, "c6f6708f948d6c1a6f5f2cd2dbc446"}, {0x7, 0x7, "8586ac11d9"}, {0x0, 0xb, "f7509264fa73cda81c"}, {0x0, 0x9, "35c01e94bd13c8"}, {0x5, 0x9, "e0cadc7a0efaf9"}, {0x7, 0x8, "1f108e784357"}, {0x1, 0xa, "c1b27552fb970d4d"}, {0x0, 0xf, "c2718600053ed157bd3cb86447"}]}, @end, @timestamp_addr={0x44, 0x3c, 0x76, 0x1, 0xb, [{@multicast1, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xd}, {@remote, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7}, {@broadcast, 0x6}, {@local, 0x3}]}]}}}}}) sendmmsg$inet(r5, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000380)="fe61cf87957cc2c4eb0a1a258d48f4ec264532aba8d39729ad0ab99bd903", 0x1e}, {&(0x7f0000000440)="4c33f93ba39995612fdc75481671497b57c8c34ec4625110a5b224a2c5347ee771a8863ccb4a776e6af542af01b299abf498c9e1ad63e0498c6ce6811a51cde969ba9c7d737f6d6bca4395cef7416d04eb93e73bed5fba8f6867efbb67462a584fa355c9ceb118228255161686a98e488d60ddcefd7fe434f79929dd26c231dfb5a8bd8c4f93d99af2621d096a725e4b95d8b3bfa36c5098ca9ec2f4f0f72941edcd1001dd9baee2f822f6e34634433c3f90d0f85b", 0xb5}, {&(0x7f0000000940)="e6bed169c9a67cde1d39d4bc7c7abec6cca8eb765ab437d6b8ba4a446244a88013438d807b6bc90458a610e27a173500f6ad36017746c8608db022c26a92faf1276813531d192545e69087423a196ac25730c60be7509360756c1fb3f72cfc0e04a49c8de155682d117fab489944362668f999c1c7ab3357db3091bd6acd5a6871e77f12a62339cdd88def229fb7f01ad8b6b185bee0061049bd3d2b182d725116fb182d5a4f405c26de733b614ecd65c7fde4330483002012700ac234865751bb68d282a0008e23ec84643e9f", 0xcd}, {&(0x7f0000000a40)="fccbc06dfb025dbad7497eb9a65dd4d832cf0a07c7f30ee2e8f173080d1866aff52b9588dac8c5444ee14adfa9dd50cbe40c4d871b7e6910b2c68fec363b6893a9fd9d83b68507e314e16ff1ac121f7752c005c7e3debc1f9cd3c18e23", 0x5d}, {&(0x7f0000000ac0)="53b371fd6baf0368af1db62264e648cd61388d0001a48b4ba9169f58a556369a053fca703921ff08fd3261aa435943e68cccfd993992b8a4cc925e6ecdd1e85380cc9a1e539766f027dff76fcb05472320bcc4729be6aa952663c50d802fb964829675c80792497eff8335c2bac964fad4748fb49b2396534342f9e1c5ae", 0x7e}], 0x5, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="7f0000010a01010000000000140000000000000000000000020000000400000000000000400000000000000000000000070000009404000094040000441cb593e000000100000005ac141414000100000000000000000003440cc98000000002000000021c000000000000000000000007000000890b4b64010102ac1414aa0000000000"], 0xb0}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="720ddfac4e3ddf36529e5593916c66443661d0cd1af7595f191e9914feb1c39cf0437972d0944027350a90054420a5faf691f3a5af090bb8c48d844bdc4d592757cfce67765f58bee044b0f04de5a1cb86d7152520970522b4e134d56270310ac91f0a18892834b809bdd3509e1ed1c3c2f6143d60e1e86dbdeaf8f8bb0f3ffdcbc4f7fa843024494dff3001aa6867d7465dcb96fc1e8f165040ed0607456d92cf2e8d6f2cb82e032f52191c787e94648eaf4d936bdf61959d1c23b7080521a9410fa6465b6ba67f", 0xc8}], 0x1, &(0x7f0000000f00)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x60, [@rand_addr=0x64010100, @local, @multicast2]}, @ssrr={0x89, 0x27, 0x62, [@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @local, @remote, @rand_addr=0x64010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x26}]}, @lsrr={0x83, 0xb, 0x6c, [@empty, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x1c, [@empty]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xff, [@multicast2]}, @rr={0x7, 0x7, 0xbc, [@private=0xa010102]}, @rr={0x7, 0x7, 0xc0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0x8, "7f6e6fa2254b"}]}}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x44, 0x43, 0x1, 0x7, [{@multicast2, 0x8}, {@private=0xa010101, 0x2}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@multicast1, 0xda1b}, {@loopback, 0x4}, {@local, 0x3}, {@multicast2, 0x1}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xfd, 0x3, 0x3, [{@empty, 0x8}, {@private=0xa010100, 0x84}, {@private=0xa010101, 0x1}]}, @end, @cipso={0x86, 0x2c, 0x1, [{0x4, 0xf, "1acc5ffc9fc9862c5954a0f9d1"}, {0x5, 0x5, 'U(E'}, {0x1, 0xa, "3f9a865b002ed0f3"}, {0x5, 0x8, "70d6152cbaa1"}]}, @noop, @end, @timestamp={0x44, 0x28, 0x8a, 0x0, 0xb, [0x1, 0xb, 0x5, 0x3c, 0x0, 0x8, 0x7, 0x1, 0x0]}, @noop]}}}], 0x150}}, {{&(0x7f00000010c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001100)="74155c421c5220fb4a4bdd4db0fb91caa635f671b1de61ff0f0c0b96a1d4b6df90bee7a6ebbbb2d6df95606f5db33bccbc202f75103317546f108321a4983f8a9bdeef66dd3e151b7f9b4e887bbee8cdc4f8e66ebcd73366113635f283600f1fe9", 0x61}], 0x1}}], 0x3, 0x5) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010800000000000000000a000000050001000700000023a9"], 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x2, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x7, 0xe}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r12, 0x40105870, &(0x7f0000000180)={0x1, 0x2}) sendto$packet(r11, &(0x7f0000000900)="bad330fbc93f0700000000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xdb, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 0][T22888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3909'. [ 739.810432][T22888] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.902476][T22888] macvtap1: left promiscuous mode [ 739.903233][T22888] macvtap2: left promiscuous mode [ 739.905260][T22888] macvtap3: left promiscuous mode [ 740.374828][T22902] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 740.420344][T22915] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3916'. [ 740.450492][T22917] netlink: 'syz.0.3917': attribute type 7 has an invalid length. [ 740.450517][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'. [ 740.450546][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 740.486494][T22917] netlink: 'syz.0.3917': attribute type 7 has an invalid length. [ 740.486519][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'. [ 740.486549][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 740.716338][T22930] sctp: [Deprecated]: syz.0.3923 (pid 22930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.716338][T22930] Use struct sctp_sack_info instead [ 740.716414][T22929] sctp: [Deprecated]: syz.0.3923 (pid 22929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.716414][T22929] Use struct sctp_sack_info instead [ 740.889775][T22938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.963748][T22946] syzkaller1: entered promiscuous mode [ 740.963773][T22946] syzkaller1: entered allmulticast mode [ 741.045705][T22939] syzkaller0: entered promiscuous mode [ 741.045730][T22939] syzkaller0: entered allmulticast mode [ 741.397926][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 741.452758][T22969] netlink: 'syz.2.3934': attribute type 1 has an invalid length. [ 741.519655][T22976] ip6t_srh: unknown srh invflags 4000 [ 741.519847][T22975] ip6t_srh: unknown srh invflags 4000 [ 741.521394][T22974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.550159][T22968] __nla_validate_parse: 3 callbacks suppressed [ 741.550178][T22968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3933'. [ 741.561237][T22978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3933'. [ 741.943887][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'. [ 742.295779][T23021] netlink: 'syz.2.3949': attribute type 4 has an invalid length. [ 742.338787][T23021] netlink: 'syz.2.3949': attribute type 4 has an invalid length. [ 742.379165][T23027] netlink: 'syz.6.3952': attribute type 1 has an invalid length. [ 742.417742][T23028] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3953'. [ 742.496241][T23035] netlink: 'syz.5.3956': attribute type 29 has an invalid length. [ 742.649089][T23035] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3956'. [ 742.679288][T23048] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 742.739155][T23055] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3960'. [ 742.739183][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3960'. [ 742.739200][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3960'. [ 742.739215][T23055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3960'. [ 742.743171][T23057] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3961'. [ 742.941117][T23066] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 742.990039][T23070] team0 (unregistering): Port device team_slave_0 removed [ 742.995346][T23070] team0 (unregistering): Port device team_slave_1 removed [ 743.036365][T23066] syzkaller0: MTU not usable for tipc bearer [ 743.036403][T23066] tipc: Enabling of bearer rejected, failed to enable media [ 743.110231][T23066] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 743.115206][T23081] syzkaller0: MTU not usable for tipc bearer [ 743.115244][T23081] tipc: Enabling of bearer rejected, failed to enable media [ 743.233774][T23091] syzkaller1: entered promiscuous mode [ 743.233798][T23091] syzkaller1: entered allmulticast mode [ 744.174111][T23133] netlink: 'syz.2.3980': attribute type 3 has an invalid length. [ 745.290155][T23182] netlink: 'syz.5.3993': attribute type 2 has an invalid length. [ 745.537478][T23195] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 745.551786][T23195] bond1 (unregistering): Released all slaves [ 745.622958][T23206] x_tables: duplicate underflow at hook 2 [ 745.835050][T23207] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 745.868447][T23207] bond1 (unregistering): Released all slaves [ 746.618475][T23234] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 747.067870][T23267] __nla_validate_parse: 10 callbacks suppressed [ 747.067894][T23267] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4014'. [ 747.261465][T23273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4017'. [ 747.398031][T23279] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4020'. [ 747.472407][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4023'. [ 747.472687][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4023'. [ 747.481794][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.550318][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4023'. [ 747.756998][T23295] ip_tables: iptables: counters copy to user failed while replacing table [ 748.382609][T23319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4034'. [ 748.478643][T23327] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 748.478666][T23327] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4036'. [ 748.613619][T23333] netlink: 'syz.1.4038': attribute type 1 has an invalid length. [ 748.729721][T23333] bond1: entered promiscuous mode [ 748.732886][T23333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 748.799293][T23334] bond1: (slave bridge4): making interface the new active one [ 748.799321][T23334] bridge4: entered promiscuous mode [ 748.806537][T23334] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 748.983075][T23356] bond8: (slave bond_slave_0): Device is not bonding slave [ 748.983205][T23356] bond8: option active_slave: invalid value (bond_slave_0) [ 749.012842][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4042'. [ 749.012868][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4042'. [ 749.042062][T23356] bond8 (unregistering): Released all slaves [ 749.479697][T23391] netlink: 'syz.6.4055': attribute type 1 has an invalid length. [ 749.790461][T23402] bond0: entered promiscuous mode [ 749.794774][T23402] bond0: left promiscuous mode [ 749.871331][T23409] geneve4: entered promiscuous mode [ 749.871357][T23409] geneve4: entered allmulticast mode [ 749.882684][ T9581] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 749.897319][ T42] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 749.898931][ T139] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 749.898990][ T139] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 749.985302][T23419] netlink: 'syz.6.4063': attribute type 1 has an invalid length. [ 750.034551][T23419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 750.321804][T23439] netlink: 'syz.0.4069': attribute type 7 has an invalid length. [ 750.321829][T23439] netlink: 'syz.0.4069': attribute type 8 has an invalid length. [ 750.784015][T23463] netlink: 'syz.6.4077': attribute type 9 has an invalid length. [ 750.869959][T23465] team0 (unregistering): Port device team_slave_0 removed [ 750.890711][T23465] team0 (unregistering): Port device team_slave_1 removed [ 751.065660][T23463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.092484][T23463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.107664][T23463] bond0 (unregistering): Released all slaves [ 751.120658][T23487] netlink: 'syz.0.4084': attribute type 64 has an invalid length. [ 751.557098][T23502] Cannot find del_set index 4 as target [ 751.565607][T23502] xt_l2tp: wrong L2TP version: 255 [ 752.670653][T23540] __nla_validate_parse: 14 callbacks suppressed [ 752.670672][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4102'. [ 752.769153][T23540] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 752.897582][T23553] netlink: 'syz.1.4106': attribute type 20 has an invalid length. [ 752.897607][T23553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 752.899093][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 752.992498][T23553] netlink: 'syz.1.4106': attribute type 20 has an invalid length. [ 752.992523][T23553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 753.049934][T23561] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4108'. [ 753.076188][T23562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.314686][T23568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4111'. [ 753.345403][T23576] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4112'. [ 753.349152][T23576] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4112'. [ 753.349175][T23576] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4112'. [ 753.415810][T23578] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4114'. [ 753.714383][T23594] sctp: [Deprecated]: syz.2.4119 (pid 23594) Use of int in max_burst socket option deprecated. [ 753.714383][T23594] Use struct sctp_assoc_value instead [ 753.714627][T23592] sctp: [Deprecated]: syz.2.4119 (pid 23592) Use of int in max_burst socket option deprecated. [ 753.714627][T23592] Use struct sctp_assoc_value instead [ 753.964523][T23605] netlink: 'syz.1.4124': attribute type 3 has an invalid length. [ 753.964813][T23605] netlink: 'syz.1.4124': attribute type 3 has an invalid length. [ 754.993521][T23656] lo speed is unknown, defaulting to 1000 [ 755.087638][T23668] netlink: 'syz.1.4140': attribute type 10 has an invalid length. [ 755.163419][T23668] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.164149][T23668] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.196241][T23668] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.196385][T23668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.196745][T23668] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.196895][T23668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.240118][T23668] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 755.315349][T23672] netlink: 'syz.0.4141': attribute type 83 has an invalid length. [ 755.747970][T23683] netlink: 'syz.0.4145': attribute type 28 has an invalid length. [ 755.747997][T23683] netlink: 'syz.0.4145': attribute type 3 has an invalid length. [ 756.557419][T23718] ip6t_rt: too many addresses specified [ 756.777440][T23726] wg2: Caught tx_queue_len zero misconfig [ 756.779914][T23729] netlink: 'syz.6.4161': attribute type 12 has an invalid length. [ 756.956064][T23737] tipc: Started in network mode [ 756.956081][T23737] tipc: Node identity , cluster identity 4711 [ 756.956093][T23737] tipc: Failed to obtain node identity [ 756.956120][T23737] tipc: Enabling of bearer rejected, failed to enable media [ 