last executing test programs: 3m12.136167837s ago: executing program 1 (id=1767): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) r5 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB=':mTx']) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0x4c, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0x4b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0xfffe, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f704000000000000009ae5d322348df7"}]}}}}}}}}, 0x0) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac0c, 0xfac04, 0xfac01, 0xfac01]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) close(r1) 3m11.564963691s ago: executing program 1 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x19, 0x3, @l2={'eth', 0x3a, 'netpci0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x24040880) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e19, 0x0, @empty, 0x61}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x1c) 3m11.207883501s ago: executing program 1 (id=1777): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0xe8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x8b, 0x91, "4cc49bfcfb3130b3e7a7f90ffe8efa88371ee8be95de628deca6709d3688a94c5c069e0994aaeeba67e903bfcd19b9d4b3c1eaa12070f3e1b021807f5358aabe8a9ad047aaf51a3a940bd3f7ee4344b4c046b5161c6f5f4b22885d4ee7f098da932342f003e0a7c42aeeaa98adad13c9ce06bb2b1a30e4f1db5b96e379214bdd5393f695e5c936"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe8}}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x218, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xba, 0x7c}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="83c93be3ce65587df6bc616e85f4d1fd"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8a5058f9bf09616ab6bdb4fff4ce3e4f0c7d8f7bf2975f79d96bf15cb73db2da"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c263ce6347c9c7d7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e63c2f8640430c15"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a68d081183b96e2a9021f1f24334173d4ba16beae39bfc7758bd6801d9ba11f5"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ef76b5a6ae2fe9b1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c2d86df0da9dc8199ea0fbc8357a91e7818c6f02bdaf8190"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9042e72c63c4e6f0ed6745f6b4c75a99"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="69a07acb28c34d4992bef5b5bacb0f11e551ff91ac5b69a0434102e954384076"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cbd2634506f3ffce"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bcfe48802f6627e9a4f799f6eed8fa09ff61dc9aeaaaf23d5d75993399960467"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ae1a2b575dd1c5ba75fbbc51a7161b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5cc57086edb1a7e720537708f1b7617d"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="571e3cbf728e9e397469a5640118738b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "81b24cfa67a364f8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ea86b60fc0b5b70bf7a50fffa75450a68f4dfce20f17d769"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c8c02597e756af9a915e0c554f12e7c6888a87991ed69545ddc28520054fb7ba"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="52f73bc584c044b11f519e05a8fba928dbb191056a05f38a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="257eb3e22668c9216e14f2593dbc3608"}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4080}, 0x40010) 3m10.674519467s ago: executing program 1 (id=1779): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100000000000002000200000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080016800400018008001b0000000000"], 0x30}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = socket$packet(0x11, 0x3, 0x300) accept4(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0, 0x80000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x98}) r6 = accept4$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x10, 0x800) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x3, 0x800, 0x81, 0x800}) syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb88a8300081002e000806000186dd0610"], 0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) r8 = socket$netlink(0x10, 0x3, 0xb) close(r8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100040a74000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a31000000000c0005800800024000000004140000001100010000000000000000000100000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000340)) 3m10.388037318s ago: executing program 1 (id=1782): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 3m10.228023556s ago: executing program 1 (id=1784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x8, 0x1e9, 0x5, 0x40000, 0x1, 0xfba, '\x00', 0x0, r1, 0x5, 0x4}, 0x50) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m54.851662645s ago: executing program 32 (id=1784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x8, 0x1e9, 0x5, 0x40000, 0x1, 0xfba, '\x00', 0x0, r1, 0x5, 0x4}, 0x50) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m26.065754458s ago: executing program 3 (id=2066): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000006201010000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0xf}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000006201010000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0xf}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000340)={{r1, &(0x7f0000000000)='\x00', 0x101002, &(0x7f0000000080)={@align=0xb9, {0x6, 0xfff8, 0x2, 0x3}}, 0x1, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)}, {[0x4, 0x0, 0x4, 0x6]}, 0x0, 0xb3, &(0x7f0000000280)=""/179}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000340)={{r1, &(0x7f0000000000)='\x00', 0x101002, &(0x7f0000000080)={@align=0xb9, {0x6, 0xfff8, 0x2, 0x3}}, 0x1, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)}, {[0x4, 0x0, 0x4, 0x6]}, 0x0, 0xb3, &(0x7f0000000280)=""/179}) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000580)={0x38, 0x23, '\x00', [@pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x6, [0x9, 0x8, 0xffffffffffffffd0]}}, @generic={0x7, 0xb5, "1d97d8aec323816c4575cef9641696595d80aab71de14b0bb3222bd91c37bc466f5046f7c0c47f6d147ca2ebf97bc4be2b55a0c1fc03f69c39e0b9564a8bd92f650c40ce6b9348dd643e2747e0d1f0bd88cde01dbb00e65ba4955d5ae91a68407af9e16cb91e977939e10635c889fdcf08de6fba05c139b6fa3ddc0677328742de6cd73704b4e71b6ee0410abc882ea820985172fad25788cca81c756831038e05456b8969f59d771d558f342eba3c455ffd75241a"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x20, {0x2, 0x6, 0x75, 0x0, [0x4a63, 0x300000000, 0xb99]}}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x120) 2m25.69119873s ago: executing program 3 (id=2068): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100fe0000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.421255884s ago: executing program 3 (id=2072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 2m24.995035237s ago: executing program 3 (id=2074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r7 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmmsg(r7, &(0x7f000000aa80)=[{{&(0x7f0000000080)=@xdp={0x2c, 0xe, r8, 0x40}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="5ed724d7cdb4be159d01f5702b32", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c050000", @ANYRES16=r10, @ANYBLOB="000029bd7000ffdbdf25070000000800020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000100000000000000000600000000000000000000000000512d15ed23e218ae914d6b4ae77258de1a37cf6d5542de9d544528eb27bf2cedbf6133e523d5e94173e6b5e7950efe726a7ad6c9a03f4d4e7033114a1cfde9193f27d9a1b1bfeddc4a54c6a91279818826a1e7e2e220586c3ecd12c57293a3cd0f1eb7135727d0fc5b023820e3b41e63c869627b386046a622f7502ffab6935d1faf5222e783710ab0bd2bdaf7f2d4c833b51a8b8e82b4317dd35800af810fdf9f00110056674890a3113dc9dc4ec36e843c3ae501937adda8eb41d7ef57528596a7d5ea73f12f333cd80ce2e1"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r12, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x89}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x30}}], 0x2, 0x4404c880) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a310000000009000100737982a0e8e3495b63250540000000040800098004eee381a5efca3230ff72d71cc737059600028014000000"], 0x6c}}, 0x0) 2m24.257555229s ago: executing program 3 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x8, 0x100, 0x0, 0x25dfdbfe, {0xa}}, 0x14}}, 0x2004c000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) 2m23.92976343s ago: executing program 3 (id=2083): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x24000854}, 0x8800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24040004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c) sendto(r0, &(0x7f00000000c0)="1e1a02f8045f40dec1ee", 0xa, 0x1, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x1, 0x64d283c7, 0x1, &(0x7f0000000000)=""/1}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0xffeb, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040090}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f00000005c0)=[{&(0x7f0000003080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000005d00)="ec", 0x1}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000008c0)="f06e00dcbcfd57c354333182854115b7", 0x10) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m8.857425282s ago: executing program 33 (id=2083): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x24000854}, 0x8800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24040004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c) sendto(r0, &(0x7f00000000c0)="1e1a02f8045f40dec1ee", 0xa, 0x1, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x1, 0x64d283c7, 0x1, &(0x7f0000000000)=""/1}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0xffeb, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040090}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f00000005c0)=[{&(0x7f0000003080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000005d00)="ec", 0x1}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000008c0)="f06e00dcbcfd57c354333182854115b7", 0x10) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m37.433865128s ago: executing program 2 (id=2414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000002900)=0xfffffffc, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r3, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000008b0071100001000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r9, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r11, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000400)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000137000000001000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x0) 1m36.523368177s ago: executing program 2 (id=2419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 1m35.837634717s ago: executing program 2 (id=2423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4000000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "b991302b667420c5", "c98846df1992063b51e2f6f040ce73ec", "fccc0e2e", "19909471cce04028"}, 0x28) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f00000008c0)="01b4945c76f43bf9e6e466072364b370a2e1ac03", 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @mcast1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x39) sendmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x400c030) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000200)=""/261, 0x105, 0x20120, 0x0, 0x0) 1m34.689766204s ago: executing program 2 (id=2433): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8000000000000000000000074500aab5faf5a8b1bccbdfd6351b44d5f456f323d35503a39504724f17fcaaa1dbdf971a7d96ecd05cae60a8c6f90d557437d13da6601e3bde19a0322d4ef92854"], 0x20, 0x48d5}, 0x8050) 1m34.239182853s ago: executing program 2 (id=2437): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="40042cbd7000ffdbdf25010000004c0002803c000180080001000400005a21b876d55951000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c00058008"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) r2 = socket$inet(0x2, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) readv(r3, &(0x7f0000000600)=[{&(0x7f0000002540)=""/4108, 0x100c}, {&(0x7f0000000640)=""/150, 0x96}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x6e, 0xada, 0x6, 0x5, 0xf, 0x4, 0x1, 0x2, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r4, 0x81}, 0x8) 1m34.079802725s ago: executing program 2 (id=2438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf252100000009001f0070687931000000000c000500000000000000000005002000e8000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x19}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8a}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000000000000eb, 0x2, 0x200, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x421, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) 1m18.888943547s ago: executing program 34 (id=2438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf252100000009001f0070687931000000000c000500000000000000000005002000e8000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x19}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8a}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000000000000eb, 0x2, 0x200, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x421, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) 5.021708841s ago: executing program 5 (id=2996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003000000000000001e"], 0x9c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 0x0, 0x800, 0xa}, {@in6=@local, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@local}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) 4.681689087s ago: executing program 5 (id=2997): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a00)={'erspan0\x00', &(0x7f0000001980)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x480, 0x4, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x0, 0x0, 0x2, 0x2f, 0x0, @broadcast, @loopback, {[@rr={0x7, 0xb, 0x2b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x7, 0xd3, [@multicast1]}, @end]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001a40)={@rand_addr, 0x0}, &(0x7f0000001a80)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001c40)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000002200)={0x188, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0xa, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40081}, 0xc084) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="dc", 0x1}], 0x2}, 0x4000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d932bbd70000000000001000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) (async) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001cc0), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001f40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="20002cbd7000fedbdf250400000008000c0000000000140001005c26905e2a262f29252f7b5cb025ce001400060000000000a50000000000000000000000b464a4503d60ffdf813e3163954b9a1c300f9a13cbe36a32258212a279e4018fd2e1e68b56b3e3e23037234889eab914dc3117eadc61728c68b87d2c1a3cff"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000019000100b3b97000ffdbdf25022006ccff02fe060004000008001e0001"], 0x24}}, 0x0) (async) sendmmsg$inet6(r12, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="17e2deece47dd09321ac1f6ebca040742a811cc6296c96309f23a878cb375491e9b6066e931b0b17ae94c692772cbd937f9130c28563cd40351a87378c48d43ef3f23de1825695cbb82c2e13e8525f7f1a34846033acfecbf240c70deb19f92c097ccbce3aaab0ffc11c3075cc760c2745469e80bf75db6dc91a12574c3e422337b3c075bbbedb51947c2bab64cd0c09d5a463c0bd3769bb7ce81bd7b51889612593718d39a33efea13266e09454bfd678e3d85cb9c489809be7b7e49c0ff00c24c352e1a7404aa8d1e0e517fa831bd8675d6d1af752b91d9ed067b91d0c06520fee235b37fa4e4d411cc5db76d06054524427d4f025c0bfccf4f56a34404d711589e710eacb0f5807bfb85a15ac120c7174f8d5adc08f4e7b631cbdbfdf22d36ac36eb39ea90ed6c359e0da9e910e21c35f88b6245d781855b0373298d0dc22185d73cf1927df06da55b0cc8cd721f89104dd4e4ab2eabc52ed33f2997e94a95ef0343b556b403b8e1155d6a49d3e90c01147ab7288ccc2a22da113d10ebbd2335af31d58cd4e13e5dc964386bb576968dae5974ee6f44e6a238f93590ae6821c929be12212d291a1828b8de2d7c2d83b46e2e70f147067dc228713942ec158f6486b5334ad5885a74aded45a150d8d6bcd9f8c2f743e8dc735c3e2dd59fa46f208d09da3f092997aab7fa7f5d75bf712d9ac7882d626d81725491b9e700e034d4c80c1748c1b0e066a2e48463aff17599e3093d519b6daad6023c88cb1cc317fbc91a128e2eb2792c42b5f38ad0c6695392c58bba57d45486c33b70a7152c8510bf243d59a9b22e7d7c40d7166a25a5a73e160dd5c36c943f1f71a8f63a538db70f1c1cc1a460b69715bf092d9f2be2b7bb65ea8eb9bdf5e3689210df82e2847c780dbc67da07a5669c0193f8ea13b63631d7981250d842d6c14238c5afa4a5ca5bc68eee3b1ac7a993677e6b88900b6a1f2cf8d21dec4d1698f77a7db04cc5406151c91bf1432830d985389a056069e94c82ac8101b21a0baa12a139d3844402b435b4a0bc6d20af3e127afea63d0eb56c98dd40cab0f82958335bf7e38808b8467e51cc1d4c80b7d05dd6f5d4686e626a93986fe0cb7f6be4ecb58364624daac7fd8d31fc287bb93771e4ca88a338fecd789f4e2ff89f8f97e496c3fff1b54b89564520af2bf620d48aa876ac6a50d78e0e369965a6816dd42f94ebed7b8e44184cc2cecb53d89fb4c0cc7a16f17acd4459e815b69c26f852f1bd0b4ad5d82992e5507b6c25f393e1128b21c19f287d07da4383f95f52b8e9b59e91cb1ba99d73236a1612ce8d9de38a0faad538b4f3af4071ad8a00499ae8bd0f67a61e8f1eadd483acd5c6dd627403314e66cc5de9cb287a55e82b660252069614572896092b221f7172300fe37fd27e66a07a11f26c291413e5a31f599873a32966c7f628637eca0a69e4d910d23650c825774c76d6b76fa8c28b1ea9291990c31b53dcf5279dde7de84b301d492a9e065c3b1f27a38af4c12ad8abd7e75557846ef7c3c60897a79877b7a3578a17420c83712f50130173a79e309e4ac29e61b966e13f18d3a556f84a460d2452688334ed5305715d459e5e2c7639dacc4d9be93d3efd33e756e806d83fb879be567c8dc", 0xff6a}], 0x1}}], 0x1, 0x34001401) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001540), r8) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000001f00)={&(0x7f0000001e00), 0xc, &(0x7f0000001ec0)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf2501000000050030000100000005002a000194c300000005002e000100000006002800030000000500330000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x60048800}, 0x40000) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000018c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000002000)={0x1c8, r15, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x31cb4000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xde7721067f39fcf0}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7fffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xe9}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xfffb}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x80000000}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc855}, 0x8000) 3.846436072s ago: executing program 0 (id=3007): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x44, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xfdef) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.52900511s ago: executing program 5 (id=3009): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x0, @remote, 0xa}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="73eaf73be052ff84ce7ef41bff56ad4abda573839269808cefb04f8023831888ca797c6d20a7646480479195faac50f91f79ee0a084d68978b6c774b8bbefbcf3a2573230d6fd9f8cd559a7a6df8e31f6256e75e27f64cfa95661b1597e99369e306aa6f1a26f98b17c841310e4cfc60568045a19b840f75ad627b9a6922806a98de3cbd3afa96541aa405b87784e58889a138e7e69941724edef5", 0x9b}, {&(0x7f0000000380)="a1cc4841d19fa87298897f38e235867b7fcc14532b5077d28a5c6ff6c7c638bbd951", 0x22}, {&(0x7f0000000200)="2b4acd75235d7684714099c5b07f86f08b69ffb30991458508bb293268402f416a3f11fb71e9183643febacc557e41d7c2bec5ae83dc03c4781ce11f4434b33b737a2e8b7d3076ebcdc1b0d7e031", 0x4e}, {&(0x7f00000003c0)="567782275a23a4e48480dc59173327dbcf526ce5eba6d1d49aae086c752f76d701bdde6dfb2fd4cf9c5429180adffb0f0b42e48ed19095c72bf8aef76ddd", 0x3e}, {&(0x7f0000000440)="ac63d680655791653e3000d7d7edd8ec00ad01ae40378f90d814b46dc965d760cabf5f9751e0bf54015ce6970382488760f487e1bae64417aa489d258accf3edb5b23520a10d1dd77dd490e4ef3693d4cfe5eeb0e03582603c3bff971bfb13e179402cae73b596098bb0a87f547932d1a57a7d4b9448d5cae930889c40464f95d6d93ab097364100e0b9c11c820ec8c818c64943", 0x94}, {&(0x7f0000000500)="fb6d37ce354a4e621716a71e9c6c44df326513ccdc684413790a3b920eec6026702e3fdd5ba910949c25ea7242f094cc1d2f85cf84cade82dc9fdd55fbeeba93643a36072b93b3fe09e17586f5a89aea90fd19b2ff7e59fbacee72fb02d4667ad20c0742c5a4099d", 0xae}, {&(0x7f0000000600)="4988251d3b74ddb42eff1590481133e42e5a438b24e523e8ba118f11c4931d4ebf1a9ad56d4bebb5d87ff50fbedd1873b5b46bc4ccbe8c4aff01a8a0ae00c23b92acdf6b66eeed495e329d5ad8b64bf76ad4396246882f3c7b3889a1ba8effc51feb4c3820cdbcb2f6a9f390d880d2681505f24d04482e11f55275b3ad75645618e283dec8cebbdacd1e933de1783fe502ee2c8e5631440f2395b1717b0c337bdc6372728ee0c0abf8a017e398d64fc9c3cdc472e0951d06895b68d74c5b9ef87edadddc2df9d756959142a98accae1ff51576d25239d645f830605f"}], 0x6, &(0x7f0000000e80)=[{0xf0, 0x103, 0x0, "02b2506a04259fc7c8a350c713ba295f13e3a1ba55da5c7830b873879f640446295f4f8edd8b6de016014b198c0a8614b107ede438303a0ac730321217a2f8ec9a511a327cb23708ca2777f30ad3fa3fe03c67705b282cc1405c0c75250b3e0883bb710d8148ee238eecab13ff67b3a1281e9f0fe466aadfbf5d53138f47b061758f62f102f2c8448efd4010416223a94dd78d74acbee0928a7cd8cfad7107895dad6bc1c2a125bc6418ed9d6d14502aacba7d8a7004de6c4811fa871f2c49b90735af69ab25251a479dfb9a22b01b555466fc4d4bc2b5f24e3d8b3999"}, {0x30, 0x29, 0x2, "db8356ad9939ef09c2fa60f7044087dd22a405754872070e49"}, {0xffffffcf, 0x101, 0x4a3c, "367c5485d9aa8da80a2347a5fd68fb3b96f8b27fc98d6027aef6263824e9b6163c060407cd4abeb25b09343f1a56f9881a92579695be74cdf765037527a0f0a8938d99fd289a97d4449c46fa284fcbf8abe6408e3e15b192b8bc995411"}, {0x100, 0x84, 0xc, "d2431681af3a021da580c9cbaac18908fb789e5b3a9d1727c48292100fa0c2628d25ff78f5f77833c63e54e24041cfc67b70eba884e9029dda193578372e4815c06df2e74722cf2638c81eb8daa856789a97c8657bde90e06f6000e16726fa015e181c3078e36d1bb03f93742bb160860cc084e8bcd614729da04041594c4096228a017d0282cd36f206f0a1ad4d50e3e3d0f2839cab6e98f0cd68fa27b23abc0cf59b6adf121c32dbd499483c6e5e7dad28fbae399fda2706be35fb113ff33feb23670f11e9f47602cf1f252d2d163c81e0fa02259daae5e3b911814a688156d12a981786953fe9672c"}, {0xd0, 0xe, 0x59ae, "cae24894f00d0ae8740ddbb1de43d00bfd22d1f894cc421d4470035f4e9c956041ef01ddb104d672f1bb1a121a9648d5ef31594134ca18dac8395698f8f9b8d534e0a4226680a3819edb3ca07b29b107a474ab5b61249bc51bf328bfd5a58870406f361c2fc9989906a98c29de78c7f16df2d27152c925f5233b11a07a3fd9c6bbfa8f5cfd7307b52d3956b9328c7119837f34604265fdbe652e34909f51a8ae3c4ac0630bce0df65e4a6b02fc3b3ca4e01e029bf28e146e5036562ea6b7"}, {0xa0, 0x1, 0x1, "abe9b74681baac041fdefb03384fd79495a1d9241270d20c4aec7a4357fc47d1338b85f4e8094bd31b355e4814a68c81a5f2275d87ce93da1b1994f5d5ca5ae2b23d00be769fed0a3e946fa8bb9f03312099f692c71a49d513ca6c8faaefd6765c5ec6fce7682fedf7d7ae75aba969d9e7195c0bbbad24e1d318ccf11579665fd4f0892191a3e0f86473"}, {0xd0, 0x42, 0x4, "7d0abd6966c0b0ee363e4085df8a8ee6f000e7da8a21a102222a851916de1832746582616ae857b1611118703752f98138e43e3eb5d67ba9a94162b77574b75d986ad87a9345d3259c2677e67378d47513df1be577636ff9e234687819cc854f7e037d59b50f6fae4f735f1e9a2e502857129cc2009c11b8aa3b2f3e90c077bc7f3b44929c172bb82bdaa214f39f433df26ae4044997b5165c777885b4ba6c0b02c7423b59c73eb1e8c3c867e0b00cf6ee2e3e1138b8605f65fc6caf3fc731"}, {0xd0, 0x1, 