757.131721][T23741] bond6: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 757.149995][T23741] bond6 (unregistering): Released all slaves [ 757.172827][T23745] xt_MASQUERADE: bad rangesize 2147483646 [ 757.204796][T23750] netlink: 'syz.6.4167': attribute type 1 has an invalid length. [ 757.210057][T23749] veth1: Caught tx_queue_len zero misconfig [ 757.229482][T23754] netlink: 'syz.6.4167': attribute type 1 has an invalid length. [ 757.494643][T23770] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 757.531516][T23773] IPv6: NLM_F_CREATE should be specified when creating new route [ 757.531628][T23773] netlink: 'syz.2.4174': attribute type 1 has an invalid length. [ 757.787396][T23788] __nla_validate_parse: 46 callbacks suppressed [ 757.787420][T23788] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4178'. [ 758.004077][T23801] sctp: [Deprecated]: syz.0.4181 (pid 23801) Use of int in max_burst socket option deprecated. [ 758.004077][T23801] Use struct sctp_assoc_value instead [ 758.206072][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4183'. [ 758.238335][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4183'. [ 758.593709][T23829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4187'. [ 758.930265][T23846] bond0: (slave bridge0): Releasing backup interface [ 758.951576][T23846] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.951783][T23846] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.974216][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4198'. [ 759.012153][T23846] bridge_slave_0: left allmulticast mode [ 759.012182][T23846] bridge_slave_0: left promiscuous mode [ 759.012410][T23846] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.049737][T23846] bridge_slave_1: left allmulticast mode [ 759.049963][T23846] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.076110][T23846] bond0: (slave bond_slave_0): Releasing backup interface [ 759.117908][T23846] bond0: (slave bond_slave_1): Releasing backup interface [ 759.140126][T23846] team0: Port device team_slave_0 removed [ 759.161779][T23846] team0: Port device team_slave_1 removed [ 759.162833][T23846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.162856][T23846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.192400][T23846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.192423][T23846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.195044][T23846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 759.283504][T23851] team0: Mode changed to "loadbalance" [ 759.298585][T23858] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 759.298604][T23858] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 759.410410][T23874] netlink: 'syz.5.4202': attribute type 1 has an invalid length. [ 759.444007][T23878] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 759.543692][T23882] pim6reg: entered allmulticast mode [ 759.545200][T23882] pim6reg: left allmulticast mode [ 759.732186][T23890] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 759.797866][T23896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4211'. [ 759.865683][T23895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 760.080916][T23910] team0: Port device xfrm0 removed [ 760.084473][T23910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 760.087677][ T50] tipc: Resetting bearer [ 760.203018][T23913] team0: Mode changed to "loadbalance" [ 760.375424][T23928] netlink: 4476 bytes leftover after parsing attributes in process `syz.2.4220'. [ 760.378001][T23919] netlink: 'syz.1.4218': attribute type 1 has an invalid length. [ 760.404106][T23931] netlink: 4476 bytes leftover after parsing attributes in process `syz.2.4220'. [ 760.492060][T23934] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4221'. [ 760.506061][T23927] bond2: (slave geneve2): making interface the new active one [ 760.517126][T23927] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 760.518330][ T8451] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.527222][ T8451] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.528073][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.528112][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.916384][T23955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.942474][T23955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.183498][T23970] bond0: (slave bond_slave_0): Releasing backup interface [ 761.203572][T23970] bond0: (slave bond_slave_1): Releasing backup interface [ 761.223651][T23970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.223679][T23970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.234705][T23970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.234730][T23970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.269118][T23970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.323652][T23974] veth0_to_bond: entered allmulticast mode [ 761.901545][T24004] ip_tables: iptables: counters copy to user failed while replacing table [ 761.929947][T24004] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 762.102681][ T29] audit: type=1107 audit(1793931524.780:5): pid=24014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='y!ŒX ègIØÎØÙÈÔ—‘Ž‚Ÿ"ñ:¿º·ëð›Q‹s' [ 762.579224][T24039] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 762.579254][T24039] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 762.878827][T24041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 762.878906][T24042] team0: Unable to change to the same mode the team is in [ 762.983425][T24047] wireguard: wg2: Could not create IPv4 socket [ 763.052938][T24049] __nla_validate_parse: 3 callbacks suppressed [ 763.052960][T24049] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4247'. [ 763.097989][T24059] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4247'. [ 763.102364][T24058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4249'. [ 763.330396][T24075] Bluetooth: hci0: unsupported parameter 5135 [ 763.330422][T24075] Bluetooth: hci0: unsupported parameter 8192 [ 763.330435][T24075] Bluetooth: hci0: unsupported parameter 5135 [ 763.330446][T24075] Bluetooth: hci0: unsupported parameter 8192 [ 763.366062][T24066] can: request_module (can-proto-4) failed. [ 763.399396][T24075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'. [ 763.475423][T24078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4254'. [ 763.543392][T24082] tipc: Started in network mode [ 763.543421][T24082] tipc: Node identity ac14142f, cluster identity 4711 [ 763.556645][T24082] tipc: Enabled bearer , priority 10 [ 763.598745][T24082] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 763.937997][T24092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 764.068949][T24102] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 764.068989][T24102] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 764.078496][T24102] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 764.130009][T24110] ip6t_srh: unknown srh match flags 4000 [ 764.130720][T24110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4262'. [ 764.452911][T24122] gre1: entered promiscuous mode [ 764.452934][T24122] gre1: entered allmulticast mode [ 764.472021][T24128] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 764.665626][T24145] x_tables: duplicate underflow at hook 3 [ 764.669059][ T5786] tipc: Node number set to 2886997039 [ 764.881948][T24151] bond7: (slave team0): Releasing backup interface [ 764.889091][T24151] tipc: Resetting bearer [ 764.893425][T24151] tipc: Resetting bearer [ 764.919208][T24151] bond6: (slave veth0_to_bond): Releasing active interface [ 764.977757][T24151] team0: Port device xfrm0 removed [ 764.981896][T24151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.036112][T24155] team0: Mode changed to "loadbalance" [ 765.203896][T24160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4277'. [ 765.219080][T24163] netlink: 'syz.1.4280': attribute type 4 has an invalid length. [ 765.583275][T24185] xt_hashlimit: size too large, truncated to 1048576 [ 765.625657][T24186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4284'. [ 765.625700][T24186] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 765.695595][T24190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4286'. [ 765.749640][T24191] netlink: 'syz.5.4283': attribute type 1 has an invalid length. [ 765.749663][T24191] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4283'. [ 765.829998][T24195] netlink: 'syz.1.4286': attribute type 9 has an invalid length. [ 765.893939][T24198] netlink: 'syz.5.4283': attribute type 1 has an invalid length. [ 766.568918][T24220] netlink: 'syz.2.4293': attribute type 11 has an invalid length. [ 766.568943][T24220] netlink: 'syz.2.4293': attribute type 5 has an invalid length. [ 766.929826][T24234] syz_tun: mtu less than device minimum [ 767.454740][T24256] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 767.587993][T24259] netlink: 'syz.1.4307': attribute type 21 has an invalid length. [ 767.625217][T24260] netlink: 'syz.1.4307': attribute type 21 has an invalid length. [ 768.060692][T24272] __nla_validate_parse: 100 callbacks suppressed [ 768.060713][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.060734][T24272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.062027][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.062050][T24272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.065809][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.065834][T24272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.069036][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.069059][T24272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.072088][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.072110][T24272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4310'. [ 768.333282][T24293] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 768.418826][T24298] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 768.422925][T24300] ip_tables: iptables: counters copy to user failed while replacing table [ 768.654580][T24312] netlink: 'syz.2.4324': attribute type 2 has an invalid length. [ 768.690198][T24313] team0: Device gtp0 is up. Set it down before adding it as a team port [ 768.901744][T24327] netlink: 'syz.2.4329': attribute type 13 has an invalid length. [ 768.937510][T24332] netlink: 'syz.6.4330': attribute type 1 has an invalid length. [ 769.016789][T24332] bond0: entered promiscuous mode [ 769.018777][T24332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.044549][T24330] bond0: (slave bridge1): making interface the new active one [ 769.044571][T24330] bridge1: entered promiscuous mode [ 769.046243][T24330] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 769.094281][T24331] macvtap1: entered allmulticast mode [ 769.142082][T24333] bond0: (slave bridge2): Enslaving as a backup interface with an up link [ 769.389333][T24355] nbd: illegal input index -8454144 [ 769.410899][T24347] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 769.450523][T24347] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 770.328781][ T42] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.329315][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.329354][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.329387][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.544477][T24413] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 770.570240][T24413] bond3 (unregistering): Released all slaves [ 771.023480][ T5299] veth1_vlan: left promiscuous mode [ 771.073669][T24441] netlink: 'syz.0.4360': attribute type 1 has an invalid length. [ 771.141558][T24441] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 771.169324][T24441] 8021q: adding VLAN 0 to HW filter on device bond6 [ 771.925285][T24488] netlink: 'syz.0.4370': attribute type 11 has an invalid length. [ 772.144558][T24501] ip6gretap0: entered promiscuous mode [ 772.154313][T24501] syz_tun: entered promiscuous mode [ 772.209397][T24505] tipc: Enabled bearer , priority 10 [ 772.522889][ T53] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 772.991739][T24543] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 772.991899][T24543] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 773.008460][T24544] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 773.023503][T24543] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 773.023646][T24543] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 773.024161][T24543] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 773.024289][T24543] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 773.031936][T24551] netlink: 'syz.2.4387': attribute type 9 has an invalid length. [ 773.093015][T24543] __nla_validate_parse: 73 callbacks suppressed [ 773.093034][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.093050][T24543] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 773.093063][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.093738][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.093761][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.094377][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.094396][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.244607][T24552] bridge0: entered promiscuous mode [ 773.245350][T24552] bridge0: entered allmulticast mode [ 773.336359][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.336395][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.352430][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.352457][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 773.729545][ T42] IPVS: starting estimator thread 0... [ 773.732015][T24573] IPVS: ip_vs_edit_dest(): server weight less than zero [ 773.818282][T24577] IPVS: using max 28 ests per chain, 67200 per kthread [ 774.206049][T24590] xt_socket: unknown flags 0x4 [ 774.405636][T24604] ip_tables: iptables: counters copy to user failed while replacing table [ 774.479820][T24612] ip_tables: iptables: counters copy to user failed while replacing table [ 774.643637][T24616] xt_l2tp: wrong L2TP version: 255 [ 776.552345][T24604] gretap0: entered promiscuous mode [ 778.102336][T24709] validate_nla: 84 callbacks suppressed [ 778.102358][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.102569][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.102773][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.102978][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.103195][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.103403][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.103601][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.115794][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.116047][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.116239][T24709] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 778.223844][T24710] bond6: (slave veth0_to_bond): Releasing active interface [ 778.235954][T24707] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 778.283964][T24722] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 778.327689][T24726] __nla_validate_parse: 82 callbacks suppressed [ 778.327709][T24726] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4420'. [ 778.333744][T24726] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4420'. [ 778.554609][T24738] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4425'. [ 779.125636][T24762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4433'. [ 779.127061][T24762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4433'. [ 779.131554][T24769] vlan0: entered promiscuous mode [ 779.566284][T24792] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4443'. [ 