0x6, "5da1d8043e4c169a8bb4d71decb3de3fc1ff0c05dad2da91bff6f511eb2fb943f422424363cb3b448c28b086a6f7972b9215e962abdbac07e663bf07b249b26033befc69c5a71cb812d7ff87aa31b34d84dbd6e621798fc4a104bd4c7cddbc153cc1cdef060f7273a92f9a3b3222ad4a5a0bd0456c329da49f65e1bf53b1b749246a13be19e962b9fa8e7440af39fce571cc0056b4e70a9142a8b47e7d0dfb22c1ad2f6987bf57c1d0cda24fd94b814fc9b239e55529e0855586a378"}], 0x5a0}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001440)="a0571440ab1dc2a0425001465f49ca2b4bc330ea03a0fe39f1fba8e2211958b2b42995d96ea7f45657aaa9fe95e08e7a899c59c88c1d867d799ce4a218a6e7b719b45ea52d488bf57b6174984931cece74e54e2ac759f188fba9507838d327ca4be0210f3123a6668376b7de5717cbc3b61c5e7d60311a57839338e3f755a23203f3a03f4b54c38666f0284b4044284e08d17c9014ac6202ad76e309f7b034ed0ac3ddf928056f4a6e97349539c7d1eae6afc21edc63892295fa1022abcfdcfeecc9aadf28f258", 0xc7}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="d98553ac80a37506aa7cb3a5f091b631829cb5ca32cf4e5936ccee39beb78108cb7f40935de3c511a8b3533d7cf72dcafd60e68772855533ca53f7611ff2ad8938d2ed98b7ef33712ef058a39dadd8ce2e23a60867fc9a7807bc2c608c510abd9a6823d55a59b347cf4aeab6736eb303d8dc291959a0589f321a8ef9301e6fe61b171d4a6d0913e76de6bb1edf81138c958a2a32a0cf67588a0e03f519fc93496ff5a13ef1a26a3e8376300148e2d33754b1242b47f11d07", 0xb8}, {&(0x7f0000003b00)="a44fb622c1dbd30e35af835a9db8901342628efa3bcafd33128f33a2ffa9bf6a2c8a843115b1880e221e92190a77c2fc550f7a78bcf5084bde1725e9ada317c6267d49a77abdbd87e7e77cea3d670e5d7020bd4bd279ae2a23a62ba85a5edc32a9e6a9754e92c6b79c207f636036bd993cdc58c29cb71d40243a9a711d7296db0b7288ed0377ff9a718466326b42f7ba2e4257cad17a2fdf45ceff28d7db0f6d74439093d2583128928c85e0792a9261965868ec2948dfa5cff08233e9e106c82401e9896c4e4f5f0427b3e1f62f4c902a77cc95fbd42a046f9ada099379c849973316a7a693e7d7f48781e3af28931139dddde44b29243e748d71f0f1c6074a6494146f33707148b929fcfb6f70f60d828ef42b49f2d665ce8a24c2c4dad94d083b94a89e7ff5943cf420a316f2aac004d26dfcc41c97784cf5534ac194207bb9138e0e441269ba34247375d5eee9a8a757850bbf4b6a6b92b2ed9ebf3a849d1ceed6f72584fc02af623b647af91cdf61ac7c806c2f66aee3e49756a59fb462d04b07ebcbe5782e3852acff3f403e744e0817bbe934f978a588bf5f9f2c13bad2afe910a357cedb5fe84405d3538eb55d05fac2156f0dfb5b62dade164519cb204dd971b8a8897302b2b694dc9d3444441c2fb387cc35d7d18a7ce6ac4a27aeb01c2555cecdc2c2bc5fce4c3883d26be6440ce5d5c93af03ef1218d530000000000009a7fb34df998ce41b9bf3cb1bebed24817480f998ba25a819b2e89feef3da1fdda46611021d2d79d0c2fab96f82d8a4e213d29aa28340c5b792e24f59fda0166b76bbabed669ee5f91ce37c421c39be6c563f536950126417b5e85298df85d7946e692599f1a160d8a564f4ec600aae912c222b70e92e2053b0d3963496ae6dd9132f43e89cd75fea1ce689c0a714ac3c3e0d43156465d3b5aa3560664f197af9179a6bce0602172fcc7ae8983da8ffbbb895181f2818b909e64af85389b067b4954db26aa1cdac63b15d4df56a779107628d5e8adad9c24d30672793fb6cd0a322b8667a75b37bde729a40556f108e6f7d0fdac0791bb87a52747f046af77d7df3d07f2cd7dc4d29b247ccdeb4d057811e35e581cea1b022b9bc604d6bfa85bb566976e9eb2553c78cb7b1a28670a36f9ae706580bbade13085f7f42d2c4331f4b524009fafb5ef0ba1c2362e7db7e5b2e090f93363dbdf5158d58229b6d80b1a35d43df0befe22b0eb5592ac1ced89c239bdf827293fd9d2652f9c570195538791b8b6f303b3861b2db8fa681cd8e2a2aeca6d8a7e21c0bf35eee3561d005907d54a8e657ab9d211488cffaebc76a26fdde3114e934dc032374b4ca672b087204086543154bdef0a98808ee7e51787e778bb89098fb3316bdbc936afa1ae64dc5ba10420ff5a9c631445e7c848cd89f36724ff0c2f1b975d143d5ed705db19894e9ed90cefd5c15af9b6fd4e4ca939ec4e4b034d2f58a2e8e03d48ee39277730b96cd15bcfa0b0dec8cf0b49f2ef5be3819b6f40282e3ce9c3f329cb448c5f05c6713322df8af919b45763db72382907bef0143f90d1afda77f6b7d3ba655265652e8a9201a5959f8d099341fbfef0542acf5fe04a409a503aea45d04d1ac7cf2349decaffc64b087dfb28c9e150b690b13ce0ebff5f2cb5402258d469828f4e5d6ca0d778deb28ef7fa10a7f104c5bcfd0ce0908cbb343196721af80c35bd890136822c65a1d7168186124c505bc24942f894e71359f8fd44fbcaf9cdc3a9badcb644577f8d55ffd377d3a8fa657145b08cf74a7d3bb43fba1baad85ff85f029a23055f2ea2185e0b9ec138670197a3dbd0905a978074250a7fef9955c7f38ec875f51f28f593b7bdc094ef67499da006a21a7ff8f374b651410fc117fc228769e943ca77e616668dc8491bd32b8330027378c4de67302161a59e12524a18670eb0bd9103626cd45645e204d9327735c3be4a74ad04d0306692df53e957b357eb996d113586b866cb5512acda8413764089c99a78e0f7d1007229540d13456bb4b1db8fa1ef6ace777651d68c4f3570de569f04b2582f0b647a23c780fc1ffb903bfc9e8eae6c2086281e36e595f8f746f95eac6c3e733d461edd13e1a4e35401f9eb989a5b0025b63f64e6d1b06658844a40c3783f4c8beeb7cdf1a8536d47903ef27104504dfdcbbac9664f02673ce6ac7298aceed44faa574433e9ef22d7293001e517878b0ca69866d4b1dcaf6b49517f84d359606f81f36f369ecc26f8410ac21ad9945689fc3809588fa0f089ab68f572e60e432aa4eba04ff6ecb4d2cedb8068999fc229d75ef4eabc8b3766b211fdece9a64b4d129e331b2b506330a2951a19155de2980071dcd243453a35f25bd99640726f7c59f52057383989dae773aca92472faac29644d9c8d371b035bc9f06c6151c9e2c42e490b3cdfb49b9e68e8a1a947f7bc14f8bb1fc6705049caef1b47df29ffa70acbf96c50ad641c4124c45d73b747f1396fe7bf6498349491e1e4ebf7c64fb5480e14ce6960fec3c52521b9a12bce4486ff5ebff66e0f6a5370cf7e2d3881e36fe6b2d59b0d8c697369d8d739840555d6bca4958eac3964cfbe17153e1084d008709233975a978b228ea9ff11285934e6559c6a9b0f12d685385540558dd411a4a6106950efa38aadb0c72414fe6d4ec8652408508d8f90a25f3617e80dc4cca9c6f749b1af1affdca73025e17d5e080da68e9b65c8f069d3bc14120d891433da0f33f3cf65cca41e3625507c56d9fd45a210f482bb6a8c4e60378a1055935b51c777a0e7a59f29b3185bf4cfcd252027a632223eb3157859e8dd96a57a785d4ff44ca4777ac73ce2380151ce978fcafd1d77d3f06423a4a60bbf3c3e6b89486462c3f5d3a904e9466c7186db6294c62b99e5a11d9ed0dd1a642ad411d13632bea9c6debc166aa0a6500f5e2d9a59080c8d1c976a9405d262d1154415adc14c73b3d0863972003a5ebb56b1afb3363a0f6c5663e4fdb31bd66252213e5eb347ebb44745be0857a21577a95990a28ba0cb6e0d606cb82c89361f497413e94d17a60c990df87264b9c0a3444e9f73196a650f9ba926601b63515b2c047f41ecdffc7ddc2c688bc1317495d6eda76412116be468c293bfee770c14a80c5fbf817de9e5f207e1378e3968cec8d129d37f6bba45b2342c1e0c513bb104459a1a1a37bf5bc25e72a1e3b80d7402f2f4881378ce2bc78fe9b2afba97bbce41c33e14e8c01d74b00d7a3e0b1852b4e4af3817b3acb2ff502deeac5fb336d8d2d7a44459f575a52180d2396e460206d41c098d4b2a79c98c4f0d5f3490c198ee872c4163d305fa6d44cfb046f7272f88fc5d9ffabb5b73341f6d06911c43a74d78ff687e49233ac0c4e3c17841f81cf34d0da239474a743eb3ce73ab12e4f6d7921286fa867d43a96df8219ff20ff683f8183f23d34ba228ba31d73477d7b8835f234322dbf7433204bdec3df2fa5a3d2cd876d33599e7783c7a624669c9d62c7b7b75b7b77c4eb8b236499b28d438bd0acc0e49e20dee439471c730989fe6b0dfee9f2832b28f63e3461ee9f96cd7e5c3f82328de4df72827630bb77422870f7b08bbee88011e96f4b556cef0bd0c4b989d3b598bd112f76c77078c6c4fdcc5394294697a2452e6f6cc1860780e2ba8a0fcc46c002898e3d4964a93572399ac4e9566dc40771d4007174a426d9112668616f63e804bd9ebd268745651b7646df386a5035d7f5146dd23574dfe8dc982b00cc594182ec4585e95c0dbdd6bcd2ec4834060e30e2930541d6e19fb22422371eb1a9288a315ae3d73cb847108530c31ba65b2d7add2db9aba6c36efcd896837955e528e325b2730b7d8c39f441c999cdf2061887ddea680941c77bd132367cf061c4026c5dcbb70debf7fbb72484ba758e3b5567b1be7b6f92a88d3dded8524f9590437cd5bb5c4feaa6f4425705727afd820a5bb7a5fb4e8947f4c4b0f2e738e1927d2f0c4b155e22d62e399c96b0a191a243e7dd8f42ffab06f5b34210698b8ae4faf2c587f05031e53127d54c5c3bb3483c7c3860b85b84e570759168d34610d3507070606f2b6d1e2fe3bd3d6a59affb75cf5fce66510748ca9069b13a50b3952b55dd07e3589820a83d760a027f466bb0abe4f452a980407dee33fe93752cf6bdaac9b783eb452feda9410ca4fb34fee988311597eeeb9c3aba091506ad0b5200e4ad7f149a14c8879971b0167a014a776c9f21f0af12f19bbbc3869a73e1968abfcbb9274f33f2f5bb4eab67a5501a2be6a6e4ab3927eb28eb1f54164e67bb700f8a3d5188e2da25f8c614ca9671b34fc7b005f72b13b9c6a9f639c2f9d830db98d33b7da162efd4923788baae846d1a321a977e89e7e56361c57d4381863fd322dc06c66f62a490f42e500f538e1e0013e903cc523ec17bfe96317bde6e312d1bfebad6e906fc3798e689296ef4f9637269dfabc4885c2a00a866b73e0f38a886fec685e6d9de0dc86cbd4553a74b4770843c64b4deafb18af7f009deb6066e3a2a224dc742c5b2b778f8d7e9d2f0fe2f7eda28f88f6bf90edfb96e046f2cf3a716ee3c2f2440b7a0f0e85d610d4139f5f91b414a0ee4b164319cb0e2d342cd63b2151b4cbcd0c8588eafcede79ffc76d42d0fb0e30c3b519ed75ca294e88a46d318abbd7f16f0bbe2be27fbc998535ad2d43e9084c41d6fe9f498e207baaa6757a231174b74dbe08738ff7c50ff0b8b9833b34bf68dec116d8b4792c6296c9680dc1a56a8755558b8a78418aa92b2b190111e39c87f68fe2c1bceb9794e147666917efe27fcc80af94e3d18ae5df3553a6f93313d30418ac6960788cd4c1f9f960210bc0f89bddc21b0162287fcd7f2dde9ab685b697691848d05320860641b620fddf915fd8c648d048923e1cf8748ca69a1fc786c7442bbd16f28296aae27dc2acc34b44105c4ef8cd33616e8fee059616af4fb63c3a030dffd4fc43658d3f3367eed111523b49010628a7070dec73e97aa722277e440c075e83feb25814be9b8d3acf0c472214fbc527aa9114d6bc302e2e7cf62682710f18b800d572d979a7742c2914c3329f8b0eaa79e32c41ddfdd0d3eb48aeb5c38f6ae31735977ad234665309818f0e03e96b8aa08462aa8a78a26e9a0fc24059c9369e8d605ca90acd45aacebbec0cce4a8d2ce4b97e7a9b21d232d059433de8a8949717214833994afbd6607760cfdd0a1cc712849a3c1160103f9b5c4005adf871467c46781ba443073bf915c3fe284b33eaeaae78b375fc9cdca128d59ec3bfafd819c6ee58b61710b4d6bb68060e6db8332299fe441e815181cb84bee46c31dd49bb43f220a5db3e3ba29de230aff82ce3780246a85bfb19eb74191165a74ddea79ee04c4da93b33729142892c321a177812c21dbcce28d495dc01514fe238052f1bf7ecb347197b3dcf4bac272d4caf9496d03c1bdf27b3aef89de82bdd29fd20a39ccc38a0730e7d8bdcd282382ce56fa896d23856c94aa2b79f053eab98215dec7de922f7f3656da8bb4c578887859c69a841eafbcefb1880fc2c5168faae5bc967dfb2da1865bb4b2c9b2a2c87f212c782cbeea9137e0d4b27b52ec8509a149c127552e594ab54eef43b112c76acea62eeed4183a204ac967af950861edb16aca78a104857440345b908b80e90404f7d0d98793e955c746bdffe7be9027664ac83027b28d07b4ae1fc907fdcf80f9f54bcb61a90634a6c0a4d5477f74751353c5855673e623cd01c61e8a2b580042787d7828a5a91afc0192b5250b3095e333539c4a053690b426", 0x1011}, {&(0x7f0000003600)="c9402944417d92b5e21d70780c3e5eafbed5986a29296b5386f44b4f2e2608cc94d3f554621a9c5733fae5f72670683f4b9a660f166f72ad0eaaede094e44c9c43af2ba4659b19583c", 0x49}], 0x5, &(0x7f0000003700)=[{0x40, 0x114, 0x80000000, "06e9864bff52845763c2d3dd6c80249a6066a43a92bf08662db3db5a23275e324408e4041b17acea0576e9df"}, {0x70, 0x0, 0x9, "d8162d520eec706b3a97d6ab1d05b1f79ec25c81c622b996129d475321a9a245c88e6f16093375770c54131b43a7bccebdc9fdb85f5d988e946cf23db390006a732023e784e4e8be5ccd85a6da7af4381ce4b7cc33b224be3b50bdb6"}], 0xb0}}, {{&(0x7f00000037c0)=@nl=@unspec, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)="e7b3c70cd237dd321a4fac", 0xb}, {&(0x7f0000003880)="d20ce614c4f880a09c1295002ba1eb6269ae40a4cfeb4d94f11238930290bf3c634072be6e4267de76eae7310f0b4f032b61ec12e83b374b3e8f9cf44ba0aaf84bc0c3011c63e3674ecad4f4a996d49fe0705fd33a0d6d7adbf8a741d9102a820f56f735cc0caa300b2bca473f6208bbe38a3584ad64", 0x76}, {&(0x7f0000003900)="cbc7ef335df56e02656d1b54b0be72a95194cb5e7e119e8eb5cb67b20af05947929acf8dc0ba63d9eb2bacde50130dcae8da7c5e540e7a3137952b5feea3cb3ea452247c6e4a10b682c100a65ab6ea9a4b8768dff0ad2532eb52538b16ac31e5bfc725435ce7b2660bf34a22d02b0917c7d5862eec19b9e41cee36dc54422b7ce849701aa0f3ca2b4d53b86ef6ede0defc2566a0d2a7334dfe8f3dfaea6a39cffdcc367973a28de0090fc3e24a", 0xad}, {&(0x7f00000039c0)="d7360594c9af4a", 0x7}], 0x4}}], 0x3, 0x4048001) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) setsockopt(r4, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r7], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.430914723s ago: executing program 6 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000b8000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.281957138s ago: executing program 4 (id=3011): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@delchain={0x24, 0x65, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {0x2, 0x1}, {0xffec, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="804552a44685180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = getpid() r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffff5d}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x90}}, 0x4000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r4}}, 0x40) 3.177495116s ago: executing program 6 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x4f}}}}}, 0x28}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000000400)=@delchain={0x29ac, 0x65, 0xb01, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0xb}, {0x8, 0xe}, {0xa, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x2f1ac0e7}, @filter_kind_options=@f_cgroup={{0xb}, {0x1820, 0x2, [@TCA_CGROUP_EMATCHES={0x181c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0xfe00}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc}, {0x4, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="89cf"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x3}, {0x4, 0x4}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="e144af59d8", @TCF_META_TYPE_VAR="d03e80908888", @TCF_META_TYPE_VAR="69bd", @TCF_META_TYPE_VAR="55d625170293a7e4"]}]}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1a", @TCF_META_TYPE_VAR="d88d5cba6a81449070"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x88}, {0x3, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x7, 0x2}, {0x0, 0xa, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ac968515d6a4b38ec209", @TCF_META_TYPE_VAR="b40d67ed422c7d5bae", @TCF_META_TYPE_VAR="1f4565f4a8aaa2"]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="29841e6bf3", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="4a17"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff2b, 0x0, 0x1}, {0xe222, 0xca, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x4f, 0x2}, {0x70c3, 0x5}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1, 0x2}, {0x80, 0x2, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x4}, {0x8, 0x6, 0x6, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1168, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9d, 0x3, 0xda}, {0x101, 0xfffffffc, 0x6, 0x4d1}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_META={0x78, 0x3, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe000, 0x8}, {0x9, 0xe, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8, 0x1}, {0x8001, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x10, 0x1}, {0x985, 0x6, 0x3}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR='~', @TCF_META_TYPE_VAR="4bde", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="af30090fa51844f3a0"]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="1579df5ff50e", @TCF_META_TYPE_VAR="370e8b15", @TCF_META_TYPE_VAR="91236385", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x2b}, {0x7, 0x3c, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x4}, {0x6, 0x6, 0x1}}}]}}, @TCF_EM_IPT={0x10bc, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x78, 0x5, "ed14c9faa709333e020fd78164c48247b4bb260db62c32aeb9056a53941cf94ce598f08ccca8ee829d44fbc1c4a5f7602fa68998a90e6b568fadb017cc618f1ca8686cc1811c648d4b1c80392e266092a03a0d9d1840637afe8c6f64551154cd584fdc339e7e0ad9642f0bffccc2d849b3b0210c"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "23890793f2c0100aba6795ec868280056062038c21577ba287c19641a901ef3418d9d37264c754e2575738d3cf889303837f2978084f99a63989b5f46a53fc3309a576cda1ca041262f36af389dffce77e25dc1e6b76800435f2e954a6fcde0ab3b95b46beed8d3b63b213505c928a72dc42f9823fb29f886dd03526850ae7c90ba3022e5ca39c959c107f00e490f314a2fc85e2235866cdd356e5387dbbcf1209148489c6ff5399b3081e18a5df05748eb354e5afc190bdd210c75bffffccb0f1bb4942781c9855cd602c92f1bcafc4652cb485d69b08230304fc1863acd51cdb6bc3f420d2792d712ed598e791d8b7d8d963db7c0ff0260dfeffb6d200b5b01d3c645f18cb645a4508b7e0f22d452d1922b86cda047225e199b35416e701f4405ed24e6a513377e9bf85ad9cc80f57e349e3e3177c0b48827cff9965a02f25eea994a3586744a70b1623d62b78de116eb3cab55fc42d89fb076342af2fa7d43f8d990742a2e74ca0bbf94f5303720988eb862237711c5ef15a140f5d60568317e3f7f1cefc43eb3b87ddf2d587e5c585fe321defe088e299cc963d56080ef2a39aec92d92139a854daea8d9cc2095a9d09de37cb254a615b6d16899524277811a63a4458b8f8e533ce43dbbd73ede079eb635276b61fa82d4ec4f11438706bea73e2e0b885540e8e57981812b0926e0c67376be3a270be2833f37b9047c17f4071837146d39f9ed624ca6045efa91e1cdebe80c4a51681da7e37de4084cd803bb63bf9d05503ff9546eec5a9e34050d073fd515944b66282e88c4886e57cbf79f0074d74c8314e031add2939f38ba0d6c05622665ba0bbbfa03fd152a151029a7646bd7570cee7f190f4eac4303508374319ba5ebe446e0e36fda35043388be25c5deae98b5373b62a2de497f163d902415bff4067a27c75f17c4845d2bbef6afbccd3e7f4f3ebd504bf201d52f08d1880b8570959266f9b3e2f908a7acdbc13f8509d255961ad136fbd731c209604bb0a287af6f84165b569f4c9e5a43df8847c1ac0f6134bbcb8ad4fa881074d1268705605391f522864749016d4e1c39c8291f0fd6a373b23c7474c985a96bc503295573232d79172ae9e80c960129f9ada6621369d5cfbe4e10710289af04933acef3c1194d8790703915f51727eff1bbb93671d24d3712791588173da5e9d5599dccb845d65ef3f4c02d0af29efa4a8dc3a1f6eeecab5e6c4778032fe97ce6b2453e220c2e895b080a5e50ad2c52475660991840b92362e2e94e49a6c609b1cd4c53f7567f4d3d6efb5c39384c616528397e4b467850eae9398c7a8c124e42aa235b02b98157deef239466f4fc4272f1ab188fbf9f0a6c62b958d8294fc8356a8991b870e41b75308287e1ad373a3ade7b2fcf7763ae37ced925bca51cb69c2f6b69a09a07ff6e5884eeaa5b090faf1ad54032f2773c7a7024f012cd9dd3b60a661c9bc23b5989790ddd0e1bc820ecdf66dd9b0eb2bbcc440f2793d3d4df319863db998ecbd042932a5f825610a5b33a68fd0f496e9e6075e9ca9710205ec0c82f3ff4bc094919a5b84d311ba9bddddc61d4d1157fc03c5641663169fd20dc0879bbbe414054b9064fb55c1b7cc1809225f4cb276c6e72af66e6a8eee1216f5e9645aebc9c2f5b916badd6a80e820140cdb13b33e9842d6f1ccdffc871066ed12d9ba4a0f0740cd4fd36a194912267ea0e8f2269b67fc6f7fe6230b9f85cc5e72346ce6ba3e5fb4fd2838dec6cd8865b20584041262b46d7d360c150b374da6ee43b23d5e19b6596d6adaa09c0cbad3bec38a82fd946acce9486e07f8a01d137166ab0c894ee263e631df8ca6a6994f59f6feee158563ac064e50ed015386cad81fe7d0a82c91712d34bb5fe27b467796a0feafab3879bdd6814d7a2daf1dc4a4fc950913e9114b7befb27e52c5a16f9e73f16a82fcb758e2a71d2ea777eb10731d507fe8e86eb163e4e0c3283e6ce726a9d159400fe92c987524efb100ffc4f95e71e18befcdebbb56c0dd0ced2dd28850827ebe3ae98611982eb7c91d3dbaf0d76070182dd78fd9c27c08eb2bb943273248a814c5ee0545cf0569b1177e4bd28309b50f31177d1564f1f5d0c4fb336704b97879f16c8e49e2c3a53e61e95c2bf17bebf8e638a42340c991dc2289d03dd3f719c26dc84af235129bc480365c096eee22977b825c052fb7becc1fd038c5f962a5fd2f150df873b374892afc42e9747d0c2fcdd86bd484692460a5006e7cd5165e0a8ca97e0488fe0c2a4b3d3d2e30aa9f2fa21d010bc126fd0a27a0ca18a72cbc7ddb91149a7d1c8c5b8e2647d0672f151f1a934835b389dab0b645e27d4ccd3baba4adaea4dd221e111b58f325e041be1645391bd1919b86fa0d34a553c95308cb71f72c8765c7c3e2f9fab0c6879c42124fd5450be5a9e953a6fb04d73de9b76d1cf33ca53dd81bdbf9ec41dee3165cad605553009a91bc35c921a0ab1e357f7bf65b0eeb7ff2df08e7b9e497c2f0823a6eaa8349264c438d5f75f6383fa5b9833bbd2a70033d50a1430f9caaf71d0621033b171d5c4f5baeebffd745fb958a8a94eb0143293a5743987e436c31e01ce35de4123631527a41118faf486d79906ee43a55a1e09a745bad4befb12e127577c1e517e9df299b19e41ffb00b8b2a833996e06497ac91e9e273b1130c4b3b50b5f3e77457a09c232f5dd803ecf55459a82c6999686a08b2d37801d01641d76683c16dbe35f3c05995793ee932490edf78f030f9d1e0bc83518d1d8a2e8d366f2ddbc731b3ae41a8884699824b7f11e3ecaa8b8ed281350603eb76e2128bdd1a0dbce56218600015a48e112eab03c566c978cedc8258a42bd358e1aff1d00c16f48e11765ac5dffcd36b942351a41aebd24f4bb1b77dd1560cb1965ce98afbee75bca97eced0b287b5b8637cef2a031cb0f0880e722c600732d37d15a4eb1a4bba2110066341f0b1c3ecbe54826a9590e50eb2df4f9d690db2b6ebba1c3587276a7885e956b727697e57d88c2a848d5e23f0bd74cfb7bee1b5041286aefdb4a24b6f573360138953e6f60000a9269b1e5206c37ebf9ee92ec2f37c6f5bbdb851272ee9b1e00aa00302ea5fdf317c3270212bb1a63e16c6651d794c21f3ec3bf8f14910ed1c41c15f0d5e3ea7fcea5504283f157f037c63fa8afcc3aff53cc1139d213de6b7603c306a52134bbef6368764d8a723344a5121db23b07f32c6e539ca6b25e7e63ab8550f1dae1e45225cb326775697d2d6f3ff9c7e77fcad15c53fe936900a0c46030bc5ccff1a3b7501ddbda9870d4c508e722679c651ae44f4d912162091b78dffcca94cde2f090ce2c9b17b0fd80591427f2d52363a838a8e3c7b8d33553413c63f05121a6fa467ddcad34d1f961d2bb14baa6812780e0ae69d91e5728349b572ad91b278724007966de0fb8399d70597c2ebcb3cd31ebaf4d0ec933a3683d7330a37cde7f346e4b4a6a4dc78f7cb87506ad7c1e572c058c3ae8e829a4fa8d7c864b71d2957ad2e6f758fe1bdb899ae3bb3d2be614af3383b0b081fb36d1fafaf934862f0a0955986793ff6caa640b0230fb87c32299d866cca58d286dd26f493e69b1a1cf2b831965e39fb6507d8a2ce09d22c97dcab8b917a9efda90a46147f8c363600b37bbef9b1ea64b5629b415c16f73caf1196089f0f8a931b9f6d5c7632f047a8615573bbce51e0f2b2fa5bb9c3158afccfff0513e757d2f15a9dd58e15eac18587de9e66608bc74eeac31579d2e09b6ef3faa05653878cbbee66dfb376f41dd501a20127a78e19e3e4bfa9ccb5711ec82d5d6a43508f0101e6dbc7b75bafaa2fbf3db44be9dfaf6289c3fce4e5b11387f438de0c2f1f3ab5dfbee2f0ceb2b04e1ff74da6f7af4c076a0757b98d68d9a3d84561d0aad4e7251ddc130212b9d2bf1a719e568d11db8e62fc08ce7286c4c25c5e5dbabd9819b8aaa0e0c325ea184b63a5cff69de60a88c4e3fd69a15fe73c10def42a97a74ae87149a9f1cb5800d494b6f08fc9b9a47cbc86aa1f0a88f9d605e04cd286e3184b6cd2c781c6790a886e07dc9003e831b64fd9be7e4166b0b6db284aad762977c8e8fda2a0c8e0c3a941f25bc84a5eae6ac42191d52a9452ce229da3de5f971bc15b30d6214fafefa5aa690c7e03fd0e89f83ef541e9f0ba6f734696ea39bdbebb9b72bf6675f25f3dd12a403404cb8ed907782e46e4bdd5e4a349cbf0b77702f4a69d9a3be9f7db832c6c0698ef6c3ec0d30b602eab26d5385c1aeddb38dd21cf412f79f55b3fe14be3dfebcfb1a65870fc2363e5fdede6a5ddc5666f43204c02124a3f1306407eb8193112f46f8a11117431f14baaf7cf8b1bcc797e8510805a21acbc5210ce894ee94f3e69aa896503722f755dc479c94bc7dcf20b97d96d118c5c364d676d79aa7b6f76b6128dadbe9c2cf5c73a32ab3415e47496e8d67f0edd446da5195b83a37f1ccea8d7718e8fa18bbbbc82e5889054cd83d6574807b8a0e8a12e0b50950639e19765b8b44c8e5cac8cfd187c5ef14ba3081c089718adf744a5284221a92bc4f702553c2ab061b5f72c827c00ff1f3cd64e278bd7cce976ed063421a6336db341b02c7c7ec5fdc7bc177d2c8566cf8ddcb25a206c181d37a2cee712b90bd6da6d32956952c1068eeafc2f766a080ea95e233c4eb2a84f5cc3dacf85980da5d38201504ee292c5d61f3f24c429c862f0e74d42139a3ff0c06732b00e6b45df825963612dc117fa51896639bafa6251845b1fd94e91ae72df953198179728e3bd56238f2d6367d00d952aa8c42c3fc608c91a245e3c36486f7ce02bb1528e1ed9d5eb028cf35f43f2cabe1f04f0979472633766502259ffd94b7d770483ba1d47555d4d8ffbb4b44f5af7bba705369af676b42e48d10fb951242e436622f4bd0918430bf43a5d6877b5c2f68ef2d884541f94887eb3f3995f58a7e5634faa311198ae88863a42811b08b230c8846465fb67200fb39840112eaddd571d0c3b01388a5ac6573ee6105c3cf4a8d7dd288f2d71477c53181e6c893e516221c5a7d938e9822807dd9bbfc77b1abf8d6b7cb0ff9f82c8c751e73963604b191cafbcf4def7802cae426b12fc3085dde6e39391fa6024ac4e4f906919db7eb179ac364631601ad17f9702aaa6437b2f75fe3d06a923c576af69658a1a4ca830e942e449071bcd89ae6f5dba8a50c89b1370dd99db435470230d5d70e0af2cdedd8e4f70d3b0dce1efb535dc2f4e9931e0dddf81fa4950e526fd0d411085986f1910bfa20a7d2cc6abe69f9be656eb588601671aa17daf2bd273492aace55adc520296579122b87bfa0d3395150b052adaebd00f0ea56ef5c08df2e379cc26cd916d9a9e4792cce8c400169cbdbbaaf5d36bfd76b43096536d6fdced64f15536ca70f8ed762fd683970379c453b5b0dd6320e4e4bf77111e0fc4c7029cddbf3c65c0d93002afcbff478d4fbef57aed67ae836f3ac19151a088c66fa2c5bb17a886e2ca7dff2d058e0f0f561f54160ae52b71aadf9464ac698427e66f6e811300b783a41098ba740459423f3b9959617c5ab1b5d520445dd113ee501e11bd00d6f659506ff34eb472314af7befa46e8d7c93fefc3cbf39a1b739e38157150e6a0d919b18ce82dc87e488ecd1ad64b2e6c8b58e6b87b24a17b02e23eff18c6829cbb142030e08c803c2f31c73bf55af46fdce9a718cac889089e53fd1cd0828219ae950917545bf2fef17542423e7177ddd2c80881150bb115b9c3c977b0ec0f0128c818f68"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x2e8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x1}, {0x5, 0x9, 0x6, 0x401}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xb, 0x8, 0x226}, {0x2, 0x5, 0x7}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x3, 0x6cb}, {0x2, 0x5, 0x6, 