779.764894][ T62] IPVS: starting estimator thread 0... [ 779.773867][T24798] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:21 [ 779.846838][T24800] IPVS: using max 29 ests per chain, 69600 per kthread [ 779.868627][T24805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4446'. [ 780.137320][T24817] tun0: tun_chr_ioctl cmd 1074025675 [ 780.137341][T24817] tun0: persist enabled [ 780.146011][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 780.146047][T24825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 780.162859][T24828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4452'. [ 780.228526][T24825] geneve3: entered promiscuous mode [ 780.228550][T24825] geneve3: entered allmulticast mode [ 780.285525][T24824] 8021q: VLANs not supported on ip6gre0 [ 780.297801][T24829] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 780.356153][T24817] syzkaller0: entered promiscuous mode [ 780.356176][T24817] syzkaller0: entered allmulticast mode [ 780.441970][T24831] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 780.698165][T24841] nbd: must specify at least one socket [ 780.926346][T24848] l2tp_ppp: sess 2/0: no socket in recv [ 781.352291][T24868] veth0: entered promiscuous mode [ 781.574986][T24866] 8021q: adding VLAN 0 to HW filter on device bond7 [ 781.745361][T24871] tipc: Resetting bearer [ 782.004295][T24865] veth0: left promiscuous mode [ 782.584376][T24929] syzkaller0: entered promiscuous mode [ 782.584399][T24929] syzkaller0: entered allmulticast mode [ 783.183419][T24959] validate_nla: 66 callbacks suppressed [ 783.183454][T24959] netlink: 'syz.0.4494': attribute type 7 has an invalid length. [ 783.730924][T24986] netlink: 'syz.0.4499': attribute type 21 has an invalid length. [ 783.730949][T24986] IPv6: NLM_F_CREATE should be specified when creating new route [ 784.260196][T25005] IPv6: NLM_F_CREATE should be specified when creating new route [ 784.398459][T25011] dvmrp0: entered allmulticast mode [ 784.507187][T25014] __nla_validate_parse: 17 callbacks suppressed [ 784.507205][T25014] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4505'. [ 784.834654][T25036] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4512'. [ 784.834681][T25036] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4512'. [ 784.834697][T25036] netlink: 'syz.5.4512': attribute type 6 has an invalid length. [ 784.834710][T25036] netlink: 'syz.5.4512': attribute type 5 has an invalid length. [ 784.834723][T25036] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4512'. [ 784.964054][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4514'. [ 784.964098][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4514'. [ 785.035364][T25049] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4516'. [ 785.350768][T25061] bridge0: port 1(gretap0) entered blocking state [ 785.355988][T25061] bridge0: port 1(gretap0) entered disabled state [ 785.356144][T25061] gretap0: entered allmulticast mode [ 785.389087][T25061] gretap0: entered promiscuous mode [ 785.592326][T25083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 785.899375][T25093] vlan3: entered allmulticast mode [ 785.899400][T25093] bond0: entered allmulticast mode [ 786.034584][T25098] ip6t_frag: unknown flags 6 [ 786.983491][T25153] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4540'. [ 788.235207][T25224] smc: net device lo erased user defined pnetid SYZ0 [ 788.235493][T25224] smc: smcd device lo erased user defined pnetid SYZ0 [ 788.269635][T25229] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4551'. [ 788.519467][T25244] netlink: 'syz.0.4552': attribute type 1 has an invalid length. [ 788.591728][T25243] syzkaller1: entered promiscuous mode [ 788.591751][T25243] syzkaller1: entered allmulticast mode [ 788.626486][T25250] netlink: 'syz.0.4552': attribute type 1 has an invalid length. [ 788.750974][T25260] syzkaller0: Caught tx_queue_len zero misconfig [ 788.896200][T25264] openvswitch: netlink: IP tunnel dst address not specified [ 788.983986][T25276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4561'. [ 789.098559][T25283] netlink: 'syz.5.4562': attribute type 1 has an invalid length. [ 789.137611][T25283] 8021q: adding VLAN 0 to HW filter on device bond10 [ 789.410833][T25293] nbd: must specify an index to disconnect [ 789.423088][T25296] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 789.445484][T25300] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 789.792314][T25330] __nla_validate_parse: 1 callbacks suppressed [ 789.792334][T25330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4577'. [ 789.820875][T25330] netlink: 'syz.0.4577': attribute type 11 has an invalid length. [ 789.855250][T25333] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4578'. [ 789.872531][T25333] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4578'. [ 790.126241][T25345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4583'. [ 790.278051][T25355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4586'. [ 790.362410][T25361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4589'. [ 790.362438][T25361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4589'. [ 790.918741][T25386] syzkaller0: entered promiscuous mode [ 790.918763][T25386] syzkaller0: entered allmulticast mode [ 790.920523][T25387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4597'. [ 791.102267][T25395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4600'. [ 791.102292][T25395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4600'. [ 791.188582][T25399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.195449][T25400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.051173][T25443] netlink: 'syz.6.4615': attribute type 1 has an invalid length. [ 792.148119][T25449] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 792.210951][T25449] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 792.779264][T25475] erspan0: entered promiscuous mode [ 792.820689][T25480] netlink: 'syz.5.4624': attribute type 1 has an invalid length. [ 792.908832][T25480] 8021q: adding VLAN 0 to HW filter on device bond11 [ 792.957119][T25484] bond9: option min_links: invalid value (18446744073709551614) [ 792.957144][T25484] bond9: option min_links: allowed values 0 - 2147483647 [ 792.958313][T25489] netlink: 'syz.2.4626': attribute type 1 has an invalid length. [ 792.960360][T25484] bond9 (unregistering): Released all slaves [ 793.020484][T25486] netlink: 'syz.2.4626': attribute type 11 has an invalid length. [ 793.107450][T25489] bond9: entered promiscuous mode [ 793.107987][T25489] 8021q: adding VLAN 0 to HW filter on device bond9 [ 793.145909][T25499] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:19997 [ 793.213186][T25486] bond9: (slave bridge4): making interface the new active one [ 793.213211][T25486] bridge4: entered promiscuous mode [ 793.215578][T25486] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 793.667880][T25530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 793.683497][T25530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 793.779798][T25539] atomic_op ffff8880274941e0 conn xmit_atomic 0000000000000000 [ 794.852108][T25609] xt_socket: unknown flags 0x4 [ 795.207483][T25627] __nla_validate_parse: 9 callbacks suppressed [ 795.207518][T25627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4663'. [ 795.217778][T25624] ipvlan1: Caught tx_queue_len zero misconfig [ 795.284132][T25629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4664'. [ 795.390008][T25637] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4667'. [ 795.510281][T25639] netlink: 'syz.1.4670': attribute type 2 has an invalid length. [ 795.666168][T25642] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4668'. [ 795.769894][T25660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4674'. [ 796.027922][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4681'. [ 796.145159][T25682] 8021q: VLANs not supported on lo [ 796.211576][T25683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4682'. [ 796.599932][T25701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 796.696998][T25705] openvswitch: netlink: IP tunnel dst address not specified [ 797.392866][T25743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4700'. [ 797.393725][T25741] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4701'. [ 797.393751][T25741] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 797.444284][T25746] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4702'. [ 797.709249][T25765] tipc: Started in network mode [ 797.709283][T25765] tipc: Node identity 72e5bbc3ddc8, cluster identity 4711 [ 797.709449][T25765] tipc: Enabled bearer , priority 0 [ 797.734441][T25764] tipc: Disabling bearer [ 797.862234][T25773] can: request_module (can-proto-0) failed. [ 797.945802][T25777] erspan0: entered promiscuous mode [ 798.007032][T25784] sit0: entered promiscuous mode [ 798.026359][T25784] netlink: 'syz.2.4712': attribute type 1 has an invalid length. [ 798.051626][T25788] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 798.263905][T25793] C: renamed from lo (while UP) [ 798.273473][T25793] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 798.361974][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 67 > 9 [ 798.362006][ T53] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 798.365141][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 67 > 9 [ 798.365170][ T53] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 798.677836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.697150][T25817] Cannot find map_set index 135 as target [ 798.814856][T25832] atomic_op ffff888036c841e0 conn xmit_atomic 0000000000000000 [ 799.012161][T25850] netlink: 'syz.6.4733': attribute type 1 has an invalid length. [ 799.039260][T25850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 799.070260][T25850] bond3: (slave geneve4): making interface the new active one [ 799.074366][T25850] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 799.316386][T25868] netlink: 'syz.2.4738': attribute type 11 has an invalid length. [ 799.522110][T25884] Bluetooth: MGMT ver 1.23 [ 799.573522][T25888] netlink: 'syz.2.4744': attribute type 1 has an invalid length. [ 799.614888][T25878] bond4 (unregistering): Released all slaves [ 799.717922][T25888] 8021q: adding VLAN 0 to HW filter on device bond10 [ 799.771335][T25878] bond4 (unregistering): Released all slaves [ 799.990529][T25878] bond4 (unregistering): Released all slaves [ 800.253558][T25878] bond4 (unregistering): Released all slaves [ 800.364778][T25920] __nla_validate_parse: 11 callbacks suppressed [ 800.364800][T25920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4749'. [ 800.661018][T25943] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4757'. [ 801.086169][T25960] tipc: Enabling of bearer rejected, failed to enable media [ 801.392009][T25984] IPVS: length: 239 != 24 [ 801.437746][T25987] pim6reg: entered allmulticast mode [ 801.439458][T25987] pim6reg: left allmulticast mode [ 801.557788][ T53] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 801.562530][T18449] Bluetooth: hci2: command 0x0401 tx timeout [ 801.635217][T25996] netlink: 'syz.5.4773': attribute type 4 has an invalid length. [ 802.357641][T26036] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 802.359623][T26035] ip_tables: iptables: counters copy to user failed while replacing table [ 802.548258][T26041] netlink: 'syz.2.4785': attribute type 10 has an invalid length. [ 802.569913][T26041] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 802.591099][T26041] team0: Port device wlan0 added [ 802.795995][T26049] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4788'. [ 802.809511][T26049] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4788'. [ 802.965621][T26060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4790'. [ 802.966140][T26058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4790'. [ 803.061383][ C1] vcan0: j1939_tp_rxtimer: 0xffff888088d86800: rx timeout, send abort [ 803.061780][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888088d86800: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 803.064282][ C1] vcan0: j1939_tp_rxtimer: 0xffff888088d87000: rx timeout, send abort [ 803.204136][T26072] mac80211_hwsim hwsim36 syzkaller1: Caught tx_queue_len zero misconfig [ 803.259223][T26076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4796'. [ 803.261157][T26077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4796'. [ 803.564330][ C1] vcan0: j1939_tp_rxtimer: 0xffff888088d87000: abort rx timeout. Force session deactivation [ 803.654230][T26092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4799'. [ 803.672964][T26092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'. [ 804.107358][T26122] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 804.124595][T26127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 804.267716][T26135] veth0: entered promiscuous mode [ 804.268092][T26135] veth0: left promiscuous mode [ 804.599544][T26151] netlink: 'syz.6.4810': attribute type 10 has an invalid length. [ 804.730154][T26168] netlink: 'syz.2.4814': attribute type 5 has an invalid length. [ 804.893908][T26184] sit0: entered promiscuous mode [ 804.936007][T26184] netlink: 'syz.5.4811': attribute type 1 has an invalid length. [ 807.572181][T26155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.772382][T26229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.791122][T26229] __nla_validate_parse: 4 callbacks suppressed [ 807.791143][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4819'. [ 808.151876][T26249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4826'. [ 808.721461][T26286] bridge0: port 1(batadv1) entered blocking state [ 808.722580][T26286] bridge0: port 1(batadv1) entered disabled state [ 808.724688][T26286] batadv1: entered allmulticast mode [ 808.737382][T26286] batadv1: entered promiscuous mode [ 808.765794][T26295] netlink: 2116 bytes leftover after parsing attributes in process `syz.0.4838'. [ 808.823654][T26307] ip_tables: iptables: counters copy to user failed while replacing table [ 809.187067][ T1158] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 809.187088][ T1158] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 809.225475][T26313] tunl0: entered promiscuous mode [ 809.323332][T26322] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 809.323364][T26322] mac80211_hwsim hwsim35 wlan0: left allmulticast mode [ 810.996790][T18449] Bluetooth: hci1: command 0x0406 tx timeout [ 811.406198][T26278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.421040][T26324] netlink: 'syz.6.4842': attribute type 1 has an invalid length. [ 811.421063][T26324] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4842'. [ 811.700105][T26335] x_tables: unsorted entry at hook 4 [ 811.731513][T26345] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4846'. [ 811.803114][T26348] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4850'. [ 811.846342][T26352] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4850'. [ 812.272962][T18449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.292243][T18449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.293690][T18449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 812.294738][T18449] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 812.295360][T18449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 812.846059][ T8451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.846105][ T8451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.846121][ T8451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 812.846135][ T8451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 812.914754][T26368] lo speed is unknown, defaulting to 1000 [ 813.007738][ T8451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.007789][ T8451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.007910][ T8451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 813.007937][ T8451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 813.140616][ T8451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.140662][ T8451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.140689][ T8451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 813.140713][ T8451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 813.281331][ T8451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.281360][ T8451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.281377][ T8451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 813.281391][ T8451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 814.202914][ T8451] bond3 (unregistering): (slave bridge8): Releasing backup interface [ 814.202943][ T8451] bridge8 (unregistering): left promiscuous mode [ 814.233387][ T8451] bond4 (unregistering): (slave bridge10): Releasing backup interface [ 814.309349][ T9581] smbdirect: ib_dev[syz1] removed [ 814.309361][ T8451] bond0 (unregistering): Released all slaves [ 814.321712][ T8451] bond1 (unregistering): Released all slaves [ 814.343686][ T8451] bond2 (unregistering): Released all slaves [ 814.369832][ T8451] bond3 (unregistering): Released all slaves [ 814.411858][ T8451] bond4 (unregistering): Released all slaves [ 814.422955][ T8451] bond5 (unregistering): Released all slaves [ 814.437552][ T53] Bluetooth: hci3: command tx timeout [ 814.446104][ T8451] bond6 (unregistering): Released all slaves [ 814.460466][ T8451] bond7 (unregistering): Released all slaves [ 814.471150][ T8451] bond8 (unregistering): Released all slaves [ 814.484208][ T8451] bond9 (unregistering): Released all slaves [ 814.498420][ T8451] bond10 (unregistering): Released all slaves [ 814.523431][ T8451] bond11 (unregistering): Released all slaves [ 814.703130][T26368] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.703254][T26368] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.703468][T26368] bridge_slave_0: entered allmulticast mode [ 814.705465][T26368] bridge_slave_0: entered promiscuous mode [ 814.725469][T26368] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.725574][T26368] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.725803][T26368] bridge_slave_1: entered allmulticast mode [ 814.782531][T26368] bridge_slave_1: entered promiscuous mode [ 814.832777][T26368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.856015][T26368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.894626][ T8451] tipc: Disabling bearer [ 814.894786][ T8451] tipc: Disabling bearer [ 814.895797][ T8451] tipc: Disabling bearer [ 814.895943][ T8451] tipc: Left network mode [ 814.944384][T26368] team0: Port device team_slave_0 added [ 814.948603][T26368] team0: Port device team_slave_1 added [ 815.010610][T26368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.010652][T26368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.010674][T26368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.012725][T26368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.012744][T26368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.012767][T26368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.305345][T26368] hsr_slave_0: entered promiscuous mode [ 815.307427][T26368] hsr_slave_1: entered promiscuous mode [ 815.308242][T26368] debugfs: 'hsr0' already exists in 'hsr' [ 815.308264][T26368] Cannot create hsr debugfs directory [ 815.590321][ T8451] IPVS: stopping backup sync thread 16362 ... [ 815.920192][ T5299] 8021q: adding VLAN 0 to HW filter on device eth6 [ 816.518600][ T53] Bluetooth: hci3: command tx timeout [ 816.780772][ T8451] hsr_slave_0: left promiscuous mode [ 816.781440][ T8451] hsr_slave_1: left promiscuous mode [ 816.822935][ T8451] veth1_vlan: left promiscuous mode [ 817.896544][T26368] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 817.903796][ T8451] IPVS: stop unused estimator thread 0... [ 817.905866][T26368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.911238][T26368] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 817.955332][T26368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.966235][T26368] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 817.985804][T26368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.986856][T26368] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 818.015061][T26368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.152660][T26368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.180194][T26368] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.190282][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.190407][ T9581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.227842][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.227965][ T9581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.596938][ T53] Bluetooth: hci3: command tx timeout [ 818.868190][T26368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.302737][T26368] veth0_vlan: entered promiscuous mode [ 819.322235][T26368] veth1_vlan: entered promiscuous mode [ 819.418803][T26368] veth0_macvtap: entered promiscuous mode [ 819.425317][T26368] veth1_macvtap: entered promiscuous mode [ 819.456379][T26368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.477993][T26368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.541792][ T9581] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.570777][ T9581] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.610238][ T1158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.620721][ T1158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.795443][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.795469][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.904283][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.904308][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.138602][T26505] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4853'. [ 820.138975][T26505] 8021q: VLANs not supported on gre0 [ 820.676856][ T53] Bluetooth: hci3: command tx timeout [ 836.498135][T26585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4861'. [ 836.647834][T26593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4861'. [ 836.997016][T26618] veth1_to_bond: entered allmulticast mode [ 837.001039][T26617] veth1_to_bond: left allmulticast mode [ 837.266296][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4871'. [ 837.391190][T26641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4871'. [ 837.391223][T26641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4871'. [ 837.544119][T26647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4873'. [ 837.544578][T26632] netlink: 'syz.2.4872': attribute type 1 has an invalid length. [ 837.623026][T26632] 8021q: adding VLAN 0 to HW filter on device bond11 [ 837.668525][T26638] bond11: (slave ip6erspan0): making interface the new active one [ 837.670269][T26638] bond11: (slave ip6erspan0): Enslaving as an active interface with an up link [ 838.005546][T26670] Bluetooth: MGMT ver 1.23 [ 838.098739][T26670] --map-set only usable from mangle table [ 838.401529][T26688] batman_adv: batadv0: Adding interface: syzkaller0 [ 838.406345][T26688] batman_adv: batadv0: Interface activated: syzkaller0 [ 838.441412][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4889'. [ 838.594754][T26705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4890'. [ 838.611144][T26685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4887'. [ 838.773042][T26709] netlink: 'syz.1.4891': attribute type 8 has an invalid length. [ 838.773088][T26709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4891'. [ 838.885856][T26714] ip_tables: iptables: counters copy to user failed while replacing table [ 838.945456][T26715] ip_tables: iptables: counters copy to user failed while replacing table [ 838.973755][T26717] netlink: 'syz.6.4895': attribute type 1 has an invalid length. [ 839.221446][T26730] netlink: 'syz.5.4899': attribute type 37 has an invalid length. [ 839.307426][T26733] syzkaller0: left promiscuous mode [ 839.307454][T26733] syzkaller0: left allmulticast mode [ 839.504390][T26733] netlink: 'syz.0.4901': attribute type 10 has an invalid length. [ 839.557993][T26733] geneve3: entered promiscuous mode [ 839.558028][T26733] geneve3: entered allmulticast mode [ 840.118731][T18449] Bluetooth: hci4: command 0x0406 tx timeout [ 840.184136][T26785] syzkaller0: entered promiscuous mode [ 840.184167][T26785] syzkaller0: entered allmulticast mode [ 840.984202][T26811] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.180171][T18449] Bluetooth: hci1: unexpected event 0x0f length: 0 < 4 [ 841.325184][T26834] bridge_slave_1: left allmulticast mode [ 841.325221][T26834] bridge_slave_1: left promiscuous mode [ 841.325486][T26834] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.361786][T26834] bridge_slave_0: left allmulticast mode [ 841.361823][T26834] bridge_slave_0: left promiscuous mode [ 841.362102][T26834] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.627676][T26837] netlink: 'syz.6.4930': attribute type 9 has an invalid length. [ 842.586438][T26869] __nla_validate_parse: 78 callbacks suppressed [ 842.586468][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4942'. [ 842.947349][T26887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 843.809950][T26926] netlink: 'syz.0.4953': attribute type 1 has an invalid length. [ 843.874947][T26926] 8021q: adding VLAN 0 to HW filter on device bond9 [ 843.885008][T19886] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 844.010394][T26933] netlink: 'syz.0.4953': attribute type 1 has an invalid length. [ 844.519873][T26948] x_tables: duplicate underflow at hook 2 [ 844.556440][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4959'. [ 844.556477][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4959'. [ 844.577053][T26953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4959'. [ 844.577087][T26953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4959'. [ 844.696192][T26956] netlink: 'syz.0.4958': attribute type 1 has an invalid length. [ 844.793542][T26956] bond10 (unregistering): Released all slaves [ 845.101566][T26972] TC_ACT_REPEAT abuse ? [ 845.322606][T26977] netlink: 6468 bytes leftover after parsing attributes in process `syz.0.4966'. [ 845.575028][T26981] batman_adv: batadv0: Adding interface: syzkaller0 [ 845.575057][T26981] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.575091][T26981] batman_adv: batadv0: Interface activated: syzkaller0 [ 845.618036][T26981] netlink: 'syz.6.4968': attribute type 21 has an invalid length. [ 845.665628][T26980] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 845.728353][T26980] batman_adv: batadv0: Removing interface: syzkaller0 [ 845.804049][T26989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4971'. [ 845.804092][T26989] openvswitch: netlink: Missing key (keys=40, expected=80) [ 845.847915][T26991] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4972'. [ 845.849946][T26991] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4972'. [ 845.853145][T26991] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4972'. [ 846.585918][T26920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.840588][T27041] Bluetooth: MGMT ver 1.23 [ 847.867786][T27040] netlink: 'syz.5.4988': attribute type 4 has an invalid length. [ 847.875410][T27045] x_tables: duplicate underflow at hook 3 [ 848.185053][T27054] __nla_validate_parse: 4 callbacks suppressed [ 848.185084][T27054] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4993'. [ 848.471694][T27072] tls_set_device_offload_rx: netdev not found [ 848.701716][T27078] netlink: 'syz.5.4999': attribute type 10 has an invalid length. [ 848.709078][T27078] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 848.717938][T27078] netlink: 'syz.5.4999': attribute type 10 has an invalid length. [ 848.994697][T27091] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5004'. [ 849.035187][T27093] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 849.162378][T27088] bond0: (slave bond_slave_0): Releasing backup interface [ 849.195403][T27088] bond0: (slave bond_slave_1): Releasing backup interface [ 849.267627][T27088] team0: Port device team_slave_0 removed [ 849.286352][T27088] team0: Port device team_slave_1 removed [ 849.290572][T27088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.290621][T27088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.312033][T27088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.313554][T27088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.361559][T27088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 849.461206][T27109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5007'. [ 849.509998][T27096] team0: Port device xfrm0 added [ 849.552905][T27088] tipc: Started in network mode [ 849.552951][T27088] tipc: Node identity 56330e834, cluster identity 4711 [ 849.553251][T27088] tipc: Enabled bearer , priority 0 [ 849.931735][T27126] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 849.976366][T27126] syzkaller1: entered promiscuous mode [ 849.976417][T27126] syzkaller1: entered allmulticast mode [ 850.631891][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5017'. [ 850.631945][T27146] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5017'. [ 850.665135][T27146] geneve2: entered promiscuous mode [ 850.665171][T27146] geneve2: entered allmulticast mode [ 850.678084][ T5743] tipc: Node number set to 372444803 [ 851.342019][T27172] openvswitch: netlink: Flow key attr not present in new flow. [ 851.547754][T27183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 851.548066][T27183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5029'. [ 852.103689][T27206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5037'. [ 852.267020][T27210] netlink: 'syz.1.5038': attribute type 12 has an invalid length. [ 852.595961][T27227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5041'. [ 852.684781][T27230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5042'. [ 853.017722][T27245] xt_hashlimit: size too large, truncated to 1048576 [ 853.017751][T27245] xt_hashlimit: max too large, truncated to 1048576 [ 853.018175][T27245] xt_hashlimit: overflow, rate too high: 0 [ 853.228098][T27251] Cannot find add_set index 4 as target [ 853.502078][T27259] Cannot find set identified by id 0 to match [ 853.514114][T27259] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.5049'. [ 853.540156][T27260] Cannot find set identified by id 0 to match [ 853.572032][T27260] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.5049'. [ 854.699651][T27289] veth0_to_bond: entered allmulticast mode [ 854.843123][T27300] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 854.857818][T27300] bond4 (unregistering): Released all slaves [ 854.925975][T27305] ip_tables: iptables: counters copy to user failed while replacing table [ 855.024205][T27307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5063'. [ 855.349446][T27312] bond3: Removing last arp target with arp_interval on [ 855.349704][T27315] netlink: 196 bytes leftover after parsing attributes in process `syz.6.5066'. [ 855.349905][T27315] netlink: 196 bytes leftover after parsing attributes in process `syz.6.5066'. [ 855.349923][T27315] netlink: 