0x200}}}, @TCF_EM_CONTAINER={0xfc, 0x3, 0x0, 0x0, {{0x8, 0x0, 0xd7}, "6106ab0ad9477e7be18e7577e7c17af7f91fdc438ae5fea509cb95fe161a61d88bdfb84350ca3397cb2a7eb1229d1ee1c5a8ac997aa78bdd4301c5b79c462f78e16f360b53119fbfeb662c7d6d090fe827a030e41c26cfc596fafceac4495128fe2ca643e232f0de6d57539fdf439f6dffa866fb586a2527b2fa1e42216760fed1c509bec43d0254b35dfae421c9fe55b687e67740b738fae246c3a07c8a566615048e85b7fb518cc5c4bbd35012e608e9cd817c5ca305c1fe1df851e82eb4d9fa80a5aea349c790e22647b99b5a661456437437c1acac8a60f711d894c11018b4268163e50f9d29321c707765021da7"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x88}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_META={0x8c, 0x2, 0x0, 0x0, {{0xd, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="53af", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8ffb932b0c35", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="ef8be25065f87f0346", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="441261fe", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x1}, {0x0, 0x81, 0x1}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc67, 0x9}, {0x7, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x66, 0x1}, {0x1000, 0x80}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe, 0x1, 0xfff9}, {0x6, 0x6, 0x8000, 0x7, 0x8, 0x1}}}, @TCF_EM_CONTAINER={0xe8, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xd}, "8d7341bda654b21b70e61e1e0eacf4c85862e96f8e4918cde1b715049cc1d6353e3f455664afd67ef100acbfc3b4f69727d8cea9add30e196329d25002201ac3aa6c814ae9e7fc019f6d1c8f6718f75767b4076d34e741c84ea114aef1b52f433000cd5051c368299d6547e0474bcfb418a7bf94d5c6d409b0fb8af395d8275befda59b7dc259d6367daec05c4a42df7348ae4da6c71ed2c4489230d7f05fd3ad00c053169e33a63322f7e9e5309e7f1f3d6100aa7a3b942b1a9cc1b274e46d9c9f1e89e723be7b158f2cca3638f05ea36b322153e13a0600e73"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x17c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x2}, {0x3, 0x4}}}, @TCF_EM_CONTAINER={0x80, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x401}, "f6f35da7c875e222390b097b5b4b9172036794b3902adf3815b340d8e78cd14dadf337cb6914ba195ccb0ece1801e6588efb49fbf81d4be46609a093aadb4666c1b877d0df279792a2f403901a2f11dc478b15fcd5b4c2017e744d80d0c636508187c9fe093bf3ec481b803f29dcc85d93"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0xfff0, 0x5, 0x2, "97c145f54d"}}}, @TCF_EM_META={0x78, 0x2, 0x0, 0x0, {{0xfff, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x39, 0x2, [@TCF_META_TYPE_VAR="ad471a41390fad1706", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="241c0c85f74b98", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="18da928a12837a0f", @TCF_META_TYPE_VAR="f9a18d1c1da638", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="9cdd35f74bf0", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="f79472d40f", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="5897"]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x9, 0x2}, {0x8, 0x4, 0x7}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_CONTAINER={0x58, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x32ef}, "c98b4fd65c162fd0c894666aaa12617b3ddfa488341f05de3da44c9152f47b2c5bd68c9af203f12a1a47560451c942695a6cf648cebd6cdc840ace699b1c2b1ec9aae32f1b15c9dc62f770"}}]}, @TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x118, 0x3, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xdb, 0x5, "bb0e4356dabee7c4dfb4a87023dd96e429c67d475c52531ab4473446116429f0c71ae4ade2391cee440c0541c80d814ece6a17653f5df5848d62d288dd20d29a32dbba8839f64cf30029ec1dd75c5c0b41e2f5e8c21c32f72b9303b5ad8e8b0e846dcb67cd46466516e38a8aea89b153df62d23fd10b47254383ecf47eceae7febbf0aa4b1e662e8faaac3801215c8948aca495f4b5008be423308a57542f2a914e4c2db69b125c1a78d7d94269684017a864589b80d8b89b2a64713c203f22d3c3d1ccfd0f851bd391d2012adbea57c07c813b60352f2"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x113c, 0x2, [@TCA_FW_ACT={0x72c, 0x4, [@m_bpf={0x128, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0xf8, 0x6, "92d15c9b5f7481f644826316fecd90227a8259c81a25914a9f0ae854208038fa3e839284a4fbcbdc4f6a4f6dfdd53be1909db6318a2484e1add111c4235ce4ba44033e45176e854fe46ef3b9716a57275ca6776462a368b87451e91faff5c4476d25c1c75cc29f3f3df961b73a6470e338480b9626b9fa4d1785c8fa781388d5aa015f45c018bd5bbb866b8ee710b342f07116c157c32a7ab56968e54e368ba9159014a8688e24ebc1e570bf8f75994e4e4117634d3fc322fe985f9900c56c3bef36617ab5b1e82cc52f38a76cdb380d7cd91ef8e37e97b85cf3dd10163b517d738aff7fc88ee5f53a8a7a3455d0f3f4385b2d6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x114, 0xc, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0x4, 0x100, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x80, 0xffffffffffffffff, 0x7, 0x9}}, @TCA_DEF_DATA={0x6, 0x3, '*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xe5cd, 0xffff7d67, 0xffffffffffffffff, 0x5, 0xfffffff3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x233, 0x0, 0x20000000, 0x81, 0x1000}}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x8, 0x2, 0xf}}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}]}, {0x47, 0x6, "338756fb8ffb8286592efb91574cdae879b3a69dc7070e5aec54f56ebea1b724f45a8b4a76aae25f4032540828f21e98fed24e3168fe9e3e5f78193eecc09d29cab4b3"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x9c, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xf, 0x5, 0x26e, 0x1}, @remote, @local, 0xff00007f, 0x1}}]}, {0x4a, 0x6, "ccd3560406491f4f9ee4f3bc6ac965fb37c9a2eb2c697390671c1357242ebfee4ab93e15ee1283635ca95e1afd5f353a473a102fa79e6f2d7cfc66a1a41eed86f4001eeaf7ce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x114, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xec, 0x6, "165823a910aaa8cb7b218b69a3a7d0802a987e690f6a7a776df4f25ce5a31cc18311a699df3c171d099bba3553dda411fa9faffce38c556cd182e1c6ea7a9dfb1913360d56ac55e21f13698e45167a3ba105fcdfbbd9a72a71aadf74f865697492ed25aaed62520cc3cca7829645fbd24df4a49eb18552cbd8113452e24c272caed2ca28d5358305694b5e5a8d54c3713d28111b88240d4d77c87d6edbeca9ab4d35e236b47b33f5f7bbec89baf77e9a6e9825f9bf9830320c33b6c95ef44f1ca3735c8306dcf144d9b00295ab1dbdbfae8218c77f53954cc5aca5a96e73b7849b53b3ca1b631d36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x144, 0x1c, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "7a1cb7a3d0cc6fcf43e45051077122c9"}, @TCA_CT_ZONE={0x6, 0x4, 0x101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "103c5658b89767b70b3d79aa61404082"}]}, {0xe4, 0x6, "f0b5ec8737283b5baddd144d8ad26dfa7ef9392043af96a01221301e274fbc4a86b9ee7a3dfaa0bc97c24a61f8cfa2db242a639c517090c722dcce6bffed8b393e9089ab98a8c96e5338fe7d908f5249ef155e947f049b6b15e58d774619c8914ce6e8a471b566d7c89f487d31fcee369f70033e9044d5c278c96ac34a9c4713807e9819bb3618d67f4078231bff6f56422c0ee976ecf3717dc477becebba352af0f1f880090439d6f51771ba003e5ec48945f4baa6c1f10a1608b53501ac976a5664aaf0a17a49b84ee85f01c41aa56a563ca1e3ba529c4cd8eb93ab2a7e405"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xe0, 0x14, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x73ae3}, @TCA_MPLS_TTL={0x5, 0x7, 0xfe}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x7, 0x0, 0x1, 0x3}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x2}]}, {0x6f, 0x6, "c3b6f39ff3ac701837fc1dc4719671d69ba0bcf23cdb50c497b80f9ff5199514c51c49038301651991a62a42b1b54b2d1af77b507a85b2f45bcf5e2770c5f3b0f157cee2041744ec1afe95edebe5b4c6fca58578c76c7f60367d05f17d2ec6ac9dcf5397ab245f0dac4fb9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x118, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0xb, 0x2, 0x7, 0xffffffff}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xbb, 0x6, "ae514ce6a41cd2f932d17105021ee4f09409004031f0948ddc685fd7c4e124f87560b5b489b0b85f4b0916eb97d21caad1fa5de5ed991cfe72f087ec075db7837fd5008bb4019c816f21b64a6fe21931a611d5cfbf68256a6614b1bfcb1f8f8d4be08cb994dd0bf406214e04add3ae1caa2e88e4de29c041449e760a0ddae5fa8a4d5f70b4eb9eb7debc423e3eb68675cdaac3e39dde6a1de1a3fd9c1588b657b05523ae4670b4c7cb0dc01e4eebb1665b78e32c8f3265"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_ACT={0x3cc, 0x4, [@m_ife={0xac, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0x78, 0x6, "f3c54a7c00c93b6495de013ba2b2d114e75ddb7bb76d95d6fcbdb97bac62d18256af66f69672903bc226288236090958a4a285183ac56d64d960634bd80106ae6dece57905ccb98b5144ba97b5cc5058bd3ee947da2f29d6066f0b93ad2612319a1a3a6254aec0825acf796cc48a2a0102349820"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x11c, 0x14, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffff8fd2, 0x80000000, 0x0, 0xb, 0x400}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x7fffffff, 0x8, 0x7, 0x7}, 0x1}}]}, {0x69, 0x6, "df705bce4a122f75b0a20ab41473e07be11b4c38355d6267a83a51463ffc6687a7c5fa69ef800db33efc30b31d0572f6608c91e79dc15dc05ccd386e392a16375fa0218a8e72085efc5e5bc90e7536e47f32cc109441ed9906b4cb4f687cc62ba7cf503b34"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xe4, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xa0, 0x6, "928453f4d340c73e8a886ee1d3f0d62af2be0ef3b5c47b5e7a179b347f76aed5d40bee4a74b70a9e2f25e9883704a1290e0ba6ffd05f2be459459bae24fb2a272683ce4035eb83e5218fd13499ff7eabfb458e3d681f7085d126326b1b500159557857baa9f942de61e8357651da73ba8c2b57e5b756d0f6cd2b307b7e59f6ef28db51dee24657303fc56c18b2e47332023f62fb851f383b133acd45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x11c, 0x16, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x4, 0x3, 0x2, 0x1}, 0xfff}}]}, {0xcf, 0x6, "a03241787a0fd4e45b926d602df85a3d0d788316844f007251e0fc08fa348da524cb05ab3750a795a7f567091ef8a181157388b498e69eceb18b376f52cdc28134e342b2c5ea5f1ee87f747ed8dc8b45a6d5a74573e311bf01f4d9d7fafc233060733cd5eff79d5d14d0c9bcee9686579fdf6de5861fd84cfeb6a33ee33071b082fad28170457c912cf0765c77016c713b0d884983b42da96f6bbbe38aed15bdfd5e49f53c99ad38571a533f76c40e37a7d2e11743c795805636738c9064dc95f6f0819bc7410edb4d053b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xfff1}}, @TCA_FW_ACT={0x12c, 0x4, [@m_simple={0x128, 0x3, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x4, 0x20000000, 0xffff087f, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1, 0x0, 0xfffffffa, 0x5}}]}, {0xc4, 0x6, "b97bc7eb55dabc7e71817bf052e81090fa791ef43972d0440f78dde63fb47a1e9d5d470de50271805644506adca0a780faa62755fa72122a7291bfd3a93fcae6c8e332b16c215a731d621d7b788c05d6259754e06c41d15fc33f0d24bdbe55e312628b0f00124183f51db96596f7ff7e3834f994bd3739590609a60ad428889b965ad83403388f0fb8aecac2c7a21f4f85c046cac9f4749c7401131fca7ac069dd87dd30a7979dc7f93e840e8c6620853e4da6bafdaab1c88daee8b14db081f2"}, {0xc, 0x7, {0xbc7f835cd057813a, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_POLICE={0x4f0, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xa0, 0x8, 0xc, 0x3e9e6327, 0x3, 0xa5, 0x7ff, 0xfffffffd, 0x10001, 0x7fff, 0x4, 0x401, 0x1, 0x5, 0x8001, 0xa6, 0x4, 0x0, 0x3, 0x4, 0x80000000, 0x5, 0x7, 0x80000001, 0x3, 0x5, 0xafd, 0xffffff00, 0x0, 0xf, 0x3, 0x7, 0x4, 0xffff0ef3, 0xf, 0x8001, 0x9, 0x0, 0x1, 0x6, 0x7, 0x7f, 0xfffffe00, 0x101, 0x2, 0xf, 0x7, 0x0, 0x3, 0x80000000, 0x1, 0xfffffff9, 0x9, 0x16ebf203, 0x2, 0x2, 0x8, 0x0, 0xe, 0x8, 0x5, 0x7, 0x3, 0xe, 0x3, 0x228a, 0x1, 0x8, 0x101, 0x3, 0x6, 0x8, 0x2, 0xb8a185d, 0x6, 0x9, 0x4, 0x88, 0x101, 0x0, 0x7, 0x401, 0x7, 0xea, 0x8, 0x9, 0x3, 0x7f, 0xa, 0x84fe, 0x101, 0x6, 0x2, 0x7, 0x1, 0xffffffff, 0xd, 0x66f, 0x975, 0x9, 0x2, 0x4, 0x4, 0x1000, 0x3, 0x9, 0x8a, 0x9, 0x8, 0xf60, 0x6, 0x2, 0x8, 0x8001, 0xaa4d, 0x58, 0xfffff329, 0xed, 0xa2e1, 0xfffffff7, 0x8f, 0x4, 0x1, 0x6, 0xaa, 0xffffffff, 0x7, 0x7fff, 0x9, 0x5, 0x7, 0x3, 0x2, 0xa, 0x96a1, 0xf, 0x9, 0x64, 0x4, 0x8000, 0x9, 0x7, 0x6, 0x8, 0x2, 0x6, 0x24, 0x0, 0xd1, 0x100, 0x6, 0x9, 0x10001, 0xf34, 0x1, 0x0, 0xfffff001, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x1, 0xfffffffb, 0x2e8, 0x6, 0x8, 0x3, 0x5, 0x1, 0x7, 0x4, 0x7, 0xfffffffe, 0x10001, 0x97f9, 0x7, 0xff, 0x9, 0x7ff, 0x200, 0x3, 0x5, 0x5, 0xe, 0xc000000, 0xeff3, 0x3, 0x8, 0xc048, 0x3, 0x4, 0x4, 0x3, 0x7ff, 0x91e1, 0x78a, 0x4, 0xc, 0x81, 0x0, 0x80000001, 0x0, 0x6f25, 0xd, 0x28, 0x2, 0xe5, 0x4, 0x4, 0x4, 0x4, 0x7fff, 0xffff9908, 0x0, 0xffffffff, 0x2, 0x1, 0x40, 0x1000, 0xfffffe01, 0x7, 0x5, 0x3, 0xfffffffd, 0x80000000, 0x800, 0x6, 0x6, 0x400, 0x2, 0x1, 0x2, 0x400, 0x5, 0x3, 0x2, 0x19, 0x10000, 0x0, 0xffff, 0x6, 0xff, 0x8000, 0xbb0c, 0x8, 0x4d, 0xfcec, 0x6, 0xb, 0x9a, 0x4, 0x101, 0x200, 0xd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0xd, 0x9, 0x8, {0x9, 0x2, 0x5, 0xff80, 0x2, 0x1}, {0x55, 0x0, 0x7ff, 0x2, 0x135, 0x5}, 0x1, 0x2, 0x100}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x10001, 0xfffffff0, 0x6, {0x2, 0x2, 0xffff, 0x8, 0x1ff, 0x5}, {0x6, 0x1, 0x4, 0x4, 0x5, 0x9}, 0x40, 0xcb, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0xfff, 0xc, 0x2, {0x4, 0x2, 0x2, 0x3, 0x3, 0x7}, {0x0, 0x1, 0x7, 0x4c, 0x8, 0x3}, 0x800, 0x3, 0x7fb}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ipvlan1\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xfc000000}]}, 0x29ac}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000000) 3.035320012s ago: executing program 7 (id=3013): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000240)={0x2f, @multicast2, 0x4e20, 0x0, 'wrr\x00', 0x6, 0x6, 0x44}, 0x2c) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000180)="5feb38e56cbbed9225a787115d79cd0dd78e33747ec2e28a9c2df6a6ac1a9b742726ffb593a7c8dec13793cdb542a6fb41cd0e093c3673aa0a66e028110597e7d5169b9f407ce5a95572481c810fc6afbdc706a41021b5871f952ca1c6247620a0fa97443c71d2b999f469cf13d099cc5edadfd5ae9dbd", &(0x7f00000002c0)=""/71, &(0x7f0000000340)="82b593292eba21237ceeae4a57031c17e1c74a1ad4e4d8e6305fb665191ad1cb9759497bcbd79673a4b721e4235763606ba05579cfed793bba6a8aa373acddf84dfb5484abb6106bfbbdb3a41d6bb3f2d602a8244679c05c5956644e399972f43ef2bc050d5d2cbbfd2f45bd9896637fb712ad3c", &(0x7f00000003c0)="86925f4e2ada96e12259fe7b47ef61136a8e8fd9be5ed161729cad44cded5f395010d98cdacd00ffcdfb37658e53580f467b2df546496eacb2370e56a7e5d40398bbb3f3d360657041320effc7c3823548c44efcb4a660ed7bfffa09756f02f62dd93faa28bfc3fe", 0x7, r6}, 0x38) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) 2.78580396s ago: executing program 4 (id=3014): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf256a00000008000300", @ANYRES32, @ANYBLOB="0500d2000b000000000001eaffffffffffffff00"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000044) 2.702909796s ago: executing program 0 (id=3015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r0, @ANYBLOB="0c000200"], 0x28}}, 0x48000) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0x81}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100, 0x1, "deda1e551572eb09b00d7b378f18b6861cb2feb9b4e6fc8711f050f9d23690e8", 0x71d, 0x1, 0x0, 0x55}, 0x3c) (async) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) (async) pipe(&(0x7f00000001c0)) (async) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES16=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES64=r4], 0x38}}, 0x11) 2.603828804s ago: executing program 5 (id=3016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000400)={@private1, 0x0}, &(0x7f0000000440)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000852300007c00000095"], &(0x7f0000000bc0)='syzkaller\x00'}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0xc024) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x4, 0x9, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0x4, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) bind$tipc(r11, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000ffdbdf25110000003c00018014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=r5, @ANYBLOB="1400024173ec920076657468305f766972745f776966690008000014000180080001000622ecc34d415ca6265508cbe6a6b46bc5ac12b2c5535174713ddc943630e7d9118a7ce061c0197de9dbaec6f6a5d414cec112385473c334244ac3df4c3a6ca4ab0300000000000000fbea4c8e4c4b16811e3eff0bd4b056dde7a9e8cc7578a7666dd82ffdef13691852eeac1e0e282549dc22137eea2dbe59b21d908c27393cc107487b2a1d8ee2e708e9f200040000000000", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x10000000) (async) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "e0cb847146b6d1ff88fd6a81"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2869e2767055d531e5eed34961"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "405d7aab02a5d2"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20000020) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004054) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa8, r12, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10ab52145c78a537}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 2.517801029s ago: executing program 7 (id=3017): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) shutdown(r0, 0x0) 2.514436885s ago: executing program 4 (id=3018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x4, 0xb}, {0x4}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041890}, 0x4040041) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd27, 0x25dfdb7a, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000000) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe800}, 0x40) (rerun: 64) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2004}, 0x10}, 0x34) 2.066850566s ago: executing program 7 (id=3019): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xff03, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r7, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r8 = gettid() syz_open_procfs$namespace(r8, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@RTM_NEWNSID={0x44, 0x58, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r8}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd0, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9c81}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd4a8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbe7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x496a}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060008060000140002"], 0x38}}, 0xc000) 1.88950219s ago: executing program 6 (id=3020): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-{+&{}}}\x00', 0x4d0400, &(0x7f0000000040)={@align, {0x10, 0x2, 0x81, 0x4}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}) connect$x25(r0, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) recvfrom$x25(r0, &(0x7f0000000180)=""/38, 0x26, 0x2, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000240)=0x13, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x39}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000003c0)=@nfc_llcp={0x27, r4, 0x1, 0x2, 0xff, 0x9, "c22853e164348e97520c62ca928d76b7617c00500439355ddab56a30b83f32a23ce753c3bf74acdb0d7daa7922105bae82acb62d60ce68f8b71ee641534ed8", 0x26}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="89f046f62abb6f9210d225c84044a08f819a3c002eda9ed32c914482cbe2d75bdbac0201db6c09e39c5228815a28ca388eec56dc68b5c3b86f8fc96143bb9e0778edf3bb4b7b1f601308b893d004c2f76844231cba5336d0ea57228a7eb25bd88d7d96a7ff9bbc3dba6d0128fc58b41cfa74f1a432c540429675928fca41a4160dde48699d4841c13ce33e1ebfa83ae3d6863a9fbffaa1bf0f", 0x99}], 0x1, &(0x7f0000000540)=[{0xb8, 0x116, 0x6, "0b532b9aac3568c79cc82a6739a8e5d13ac5f03c928775306e1a4eaaa9f75d3b79d5b402ab3a2686dd57316dca342df3587230aedfd810e717d1a7f1f30efd7c23c0d1e6461d500a51aa06a52e994aed0e54a7c51bbf286f2e8275c16554af21d52bad61261ccf047ac133d070623e95d23c6dc0b72c2b7a4091bb1b40aa619959ee88b0a7482bf2e06f9e4dff912f7d7fecde9695b4e5f973fcedd9349e68bb53"}], 0xb8}, 0x4000040) close(r2) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x208, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7a67d0ec5b37c8d9}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x104, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x230}, 0x1, 0x0, 0x0, 0x8880}, 0x804) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000a40)={r6, &(0x7f0000000940)='(+\x00', 0x90201, &(0x7f0000000980)={@align=0x4ad, {0x0, 0x201, 0xd, 0x400}}, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x5}) ioctl$BTRFS_IOC_ENCODED_WRITE(r6, 0x40809440, &(0x7f0000000f40)={&(0x7f0000000ec0)=[{&(0x7f0000000a80)="501e2936ca13527c924cc3cedcba00f3d4", 0x11}, {&(0x7f0000000ac0)="959466ffac2060f92606562861eb518f7339ca7104c9a89fba7567f2b77aaa02e2d46487359492743c227f905700406deaaa3db23d1f60c5dbb36ee2c922673a0b647fd9b95cf1c875031f5ee0ba02caba50a3ab54ae2cda71b76c55a422e52bb4e1810e2f444f1b96fae61a9957b2841370977623c9a9c2833a557ff8c0bbb34fa48695965de31f7dc5efb14b9fe7f8c020b28f696b0f41cd42269c42675be02a8c41", 0xa3}, {&(0x7f0000000b80)="9f9b05ec3a85dafbe4fdaf45f494dddd9805584a1557565b7eef7dbbdaff52cb9134f4ce81af884d5faa2893a9e1051d31e9f597ecbd365b35e45a0ac44c059da8c3173f9a84c731d9fd66189cedf7b3fb96ebcbda9e81defaf55086ffdf6293a23f87209da9dc4e9a6814d37c6eb2fffaf6cc1dc1038722d6e8f85946d6b43b099c8d4690259a369a04f5fe4082e013ba29c01bad5c77f755c22f9bfce55ffd1dd25c303fe97d2fd3be824c696556ddfcbd7fde6a69f060c48a5e80e37286eb770916bacddbac7b6a0d5ad24f", 0xcd}, {&(0x7f0000000c80)="1938f24280ac951605ca3a507d48bc9afab23808c8fd117eca75f702d7042f2c641c09aeb25141e6ab58c35b8d4aea9cebd39f246924c09b35f644e8b034039abe6be9d59883e3b74939d5fdf98fbb299f6d05282100e85c49fd59424cbd203d78e6c267844d5a144cc8308b82d45f8bcf33643040f9298ed5", 0x79}, {&(0x7f0000000d00)="9db17c0355956c6c9c167de64a8a3d15fc06890f32110dda66e211aadc668acc86a70c4f0ce5affcaffb7126db802d18e269385cbb18b0bbcfd0e6b8cd18a1ecbd073ed0ffc62722d145a18070295f1116045555ec55b3b02dfe7aa02e1fd581188f3122cbf98d5d2413a7dad36952e94b1686b6d622c4d506cb5441ef38c328f2e73c2e8b327e7dad8555577d", 0x8d}, {&(0x7f0000000dc0)="5a840e69ee555a71d2d7acd683ef757702ba681c60d565a6ea911f78b8d6d976dc916120f5da1f290d920c43b065a96707e1f917765c8a0c790e46a5c6e9d7c6f6e07852b55566d0ef31da953c5daa6c741c5864eb23a85aa819c1a30f99a2dfd8e31b035cf5acb118d0ec420d0de9e31aeb3f6ecd9c758bcc8261856effa520eb227e1c9f5a81a7f1761261e4fad031aad9e422158b5c2332bc3d909a592165ccd8739d8400b430ac3849d1d00314d6fae7866a45b0b09c78052b1b9d28", 0xbe}, {&(0x7f0000000e80)="c3a4e6931605c1a798777a7dd641fbff0db851ebd7218e4fafdd75967fa6d5617a22d36253192a0600614143e73dcf57fd1581ada33f85d8", 0x38}], 0x7, 0x2, 0x0, 0x401, 0x5, 0x8, 0x8, 0x2}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) r7 = openat$cgroup_ro(r0, &(0x7f0000001000)='net_prio.prioidx\x00', 0x0, 0x0) connect$llc(r0, &(0x7f0000001040)={0x1a, 0x311, 0x7, 0x3, 0xe1, 0xf0, @link_local}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001080)={{0x0, 0x7, 0x3, 0x5, 0x5, 0x2, 0x100000001, 0x9, 0x10, 0x2, 0x6, 0x9, 0xbd, 0x3ffc00000, 0xffff}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001100)={r8, 0x9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000002100), &(0x7f0000002140)=0x4) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000021c0), r1) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014840}, 0x4000004) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000022c0)=0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xc, [@func={0x8, 0x0, 0x0, 0xc, 0x2}, @enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x2e, 0x30, 0x30, 0x30, 0x5f, 0x5f, 0x30, 0x0]}}, &(0x7f0000002380)=""/229, 0x44, 0xe5, 0x0, 0x2}, 0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000024c0)={0x0, 0xbebf, 0xd, 0x8, 0x8001, 0x3ff}, &(0x7f0000002500)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000002540)={r10, 0x9, 0x1}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000025c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x54, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4048040) 1.889104599s ago: executing program 4 (id=3021): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=""/102}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @alu={0x3, 0x0, 0x2, 0x4, 0x2, 0x20, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x0, 0x1, 0x3, 0x0, 0x1, 0x50, 0xfffffffffffffff0}, @generic={0xa, 0x7, 0x9, 0x66, 0x8}, @map_val={0x18, 0xd, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.758490103s ago: executing program 5 (id=3022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.588317122s ago: executing program 0 (id=3023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002200)={{r1, &(0x7f00000001c0)='\xd2{\\\x00', 0x321c0, &(0x7f0000000280)={@_ha_fsid={[0xfffffffd, 0xf08]}, {0x1, 0x0, 0xa51, 0x9}}, 0xff800000, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x3}, 0x9, &(0x7f00000020c0)=[{0x2, 0x8, &(0x7f0000000340)='\x00', &(0x7f0000000900)="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", 0x1000, 0x10}, {0x1, 0x0, &(0x7f0000001900)='NLBL_CIPSOv4\x00', &(0x7f0000001940)="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", 0xff, 0x18}, {0x3, 0x2, &(0x7f0000001a40)='-@/\',*#{\x00', &(0x7f0000001a80)="4b08ace1bcdc6e149128e5cc67d18b9f7713561cc677cdd509078bc24ef9230dc3c8b51ef55d30b404f907dc0487c29777b1d8a366912ba941f67984736922e1f9a6df2459843a29aa10ff6b7dba3593831b35180953f90c473feca22cca615b8921b5757d2894807aa262c92916d773eec6eb9ed136fadfe0bbc6ab8b2744b311d7a6e7145b547308e74ea59e4df67a89f14b2f5617e37424a6fd9dde0dbc5637ec2d8b2d8b0c336eecf479c48bbbccc80e34190c643d95a70575f454f600372e1f191dd0950683f7c35f0684d24df19795e552dc230fb2531cea69f99aea14da42379ba53142123583e02372abb4fb4b", 0xf1, 0x36}, {0x1, 0x553, &(0x7f0000001b80)='\'#*!