19 bytes leftover after parsing attributes in process `syz.6.5066'. [ 855.391106][T27315] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 855.553065][T27312] bond4: option fail_over_mac: invalid value (16) [ 855.569881][T27314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5067'. [ 855.571727][T27312] bond4 (unregistering): Released all slaves [ 856.507317][T27366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 856.827012][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 856.845537][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 856.857605][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 856.869672][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 856.871501][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 857.300933][T27388] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 857.641024][T27395] ip_tables: iptables: counters copy to user failed while replacing table [ 857.777023][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'. [ 857.777281][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'. [ 857.777462][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'. [ 858.358752][T27424] syzkaller0: entered promiscuous mode [ 858.358786][T27424] syzkaller0: entered allmulticast mode [ 858.360540][T27424] batman_adv: batadv0: Interface activated: syzkaller0 [ 858.632183][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 858.701583][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 858.706011][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 858.996862][ T53] Bluetooth: hci5: command tx timeout [ 859.644117][T27371] infiniband rxe0: set active [ 859.644198][ T5743] rxe_eth0 speed is unknown, defaulting to 1000 [ 859.644293][T27371] infiniband rxe0: added rxe_eth0 [ 859.702380][T27454] __nla_validate_parse: 30 callbacks suppressed [ 859.702408][T27454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'. [ 859.765426][T27371] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 859.765461][T27371] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 859.765487][T27371] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 859.937555][T27371] RDS/IB: rxe0: added [ 859.937626][T27371] smc: adding ib device rxe0 with port count 1 [ 859.937647][T27371] smc: ib device rxe0 port 1 has no pnetid [ 859.967656][T27459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5100'. [ 860.041838][T27464] netlink: 'syz.0.5101': attribute type 24 has an invalid length. [ 860.115956][ T5743] rxe_eth0 speed is unknown, defaulting to 1000 [ 860.164045][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 860.712329][T27476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5104'. [ 860.713632][T27476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5104'. [ 860.748185][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 861.057608][T27485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5107'. [ 861.077129][ T53] Bluetooth: hci5: command tx timeout [ 861.104411][T27487] veth0: entered promiscuous mode [ 861.116171][T27487] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5108'. [ 861.164301][T27486] veth0: left promiscuous mode [ 861.207613][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 861.453002][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 861.708548][T27498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5112'. [ 861.708599][T27498] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5112'. [ 861.828165][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 862.151214][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 862.265507][T27511] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 862.273224][T27511] Bluetooth: hci0: unsupported parameter 5135 [ 862.273257][T27511] Bluetooth: hci0: unsupported parameter 8192 [ 862.273272][T27511] Bluetooth: hci0: unsupported parameter 5135 [ 862.273285][T27511] Bluetooth: hci0: unsupported parameter 8192 [ 862.274581][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5116'. [ 862.317961][T27511] xfrm1: entered promiscuous mode [ 862.317995][T27511] xfrm1: entered allmulticast mode [ 862.322271][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5116'. [ 862.662690][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 862.783788][T27524] syzkaller0: entered promiscuous mode [ 862.783819][T27524] syzkaller0: entered allmulticast mode [ 862.805899][T27524] syzkaller0: MTU not usable for tipc bearer [ 862.805946][T27524] tipc: Enabling of bearer rejected, failed to enable media [ 862.826201][T27524] syzkaller0: mtu less than device minimum [ 863.070496][T27536] netlink: 'syz.6.5123': attribute type 1 has an invalid length. [ 863.157046][ T53] Bluetooth: hci5: command tx timeout [ 863.366376][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.382201][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.382974][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.387620][T27462] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 863.387664][T27462] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 863.387707][T27462] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 863.477496][T27371] lo speed is unknown, defaulting to 1000 [ 863.496351][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.525586][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.544027][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.597586][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.608827][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.615287][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.624735][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.635637][T27462] syzkaller0 speed is unknown, defaulting to 1000 [ 863.968431][T27371] rxe_eth0 speed is unknown, defaulting to 1000 [ 864.458998][T27570] sctp: [Deprecated]: syz.5.5134 (pid 27570) Use of int in max_burst socket option. [ 864.458998][T27570] Use struct sctp_assoc_value instead [ 864.467696][T27570] netlink: 'syz.5.5134': attribute type 1 has an invalid length. [ 864.491553][T27571] sctp: [Deprecated]: syz.5.5134 (pid 27571) Use of int in max_burst socket option. [ 864.491553][T27571] Use struct sctp_assoc_value instead [ 864.515420][T27573] netlink: 'syz.5.5134': attribute type 1 has an invalid length. [ 864.735425][T27577] IPVS: sh: FWM 3 0x00000003 - no destination available [ 864.785444][T27581] netlink: 'syz.6.5137': attribute type 16 has an invalid length. [ 864.785468][T27581] __nla_validate_parse: 5 callbacks suppressed [ 864.785478][T27581] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5137'. [ 864.832239][T27581] veth0_macvtap: entered allmulticast mode [ 865.195296][T27588] x_tables: unsorted underflow at hook 2 [ 865.237220][ T53] Bluetooth: hci5: command tx timeout [ 865.343464][ T53] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 865.391088][T27597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5141'. [ 865.482817][T27602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5142'. [ 865.821093][T27371] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.821292][T27371] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.821650][T27371] bridge_slave_0: entered allmulticast mode [ 865.826117][T27371] bridge_slave_0: entered promiscuous mode [ 865.862366][T27371] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.863234][T27611] netlink: 'syz.1.5144': attribute type 12 has an invalid length. [ 865.866307][T27371] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.891028][T27371] bridge_slave_1: entered allmulticast mode [ 865.894245][T27371] bridge_slave_1: entered promiscuous mode [ 866.004845][T27371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.024024][T27371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.026218][T27611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5144'. [ 866.187731][T27623] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 866.212703][T27371] team0: Port device team_slave_0 added [ 866.234826][T27371] team0: Port device team_slave_1 added [ 866.431392][T27371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.431432][T27371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.431461][T27371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.444807][T27371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.444827][T27371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.444856][T27371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.711460][T27371] hsr_slave_0: entered promiscuous mode [ 866.718911][T27371] hsr_slave_1: entered promiscuous mode [ 866.724323][T27371] debugfs: 'hsr0' already exists in 'hsr' [ 866.724368][T27371] Cannot create hsr debugfs directory [ 869.562062][T26821] syz_tun (unregistering): left promiscuous mode [ 869.599547][T27371] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 869.618706][T27371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.623646][T27371] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 869.677643][T27371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.684597][T27371] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 869.707832][T27371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.709026][T27371] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 869.742456][T27371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.793763][T27707] x_tables: duplicate entry at hook 3 [ 869.921472][T27710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5172'. [ 869.924320][T27711] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5172'. [ 870.021819][T27371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.064258][T27371] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.280338][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.280519][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.332921][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.333074][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.150481][T27739] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5179'. [ 871.871012][T27775] netlink: 'syz.5.5186': attribute type 1 has an invalid length. [ 871.949775][T27775] bond1: entered promiscuous mode [ 871.950565][T27775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 871.994109][T27371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.178158][T27791] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5190'. [ 872.226874][T27794] syzkaller1: entered promiscuous mode [ 872.226899][T27794] syzkaller1: entered allmulticast mode [ 872.251871][T27801] netlink: 'syz.1.5192': attribute type 1 has an invalid length. [ 872.739354][T27371] veth0_vlan: entered promiscuous mode [ 872.753693][T27371] veth1_vlan: entered promiscuous mode [ 872.880236][T27371] veth0_macvtap: entered promiscuous mode [ 872.915912][T27371] veth1_macvtap: entered promiscuous mode [ 872.968955][T27825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5199'. [ 872.987871][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5199'. [ 873.022864][T27371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.061475][T27371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.207186][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.207277][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.207319][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.207353][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.214857][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5195'. [ 873.540099][T27843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5200'. [ 874.092781][T27833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 874.110023][T27841] bridge_slave_0: mtu less than device minimum [ 874.110733][T27842] veth0: entered promiscuous mode [ 874.111078][T27844] veth1_to_bridge: entered promiscuous mode [ 874.112797][T27848] netlink: 'syz.6.5202': attribute type 13 has an invalid length. [ 874.112825][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5202'. [ 874.170735][T27852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5205'. [ 874.195907][T27848] netlink: 'syz.6.5202': attribute type 13 has an invalid length. [ 874.345744][T27840] veth1_to_bridge: left promiscuous mode [ 874.345794][T27840] veth0: left promiscuous mode [ 874.602854][T27863] netlink: 'syz.5.5209': attribute type 1 has an invalid length. [ 874.603009][T27862] netlink: 'syz.5.5209': attribute type 1 has an invalid length. [ 874.745794][T27863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 874.861816][T27872] bond2: (slave bridge1): making interface the new active one [ 874.889036][T27872] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 874.890757][ T9572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.890783][ T9572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.950856][T27880] sctp: [Deprecated]: syz.1.5214 (pid 27880) Use of int in max_burst socket option. [ 874.950856][T27880] Use struct sctp_assoc_value instead [ 874.988669][T27882] netlink: 'syz.6.5215': attribute type 10 has an invalid length. [ 875.023746][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.023782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.109090][T27884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.215875][T27890] __nla_validate_parse: 4 callbacks suppressed [ 875.215919][T27890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 875.216941][T27891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 875.250990][T27890] vlan1: entered promiscuous mode [ 875.251022][T27890] bond0: entered promiscuous mode [ 875.592683][T27916] sctp: [Deprecated]: syz.6.5223 (pid 27916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 875.592683][T27916] Use struct sctp_sack_info instead [ 875.595123][T27916] netlink: 'syz.6.5223': attribute type 26 has an invalid length. [ 875.727658][T27923] netlink: 'syz.6.5223': attribute type 83 has an invalid length. [ 875.911559][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880855fdc00: rx timeout, send abort [ 876.070023][T27943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5231'. [ 876.298047][T27954] xt_recent: Unsupported userspace flags (000000b1) [ 876.299269][T27953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5236'. [ 876.304452][T27953] netlink: 'syz.5.5236': attribute type 58 has an invalid length. [ 876.304481][T27953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5236'. [ 876.372343][T27957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5237'. [ 876.372392][T27957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5237'. [ 876.375238][T27954] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 876.411819][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880855fdc00: abort rx timeout. Force session deactivation [ 876.415149][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e3fc400: rx timeout, send abort [ 876.608300][T27967] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5240'. [ 876.699498][T27971] netlink: Unknown conntrack attr (0) [ 876.866382][T27978] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5244'. [ 876.916061][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e3fc400: abort rx timeout. Force session deactivation [ 876.928574][T27980] geneve2: entered promiscuous mode [ 877.044136][T27982] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5246'. [ 877.344408][T27996] Cannot find del_set index 4 as target [ 878.086445][T28031] tipc: Enabling of bearer rejected, failed to enable media [ 878.251111][T28038] x_tables: duplicate underflow at hook 3 [ 878.346253][T28046] netlink: 'syz.6.5266': attribute type 32 has an invalid length. [ 878.625319][T28063] netlink: 'syz.5.5268': attribute type 7 has an invalid length. [ 