/&^+}^\x00', &(0x7f0000001bc0)="ead210982c5d37e20ac08af561e75410eae450529684d7b730067de203d70edad290216f3d2748dc61eba35bf04f658acb5079751e0f05497d97e9b54f0a771eea20addfb3e1d5690549149c76", 0x4d}, {0x3, 0x8, &(0x7f0000001c40)='-].\x00', &(0x7f0000001c80)="a80a9fa79944f2ba67c4864afad35bb6d4e874c7f50fe6", 0x17, 0x42}, {0x2, 0x5, &(0x7f0000001cc0)='NLBL_CIPSOv4\x00', &(0x7f0000001d00)="4004f625cc1d4cfc5e4b15f89c222b9d9caa5dff224a057084868aac6ce7b06deb5f9e59e404cc18784ae42e863b715d28e2be6378f67b81b3771ac167b030fca9aece95903ed7ac75c86f05323734274c91a4fe95e6e0425e56c3b4fa09b53e0c8ac82fb60cc40b64032b676b955c4532b44f9782f0ee449eb2dce63ca11d5ef6489a90ec674d2ac902bfd99f1897c60d2f049969df16d2e4b38e7786ee29ace8e60bfc51e4ecaef254145c2953806e6fd34ec30a438474ee3c12a2efd0c2c41370de8a175f7fce880698b123ce5fdb47c936", 0xd3, 0x1b}, {0x1, 0x6, &(0x7f0000001e00)='{-)\x00', &(0x7f0000001e40)="1a2016f6af56873c2ff0e79b58692eb36bf29aac4190818d6e5bf3b48dd224c947a24f9143e1e359143c9b766cd1c8d0f845dd0406b0f695708a698c20540a7e6b6fd5a97752f086ca4ecc3eb5518c549edd314716619cc81d87046fa05651b2d04a3bf840d88f3d4051e33dcdda653aece87e10b726b22b26fca21170239fad0083ec0cc6b6cd13d524c3d1eea64562ac57d0f9e315f5109f7ba8ac8a13f3241dafa6d9011687d2fb84cb0d5e4a983afe84a326bd3ae9d42631db5e890a03fe791f0f54", 0xc4, 0x10}, {0x2, 0xa30, &(0x7f0000001f40)='\x00', &(0x7f0000001f80)="71cba1ed4962f4dbe57b78edc0947ef17a84c2c984dbede73a1474dee1405fb1de870139b5e6748cdf299cdc905220f3b51ffb3caa47d8b696e520d7d63f2a74ecd64cbe63a4d91acff42d82dda5e1954f0a5d9771cb628c9509f807682e53e797524a54468fc6072c1048b2d85b025f632faa29a780083ada7820dcdbf85a0a52c363826ed850fc284640b284c865ba31616fc3a1572254d0c6a5adbf3faa2bb18297b1df31536532623e3e6224884fdf61", 0xb2, 0x28}, {0x2, 0x2, &(0x7f0000002040)='veth0_virt_wifi\x00', &(0x7f0000002080), 0x0, 0x10}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={0xffffffffffffffff, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000002340)=[0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f00000023c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000002480)}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002980)=@bpf_ext={0x1c, 0x22, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x74d0000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x32}}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, @generic={0x0, 0x9, 0x5, 0x3, 0xa95}, @generic={0x9a, 0x7, 0x2, 0x5, 0x1}, @alu={0x7, 0x1, 0xd, 0x4, 0x4, 0x10, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffff000}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0xa, 0x0, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002740)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000002780)=""/214, 0x41100, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002880)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000028c0)={0x3, 0xa, 0x0, 0xc}, 0x10, 0x64cf, 0xffffffffffffffff, 0x1, &(0x7f0000002900)=[0x1, 0xffffffffffffffff], &(0x7f0000002940)=[{0x1, 0x5, 0xd, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x17, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xa}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x9b}]}, &(0x7f0000000180)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000002280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000022c0)={0x1, 0xe, 0x18f163f5, 0xffff4f0f}, 0x10, r6, r7, 0x6, 0x0, &(0x7f0000002a40)=[{0x1, 0x3, 0xf, 0x2d464d0bc66cb2ad}, {0x1, 0x1, 0x5, 0x4}, {0x5, 0x1, 0x1, 0x3}, {0x5, 0x3, 0x9, 0x5}, {0x5, 0x1, 0x8, 0x5}, {0x1, 0x4, 0x9, 0x9}], 0x10, 0x9}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000600000061101400000100009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x94) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x1c4, r9, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x190, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43873be7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cb7ac18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65aecc76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x136ebef8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b408859}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b9734a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71dca35}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a2843dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68f7850b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cc54715}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42236116}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x261ceabf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x186108f7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4990d478}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c2ba48e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c27190}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x257e0c2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7313a351}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68e0801d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bfc5a19}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x643a3268}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cfb0d11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eea6b70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b744ee}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3358d957}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35840932}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1665318e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d990e0f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8800}, 0x800) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.429050387s ago: executing program 6 (id=3024): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r2, &(0x7f0000002640)=ANY=[@ANYBLOB="0000000d07000000000014"], 0x1022) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406d7cf0000000000000000050000140100010007000000229dcd5d0ca59c20b8ad3a925628a077892427d072beb27eac6372c2c6882a6b7aa0e5c20e5867068785c8e64b194b3741970286a00bb27167f34f501220121849281cf8bedcea2744242e8a630831eed62670e51e76a13bdcaf907ace4ca16b2ad7b4eed10970c1b97070bd798c9dac1538c1088d484f"], 0x1c}, 0x1, 0x0, 0x0, 0x24008890}, 0x4040) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r9, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x4040010) r10 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$nl_route(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) sendmsg$kcm(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000840)}, 0x80) accept$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1.406714778s ago: executing program 4 (id=3025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000380)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 1.299357444s ago: executing program 7 (id=3026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x20, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.017765988s ago: executing program 7 (id=3027): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x28011, r0, 0xac9d4000) (async) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}}, {{0xa, 0xfffd, 0xea, @dev={0xfe, 0x80, '\x00', 0x29}, 0xfffffffc}}}, 0x108) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000dfc60100070000000900020073791f28000000000c000780050015000300000010000300686173683a69702c6d0005000500020000050004000000000000000000000e000000000000000000"], 0x54}}, 0x0) (rerun: 32) 882.047587ms ago: executing program 0 (id=3028): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf256a00000008000300", @ANYRES32, @ANYBLOB="0500d2000b000000000001eaffffffffffffff00"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000044) 802.164213ms ago: executing program 6 (id=3029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) 533.718938ms ago: executing program 4 (id=3030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000240)=0xc8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x3fffdf2, 0x45833af92e4b39ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/8154, 0x110e000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000300)=0x20211c, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x24, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xb, 0xfe, 0x0, 0xfc, 0x6, 0x80, 0x0, 0x0, 0x0, 0x45, [0xd5f2]}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRESDEC=r4, @ANYRESDEC=r2], 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r7, 0x9, r3}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x2010, r3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xdd3, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0xf, 0x8000000000004000}, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRES64=r1], 0x14}}, 0x8000) 476.7434ms ago: executing program 5 (id=3031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='pimreg0\x00', 0x10) (async) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}], 0x1, 0x4404c880) (async) sendto$inet6(r1, &(0x7f0000000040)="ef5c2a8660c27b9409000000e39c87714ae46580624f5877", 0x18, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)={0x0, 0x9, [@random="30daadd40925", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @remote, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r4, 0xf6dc, 0x7fffffff}) 381.233903ms ago: executing program 0 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014413a0cfc39ebb9aadb1271fd00128009000100626f6e64000000000400028091c7260c000100bbbbbbbbbb798a80b6e2b0d26aab3c82a440a071b2628d244a1abd084a9f239a43c0ab837ec5aa142b955ff6d5ee74c7a56ffc2ec2154da5b15fc534643c7e3e9ac02644a585a484f7e27883e432fd226af5d8a7be2e1cffd2fc79cf24ea057e4f699aba1eaed8f5633126bf60692d6baac4fdbc0a83693dee01d16e30cc3e79aac7543d756ff61c6233da6b8cb263ab367f3a2085b070b826d5157ed0063c1c8ed45f7bdb8150357d65dd01439a630d793d2350d78fa1cd47d4665558d031"], 0x40}}, 0x0) 241.614687ms ago: executing program 7 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) (async) socket$inet6(0xa, 0x80001, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@dellink={0x4c, 0x11, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x26}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_GROUP={0x8, 0x1b, 0xc87a}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x46, &(0x7f0000000380), 0x4) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) 224.256247ms ago: executing program 6 (id=3034): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003000d"], 0x48}}, 0x0) 0s ago: executing program 0 (id=3035): sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0xfd3a, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): HW filter on device bond6 [ 272.799008][T12148] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 272.799030][T12148] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 272.864818][T12169] ip_tables: iptables: counters copy to user failed while replacing table [ 272.894555][T12148] bond6: (slave ip6gre1): making interface the new active one [ 272.894581][T12148] ip6gre1: entered promiscuous mode [ 272.940666][T12148] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 273.033375][T12155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.054007][T12158] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 273.754174][ T1434] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.754227][ T1434] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.754266][ T1434] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.754304][ T1434] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.215642][T12206] __nla_validate_parse: 68 callbacks suppressed [ 274.215664][T12206] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1778'. [ 274.294661][T12211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.786087][T12227] syz_tun: entered allmulticast mode [ 274.893840][T12227] dvmrp8: entered allmulticast mode [ 275.373019][T12239] netlink: 'syz.3.1788': attribute type 17 has an invalid length. [ 275.373058][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 275.373083][T12239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1788'. [ 275.430498][T12239] erspan0: entered promiscuous mode [ 275.445763][T12239] gretap0: entered promiscuous mode [ 275.585768][T12226] syz_tun: left allmulticast mode [ 275.793747][T12244] gtp1: entered promiscuous mode [ 275.793956][T12244] gtp1: entered allmulticast mode [ 275.877221][T12254] tun0: tun_chr_ioctl cmd 1074025675 [ 275.877243][T12254] tun0: persist disabled [ 275.930940][T12251] gtp2: entered promiscuous mode [ 275.931117][T12251] gtp2: entered allmulticast mode [ 276.443136][T12277] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1800'. [ 276.573013][T12282] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1804'. [ 276.675381][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 276.675471][T12277] bridge_slave_1: left allmulticast mode [ 276.675492][T12277] bridge_slave_1: left promiscuous mode [ 276.677237][T12277] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.774443][T12277] bridge_slave_0: left allmulticast mode [ 276.774473][T12277] bridge_slave_0: left promiscuous mode [ 276.775353][T12277] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.107514][T12295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1806'. [ 277.199306][T12295] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1806'. [ 277.284141][T12298] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1807'. [ 277.649560][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 277.704835][T12317] netlink: 'syz.2.1811': attribute type 2 has an invalid length. [ 278.173699][T12301] syzkaller0: entered promiscuous mode [ 278.173726][T12301] syzkaller0: entered allmulticast mode [ 279.549404][T12362] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1820'. [ 279.931756][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.075722][T12333] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1816'. [ 284.076243][T12333] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1816'. [ 284.076256][T12333] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1816'. [ 284.117315][T12368] syzkaller1: entered promiscuous mode [ 284.117534][T12368] syzkaller1: entered allmulticast mode [ 284.302804][T12375] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 284.421284][T12375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.509777][T12379] bond6: (slave veth0_to_bond): Releasing backup interface [ 284.586217][T12379] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 284.887404][T12395] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1830'. [ 284.913691][T12396] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 284.971015][T12395] netlink: 'syz.2.1830': attribute type 30 has an invalid length. [ 285.134013][T12395] bond7: option arp_missed_max: invalid value (0) [ 285.134041][T12395] bond7: option arp_missed_max: allowed values 1 - 255 [ 285.259676][T12395] bond7 (unregistering): Released all slaves [ 286.196429][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 286.196465][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'. [ 286.282536][ T1387] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.286557][ T1387] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.286606][ T1387] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.287997][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 286.288028][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'. [ 286.295604][ T41] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.637470][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 286.981647][T12472] netlink: 'syz.2.1844': attribute type 1 has an invalid length. [ 287.041243][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1844'. [ 287.102727][T12470] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.109525][T12474] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.141729][T12477] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 3, id = 0 [ 287.218457][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 287.274772][T12483] openvswitch: netlink: Key type 30 is not supported [ 288.691591][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 288.752658][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'. [ 289.364545][T12558] netlink: 'syz.2.1871': attribute type 9 has an invalid length. [ 290.145201][T12580] openvswitch: netlink: IPv4 tun info is not correct [ 290.259226][T12586] netlink: 'syz.0.1878': attribute type 6 has an invalid length. [ 290.622378][T12591] __nla_validate_parse: 2 callbacks suppressed [ 290.622398][T12591] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1880'. [ 290.801279][ T4936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.811301][ T4936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.824455][ T4936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.829469][ T4936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.849591][ T4936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.914160][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.934629][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.962482][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.982768][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.984252][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.101594][T12609] ip_tables: iptables: counters copy to user failed while replacing table [ 291.133192][T12609] tipc: Enabling of bearer rejected, already enabled [ 291.178180][T12601] Bluetooth: hci0: unsupported parameter 5135 [ 291.178202][T12601] Bluetooth: hci0: unsupported parameter 8192 [ 291.178215][T12601] Bluetooth: hci0: unsupported parameter 5135 [ 291.178228][T12601] Bluetooth: hci0: unsupported parameter 8192 [ 291.458138][T12619] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 291.652635][T12626] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 291.736381][T12626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.767858][T12626] bond6: (slave geneve3): making interface the new active one [ 291.780939][T12626] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 292.831849][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.831997][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.832157][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.840452][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.840679][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.840824][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.840963][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.841115][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.841293][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 292.841432][T12668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 293.052639][ T52] Bluetooth: hci5: command tx timeout [ 293.175083][T12668] netlink: 'syz.3.1898': attribute type 1 has an invalid length. [ 293.175118][T12668] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1898'. [ 293.175135][T12668] netlink: 'syz.3.1898': attribute type 1 has an invalid length. [ 293.175148][T12668] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.1898'. [ 293.340087][T12683] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 293.355802][T12683] xt_esp: unknown flags DD [ 293.355949][T12683] xt_esp: unknown flags DD [ 293.356093][T12683] xt_esp: unknown flags DD [ 293.385639][T12683] xt_esp: unknown flags DD [ 293.385779][T12683] xt_esp: unknown flags DD [ 293.385920][T12683] xt_esp: unknown flags DD [ 293.386035][T12683] xt_esp: unknown flags DD [ 293.386178][T12683] xt_esp: unknown flags DD [ 293.386292][T12683] xt_esp: unknown flags DD [ 293.386405][T12683] xt_esp: unknown flags DD [ 293.732764][T12693] veth1_macvtap: left promiscuous mode [ 293.747602][T12693] team0: Device veth1_macvtap failed to register rx_handler [ 294.244336][T12596] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.247631][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.248081][T12596] bridge_slave_0: entered allmulticast mode [ 294.280200][T12596] bridge_slave_0: entered promiscuous mode [ 294.296272][T12596] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.296433][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.296862][T12596] bridge_slave_1: entered allmulticast mode [ 294.332028][T12596] bridge_slave_1: entered promiscuous mode [ 294.513712][T12596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.564077][T12596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.102608][T12596] team0: Port device team_slave_0 added [ 295.121515][T12596] team0: Port device team_slave_1 added [ 295.132243][ T52] Bluetooth: hci5: command tx timeout [ 295.180596][T12596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.180632][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.180662][T12596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.338849][T12596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.338869][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.338898][T12596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.444871][T12727] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1909'. [ 295.670247][T12596] hsr_slave_0: entered promiscuous mode [ 295.687710][T12596] hsr_slave_1: entered promiscuous mode [ 295.700353][T12596] debugfs: 'hsr0' already exists in 'hsr' [ 295.700376][T12596] Cannot create hsr debugfs directory [ 296.470023][T12748] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 296.917281][T12754] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1915'. [ 297.214692][ T4936] Bluetooth: hci5: command tx timeout [ 297.381692][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 297.381779][T12765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.381792][T12765] IPv6: NLM_F_CREATE should be set when creating new route [ 297.381834][T12765] IPv6: NLM_F_CREATE should be set when creating new route [ 297.400646][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 297.491145][T12596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.526516][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.527521][T12596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.555326][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.558540][T12596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.667539][T12764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1918'. [ 297.934852][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.967343][T12596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.092848][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.979036][T12596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.099954][T12596] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.178540][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.178654][T10273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.221632][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 299.221993][T12808] xt_cgroup: path and classid specified [ 299.229319][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.229478][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.292014][ T52] Bluetooth: hci5: command tx timeout [ 299.630813][T12819] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 299.908366][T10273] nci: nci_rx_work: unknown MT 0x1 [ 300.626104][T12831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.072385][T12858] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 301.166223][T12596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.430301][T12868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1937'. [ 301.708077][ T1706] block nbd2: Possible stuck request ffff88802704e000: control (read@0,1024B). Runtime 60 seconds [ 301.708122][ T1706] block nbd2: Possible stuck request ffff88802704e1c0: control (read@1024,3072B). Runtime 60 seconds [ 302.166876][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1940'. [ 302.263453][T12881] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 302.319087][T12888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1941'. [ 302.619529][T12596] veth0_vlan: entered promiscuous mode [ 302.674076][T12596] veth1_vlan: entered promiscuous mode [ 302.846913][T12596] veth0_macvtap: entered promiscuous mode [ 302.894748][T12596] veth1_macvtap: entered promiscuous mode [ 302.927363][T12596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.950405][T12596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.151986][ T1398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.152057][ T1398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.152104][ T1398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.152139][ T1398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.374546][T12898] netlink: 'syz.0.1944': attribute type 33 has an invalid length. [ 303.376323][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.376341][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.473247][T12898] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 303.475156][T12898] bond8 (unregistering): Released all slaves [ 303.835012][ T1398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.835049][ T1398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.245728][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1875'. [ 304.319059][T12923] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 304.369650][T12920] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 304.370319][T12928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1875'. [ 304.370503][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1951'. [ 304.398482][T12918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.408482][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 304.912027][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 305.133248][T12945] syzkaller0: entered promiscuous mode [ 305.133450][T12945] syzkaller0: entered allmulticast mode [ 305.182315][T12945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1956'. [ 305.207684][T12945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.916995][T12967] netlink: 'syz.0.1962': attribute type 10 has an invalid length. [ 306.104095][T12970] xt_CONNSECMARK: invalid mode: 0 [ 306.183222][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 306.350775][ T31] audit: type=1107 audit(1789590994.095:4): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 306.395946][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 306.989377][T12994] ip6t_hbh: too many supported opts specified [ 307.486467][T13012] IPVS: length: 239 != 24 [ 307.486517][T13013] IPVS: length: 239 != 24 [ 307.697765][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880272bd000: rx timeout, send abort [ 307.886285][T13028] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1982'. [ 307.994072][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'. [ 307.994103][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'. [ 307.994123][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 308.197912][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880272bd000: abort rx timeout. Force session deactivation [ 308.198153][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035a54800: rx timeout, send abort [ 308.698207][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035a54800: abort rx timeout. Force session deactivation [ 308.766794][T13051] ip_tables: iptables: counters copy to user failed while replacing table [ 308.767506][T13052] ip_tables: iptables: counters copy to user failed while replacing table [ 308.805135][T13048] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 308.899476][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 309.056356][T13055] macvtap1: entered promiscuous mode [ 309.069623][T13055] macvtap1: entered allmulticast mode [ 309.069646][T13055] veth1_vlan: entered allmulticast mode [ 309.874762][T13073] dvmrp0: entered allmulticast mode [ 310.066915][T13075] netlink: 'syz.3.1998': attribute type 21 has an invalid length. [ 310.067032][T13075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1998'. [ 311.946991][T13105] xt_hashlimit: size too large, truncated to 1048576 [ 313.114585][T13145] IPVS: set_ctl: invalid protocol: 46 172.20.20.17:20000 [ 313.479576][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 313.512784][T13158] macvlan0: left promiscuous mode [ 313.560427][T13163] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2022'. [ 313.593859][T13158] netlink: 'syz.3.2020': attribute type 1 has an invalid length. [ 313.593886][T13158] netlink: 'syz.3.2020': attribute type 2 has an invalid length. [ 313.723710][T13169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2022'. [ 313.830557][T13169] netlink: 'syz.4.2022': attribute type 10 has an invalid length. [ 313.844079][T13169] bridge0: port 3(team0) entered blocking state [ 313.844216][T13169] bridge0: port 3(team0) entered listening state [ 313.844560][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.844699][T13169] bridge0: port 2(bridge_slave_1) entered listening state [ 313.845021][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.845219][T13169] bridge0: port 1(bridge_slave_0) entered listening state [ 313.948983][T13169] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 314.113669][T13172] netlink: 'syz.3.2023': attribute type 1 has an invalid length. [ 314.181393][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'. [ 314.234737][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 314.249132][T13172] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.335998][T13177] Cannot find add_set index 46338 as target [ 314.425604][T13181] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 314.522046][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'. [ 314.724154][T13185] pim6reg527: entered allmulticast mode [ 314.875564][T13195] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 314.886009][T13195] SET target dimension over the limit! [ 314.886188][T13195] SET target dimension over the limit! [ 314.886329][T13195] SET target dimension over the limit! [ 314.886473][T13195] SET target dimension over the limit! [ 314.886617][T13195] SET target dimension over the limit! [ 314.886792][T13195] SET target dimension over the limit! [ 314.886961][T13195] SET target dimension over the limit! [ 314.887112][T13195] SET target dimension over the limit! [ 314.887252][T13195] SET target dimension over the limit! [ 314.890650][T13195] SET target dimension over the limit! [ 315.282663][T13204] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2032'. [ 315.355255][T13212] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2032'. [ 315.396839][T13206] syzkaller0: entered promiscuous mode [ 315.396864][T13206] syzkaller0: entered allmulticast mode [ 315.420599][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'. [ 315.449447][T13206] tipc: Enabled bearer , priority 0 [ 315.471004][T13216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2035'. [ 315.499146][T13211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.499162][T13211] IPv6: NLM_F_CREATE should be set when creating new route [ 315.500576][T13211] IPv6: NLM_F_CREATE should be set when creating new route [ 315.500605][T13211] IPv6: NLM_F_CREATE should be set when creating new route [ 315.550970][T13211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.556514][T13217] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 315.773848][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.149790][T13205] tipc: Resetting bearer [ 316.225076][T13205] tipc: Disabling bearer [ 316.902471][T13255] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.933241][T13255] netlink: 'syz.4.2046': attribute type 5 has an invalid length. [ 316.933474][T13255] netlink: 'syz.4.2046': attribute type 5 has an invalid length. [ 316.933662][T13255] netlink: 'syz.4.2046': attribute type 5 has an invalid length. [ 316.934976][T13255] netlink: 'syz.4.2046': attribute type 5 has an invalid length. [ 316.935194][T13255] netlink: 'syz.4.2046': attribute type 5 has an invalid length. [ 316.935416][T13255] netlink: 'syz.4.2046': attribute type 5 has an invalid length. [ 317.061001][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061067][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.640020][T13277] bond5: (slave geneve3): Releasing active interface [ 317.664532][T13277] bond6: (slave ip6gre1): Releasing backup interface [ 317.664562][T13277] ip6gre1: left promiscuous mode [ 317.713439][ T41] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 317.714386][ T41] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 317.763749][ T41] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 317.763799][ T41] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 318.509921][T13304] __nla_validate_parse: 206 callbacks suppressed [ 318.509945][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 318.938780][T13318] validate_nla: 59 callbacks suppressed [ 318.939032][T13319] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 318.939128][T13319] gretap1: entered promiscuous mode [ 318.939152][T13319] gretap1: entered allmulticast mode [ 318.940514][T13318] netlink: 'syz.5.2064': attribute type 3 has an invalid length. [ 318.940534][T13318] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2064'. [ 319.347494][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347514][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347524][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347534][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347552][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347560][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347570][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347579][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347588][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347597][T13328] tc action pedit 'at' offset 19 out of bounds [ 319.347618][T13328] 0: reclassify loop, rule prio 0, protocol 800 [ 320.072956][T13355] netlink: 524 bytes leftover after parsing attributes in process `syz.3.2074'. [ 320.257757][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2074'. [ 320.359744][T13365] dvmrp1: left allmulticast mode [ 320.883137][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2081'. [ 321.261464][T13399] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 321.382476][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 321.382503][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 321.383361][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 321.383381][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 321.503333][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 322.219138][T13417] IPVS: Unknown mcast interface: vcan0 [ 322.500260][T13427] tipc: Started in network mode [ 322.500294][T13427] tipc: Node identity 0a96fbb92b03, cluster identity 4711 [ 322.500471][T13427] tipc: Enabled bearer , priority 0 [ 322.544851][T13425] openvswitch: netlink: Flow actions attr not present in new flow. [ 322.605236][T13423] tipc: Disabling bearer [ 322.730714][T13441] xt_MASQUERADE: bad MAP_IPS. [ 323.060048][T13449] bridge_slave_0: invalid flags given to default FDB implementation [ 323.390405][T13462] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 323.427311][T13459] syzkaller1: entered promiscuous mode [ 323.427334][T13459] syzkaller1: entered allmulticast mode [ 323.862766][T13472] __nla_validate_parse: 3 callbacks suppressed [ 323.862786][T13472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2106'. [ 323.898102][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2108'. [ 323.898126][T13475] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2108'. [ 324.578986][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'. [ 324.919466][T13509] vlan4: entered promiscuous mode [ 324.919490][T13509] geneve1: entered promiscuous mode [ 324.919721][T13509] vlan4: entered allmulticast mode [ 324.919738][T13509] geneve1: entered allmulticast mode [ 325.233144][T13514] tipc: Started in network mode [ 325.233177][T13514] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 325.432160][T13524] netlink: 'syz.4.2120': attribute type 3 has an invalid length. [ 325.432184][T13524] netlink: 'syz.4.2120': attribute type 1 has an invalid length. [ 325.432197][T13524] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2120'. [ 325.776271][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.792141][T13528] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.830439][T13528] batadv0: entered promiscuous mode [ 325.850284][T13528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.880269][T13537] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 326.017018][T13528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.031148][T13539] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.045560][T13528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.062987][T13528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.063011][T13528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.069923][T13528] veth1_vlan: left promiscuous mode [ 326.071395][T13528] veth0_vlan: left promiscuous mode [ 326.107170][T13528] veth0_vlan: entered promiscuous mode [ 326.110100][T13528] veth1_vlan: entered promiscuous mode [ 326.128557][T13528] veth1_macvtap: entered promiscuous mode [ 326.130076][T13528] veth0_macvtap: left promiscuous mode [ 326.131425][T13528] veth0_macvtap: entered promiscuous mode [ 326.157951][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.159256][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.160691][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.169305][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.199101][T13528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.201352][T13528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.218447][T13528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.265208][T13528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.287235][T13528] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 326.427789][ T49] bond7: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 326.428276][ T49] bond7: (slave veth0_to_bond): making interface the new active one [ 326.516190][ T49] bond7: active interface up! [ 326.572853][ T52] Bluetooth: hci5: command tx timeout [ 326.632046][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'. [ 326.668238][T13537] bond8: entered promiscuous mode [ 326.668677][T13537] 8021q: adding VLAN 0 to HW filter on device bond8 [ 326.696239][T13542] bond8: (slave bridge5): making interface the new active one [ 326.696262][T13542] bridge5: entered promiscuous mode [ 326.697259][T13542] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 326.743701][T13543] bond8: (slave bridge6): Enslaving as a backup interface with an up link [ 326.776509][T13553] tipc: Enabling of bearer rejected, failed to enable media [ 326.776849][T13554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.832912][T13554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.029549][T13542] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 327.206647][ T41] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 327.250966][T13558] Cannot find add_set index 4 as target [ 327.328330][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'. [ 327.423610][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2129'. [ 327.559804][T13566] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 327.666636][T13566] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.746905][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 327.803890][T13566] bond11: (slave geneve2): making interface the new active one [ 327.845485][T13566] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 328.331061][T13585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2138'. [ 328.841157][ T31] audit: type=1107 audit(1789591016.595:5): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 328.975554][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.210208][T13609] netlink: 'syz.4.2141': attribute type 13 has an invalid length. [ 329.210232][T13609] __nla_validate_parse: 20 callbacks suppressed [ 329.210245][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 329.211226][T13609] netlink: 'syz.4.2141': attribute type 13 has an invalid length. [ 329.211243][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 329.945954][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.017473][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.080266][T13631] netlink: 'syz.2.2146': attribute type 2 has an invalid length. [ 330.103118][T13631] : entered promiscuous mode [ 330.495602][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.052261][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.292062][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 331.773138][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.777390][ T1706] block nbd2: Possible stuck request ffff88802704e000: control (read@0,1024B). Runtime 90 seconds [ 331.777478][ T1706] block nbd2: Possible stuck request ffff88802704e1c0: control (read@1024,3072B). Runtime 90 seconds [ 331.777656][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.094175][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.508222][T13657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2151'. [ 333.052051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.164755][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.201283][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 333.299838][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2163'. [ 333.723441][T13695] vlan2: entered allmulticast mode [ 333.723467][T13695] bond0: entered allmulticast mode [ 333.723482][T13695] bond_slave_0: entered allmulticast mode [ 333.723499][T13695] bond_slave_1: entered allmulticast mode [ 334.022672][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'. [ 334.172378][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.179910][T13698] bond8: option xmit_hash_policy: invalid value (64) [ 334.228180][T13698] bond8 (unregistering): Released all slaves [ 334.518462][T13706] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2168'. [ 334.822714][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.211479][T13732] FAULT_INJECTION: forcing a failure. [ 335.211479][T13732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.213032][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.217122][T13732] CPU: 0 UID: 0 PID: 13732 Comm: syz.2.2174 Not tainted syzkaller #0 PREEMPT(full) [ 335.217152][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.217183][T13732] Call Trace: [ 335.217192][T13732] [ 335.217203][T13732] dump_stack_lvl+0xe8/0x150 [ 335.217247][T13732] should_fail_ex+0x410/0x560 [ 335.217279][T13732] _copy_from_user+0x2d/0xb0 [ 335.217310][T13732] ___sys_sendmsg+0x1c6/0x360 [ 335.217341][T13732] ? __lock_acquire+0x747/0x2de0 [ 335.217370][T13732] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.217407][T13732] ? kstrtouint+0x6e/0xe0 [ 335.217472][T13732] ? __fget_files+0x2a/0x420 [ 335.217505][T13732] ? __fget_files+0x3a2/0x420 [ 335.217549][T13732] __sys_sendmmsg+0x273/0x4d0 [ 335.217585][T13732] ? __pfx___sys_sendmmsg+0x10/0x10 [ 335.217637][T13732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.217680][T13732] ? ksys_write+0x242/0x270 [ 335.217717][T13732] ? __pfx_ksys_write+0x10/0x10 [ 335.217759][T13732] __x64_sys_sendmmsg+0xa0/0xc0 [ 335.217799][T13732] do_syscall_64+0x166/0x520 [ 335.217824][T13732] ? trace_irq_disable+0x3b/0x140 [ 335.217846][T13732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.217871][T13732] ? clear_bhb_loop+0x70/0xc0 [ 335.217901][T13732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.217925][T13732] RIP: 0033:0x7fb7f739e159 [ 335.217946][T13732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.217966][T13732] RSP: 002b:00007fb7f8291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.217991][T13732] RAX: ffffffffffffffda RBX: 00007fb7f7625fa0 RCX: 00007fb7f739e159 [ 335.218008][T13732] RDX: 0000000000000001 RSI: 0000200000000bc0 RDI: 0000000000000006 [ 335.218023][T13732] RBP: 00007fb7f8291090 R08: 0000000000000000 R09: 0000000000000000 [ 335.218037][T13732] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 335.218051][T13732] R13: 00007fb7f7626038 R14: 00007fb7f7625fa0 R15: 00007fff8b2c9fe8 [ 335.218087][T13732] [ 336.105432][T13758] Bluetooth: hci0: unsupported parameter 5135 [ 336.105462][T13758] Bluetooth: hci0: unsupported parameter 8192 [ 336.105477][T13758] Bluetooth: hci0: unsupported parameter 5135 [ 336.105491][T13758] Bluetooth: hci0: unsupported parameter 8192 [ 336.108202][T13759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2185'. [ 336.155094][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 336.251054][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2187'. [ 336.251094][T13765] netlink: 