878.625347][T28063] netlink: 'syz.5.5268': attribute type 8 has an invalid length. [ 878.651946][T28066] netlink: 'syz.5.5268': attribute type 7 has an invalid length. [ 878.651980][T28066] netlink: 'syz.5.5268': attribute type 8 has an invalid length. [ 878.681120][T28063] bond0: entered promiscuous mode [ 878.695081][T28063] syz_tun: entered promiscuous mode [ 878.706479][T28063] gretap0: entered promiscuous mode [ 878.710109][T28063] debugfs: 'hsr1' already exists in 'hsr' [ 878.710137][T28063] Cannot create hsr debugfs directory [ 878.710190][T28063] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 879.315921][T28097] ip_tables: iptables: counters copy to user failed while replacing table [ 879.795087][T28123] trusted_key: syz.1.5279 sent an empty control message without MSG_MORE. [ 879.903287][T28114] lo speed is unknown, defaulting to 1000 [ 880.020078][T28127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 880.168960][T28131] geneve4: entered promiscuous mode [ 880.171011][T28131] geneve4: entered allmulticast mode [ 880.206904][ T12] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 880.208275][ T62] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 880.208329][ T62] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 880.208365][ T62] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 880.370325][T28114] rxe_eth0 speed is unknown, defaulting to 1000 [ 880.561924][T28137] __nla_validate_parse: 9 callbacks suppressed [ 880.561951][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'. [ 880.701349][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'. [ 880.703353][T28137] netlink: 'syz.0.5284': attribute type 1 has an invalid length. [ 880.703380][T28137] netlink: 'syz.0.5284': attribute type 2 has an invalid length. [ 880.703685][T28139] netlink: 'syz.0.5284': attribute type 1 has an invalid length. [ 880.703699][T28139] netlink: 'syz.0.5284': attribute type 2 has an invalid length. [ 880.957121][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5286'. [ 880.957184][T28148] netlink: 'syz.5.5286': attribute type 5 has an invalid length. [ 880.957202][T28148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5286'. [ 881.012930][T28153] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5288'. [ 881.054031][T28148] geneve3: entered promiscuous mode [ 881.054075][T28148] geneve3: entered allmulticast mode [ 881.067582][ T9572] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 881.069101][ T9572] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 881.069155][ T9572] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 881.069192][ T9572] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 881.154360][T28114] syzkaller0 speed is unknown, defaulting to 1000 [ 882.489285][T28206] tipc: Enabling of bearer rejected, failed to enable media [ 882.813669][T28215] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5303'. [ 882.831976][T28215] bond_slave_0: mtu greater than device maximum [ 883.152371][T28230] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 883.407338][T28243] validate_nla: 3 callbacks suppressed [ 883.407367][T28243] netlink: 'syz.1.5311': attribute type 10 has an invalid length. [ 883.419961][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5310'. [ 883.481102][T28243] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 883.522437][T28243] team0: Port device wlan0 added [ 883.661929][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5315'. [ 883.691086][T28254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5315'. [ 883.748140][T28255] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 883.752587][T28261] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5316'. [ 883.840711][T28264] tls_set_device_offload_rx: netdev not found [ 883.858861][T28266] syzkaller0: left promiscuous mode [ 883.858889][T28266] syzkaller0: left allmulticast mode [ 883.859621][T25202] syzkaller0 speed is unknown, defaulting to 1000 [ 883.863475][T28266] syzkaller0: mtu less than device minimum [ 884.774311][T28298] netlink: 'syz.6.5327': attribute type 29 has an invalid length. [ 884.774771][T28298] netlink: 'syz.6.5327': attribute type 29 has an invalid length. [ 884.946824][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.946883][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.946915][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.946948][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.339993][T28323] netlink: 'syz.1.5336': attribute type 58 has an invalid length. [ 885.544732][T28327] netlink: 'syz.7.5335': attribute type 5 has an invalid length. [ 885.557845][ T53] Bluetooth: hci5: command tx timeout [ 885.655305][T28339] __nla_validate_parse: 7 callbacks suppressed [ 885.655335][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5342'. [ 885.682243][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5342'. [ 886.037576][T28347] 8021q: adding VLAN 0 to HW filter on device bond10 [ 886.044026][T28336] syzkaller1: entered promiscuous mode [ 886.044055][T28336] syzkaller1: entered allmulticast mode [ 886.126842][T28364] GUP no longer grows the stack in syz.6.5347 (28364): 200000003000-20000000a000 (200000001000) [ 886.126889][T28364] CPU: 0 UID: 0 PID: 28364 Comm: syz.6.5347 Not tainted syzkaller #0 PREEMPT(full) [ 886.126911][T28364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 886.126925][T28364] Call Trace: [ 886.126933][T28364] [ 886.126943][T28364] dump_stack_lvl+0xe8/0x150 [ 886.126985][T28364] __get_user_pages+0x23b1/0x2750 [ 886.127015][T28364] ? lock_acquire+0x115/0x350 [ 886.127069][T28364] ? __gup_longterm_locked+0xcb2/0x16f0 [ 886.127101][T28364] ? rcu_is_watching+0x16/0xb0 [ 886.127142][T28364] __gup_longterm_locked+0xe24/0x16f0 [ 886.127203][T28364] gup_fast_fallback+0x360/0x27a0 [ 886.127285][T28364] ? __pfx_gup_fast_fallback+0x10/0x10 [ 886.127316][T28364] ? is_valid_gup_args+0x11f/0x200 [ 886.127346][T28364] ? get_user_pages_fast+0x4d/0xb0 [ 886.127372][T28364] __iov_iter_get_pages_alloc+0x378/0xa40 [ 886.127504][T28364] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 886.127595][T28364] ? __fget_files+0x2a/0x420 [ 886.127656][T28364] iov_iter_get_pages2+0x5e/0xa0 [ 886.127685][T28364] __se_sys_vmsplice+0x844/0x16f0 [ 886.127733][T28364] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 886.127763][T28364] ? finish_task_switch+0x40e/0xc60 [ 886.127799][T28364] ? lockdep_hardirqs_on+0x7b/0x110 [ 886.127860][T28364] ? trace_sched_exit_tp+0x3a/0x130 [ 886.127922][T28364] ? __pfx___schedule+0x10/0x10 [ 886.127995][T28364] do_syscall_64+0x166/0x520 [ 886.128022][T28364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.128046][T28364] ? clear_bhb_loop+0x70/0xc0 [ 886.128081][T28364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.128103][T28364] RIP: 0033:0x7ff5adf9fb19 [ 886.128126][T28364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.128149][T28364] RSP: 002b:00007ff5aedc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 886.128174][T28364] RAX: ffffffffffffffda RBX: 00007ff5ae225fa0 RCX: 00007ff5adf9fb19 [ 886.128189][T28364] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 886.128204][T28364] RBP: 00007ff5ae037b70 R08: 0000000000000000 R09: 0000000000000000 [ 886.128218][T28364] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 886.128231][T28364] R13: 00007ff5ae226038 R14: 00007ff5ae225fa0 R15: 00007fffa42e7898 [ 886.128265][T28364] [ 886.578016][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5348'. [ 886.578069][T28374] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5348'. [ 886.627828][ T29] audit: type=1800 audit(1793931649.300:6): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.660324][ T29] audit: type=1800 audit(1793931649.340:7): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.705580][ T29] audit: type=1800 audit(1793931649.340:8): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.705655][ T29] audit: type=1800 audit(1793931649.340:9): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.705688][ T29] audit: type=1800 audit(1793931649.340:10): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.705720][ T29] audit: type=1800 audit(1793931649.340:11): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.705755][ T29] audit: type=1800 audit(1793931649.340:12): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.737359][ T29] audit: type=1800 audit(1793931649.400:13): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.737429][ T29] audit: type=1800 audit(1793931649.400:14): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.737485][ T29] audit: type=1800 audit(1793931649.400:15): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5348" name="memory.events" dev="tmpfs" ino=2358 res=0 errno=-22 [ 886.889160][T28386] netlink: 'syz.7.5351': attribute type 1 has an invalid length. [ 886.889414][T28386] netlink: 'syz.7.5351': attribute type 1 has an invalid length. [ 886.889609][T28386] netlink: 'syz.7.5351': attribute type 1 has an invalid length. [ 886.915234][T28386] netlink: 'syz.7.5351': attribute type 1 has an invalid length. [ 886.915452][T28386] netlink: 'syz.7.5351': attribute type 1 has an invalid length. [ 887.515726][T28413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5354'. [ 887.599044][T28413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 887.622766][T28423] bond3: entered promiscuous mode [ 887.622798][T28423] bond3: entered allmulticast mode [ 887.645080][T28422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5356'. [ 887.675299][T28413] macvlan3: entered promiscuous mode [ 887.675337][T28413] macvlan3: entered allmulticast mode [ 887.680730][T28413] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 887.988697][T28436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 888.093754][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5364'. [ 888.230179][T28456] xt_hashlimit: invalid interval [ 888.434855][T28468] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5371'. [ 888.445767][T28464] validate_nla: 29 callbacks suppressed [ 888.445824][T28464] netlink: 'syz.6.5370': attribute type 6 has an invalid length. [ 888.445845][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5370'. [ 888.483668][T28470] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5371'. [ 888.854919][T28489] netlink: 'syz.6.5376': attribute type 1 has an invalid length. [ 888.930358][T28489] batman_adv: batadv0: Adding interface: syzkaller0 [ 888.930392][T28489] batman_adv: batadv0: Interface activated: syzkaller0 [ 889.282664][T28504] netlink: 'syz.6.5383': attribute type 9 has an invalid length. [ 889.574667][T28508] xfrm0: entered promiscuous mode [ 889.574701][T28508] xfrm0: entered allmulticast mode [ 889.841183][T28526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.841203][T28526] IPv6: NLM_F_CREATE should be set when creating new route [ 889.841230][T28526] IPv6: NLM_F_CREATE should be set when creating new route [ 889.913969][T28529] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.914341][T28529] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.708681][T28576] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 890.708711][T28576] __nla_validate_parse: 49 callbacks suppressed [ 890.708722][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.708864][T28576] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 890.708890][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709011][T28576] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 890.709023][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709147][T28576] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 890.709159][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709277][T28576] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 890.709288][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709409][T28576] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 890.709421][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709555][T28576] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 890.709567][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709707][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709837][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.709955][T28576] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5404'. [ 890.762844][T28583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 890.994536][T28562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.072412][T28562] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 891.078749][T28588] netlink: 'syz.1.5407': attribute type 11 has an invalid length. [ 891.159807][T18449] Bluetooth: hci5: command 0x0405 tx timeout [ 891.220893][T28571] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 891.802721][T28609] bond4: option all_slaves_active: invalid value (179) [ 891.820842][T28609] bond4 (unregistering): Released all slaves [ 892.539067][T28652] lo speed is unknown, defaulting to 1000 [ 893.113453][T28677] syzkaller1: entered promiscuous mode [ 893.113479][T28677] syzkaller1: entered allmulticast mode [ 893.232921][T28652] rxe_eth0 speed is unknown, defaulting to 1000 [ 893.322427][T28693] xfrm1: entered allmulticast mode [ 893.484154][T28671] validate_nla: 68 callbacks suppressed [ 893.484179][T28671] netlink: 'syz.6.5427': attribute type 1 has an invalid length. [ 893.653395][T28652] syzkaller0 speed is unknown, defaulting to 1000 [ 895.194109][T28764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.230539][T28764] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 895.453205][T28773] netlink: 'syz.7.5446': attribute type 1 has an invalid length. [ 895.453237][T28773] netlink: 'syz.7.5446': attribute type 2 has an invalid length. [ 895.475684][T28768] veth5: entered allmulticast mode [ 895.816211][T28787] __nla_validate_parse: 28 callbacks suppressed [ 895.816234][T28787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5450'. [ 896.110036][T28810] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5452'. [ 896.947628][T28827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5454'. [ 898.376268][T28773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.840795][T28897] bond11 (unregistering): Released all slaves [ 898.945955][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5464'. [ 899.013267][T28914] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5466'. [ 899.013311][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5466'. [ 899.014801][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5466'. [ 899.016319][T28914] netlink: 'syz.5.5466': attribute type 3 has an invalid length. [ 899.016343][T28914] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5466'. [ 899.074781][T28906] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 899.083340][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5466'. [ 899.092623][T28906] bond12 (unregistering): Released all slaves [ 899.192393][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5467'. [ 899.282331][T28921] netlink: 'syz.0.5467': attribute type 10 has an invalid length. [ 899.421853][T28933] pim6reg: entered allmulticast mode [ 899.509135][T28938] netlink: 'syz.5.5475': attribute type 21 has an invalid length. [ 899.509179][T28938] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.064853][T28968] netlink: 'syz.7.5482': attribute type 83 has an invalid length. [ 900.239157][T28975] xt_connbytes: Forcing CT accounting to be enabled [ 900.239588][T28975] set match dimension is over the limit! [ 900.371577][T28977] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 900.949736][T29024] __nla_validate_parse: 5 callbacks suppressed [ 900.949764][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5497'. [ 901.065800][T29031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5499'. [ 901.155425][T29042] netlink: 'syz.6.5503': attribute type 1 has an invalid length. [ 901.165752][T29043] netlink: 'syz.6.5503': attribute type 1 has an invalid length. [ 901.295519][T29049] 8021q: adding VLAN 0 to HW filter on device bond13 [ 901.315107][T29049] bond12: (slave bond13): making interface the new active one [ 901.316027][T29049] bond12: (slave bond13): Enslaving as an active interface with an up link [ 901.330678][T29049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5503'. [ 901.392269][T29048] 8021q: adding VLAN 0 to HW filter on device bond14 [ 901.395388][T29048] bond12: (slave bond14): Enslaving as a backup interface with an up link [ 901.513445][T29042] bond12: (slave gretap1): Enslaving as a backup interface with an up link [ 901.604814][T29063] netlink: 'syz.0.5508': attribute type 3 has an invalid length. [ 901.648761][T29069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5508'. [ 901.648962][T29069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5508'. [ 901.649100][T29069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5508'. [ 901.649237][T29069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5508'. [ 901.649375][T29069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5508'. [ 901.649511][T29069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5508'. [ 901.649661][T29069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5508'. [ 901.825617][T29081] netlink: 'syz.0.5515': attribute type 2 has an invalid length. [ 901.841852][T29081] !;: entered promiscuous mode [ 901.876367][T18449] bt_warn_ratelimited: 55 callbacks suppressed [ 901.876408][T18449] Bluetooth: hci2: unexpected event 0x3b length: 11 > 10 [ 902.398868][T29111] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 902.963855][T29123] ip_tables: iptables: counters copy to user failed while replacing table [ 903.250608][ T8451] IPVS: starting estimator thread 0... [ 903.350416][T29137] IPVS: using max 33 ests per chain, 79200 per kthread [ 904.257032][T29178] tipc: Enabling of bearer rejected, media not registered [ 904.376362][T29184] openvswitch: netlink: IP tunnel dst address not specified [ 904.621346][T29204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.020882][T18449] block nbd5: Receive control failed (result -32) [ 905.023642][ T53] block nbd5: Receive control failed (result -32) [ 905.251924][T29229] warn_alloc: 1 callbacks suppressed [ 905.251963][T29229] syz.7.5551: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 905.252039][T29229] CPU: 1 UID: 0 PID: 29229 Comm: syz.7.5551 Not tainted syzkaller #0 PREEMPT(full) [ 905.252060][T29229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 905.252072][T29229] Call Trace: [ 905.252081][T29229] [ 905.252090][T29229] dump_stack_lvl+0xe8/0x150 [ 905.252138][T29229] warn_alloc+0x24d/0x270 [ 905.252163][T29229] ? stack_depot_save_flags+0x33/0x810 [ 905.252193][T29229] ? __pfx_warn_alloc+0x10/0x10 [ 905.252210][T29229] ? kasan_save_track+0x4f/0x80 [ 905.252236][T29229] ? __kasan_kmalloc+0x93/0xb0 [ 905.252263][T29229] ? xsk_init_queue+0x8a/0xe0 [ 905.252303][T29229] ? xsk_setsockopt+0x52a/0x960 [ 905.252324][T29229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.252365][T29229] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 905.252414][T29229] ? rcu_is_watching+0x16/0xb0 [ 905.252453][T29229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 905.252473][T29229] ? __kmalloc_cache_noprof+0x31c/0x600 [ 905.252497][T29229] ? __kmalloc_cache_noprof+0x148/0x600 [ 905.252520][T29229] ? xskq_create+0x56/0x220 [ 905.252546][T29229] xskq_create+0x148/0x220 [ 905.252572][T29229] ? xsk_init_queue+0x8a/0xe0 [ 905.252600][T29229] xsk_init_queue+0x8a/0xe0 [ 905.252624][T29229] xsk_setsockopt+0x52a/0x960 [ 905.252650][T29229] ? __pfx_xsk_setsockopt+0x10/0x10 [ 905.252672][T29229] ? __pfx_aa_sk_perm+0x10/0x10 [ 905.252725][T29229] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 905.252752][T29229] ? __pfx_xsk_setsockopt+0x10/0x10 [ 905.252773][T29229] do_sock_setsockopt+0x17c/0x1b0 [ 905.252800][T29229] __x64_sys_setsockopt+0x13d/0x1b0 [ 905.252825][T29229] do_syscall_64+0x166/0x520 [ 905.252852][T29229] ? trace_irq_disable+0x3b/0x140 [ 905.252876][T29229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.252895][T29229] ? clear_bhb_loop+0x70/0xc0 [ 905.252920][T29229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.252939][T29229] RIP: 0033:0x7f5f4c99fb19 [ 905.252961][T29229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.252981][T29229] RSP: 002b:00007f5f4d938028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 905.253002][T29229] RAX: ffffffffffffffda RBX: 00007f5f4cc25fa0 RCX: 00007f5f4c99fb19 [ 905.253017][T29229] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 905.253029][T29229] RBP: 00007f5f4ca37b70 R08: 0000000000000004 R09: 0000000000000000 [ 905.253041][T29229] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.253054][T29229] R13: 00007f5f4cc26038 R14: 00007f5f4cc25fa0 R15: 00007ffc1d6fbe88 [ 905.253088][T29229] [ 905.253128][T29229] Mem-Info: [ 905.253144][T29229] active_anon:6982 inactive_anon:0 isolated_anon:0 [ 905.253144][T29229] active_file:2 inactive_file:43516 isolated_file:0 [ 905.253144][T29229] unevictable:0 dirty:45 writeback:0 [ 905.253144][T29229] slab_reclaimable:13125 slab_unreclaimable:129814 [ 905.253144][T29229] mapped:29253 shmem:540 pagetables:8105 [ 905.253144][T29229] sec_pagetables:0 bounce:0 [ 905.253144][T29229] kernel_misc_reclaimable:0 [ 905.253144][T29229] free:1236691 free_pcp:10280 free_cma:0 [ 905.253200][T29229] Node 0 active_anon:27928kB inactive_anon:0kB active_file:8kB inactive_file:173864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96532kB dirty:180kB writeback:0kB shmem:2160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17048kB pagetables:32276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 905.253256][T29229] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 905.253307][T29229] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 905.253361][T29229] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 905.253394][T29229] Node 0 DMA32 free:1024916kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27928kB inactive_anon:0kB active_file:8kB inactive_file:173864kB unevictable:0kB writepending:180kB zspages:0kB present:3129332kB managed:2523084kB mlocked:0kB bounce:0kB free_pcp:41120kB local_pcp:20416kB free_cma:0kB [ 905.253452][T29229] lowmem_reserve[]: 0 0 1 1 1 [ 905.282484][T29229] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 905.282538][T29229] lowmem_reserve[]: 0 0 0 0 0 [ 905.282565][T29229] Node 1 Normal free:3910584kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 905.282620][T29229] lowmem_reserve[]: 0 0 0 0 0 [ 905.282650][T29229] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 905.282757][T29229] Node 0 DMA32: 423*4kB (UME) 693*8kB (UM) 1673*16kB (UM) 904*32kB (UME) 1739*64kB (UM) 1401*128kB (UME) 828*256kB (UE) 435*512kB (UM) 171*1024kB (UM) 12*2048kB (UME) 9*4096kB (U) = 1024788kB [ 905.282983][T29229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 905.283094][T29229] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 12*16kB (UM) 5*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 953*4096kB (UM) = 3910584kB [ 905.283259][T29229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 905.283277][T29229] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 905.283294][T29229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 905.283312][T29229] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 905.283329][T29229] 44054 total pagecache pages [ 905.283337][T29229] 0 pages in swap cache [ 905.283344][T29229] Free swap = 124996kB [ 905.283352][T29229] Total swap = 124996kB [ 905.283361][T29229] 2097051 pages RAM [ 905.283367][T29229] 0 pages HighMem/MovableOnly [ 905.283375][T29229] 434249 pages reserved [ 905.283382][T29229] 0 pages cma reserved [ 905.504005][T29234] ip_tables: iptables: counters copy to user failed while replacing table [ 905.510490][T29234] netlink: 'syz.0.5552': attribute type 12 has an invalid length. [ 905.684523][T29234] bond11: option primary_reselect: invalid value (255) [ 905.692687][T29234] bond11 (unregistering): Released all slaves [ 906.120670][T29247] hsr_slave_1 (unregistering): left promiscuous mode [ 906.302364][T29262] ip_tables: iptables: counters copy to user failed while replacing table [ 906.375223][T29260] netlink: 'syz.5.5558': attribute type 1 has an invalid length. [ 906.392647][T29262] sctp: [Deprecated]: syz.6.5559 (pid 29262) Use of int in maxseg socket option. [ 906.392647][T29262] Use struct sctp_assoc_value instead [ 906.643454][T29280] wg2: Caught tx_queue_len zero misconfig [ 906.789960][T29284] __nla_validate_parse: 35 callbacks suppressed [ 906.789986][T29284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5564'. [ 906.836121][T29294] netlink: 'syz.1.5566': attribute type 1 has an invalid length. [ 906.836146][T29294] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5566'. [ 906.903007][T29284] : entered promiscuous mode [ 907.213143][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5569'. [ 907.280567][T29312] tunl0: Caught tx_queue_len zero misconfig [ 907.549538][T29324] veth0_to_bond: entered allmulticast mode [ 907.754313][T29341] ipt_ah: unknown flags FF [ 908.104902][T29362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5587'. [ 908.104953][T29362] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5587'. [ 908.110362][T29362] xt_REDIRECT: bad rangesize 26624. [ 908.117061][T29357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5588'. [ 908.394495][T29377] netlink: 'syz.6.5592': attribute type 1 has an invalid length. [ 908.438242][T29380] x_tables: unsorted entry at hook 2 [ 908.699467][T29377] bridge5: entered promiscuous mode [ 908.724510][T29377] bond15: (slave bridge5): making interface the new active one [ 908.735602][T29377] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 908.764242][T29395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5595'. [ 908.861424][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5595'. [ 909.055696][T29408] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5602'. [ 909.070991][T29404] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5600'. [ 909.213726][T29398] netlink: 'syz.6.5598': attribute type 21 has an invalid length. [ 909.402484][T29404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.424222][T29404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.433948][T29404] bond0 (unregistering): Released all slaves [ 909.535533][T29408] 0ªî{X¹¦: renamed from gretap0 [ 909.554000][T29408] 0ªî{X¹¦: entered allmulticast mode [ 909.559946][T29398] netlink: 'syz.6.5598': attribute type 21 has an invalid length. [ 909.568009][T29408] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 910.222927][T29466] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 911.206103][T29501] x_tables: unsorted entry at hook 3 [ 911.775596][T29533] xt_recent: Unsupported userspace flags (000000b1) [ 911.847976][T29538] xt_recent: Unsupported userspace flags (000000b1) [ 911.946157][T29547] __nla_validate_parse: 8 callbacks suppressed [ 911.946173][T29547] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5637'. [ 912.228285][T29561] tipc: Enabled bearer , priority 10 [ 912.394830][T29573] bond0: invalid NS target :: specified for addition [ 912.394868][T29573] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 912.481348][T29579] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5647'. [ 912.493884][T29580] netlink: 'syz.5.5648': attribute type 10 has an invalid length. [ 912.584643][T29584] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5650'. [ 912.584678][T29584] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5650'. [ 912.629086][T29586] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5650'. [ 912.629111][T29586] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5650'. [ 912.833202][T29600] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 912.916481][T29595] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5654'. [ 912.925555][T29607] ip_tables: iptables: counters copy to user failed while replacing table [ 913.347165][T25205] tipc: Node number set to 2939009987 [ 913.815493][T29643] bond4 (unregistering): Released all slaves [ 913.987040][T29653] bond11 (unregistering): Released all slaves [ 914.053226][T29667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5672'. [ 914.054446][T29666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5672'. [ 914.060888][T29660] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5671'. [ 914.319692][T29678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 914.440096][T29686] netlink: 'syz.0.5679': attribute type 49 has an invalid length. [ 914.463065][T29682] syzkaller0: entered promiscuous mode [ 914.463093][T29682] syzkaller0: entered allmulticast mode [ 915.635788][T29759] Set syz1 is full, maxelem 14 reached [ 915.700221][T29767] netlink: 'syz.6.5698': attribute type 4 has an invalid length. [ 918.202266][T29735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.525481][T29814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 918.709065][T29824] ip_tables: iptables: counters copy to user failed while replacing table [ 918.712306][T29825] nbd: must specify at least one socket [ 919.139382][T29839] __nla_validate_parse: 5 callbacks suppressed [ 919.139407][T29839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5721'. [ 919.139937][T29839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5721'. [ 919.488973][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5728'. [ 919.548873][T29862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 919.566207][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5728'. [ 919.622117][T29862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 919.704472][T29871] tap0: tun_chr_ioctl cmd 1074025672 [ 919.704502][T29871] tap0: ignored: set checksum disabled [ 920.038279][T29895] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5737'. [ 920.038313][T29895] bridge: RTM_NEWNEIGH with invalid ether address [ 920.043513][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5737'. [ 920.044822][T29897] x_tables: unsorted underflow at hook 1 [ 920.046211][T29895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5737'. [ 920.222908][T29898] Bluetooth: hci0: unsupported parameter 5135 [ 920.222943][T29898] Bluetooth: hci0: unsupported parameter 8192 [ 920.222957][T29898] Bluetooth: hci0: unsupported parameter 5135 [ 920.222969][T29898] Bluetooth: hci0: unsupported parameter 8192 [ 920.255137][T29905] ip_tables: iptables: counters copy to user failed while replacing table [ 920.445308][T29914] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5741'. [ 920.454360][T29915] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5741'. [ 920.499669][T29914] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 920.565984][T29915] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 920.569344][T29914] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 920.818157][T29923] 8021q: adding VLAN 0 to HW filter on device bond6 [ 920.842539][T29922] sit0: entered promiscuous mode [ 920.885166][T29922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5742'. [ 921.224911][T29939] bond1: entered allmulticast mode [ 921.240767][T29939] bond1: left allmulticast mode [ 921.243218][T29942] syzkaller0: entered promiscuous mode [ 921.243246][T29942] syzkaller0: entered allmulticast mode [ 921.656337][T29961] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 921.659061][T29969] openvswitch: netlink: IP tunnel dst address not specified [ 922.599150][T30017] netlink: 'syz.6.5770': attribute type 1 has an invalid length. [ 922.661234][T30017] bond18: (slave veth0_to_bond): making interface the new active one [ 922.664328][T30017] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 922.896347][T30032] xt_TCPMSS: Only works on TCP SYN packets [ 923.056143][T30044] v: renamed from vlan1 [ 923.071778][T30044] netlink: 'syz.0.5779': attribute type 10 has an invalid length. [ 923.233138][T30056] syzkaller1: entered promiscuous mode [ 923.233165][T30056] syzkaller1: entered allmulticast mode [ 923.541414][T30072] veth1_to_bond: entered allmulticast mode [ 923.553979][T30069] veth1_to_bond: left allmulticast mode [ 923.638883][T18449] Bluetooth: hci2: command 0x0401 tx timeout [ 923.661820][T30077] xt_hashlimit: size too large, truncated to 1048576 [ 924.301552][T30116] tipc: Failed to remove unknown binding: 66,0,0/372444803:1816157653/1816157655 [ 924.301586][T30116] tipc: Failed to remove unknown binding: 66,0,0/372444803:1816157653/1816157654 [ 924.302938][T30113] netlink: 'syz.6.5796': attribute type 1 has an invalid length. [ 924.305945][T30114] tipc: Failed to remove unknown binding: 66,0,0/372444803:1816157653/1816157655 [ 924.305978][T30114] tipc: Failed to remove unknown binding: 66,0,0/372444803:1816157653/1816157654 [ 924.676140][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 924.676175][ T29] audit: type=1107 audit(1793931687.350:71): pid=30128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='•ÔM34¶Èñ$DLÿ‹çáp5åücˆZ?