'syz.4.2187': attribute type 7 has an invalid length. [ 336.251109][T13765] netlink: 'syz.4.2187': attribute type 8 has an invalid length. [ 336.251123][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 336.263669][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.469821][ T4936] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.481270][ T4936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.494999][ T4936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.503726][ T4936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.519153][ T4936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.294973][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.375049][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 337.433379][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 337.433420][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2193'. [ 337.514977][T13830] geneve2: entered promiscuous mode [ 337.515003][T13830] geneve2: entered allmulticast mode [ 337.544566][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.581168][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2192'. [ 337.602220][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.868488][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.889369][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.332495][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.517342][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 338.553393][T13857] vxcan2: entered allmulticast mode [ 338.571814][ T52] Bluetooth: hci6: command tx timeout [ 339.072518][T13867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.072711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.074589][T13867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.145449][T13862] 8021q: adding VLAN 0 to HW filter on device bond12 [ 339.316358][T13876] tipc: New replicast peer: 255.255.255.255 [ 339.320940][T13876] tipc: Enabled bearer , priority 10 [ 339.452035][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.693789][T13883] ip6tnl1: entered allmulticast mode [ 340.304042][T13902] xt_socket: unknown flags 0xc [ 340.309348][T13903] xt_socket: unknown flags 0xc [ 340.355201][T13893] netlink: 'syz.2.2212': attribute type 9 has an invalid length. [ 340.436874][ T9] tipc: Node number set to 2886997039 [ 340.488761][T13893] netlink: 'syz.2.2212': attribute type 15 has an invalid length. [ 340.526138][T13893] xt_limit: Overflow, try lower: 536871034/127 [ 340.651939][ T52] Bluetooth: hci6: command tx timeout [ 341.308273][T13768] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.321939][T13768] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.322089][T13768] bridge_slave_0: entered allmulticast mode [ 341.327821][T13768] bridge_slave_0: entered promiscuous mode [ 341.352816][T13768] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.353006][T13768] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.353135][T13768] bridge_slave_1: entered allmulticast mode [ 341.359272][T13768] bridge_slave_1: entered promiscuous mode [ 341.391158][ T5621] net_ratelimit: 15 callbacks suppressed [ 341.391174][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.450406][T13930] sctp: [Deprecated]: syz.0.2224 (pid 13930) Use of int in maxseg socket option. [ 341.450406][T13930] Use struct sctp_assoc_value instead [ 341.623841][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.641847][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.646121][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.674961][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.677502][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.680362][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.700681][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.723109][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.725723][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.726587][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.762712][T13940] netlink: 'syz.5.2225': attribute type 3 has an invalid length. [ 341.763036][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2225'. [ 341.766763][T13768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.868781][T13768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.014426][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.117471][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.192636][T13768] team0: Port device team_slave_0 added [ 342.234045][T13768] team0: Port device team_slave_1 added [ 342.423423][T13768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.423441][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.423467][T13768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.431089][T13768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.431108][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.431136][T13768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.731973][ T52] Bluetooth: hci6: command tx timeout [ 342.733904][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.949798][T13970] netlink: 'syz.4.2237': attribute type 34 has an invalid length. [ 343.056660][T13973] Bluetooth: ISO socket layer initialized [ 343.127665][T13768] hsr_slave_0: entered promiscuous mode [ 343.130128][T13768] hsr_slave_1: entered promiscuous mode [ 343.146227][T13768] debugfs: 'hsr0' already exists in 'hsr' [ 343.146249][T13768] Cannot create hsr debugfs directory [ 343.357964][T13973] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 343.371904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.773775][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.870277][T13990] x_tables: duplicate underflow at hook 1 [ 343.931694][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 343.931883][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 343.932040][ C0] bridge0: port 3(team0) entered learning state [ 344.112315][T13995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.468138][T13768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.498651][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.515842][T13768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.540719][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.557067][T13768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.577152][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.591636][T13768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.620698][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.639717][T14005] tipc: Enabled bearer , priority 0 [ 344.812291][ T52] Bluetooth: hci6: command tx timeout [ 344.847478][T14005] syzkaller0: entered promiscuous mode [ 344.847503][T14005] syzkaller0: entered allmulticast mode [ 344.893999][T14005] tipc: Resetting bearer [ 344.909397][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.950629][T14002] tipc: Resetting bearer [ 346.971849][ T987] net_ratelimit: 2 callbacks suppressed [ 346.971873][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.694889][T14002] tipc: Disabling bearer [ 347.721256][ T5624] tipc: Node number set to 563477433 [ 347.865007][T13768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.010767][T13768] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.018622][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.018897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.053714][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.053820][T13811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.094984][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.140758][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.140869][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.309649][T14060] syzkaller1: entered promiscuous mode [ 348.309859][T14060] syzkaller1: entered allmulticast mode [ 348.625991][T14074] __nla_validate_parse: 30 callbacks suppressed [ 348.626013][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 348.726526][T14074] xfrm1: entered promiscuous mode [ 348.726553][T14074] xfrm1: entered allmulticast mode [ 348.904624][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 349.044089][T14081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2264'. [ 349.131997][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.132228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.174701][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.174956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.766673][T14141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2277'. [ 350.798343][T14141] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2277'. [ 350.896398][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2279'. [ 350.898392][T14146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 350.925710][T14147] sctp: [Deprecated]: syz.2.2279 (pid 14147) Use of int in maxseg socket option. [ 350.925710][T14147] Use struct sctp_assoc_value instead [ 351.000289][T13768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.132868][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.213569][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.218648][T13768] veth0_vlan: entered promiscuous mode [ 352.251932][ C0] net_ratelimit: 5 callbacks suppressed [ 352.252022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.254408][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.254620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.334521][ T31] audit: type=1800 audit(1789591040.095:6): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2292" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2401 res=0 errno=0 [ 352.454387][T13768] veth1_vlan: entered promiscuous mode [ 352.551372][T14185] tls_set_device_offload_rx: netdev not found [ 352.711358][T13768] veth0_macvtap: entered promiscuous mode [ 352.762189][T13768] veth1_macvtap: entered promiscuous mode [ 352.793491][T13768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.839798][T13768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.856832][ T1009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.856908][ T1009] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.888614][T14195] Bluetooth: MGMT ver 1.23 [ 352.888665][T14195] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 353.022692][T14195] macvlan3: entered promiscuous mode [ 353.022717][T14195] macvlan3: entered allmulticast mode [ 353.082637][T13807] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.172770][T13791] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.293886][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.294162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.363121][T14210] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2295'. [ 353.549528][T14212] team0: left allmulticast mode [ 353.549582][T14212] team_slave_0: left allmulticast mode [ 353.549601][T14212] team_slave_1: left allmulticast mode [ 353.549798][T14212] team0: left promiscuous mode [ 353.549812][T14212] team_slave_0: left promiscuous mode [ 353.550023][T14212] team_slave_1: left promiscuous mode [ 353.592408][T14212] bridge0: port 3(team0) entered disabled state [ 353.695763][T14212] team0: Cannot enslave team device to itself [ 353.767156][T14226] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 353.767201][T14226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.811696][T14224] RDS: rds_bind could not find a transport for ::ffff:4.0.0.0, load rds_tcp or rds_rdma? [ 354.213173][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.220131][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.220153][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.324356][T14235] bond3: option lp_interval: invalid value (0) [ 354.324383][T14235] bond3: option lp_interval: allowed values 1 - 2147483647 [ 354.339297][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.339538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.381058][T14235] bond3 (unregistering): Released all slaves [ 354.534936][T14243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2302'. [ 354.571037][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.571059][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.018785][T14253] netlink: 'syz.0.2305': attribute type 30 has an invalid length. [ 355.307026][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2184'. [ 355.627714][T14277] netlink: 'syz.0.2311': attribute type 10 has an invalid length. [ 355.725259][T14277] team0: Device veth0_macvtap failed to register rx_handler [ 355.814311][T14281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2312'. [ 355.830060][T14281] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 356.162486][ T1009] nci: nci_rx_work: unknown MT 0x1 [ 356.515765][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 356.625434][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 356.732773][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 357.096951][T14323] veth0_to_bond: entered allmulticast mode [ 357.189218][T14325] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 357.285829][T14328] vlan6: entered allmulticast mode [ 357.285851][T14328] bond0: entered allmulticast mode [ 357.285894][T14328] bond_slave_0: entered allmulticast mode [ 357.285911][T14328] bond_slave_1: entered allmulticast mode [ 357.285925][T14328] bond1: entered allmulticast mode [ 357.285999][T14328] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 357.286172][T14328] veth0_to_bond: entered allmulticast mode [ 357.286187][T14328] bridge0: entered allmulticast mode [ 357.313882][ T5833] net_ratelimit: 6 callbacks suppressed [ 357.313902][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.453286][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.453486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.495344][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.495532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.033546][T14295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.538020][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.538295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.635647][T14366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.985082][T14376] ip_tables: iptables: counters copy to user failed while replacing table [ 360.019645][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2340'. [ 360.033346][T14376] hsr_slave_0: left promiscuous mode [ 360.050330][T14376] hsr_slave_1: left promiscuous mode [ 360.344807][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.402837][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.403018][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.403150][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.403278][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.403406][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.403532][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.403687][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.403815][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.495992][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.854826][ T1706] block nbd2: Possible stuck request ffff88802704e000: control (read@0,1024B). Runtime 120 seconds [ 361.854875][ T1706] block nbd2: Possible stuck request ffff88802704e1c0: control (read@1024,3072B). Runtime 120 seconds [ 362.384616][T14455] net_ratelimit: 10 callbacks suppressed [ 362.384724][T14455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.508630][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.508822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.652209][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.652419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.190204][T14486] IPVS: stopping backup sync thread 12477 ... [ 363.383982][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.639016][T14487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.651846][T14487] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.661251][T14497] xt_hashlimit: size too large, truncated to 1048576 [ 363.692713][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.692917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.772002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.875603][T14519] netlink: 'syz.0.2379': attribute type 10 has an invalid length. [ 364.050270][T14519] batadv0: entered allmulticast mode [ 364.062869][T14519] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 365.312262][T14567] __nla_validate_parse: 103 callbacks suppressed [ 365.312360][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2393'. [ 365.687823][T14584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2395'. [ 366.230563][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2399'. [ 366.316177][T14602] tipc: Enabling of bearer rejected, failed to enable media [ 366.784565][T14627] netlink: 'syz.6.2405': attribute type 12 has an invalid length. [ 366.784591][T14627] netlink: 'syz.6.2405': attribute type 29 has an invalid length. [ 366.784607][T14627] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2405'. [ 366.784627][T14627] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2405'. [ 367.225688][T14640] x_tables: duplicate underflow at hook 1 [ 367.431863][T14650] netlink: 'syz.6.2412': attribute type 29 has an invalid length. [ 367.440062][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2412'. [ 367.462627][ T5621] net_ratelimit: 19 callbacks suppressed [ 367.462646][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.646193][T14660] netlink: 'syz.2.2414': attribute type 1 has an invalid length. [ 367.932510][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.932786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.092338][T13774] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.092849][T13805] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.092894][T13805] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.092930][T13805] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.323383][T14667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.433784][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2418'. [ 368.433821][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2418'. [ 368.435991][T14665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.515959][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2421'. [ 368.703688][T14673] geneve2: entered promiscuous mode [ 368.703712][T14673] geneve2: entered allmulticast mode [ 368.709023][T14676] netlink: 'syz.6.2418': attribute type 4 has an invalid length. [ 368.972034][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.972242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.208590][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'. [ 369.810344][T14716] netlink: 'syz.4.2431': attribute type 10 has an invalid length. [ 369.890885][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.908235][T14716] team0: entered allmulticast mode [ 369.908270][T14716] team_slave_0: entered allmulticast mode [ 369.908298][T14716] team_slave_1: entered allmulticast mode [ 369.936988][T14716] bond0: (slave team0): Enslaving as an active interface with an up link [ 370.012647][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.012869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.172284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.360706][T14720] netlink: 'syz.5.2432': attribute type 2 has an invalid length. [ 370.366058][T14723] netlink: 'syz.5.2432': attribute type 2 has an invalid length. [ 370.378192][T14720] __nla_validate_parse: 1 callbacks suppressed [ 370.378209][T14720] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2432'. [ 370.525828][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2434'. [ 370.670841][T14736] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2432'. [ 371.410189][T14764] netlink: 'syz.5.2442': attribute type 1 has an invalid length. [ 371.410211][T14764] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2442'. [ 371.560542][T14764] netlink: 'syz.5.2442': attribute type 1 has an invalid length. [ 371.573902][T14765] netlink: 'syz.5.2442': attribute type 1 has an invalid length. [ 371.733298][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2442'. [ 371.988877][T14795] nftables ruleset with unbound set [ 372.048741][T14798] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2448'. [ 372.139973][T14790] syzkaller0: entered promiscuous mode [ 372.140029][T14790] syzkaller0: entered allmulticast mode [ 372.276643][T14803] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2449'. [ 372.565767][T14810] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 373.132379][ T9] net_ratelimit: 5 callbacks suppressed [ 373.132403][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.132644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.542148][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.011646][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.011673][ C0] bridge0: topology change detected, propagating [ 374.011954][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.011972][ C0] bridge0: topology change detected, propagating [ 374.172048][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.172273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.629618][T14774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.669616][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.962491][T14827] netlink: 'syz.5.2457': attribute type 7 has an invalid length. [ 374.962517][T14827] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2457'. [ 375.187601][T14840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2460'. [ 375.187625][T14840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2460'. [ 375.215208][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.215427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.409270][T14839] tipc: Enabled bearer , priority 0 [ 376.254952][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.255171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.337938][ T5751] net_ratelimit: 5 callbacks suppressed [ 378.337961][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.338218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.505288][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.505349][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.583159][T14838] tipc: Resetting bearer [ 378.635529][T14838] tipc: Disabling bearer [ 379.175122][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2469'. [ 379.215460][T14889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2471'. [ 379.346763][T14890] netlink: zone id is out of range [ 379.346780][T14890] netlink: set zone limit has 4 unknown bytes [ 379.372095][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.372278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.637223][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2474'. [ 380.343774][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2481'. [ 380.364847][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2481'. [ 380.430803][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.430983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.659322][T14927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.734832][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.863513][T14935] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2490'. [ 381.034186][T14940] team0: Device gtp3 is up. Set it down before adding it as a team port [ 381.129056][T14943] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2489'. [ 381.869377][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'. [ 381.916821][T14980] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.988430][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'. [ 382.224867][T14991] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.383963][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2499'. [ 382.921100][T15010] netlink: 'syz.5.2503': attribute type 2 has an invalid length. [ 382.933338][T15010] netlink: 'syz.5.2503': attribute type 7 has an invalid length. [ 382.933362][T15010] netlink: 'syz.5.2503': attribute type 8 has an invalid length. [ 383.430634][T15026] batman_adv: batadv0: Adding interface: syzkaller0 [ 383.430657][T15026] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.430690][T15026] batman_adv: batadv0: Interface activated: syzkaller0 [ 383.518182][T15024] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 383.621457][T13809] net_ratelimit: 6 callbacks suppressed [ 383.621479][T13809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.623079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.723107][T15039] netlink: 'syz.6.2508': attribute type 4 has an invalid length. [ 383.748338][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.749328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.750703][T15024] batman_adv: batadv0: Removing interface: syzkaller0 [ 383.791012][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.871799][T15047] ip_tables: iptables: counters copy to user failed while replacing table [ 383.946799][T15043] lo: entered promiscuous mode [ 384.072724][T15043] netlink: 'syz.5.2509': attribute type 2 has an invalid length. [ 384.072750][T15043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.370310][T15058] __nla_validate_parse: 3 callbacks suppressed [ 384.370332][T15058] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2512'. [ 384.371386][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 385.206770][T15091] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2520'. [ 385.223368][T15092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2521'. [ 385.299508][T15095] netlink: 'syz.4.2522': attribute type 10 has an invalid length. [ 385.299871][T15095] veth1_macvtap: left promiscuous mode [ 385.322535][T15095] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 385.696091][T15108] netlink: 'syz.4.2529': attribute type 1 has an invalid length. [ 385.700888][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 385.839709][T15108] 8021q: adding VLAN 0 to HW filter on device bond14 [ 385.932805][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 385.995637][T15110] bond0: (slave veth0_to_bond): Releasing backup interface [ 386.009871][T15110] veth0_to_bond: left allmulticast mode [ 386.043186][T15110] bond14: (slave veth0_to_bond): making interface the new active one [ 386.044772][T15110] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 386.177934][T15119] macvlan35: entered promiscuous mode [ 386.177960][T15119] macvlan35: entered allmulticast mode [ 386.196828][T15119] bond14: entered promiscuous mode [ 386.196849][T15119] veth0_to_bond: entered promiscuous mode [ 386.197917][T15119] 8021q: adding VLAN 0 to HW filter on device macvlan35 [ 386.223057][T15119] bond14: (slave macvlan35): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 386.253087][T15119] bond14: left promiscuous mode [ 386.253109][T15119] veth0_to_bond: left promiscuous mode [ 386.426060][ T4936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.438603][ T4936] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.443773][ T4936] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 386.463529][ T4936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 386.465415][ T4936] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.800425][T15148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2535'. [ 386.844584][T15144] x_tables: duplicate underflow at hook 2 [ 386.861393][T15144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2536'. [ 386.883179][T15151] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 386.947933][T15151] IPVS: persistence engine module ip_vs_pe_À not found [ 388.572459][ T4936] Bluetooth: hci7: command tx timeout [ 388.737587][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.988177][T15210] bond7: Unable to set down delay as MII monitoring is disabled [ 389.065122][T15210] bond7 (unregistering): Released all slaves [ 389.352685][T15215] bond7: (slave veth0_to_bond): Releasing active interface [ 389.487670][T15215] bond0: (slave bond_slave_0): Releasing backup interface [ 389.531155][T15225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2550'. [ 389.531182][T15225] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2550'. [ 389.531199][T15225] netlink: 'syz.0.2550': attribute type 5 has an invalid length. [ 389.531213][T15225] netlink: 'syz.0.2550': attribute type 6 has an invalid length. [ 389.531227][T15225] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2550'. [ 389.582302][T15215] bond0: (slave bond_slave_1): Releasing backup interface [ 389.702873][T15215] team0: Port device team_slave_0 removed [ 389.807729][T15215] team0: Port device team_slave_1 removed [ 389.831110][T15215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.831132][T15215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.867810][T15215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 390.517745][T15246] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 390.594880][T15129] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.595001][T15129] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.598682][T15129] bridge_slave_0: entered allmulticast mode [ 390.628084][T15129] bridge_slave_0: entered promiscuous mode [ 390.653537][ T4936] Bluetooth: hci7: command tx timeout [ 390.668458][T15129] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.668561][T15129] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.668697][T15129] bridge_slave_1: entered allmulticast mode [ 390.694635][T15129] bridge_slave_1: entered promiscuous mode [ 390.963830][T15129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.979276][T15129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.003461][T15261] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2557'. [ 391.170222][T15129] team0: Port device team_slave_0 added [ 391.194555][T15129] team0: Port device team_slave_1 added [ 391.292434][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 391.382491][T15129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.382511][T15129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.382540][T15129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.389368][T15129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.389384][T15129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.389412][T15129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.733188][T15129] hsr_slave_0: entered promiscuous mode [ 391.736275][T15129] hsr_slave_1: entered promiscuous mode [ 391.740322][T15129] debugfs: 'hsr0' already exists in 'hsr' [ 391.741079][T15129] Cannot create hsr debugfs directory [ 391.937005][ T1706] block nbd2: Possible stuck request ffff88802704e000: control (read@0,1024B). Runtime 150 seconds [ 391.937053][ T1706] block nbd2: Possible stuck request ffff88802704e1c0: control (read@1024,3072B). Runtime 150 seconds [ 391.998566][T15274] Bluetooth: hci0: unsupported parameter 5135 [ 391.998589][T15274] Bluetooth: hci0: unsupported parameter 8192 [ 391.998603][T15274] Bluetooth: hci0: unsupported parameter 5135 [ 391.998616][T15274] Bluetooth: hci0: unsupported parameter 8192 [ 392.364380][T15278] netlink: 'syz.5.2563': attribute type 21 has an invalid length. [ 392.364408][T15278] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.364512][T15278] netlink: 'syz.5.2563': attribute type 1 has an invalid length. [ 392.651208][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2564'. [ 392.651246][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2564'. [ 392.733941][ T4936] Bluetooth: hci7: command tx timeout [ 393.303454][T15129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 393.347618][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.364620][T15129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 393.422262][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.430240][T15129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 393.474121][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.489617][T15129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 393.541334][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.737521][T15327] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 393.738291][T15326] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 393.848960][T15325] pimreg: entered allmulticast mode [ 393.865341][T15325] pimreg: left allmulticast mode [ 393.886247][T15314] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 393.886287][T15314] CPU: 0 UID: 0 PID: 15314 Comm: syz.0.2572 Not tainted syzkaller #0 PREEMPT(full) [ 393.886320][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.886338][T15314] Call Trace: [ 393.886430][T15314] [ 393.886494][T15314] dump_stack_lvl+0xe8/0x150 [ 393.886660][T15314] sysfs_warn_dup+0x8e/0xa0 [ 393.886724][T15314] sysfs_do_create_link_sd+0xc0/0x110 [ 393.886763][T15314] device_add_class_symlinks+0x1cf/0x240 [ 393.886890][T15314] device_add+0x467/0xb80 [ 393.886918][T15314] wiphy_register+0x1fc8/0x2ff0 [ 393.887075][T15314] ? __pfx_wiphy_register+0x10/0x10 [ 393.887159][T15314] ? __pfx_netdev_run_todo+0x10/0x10 [ 393.887272][T15314] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 393.887364][T15314] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 393.887460][T15314] ieee80211_register_hw+0x3d3d/0x4a50 [ 393.887526][T15314] ? ieee80211_register_hw+0x1a21/0x4a50 [ 393.887599][T15314] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 393.887630][T15314] ? __asan_memset+0x22/0x50 [ 393.887685][T15314] ? __hrtimer_setup+0x1b7/0x260 [ 393.887736][T15314] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 393.887840][T15314] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 393.887902][T15314] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 393.887928][T15314] ? kstrndup+0xbd/0x160 [ 393.887977][T15314] ? kstrndup+0xbd/0x160 [ 393.888003][T15314] hwsim_new_radio_nl+0xd8b/0xf90 [ 393.888046][T15314] genl_family_rcv_msg_doit+0x233/0x340 [ 393.888153][T15314] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.888194][T15314] ? bpf_lsm_capable+0x9/0x20 [ 393.888225][T15314] ? security_capable+0x7e/0x2c0 [ 393.888311][T15314] genl_rcv_msg+0x614/0x7a0 [ 393.888362][T15314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.888402][T15314] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 393.888442][T15314] netlink_rcv_skb+0x226/0x4a0 [ 393.888500][T15314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.888527][T15314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.888576][T15314] ? down_read+0x2be/0x330 [ 393.888654][T15314] genl_rcv+0x28/0x40 [ 393.888677][T15314] netlink_unicast+0x7bd/0x940 [ 393.888718][T15314] netlink_sendmsg+0x813/0xb40 [ 393.888760][T15314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.888801][T15314] ? apparmor_socket_sendmsg+0x98/0x360 [ 393.888881][T15314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.888912][T15314] sock_sendmsg_nosec+0x13a/0x180 [ 393.888997][T15314] ____sys_sendmsg+0x54e/0x850 [ 393.889033][T15314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.889072][T15314] ? import_iovec+0x73/0xa0 [ 393.889165][T15314] ___sys_sendmsg+0x2a5/0x360 [ 393.889193][T15314] ? __lock_acquire+0x747/0x2de0 [ 393.889227][T15314] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.889260][T15314] ? futex_wait+0x2a2/0x390 [ 393.889340][T15314] ? __fget_files+0x2a/0x420 [ 393.889380][T15314] ? __fget_files+0x3a2/0x420 [ 393.889422][T15314] __x64_sys_sendmsg+0x1b1/0x290 [ 393.889455][T15314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.889508][T15314] do_syscall_64+0x166/0x520 [ 393.889554][T15314] ? trace_irq_disable+0x3b/0x140 [ 393.889585][T15314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.889627][T15314] ? clear_bhb_loop+0x70/0xc0 [ 393.889655][T15314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.889677][T15314] RIP: 0033:0x7f11f879e159 [ 393.889722][T15314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.889741][T15314] RSP: 002b:00007f11f69d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.889790][T15314] RAX: ffffffffffffffda RBX: 00007f11f8a26090 RCX: 00007f11f879e159 [ 393.889813][T15314] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 393.889828][T15314] RBP: 00007f11f883506b R08: 0000000000000000 R09: 0000000000000000 [ 393.889842][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.889857][T15314] R13: 00007f11f8a26128 R14: 00007f11f8a26090 R15: 00007ffe2473ce78 [ 393.889894][T15314] [ 394.350285][T15129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.399360][T15129] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.444393][T13779] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.444512][T13779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.465975][T15308] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2571'. [ 394.477681][T13779] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.477845][T13779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.813009][ T4936] Bluetooth: hci7: command tx timeout [ 395.367835][T15358] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2579'. [ 395.464443][T15354] netlink: 'syz.5.2580': attribute type 1 has an invalid length. [ 396.096179][T15381] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 396.129020][T15383] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 396.440121][T15396] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2591'. [ 396.457567][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2591'. [ 396.513087][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2591'. [ 396.722226][T15406] netlink: 'syz.4.2593': attribute type 1 has an invalid length. [ 397.276346][T15426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2596'. [ 397.276382][T15426] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 397.643597][T15436] netlink: 'syz.0.2597': attribute type 1 has an invalid length. [ 399.887201][ T4986] udevd[4986]: worker [10385] /devices/virtual/block/nbd2 is taking a long time [ 400.021799][T15436] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 400.172148][T15129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.172626][T13784] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.190324][T13784] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.211598][T13805] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.211731][T13805] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.327631][T15448] sctp: [Deprecated]: syz.6.2599 (pid 15448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.327631][T15448] Use struct sctp_sack_info instead [ 400.509172][T15452] ipvlan2: entered allmulticast mode [ 400.509207][T15452] virt_wifi0: entered allmulticast mode [ 400.520571][T15452] batman_adv: batadv0: Adding interface: ipvlan2 [ 400.520621][T15452] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.520702][T15452] batman_adv: batadv0: Interface activated: ipvlan2 [ 400.571225][T15460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.635178][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 400.660667][T15448] ipvlan3: entered allmulticast mode [ 400.678188][T15448] batman_adv: batadv0: Adding interface: ipvlan3 [ 400.678204][T15448] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.678234][T15448] batman_adv: The newly added mac address (c2:92:7f:3c:e5:6d) already exists on: ipvlan2 [ 400.678250][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.678264][T15448] batman_adv: batadv0: Interface activated: ipvlan3 [ 401.095561][T15471] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2604'. [ 401.167613][T15468] atomic_op ffff88807ffb01e0 conn xmit_atomic 0000000000000000 [ 401.170148][T15468] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2603'. [ 401.419718][T15129] veth0_vlan: entered promiscuous mode [ 401.490331][T15129] veth1_vlan: entered promiscuous mode [ 401.641351][T15129] veth0_macvtap: entered promiscuous mode [ 401.685799][T15129] veth1_macvtap: entered promiscuous mode [ 401.837611][T15129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.905714][T15129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.012472][ T1265] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.012543][ T1265] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.012576][ T1265] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.012607][ T1265] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.469785][T13822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.469808][T13822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.496786][T15504] openvswitch: netlink: nsh attr 16382 is out of range max 3 [ 402.839855][T13822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.839880][T13822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.114189][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'. [ 403.649466][T15526] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 403.674950][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'. [ 403.742330][T15523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2619'. [ 403.845953][T15524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2620'. [ 404.299476][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2625'. [ 404.544437][T15543] netlink: 'syz.6.2627': attribute type 2 has an invalid length. [ 405.125593][T15557] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2630'. [ 405.689258][T15582] netlink: 'syz.6.2638': attribute type 15 has an invalid length. [ 405.689280][T15582] netlink: 'syz.6.2638': attribute type 7 has an invalid length. [ 405.915384][T15587] bond11: option mode: invalid value (10) [ 405.921228][T15587] bond11 (unregistering): Released all slaves [ 406.586356][T15609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2648'. [ 406.586403][T15609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2648'. [ 406.863897][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 406.904201][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 406.904341][T15619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.129128][T15619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.144366][T15628] openvswitch: netlink: Duplicate or invalid key (type 0). [ 407.419680][T15635] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2655'. [ 407.468123][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 407.528152][T15640] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 407.593276][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 407.631767][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 407.631995][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 407.632195][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 407.717736][T15636] syzkaller0: entered promiscuous mode [ 407.717760][T15636] syzkaller0: entered allmulticast mode [ 407.766497][T15635] openvswitch: netlink: Message has 8 unknown bytes. [ 408.431470][T15667] ip6tnl0: entered allmulticast mode [ 409.179109][T15689] syzkaller0: entered promiscuous mode [ 409.179134][T15689] syzkaller0: entered allmulticast mode [ 409.583743][T15712] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 409.583782][T15712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.756550][T15718] netlink: 'syz.7.2671': attribute type 3 has an invalid length. [ 410.597855][T15746] tipc: Enabled bearer , priority 10 [ 410.712256][T15747] bridge0: port 3(vlan1) entered blocking state [ 410.713096][T15747] bridge0: port 3(vlan1) entered disabled state [ 410.713870][T15747] vlan1: entered allmulticast mode [ 410.713889][T15747] veth0_to_hsr: entered allmulticast mode [ 410.722780][T15747] vlan1: entered promiscuous mode [ 410.722817][T15747] veth0_to_hsr: entered promiscuous mode [ 410.988622][T15759] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 410.988661][T15759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.174238][T15762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.531017][T15779] netlink: 'syz.0.2691': attribute type 1 has an invalid length. [ 411.716893][ T9] tipc: Node number set to 2035774871 [ 413.820434][T15752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.835876][T15753] netlink: 'syz.5.2684': attribute type 2 has an invalid length. [ 414.261292][T15807] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 414.261330][T15807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.409295][T15810] __nla_validate_parse: 26 callbacks suppressed [ 414.409317][T15810] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2701'. [ 414.508706][T15812] netlink: 'syz.5.2703': attribute type 2 has an invalid length. [ 414.773282][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2704'. [ 414.885161][T15824] netlink: 'syz.7.2705': attribute type 1 has an invalid length. [ 414.885189][T15824] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2705'. [ 414.994722][T15827] trusted_key: syz.4.2707 sent an empty control message without MSG_MORE. [ 415.145473][T15837] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 415.145516][T15837] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 415.145538][T15837] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 415.356256][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 415.388723][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 415.445597][T15846] netlink: 'syz.5.2710': attribute type 2 has an invalid length. [ 415.445622][T15846] netlink: 'syz.5.2710': attribute type 2 has an invalid length. [ 415.487568][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 415.488510][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 415.488842][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 415.490521][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 415.552366][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 417.802993][T15873] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 417.804247][T13822] IPVS: starting estimator thread 0... [ 417.845706][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.891603][T15905] IPVS: using max 29 ests per chain, 69600 per kthread [ 417.953361][T15906] netlink: 'syz.7.2724': attribute type 4 has an invalid length. [ 417.956570][T15873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.212501][T15910] pim6reg: entered allmulticast mode [ 418.457697][T15921] netlink: 'syz.7.2727': attribute type 13 has an invalid length. [ 418.518976][T15921] netlink: 'syz.7.2727': attribute type 13 has an invalid length. [ 