¾P)À†ÔÚå À©¸<}b--Ї‚»ü¦µ~¾³ÂëÀÚêÄuv(­3¢U$ú¹åX.íX…ËzÖ¥…‹î"$‚âà}¬ÄN €Ù=­¥ ¹­tà ã,‡¦Ÿ1InI' [ 924.694194][T30130] netlink: 'syz.7.5801': attribute type 15 has an invalid length. [ 924.723282][T30130] netlink: 'syz.7.5801': attribute type 15 has an invalid length. [ 924.750237][ T9581] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 924.751237][ T9581] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 924.751380][ T9581] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 924.751411][ T9581] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 925.049634][T30144] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 925.175738][T30150] __nla_validate_parse: 19 callbacks suppressed [ 925.175761][T30150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5803'. [ 925.222486][T30153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5807'. [ 925.451127][T30176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5811'. [ 928.158958][T30151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 928.159611][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5806'. [ 928.489559][T30195] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5815'. [ 928.613679][T30200] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5815'. [ 928.623780][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5813'. [ 928.660953][T30212] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5819'. [ 928.850135][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5819'. [ 928.850169][T30214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5819'. [ 929.108811][T30234] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 929.202852][T30239] xt_TCPMSS: Only works on TCP SYN packets [ 929.279321][ T1015] IPVS: starting estimator thread 0... [ 929.388180][T30246] IPVS: using max 33 ests per chain, 79200 per kthread [ 929.556264][T30253] syzkaller1: entered promiscuous mode [ 929.556299][T30253] syzkaller1: entered allmulticast mode [ 930.169100][T30288] netlink: 'syz.0.5842': attribute type 1 has an invalid length. [ 930.213299][T30288] 8021q: adding VLAN 0 to HW filter on device bond11 [ 930.252799][T30288] bond11: (slave geneve3): making interface the new active one [ 930.283802][T30288] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 930.479578][T30306] __nla_validate_parse: 2 callbacks suppressed [ 930.479605][T30306] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5845'. [ 930.582829][T30306] bond0: left promiscuous mode [ 930.582868][T30306] bridge1: left promiscuous mode [ 930.631320][T30310] ip_tables: iptables: counters copy to user failed while replacing table [ 930.736043][T30315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5851'. [ 930.745044][ T1015] bond0: (slave bridge1): link status definitely down, disabling slave [ 930.745257][ T1015] bond0: (slave bridge2): link status definitely down, disabling slave [ 930.826051][T30317] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 930.879617][ T1015] bond0: now running without any active interface! [ 930.923193][T30322] Bluetooth: hci0: unsupported parameter 5135 [ 930.923217][T30322] Bluetooth: hci0: unsupported parameter 8192 [ 930.923229][T30322] Bluetooth: hci0: unsupported parameter 5135 [ 930.923241][T30322] Bluetooth: hci0: unsupported parameter 8192 [ 931.029439][T30330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5854'. [ 931.034003][T30330] IPv6: Can't replace route, no match found [ 931.155131][T30334] IPVS: ip_vs_edit_dest(): server weight less than zero [ 931.370311][T30354] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5861'. [ 931.424687][T30356] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5860'. [ 931.424778][T30356] nbd: illegal input index -8454144 [ 931.442973][T30356] nbd6: detected capacity change from 0 to 274877906944 [ 931.460547][ T4949] [ 931.462973][ T4949] ====================================================== [ 931.470096][ T4949] WARNING: possible circular locking dependency detected [ 931.477147][ T4949] syzkaller #0 Not tainted [ 931.481608][ T4949] ------------------------------------------------------ [ 931.488644][ T4949] kworker/1:1H/4949 is trying to acquire lock: [ 931.494925][ T4949] ffff8880578fe868 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 931.504673][ T4949] [ 931.504673][ T4949] but task is already holding lock: [ 931.512060][ T4949] ffff888028950178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 931.520730][ T4949] [ 931.520730][ T4949] which lock already depends on the new lock. [ 931.520730][ T4949] [ 931.532675][ T4949] [ 931.532675][ T4949] the existing dependency chain (in reverse order) is: [ 931.541716][ T4949] [ 931.541716][ T4949] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 931.548982][ T4949] __mutex_lock+0x197/0x15a0 [ 931.554131][ T4949] nbd_queue_rq+0xc1/0xff0 [ 931.559104][ T4949] blk_mq_dispatch_rq_list+0x499/0x1990 [ 931.565304][ T4949] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 931.573239][ T4949] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 931.579927][ T4949] blk_mq_run_work_fn+0x167/0x2f0 [ 931.585518][ T4949] process_scheduled_works+0xc3d/0x1630 [ 931.591630][ T4949] worker_thread+0xa47/0xfb0 [ 931.596828][ T4949] kthread+0x38b/0x480 [ 931.601463][ T4949] ret_from_fork+0x514/0xb70 [ 931.606613][ T4949] ret_from_fork_asm+0x1a/0x30 [ 931.611948][ T4949] [ 931.611948][ T4949] -> #5 (set->srcu){.+.+}-{0:0}: [ 931.619099][ T4949] __synchronize_srcu+0xca/0x2f0 [ 931.624615][ T4949] elevator_switch+0x1e8/0x7b0 [ 931.630079][ T4949] elevator_change+0x2fa/0x480 [ 931.635507][ T4949] elevator_set_default+0x375/0x440 [ 931.641257][ T4949] blk_register_queue+0x404/0x4f0 [ 931.646910][ T4949] __add_disk+0x6b8/0xdb0 [ 931.651774][ T4949] add_disk_fwnode+0x100/0x3a0 [ 931.657068][ T4949] nbd_dev_add+0x733/0xb60 [ 931.662096][ T4949] nbd_init+0x168/0x1f0 [ 931.666780][ T4949] do_one_initcall+0x250/0x870 [ 931.672152][ T4949] do_initcall_level+0x10a/0x1a0 [ 931.677660][ T4949] do_initcalls+0x59/0xa0 [ 931.682524][ T4949] kernel_init_freeable+0x29d/0x3e0 [ 931.688279][ T4949] kernel_init+0x22/0x1d0 [ 931.693152][ T4949] ret_from_fork+0x514/0xb70 [ 931.698280][ T4949] ret_from_fork_asm+0x1a/0x30 [ 931.703685][ T4949] [ 931.703685][ T4949] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 931.711621][ T4949] __mutex_lock+0x197/0x15a0 [ 931.716776][ T4949] elevator_change+0x1af/0x480 [ 931.722087][ T4949] elevator_set_none+0xb5/0x140 [ 931.727482][ T4949] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 931.733814][ T4949] nbd_start_device+0x189/0xb30 [ 931.739191][ T4949] nbd_genl_connect+0x167d/0x1cd0 [ 931.744857][ T4949] genl_family_rcv_msg_doit+0x233/0x340 [ 931.751017][ T4949] genl_rcv_msg+0x614/0x7a0 [ 931.756051][ T4949] netlink_rcv_skb+0x226/0x4a0 [ 931.761414][ T4949] genl_rcv+0x28/0x40 [ 931.765935][ T4949] netlink_unicast+0x8ef/0xa80 [ 931.771234][ T4949] netlink_sendmsg+0x7f0/0xb20 [ 931.776545][ T4949] sock_sendmsg_nosec+0x14e/0x190 [ 931.782176][ T4949] ____sys_sendmsg+0x54e/0x850 [ 931.787468][ T4949] ___sys_sendmsg+0x2a5/0x360 [ 931.792670][ T4949] __x64_sys_sendmsg+0x1b1/0x290 [ 931.798135][ T4949] do_syscall_64+0x166/0x520 [ 931.803626][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.810196][ T4949] [ 931.810196][ T4949] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 931.818819][ T4949] blk_alloc_queue+0x544/0x690 [ 931.824156][ T4949] __blk_mq_alloc_disk+0x194/0x390 [ 931.829821][ T4949] nbd_dev_add+0x494/0xb60 [ 931.834793][ T4949] nbd_init+0x168/0x1f0 [ 931.839474][ T4949] do_one_initcall+0x250/0x870 [ 931.844770][ T4949] do_initcall_level+0x10a/0x1a0 [ 931.850363][ T4949] do_initcalls+0x59/0xa0 [ 931.855253][ T4949] kernel_init_freeable+0x29d/0x3e0 [ 931.860990][ T4949] kernel_init+0x22/0x1d0 [ 931.865860][ T4949] ret_from_fork+0x514/0xb70 [ 931.870991][ T4949] ret_from_fork_asm+0x1a/0x30 [ 931.876313][ T4949] [ 931.876313][ T4949] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 931.883551][ T4949] fs_reclaim_acquire+0x71/0x100 [ 931.889043][ T4949] __kmalloc_cache_noprof+0x61/0x600 [ 931.895501][ T4949] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 931.901413][ T4949] tcp_sendmsg_locked+0x4d2b/0x53c0 [ 931.907147][ T4949] tcp_sendmsg+0x2f/0x50 [ 931.912107][ T4949] sock_sendmsg_nosec+0x10f/0x190 [ 931.917702][ T4949] __sys_sendto+0x408/0x5a0 [ 931.923077][ T4949] __x64_sys_sendto+0xde/0x100 [ 931.928439][ T4949] do_syscall_64+0x166/0x520 [ 931.933592][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.940028][ T4949] [ 931.940028][ T4949] -> #1 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 931.948139][ T4949] lock_sock_nested+0x41/0x100 [ 931.953450][ T4949] inet_shutdown+0x6a/0x390 [ 931.958669][ T4949] nbd_mark_nsock_dead+0x2cb/0x550 [ 931.964315][ T4949] recv_work+0x1d14/0x1e30 [ 931.969265][ T4949] process_scheduled_works+0xc3d/0x1630 [ 931.975388][ T4949] worker_thread+0xa47/0xfb0 [ 931.980604][ T4949] kthread+0x38b/0x480 [ 931.985201][ T4949] ret_from_fork+0x514/0xb70 [ 931.990321][ T4949] ret_from_fork_asm+0x1a/0x30 [ 931.995616][ T4949] [ 931.995616][ T4949] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 932.003266][ T4949] __lock_acquire+0x164c/0x2de0 [ 932.008652][ T4949] lock_acquire+0x115/0x350 [ 932.013683][ T4949] __mutex_lock+0x197/0x15a0 [ 932.018809][ T4949] nbd_queue_rq+0x373/0xff0 [ 932.023851][ T4949] blk_mq_dispatch_rq_list+0x499/0x1990 [ 932.029948][ T4949] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 932.036901][ T4949] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 932.043408][ T4949] blk_mq_run_work_fn+0x167/0x2f0 [ 932.049227][ T4949] process_scheduled_works+0xc3d/0x1630 [ 932.055315][ T4949] worker_thread+0xa47/0xfb0 [ 932.060433][ T4949] kthread+0x38b/0x480 [ 932.065021][ T4949] ret_from_fork+0x514/0xb70 [ 932.070139][ T4949] ret_from_fork_asm+0x1a/0x30 [ 932.075526][ T4949] [ 932.075526][ T4949] other info that might help us debug this: [ 932.075526][ T4949] [ 932.085768][ T4949] Chain exists of: [ 932.085768][ T4949] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 932.085768][ T4949] [ 932.097852][ T4949] Possible unsafe locking scenario: [ 932.097852][ T4949] [ 932.105300][ T4949] CPU0 CPU1 [ 932.110664][ T4949] ---- ---- [ 932.116025][ T4949] lock(&cmd->lock); [ 932.120386][ T4949] lock(set->srcu); [ 932.126887][ T4949] lock(&cmd->lock); [ 932.133388][ T4949] lock(&nsock->tx_lock); [ 932.137808][ T4949] [ 932.137808][ T4949] *** DEADLOCK *** [ 932.137808][ T4949] [ 932.145946][ T4949] locks held by kworker/1:1H/4949: 4, last CPU#1: [ 932.152358][ T4949] #0: ffff8880212e8548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 932.163517][ T4949] #1: ffffc90006b3fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 932.176420][ T4949] #2: ffff888028756a98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0 [ 932.186195][ T4949] #3: ffff888028950178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 932.195081][ T4949] [ 932.195081][ T4949] stack backtrace: [ 932.200981][ T4949] CPU: 1 UID: 0 PID: 4949 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 932.210524][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 932.220588][ T4949] Workqueue: kblockd blk_mq_run_work_fn [ 932.226169][ T4949] Call Trace: [ 932.229445][ T4949] [ 932.232379][ T4949] dump_stack_lvl+0xe8/0x150 [ 932.236997][ T4949] print_circular_bug+0x2e2/0x300 [ 932.242146][ T4949] check_noncircular+0x12f/0x150 [ 932.247115][ T4949] __lock_acquire+0x164c/0x2de0 [ 932.252151][ T4949] ? irqentry_exit+0x2a0/0x9b0 [ 932.256940][ T4949] ? __pfx___schedule+0x10/0x10 [ 932.261819][ T4949] ? irqentry_exit+0x2a0/0x9b0 [ 932.266800][ T4949] lock_acquire+0x115/0x350 [ 932.271319][ T4949] ? nbd_queue_rq+0x373/0xff0 [ 932.276011][ T4949] __mutex_lock+0x197/0x15a0 [ 932.280609][ T4949] ? nbd_queue_rq+0x373/0xff0 [ 932.285461][ T4949] ? ret_from_fork_asm+0x1a/0x30 [ 932.290584][ T4949] ? lock_acquire+0x115/0x350 [ 932.295375][ T4949] ? nbd_queue_rq+0x373/0xff0 [ 932.300172][ T4949] ? __pfx___mutex_lock+0x10/0x10 [ 932.305216][ T4949] ? ktime_get+0x45/0x220 [ 932.309552][ T4949] nbd_queue_rq+0x373/0xff0 [ 932.314069][ T4949] ? __pfx_clockevents_program_event+0x10/0x10 [ 932.320414][ T4949] ? __pfx_nbd_queue_rq+0x10/0x10 [ 932.325501][ T4949] ? irqentry_exit+0x2a0/0x9b0 [ 932.330302][ T4949] ? lockdep_hardirqs_on+0x7b/0x110 [ 932.335542][ T4949] ? irqentry_exit+0x2a0/0x9b0 [ 932.340313][ T4949] blk_mq_dispatch_rq_list+0x499/0x1990 [ 932.345886][ T4949] ? sbitmap_get+0x229/0x390 [ 932.350583][ T4949] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 932.356687][ T4949] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 932.362538][ T4949] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 932.368884][ T4949] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 932.375687][ T4949] ? lock_acquire+0x115/0x350 [ 932.380382][ T4949] ? process_scheduled_works+0x97a/0x1630 [ 932.386129][ T4949] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 932.392306][ T4949] ? blk_mq_run_work_fn+0x13f/0x2f0 [ 932.397531][ T4949] blk_mq_run_work_fn+0x167/0x2f0 [ 932.402561][ T4949] ? process_scheduled_works+0x97a/0x1630 [ 932.408289][ T4949] process_scheduled_works+0xc3d/0x1630 [ 932.413857][ T4949] ? __pfx_process_scheduled_works+0x10/0x10 [ 932.419856][ T4949] ? assign_work+0x3cf/0x5d0 [ 932.424459][ T4949] worker_thread+0xa47/0xfb0 [ 932.429067][ T4949] ? __kthread_parkme+0x71/0x1f0 [ 932.434010][ T4949] kthread+0x38b/0x480 [ 932.438135][ T4949] ? __pfx_worker_thread+0x10/0x10 [ 932.443338][ T4949] ? __pfx_kthread+0x10/0x10 [ 932.447934][ T4949] ret_from_fork+0x514/0xb70 [ 932.452656][ T4949] ? __pfx_ret_from_fork+0x10/0x10 [ 932.457801][ T4949] ? __switch_to+0xc78/0x1410 [ 932.462519][ T4949] ? __pfx_kthread+0x10/0x10 [ 932.467144][ T4949] ret_from_fork_asm+0x1a/0x30 [ 932.471963][ T4949] [ 932.515147][ T53] block nbd6: Receive control failed (result -104)