418.522984][T13773] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.523109][T13773] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.523214][T13773] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.523315][T13773] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.718000][T15957] __nla_validate_parse: 8 callbacks suppressed [ 419.718020][T15957] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2737'. [ 419.719543][T15957] netlink: 'syz.5.2737': attribute type 2 has an invalid length. [ 419.938477][T15963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.063427][T15963] team0: Port device xfrm0 added [ 420.069794][T15963] tipc: Enabled bearer , priority 0 [ 420.156048][T15973] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2744'. [ 420.439999][T15983] IPVS: set_ctl: invalid protocol: 16 172.20.20.187:2047 [ 421.410389][T16000] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2752'. [ 421.423507][T15997] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2751'. [ 421.423568][T15997] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2751'. [ 421.490312][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 421.501115][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 421.509410][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 421.519808][T15997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2751'. [ 421.544906][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 421.545957][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 421.775085][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2754'. [ 421.980395][T16013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2755'. [ 422.012992][ T1706] block nbd2: Possible stuck request ffff88802704e000: control (read@0,1024B). Runtime 180 seconds [ 422.013045][ T1706] block nbd2: Possible stuck request ffff88802704e1c0: control (read@1024,3072B). Runtime 180 seconds [ 422.446091][T13784] IPVS: starting estimator thread 0... [ 422.532591][T16023] IPVS: using max 29 ests per chain, 69600 per kthread [ 422.837727][T16033] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 422.837768][T16033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.007415][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2762'. [ 423.007446][T16036] netlink: 'syz.5.2762': attribute type 3 has an invalid length. [ 423.332551][T16042] netlink: 'syz.7.2763': attribute type 10 has an invalid length. [ 423.332576][T16042] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2763'. [ 423.332662][T16042] dummy0: entered promiscuous mode [ 423.332680][T16042] dummy0: entered allmulticast mode [ 423.333683][T16042] bridge0: port 3(dummy0) entered blocking state [ 423.333819][T16042] bridge0: port 3(dummy0) entered disabled state [ 423.383989][T16046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.384008][T16046] IPv6: NLM_F_CREATE should be set when creating new route [ 423.406845][T16042] bridge0: port 3(dummy0) entered blocking state [ 423.406971][T16042] bridge0: port 3(dummy0) entered forwarding state [ 423.470228][T16047] veth0: mtu less than device minimum [ 423.614020][ T4936] Bluetooth: hci8: command tx timeout [ 424.129766][T16066] openvswitch: netlink: Missing valid actions attribute. [ 424.801781][T16076] __nla_validate_parse: 4 callbacks suppressed [ 424.801801][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 425.358997][T16089] wireguard0: entered promiscuous mode [ 425.556950][T16093] wireguard0: entered promiscuous mode [ 425.691769][ T4936] Bluetooth: hci8: command tx timeout [ 426.228476][T16123] xt_time: unknown flags 0x68 [ 426.249649][T16122] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2781'. [ 426.308153][T16130] ip_tables: iptables: counters copy to user failed while replacing table [ 426.880760][T16138] netlink: 'syz.6.2785': attribute type 1 has an invalid length. [ 426.880782][T16138] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2785'. [ 427.075455][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2788'. [ 427.221361][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2790'. [ 427.606252][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2791'. [ 427.782412][ T4936] Bluetooth: hci8: command tx timeout [ 427.807235][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 427.970783][T16166] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 427.985628][T16166] bond8 (unregistering): Released all slaves [ 428.062227][T16003] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.062354][T16003] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.062530][T16003] bridge_slave_0: entered allmulticast mode [ 428.066922][T16003] bridge_slave_0: entered promiscuous mode [ 428.146136][T16003] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.146250][T16003] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.146416][T16003] bridge_slave_1: entered allmulticast mode [ 428.181157][T16003] bridge_slave_1: entered promiscuous mode [ 428.437823][T16003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.471244][T16003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.627004][T16003] team0: Port device team_slave_0 added [ 428.658665][T16003] team0: Port device team_slave_1 added [ 428.864345][T16003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.864365][T16003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.864394][T16003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.900648][T16003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.900706][T16003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.900798][T16003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.086336][T16191] bridge1: entered promiscuous mode [ 429.086361][T16191] bridge1: entered allmulticast mode [ 429.130380][T16191] team0: Port device bridge1 added [ 429.621674][T16003] hsr_slave_0: entered promiscuous mode [ 429.629555][T16003] hsr_slave_1: entered promiscuous mode [ 429.630316][T16003] debugfs: 'hsr0' already exists in 'hsr' [ 429.630338][T16003] Cannot create hsr debugfs directory [ 429.862248][ T4936] Bluetooth: hci8: command tx timeout [ 430.276520][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2807'. [ 430.278016][T16217] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 430.280169][T16213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.359269][T16214] Cannot find add_set index 65532 as target [ 430.603465][T16003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.603537][T16003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.944505][T16003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.944548][T16003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.024906][T16234] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2813'. [ 431.219828][T16003] bond0: (slave netdevsim1): Releasing backup interface [ 431.235691][T16003] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 431.270437][T16003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.270476][T16003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.620475][T16003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.620514][T16003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.650893][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'. [ 432.229974][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2823'. [ 432.269715][T16003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.296501][T16266] x_tables: duplicate underflow at hook 2 [ 432.310923][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.324243][T16003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.375632][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.392896][T16003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.445672][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.568765][T16003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.606060][T16280] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2825'. [ 432.607464][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.045511][T16293] netlink: 'syz.7.2827': attribute type 4 has an invalid length. [ 433.309877][T16003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.447190][T16003] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.488770][T13779] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.488894][T13779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.588250][T13779] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.588398][T13779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.654662][T16303] netlink: 'syz.6.2831': attribute type 2 has an invalid length. [ 433.685059][T16304] veth1: entered allmulticast mode [ 433.691554][T16307] netlink: 'syz.7.2830': attribute type 2 has an invalid length. [ 433.746418][T16305] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2832'. [ 433.767859][T16303] : entered promiscuous mode [ 433.858409][T16307] : entered promiscuous mode [ 434.244374][T16310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.299802][T16322] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2836'. [ 434.315238][T16310] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 434.369934][T16317] vlan2: entered allmulticast mode [ 434.369962][T16317] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 434.574732][T16003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.869748][T16331] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 435.838724][T16361] netlink: 400 bytes leftover after parsing attributes in process `syz.6.2846'. [ 435.945138][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2846'. [ 436.229532][T16003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.258552][T16373] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 436.425822][T16376] netlink: 'syz.7.2850': attribute type 1 has an invalid length. [ 436.425846][T16376] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2850'. [ 436.425863][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2850'. [ 436.931278][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 437.620927][T16403] x_tables: duplicate underflow at hook 3 [ 438.055811][T16003] veth0_vlan: entered promiscuous mode [ 438.087732][T16003] veth1_vlan: entered promiscuous mode [ 438.330163][T16003] veth0_macvtap: entered promiscuous mode [ 438.381228][T16003] veth1_macvtap: entered promiscuous mode [ 438.543411][T16003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.581098][T16003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.709579][T16432] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2865'. [ 438.718331][T13805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.719578][T13805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.719701][T13805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.719805][T13805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.957050][T16432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.649338][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.649362][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.916805][T13779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.916829][T13779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.946448][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.368876][T16477] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2750'. [ 440.368995][T16477] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 440.407258][T16477] 0ªX¹¦Dö»: entered allmulticast mode [ 440.433371][T16470] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2872'. [ 440.743826][T16492] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2876'. [ 440.743862][T16492] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 441.267866][T16502] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 441.419370][T16502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 441.937958][T16520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.012671][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 442.618931][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 442.637296][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 442.641421][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 442.659826][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 442.672908][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.571366][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2892'. [ 443.903202][T16629] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2895'. [ 444.024073][T16642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.399751][T16651] netlink: 'syz.6.2899': attribute type 10 has an invalid length. [ 444.399994][T16651] veth0_vlan: entered allmulticast mode [ 444.488625][T16651] team0: Device veth0_vlan failed to register rx_handler [ 444.693944][T16655] syzkaller0: entered promiscuous mode [ 444.694146][T16655] syzkaller0: entered allmulticast mode [ 444.742604][ T4936] Bluetooth: hci4: command tx timeout [ 444.853068][T16650] netlink: 'syz.7.2898': attribute type 1 has an invalid length. [ 444.939074][T16664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.069258][T16667] netlink: 'syz.6.2904': attribute type 4 has an invalid length. [ 445.117784][T16669] netlink: 'syz.6.2904': attribute type 4 has an invalid length. [ 445.343796][T16673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.360046][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2905'. [ 445.800872][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 445.800965][T16683] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 445.838622][T16683] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2907'. [ 445.838912][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 445.840622][T16683] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2907'. [ 445.840877][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 445.841041][T16683] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2907'. [ 445.954283][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 446.738669][T16705] netlink: 'syz.4.2912': attribute type 2 has an invalid length. [ 446.817707][ T4936] Bluetooth: hci4: command tx timeout [ 447.409912][T16720] nbd: must specify a device to reconfigure [ 448.480777][T16536] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.483809][T16536] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.483956][T16536] bridge_slave_0: entered allmulticast mode [ 448.517759][T16536] bridge_slave_0: entered promiscuous mode [ 448.537535][T16536] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.537637][T16536] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.537767][T16536] bridge_slave_1: entered allmulticast mode [ 448.571312][T16536] bridge_slave_1: entered promiscuous mode [ 448.750770][T16536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.807121][T16536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.898947][ T4936] Bluetooth: hci4: command tx timeout [ 449.098816][T16536] team0: Port device team_slave_0 added [ 449.146946][T16775] netlink: 'syz.5.2928': attribute type 33 has an invalid length. [ 449.176587][T16536] team0: Port device team_slave_1 added [ 449.425335][T16775] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 449.466364][T16775] bond8 (unregistering): Released all slaves [ 449.629021][T16777] syzkaller1: entered promiscuous mode [ 449.629047][T16777] syzkaller1: entered allmulticast mode [ 449.866286][T16536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.866307][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.866337][T16536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.963294][T16536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.963313][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.963341][T16536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.215680][T16536] hsr_slave_0: entered promiscuous mode [ 450.216703][T16536] hsr_slave_1: entered promiscuous mode [ 450.218307][T16536] debugfs: 'hsr0' already exists in 'hsr' [ 450.218328][T16536] Cannot create hsr debugfs directory [ 450.324854][T16807] __nla_validate_parse: 66 callbacks suppressed [ 450.324875][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 450.504672][T16811] netlink: 'syz.4.2939': attribute type 75 has an invalid length. [ 450.545725][T16814] netlink: 'syz.4.2939': attribute type 75 has an invalid length. [ 450.972109][ T4936] Bluetooth: hci4: command tx timeout [ 451.107143][T16833] netlink: 'syz.5.2945': attribute type 10 has an invalid length. [ 451.264358][T16833] team0: Port device vlan0 added [ 451.269370][T16837] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2947'. [ 451.303058][T16835] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2946'. [ 451.680147][T16536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.680188][T16536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.945519][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2950'. [ 452.096709][ T1706] block nbd2: Possible stuck request ffff88802704e000: control (read@0,1024B). Runtime 210 seconds [ 452.096764][ T1706] block nbd2: Possible stuck request ffff88802704e1c0: control (read@1024,3072B). Runtime 210 seconds [ 452.210653][T16536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.210694][T16536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.640555][T16536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.640596][T16536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.913430][T16864] ip_tables: iptables: counters copy to user failed while replacing table [ 452.942013][T16536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.942048][T16536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.048475][T16871] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2960'. [ 453.223753][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2959'. [ 453.518848][T16877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2961'. [ 453.784424][T16879] bridge_slave_0: left allmulticast mode [ 453.784454][T16879] bridge_slave_0: left promiscuous mode [ 453.784756][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.814517][T16879] bridge_slave_1: left allmulticast mode [ 453.814551][T16879] bridge_slave_1: left promiscuous mode [ 453.814835][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.816015][T16879] vlan1: left promiscuous mode [ 453.816031][T16879] veth0_to_hsr: left promiscuous mode [ 453.865253][T16879] bond0: (slave bond_slave_0): Releasing backup interface [ 453.885685][T16879] bond0: (slave bond_slave_1): Releasing backup interface [ 453.917244][T16879] team0: Port device team_slave_0 removed [ 453.953074][T16879] team0: Port device team_slave_1 removed [ 453.954030][T16879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.954054][T16879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.027184][T16879] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 454.027211][T16879] batman_adv: batadv0: Removing interface: ipvlan2 [ 454.054628][T16879] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 454.054652][T16879] batman_adv: batadv0: Removing interface: ipvlan3 [ 454.060265][T16879] vlan1: left allmulticast mode [ 454.060303][T16879] veth0_to_hsr: left allmulticast mode [ 454.060388][T16879] bridge0: port 3(vlan1) entered disabled state [ 454.276463][T16882] team0: Port device xfrm0 added [ 454.306572][T16884] tipc: Started in network mode [ 454.306604][T16884] tipc: Node identity e217ec78934c, cluster identity 4711 [ 454.306812][T16884] tipc: Enabled bearer , priority 0 [ 454.377740][T16536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.433295][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.435965][T16536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.465390][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.469803][T16536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.517149][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.518023][T16536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.547042][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.643064][T16892] netlink: 'syz.5.2965': attribute type 1 has an invalid length. [ 454.856508][T16899] FAULT_INJECTION: forcing a failure. [ 454.856508][T16899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.856545][T16899] CPU: 1 UID: 0 PID: 16899 Comm: syz.4.2966 Not tainted syzkaller #0 PREEMPT(full) [ 454.856570][T16899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.856591][T16899] Call Trace: [ 454.856601][T16899] [ 454.856610][T16899] dump_stack_lvl+0xe8/0x150 [ 454.856649][T16899] should_fail_ex+0x410/0x560 [ 454.856772][T16899] _copy_from_user+0x2d/0xb0 [ 454.856860][T16899] core_sys_select+0x671/0xb40 [ 454.856896][T16899] ? get_pid_task+0x20/0x1f0 [ 454.856949][T16899] ? __pfx_core_sys_select+0x10/0x10 [ 454.857003][T16899] ? __pfx_set_user_sigmask+0x10/0x10 [ 454.857036][T16899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 454.857075][T16899] __se_sys_pselect6+0x267/0x320 [ 454.857110][T16899] ? __pfx___se_sys_pselect6+0x10/0x10 [ 454.857139][T16899] ? __pfx_ksys_write+0x10/0x10 [ 454.857178][T16899] ? __x64_sys_pselect6+0x21/0xf0 [ 454.857210][T16899] do_syscall_64+0x166/0x520 [ 454.857235][T16899] ? trace_irq_disable+0x3b/0x140 [ 454.857258][T16899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.857283][T16899] ? clear_bhb_loop+0x70/0xc0 [ 454.857311][T16899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.857334][T16899] RIP: 0033:0x7fe38899e159 [ 454.857355][T16899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.857375][T16899] RSP: 002b:00007fe389954028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 454.857400][T16899] RAX: ffffffffffffffda RBX: 00007fe388c25fa0 RCX: 00007fe38899e159 [ 454.857417][T16899] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 454.857432][T16899] RBP: 00007fe389954090 R08: 0000000000000000 R09: 0000000000000000 [ 454.857446][T16899] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 454.857461][T16899] R13: 00007fe388c26038 R14: 00007fe388c25fa0 R15: 00007ffde8674aa8 [ 454.857497][T16899] [ 455.119576][T16536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.140943][T16536] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.183549][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.183684][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.370507][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.370646][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.437213][T16455] tipc: Node number set to 1901849720 [ 456.110370][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080321800: rx timeout, send abort [ 456.610532][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080321800: abort rx timeout. Force session deactivation [ 456.612511][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080321400: rx timeout, send abort [ 457.112557][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080321400: abort rx timeout. Force session deactivation [ 457.694799][T16972] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2981'. [ 457.694827][T16972] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2981'. [ 457.743663][T16975] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2981'. [ 457.743689][T16975] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2981'. [ 457.959188][T16536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.158228][T16985] ip6t_hbh: Not strict - not implemented [ 458.271114][T16536] veth0_vlan: entered promiscuous mode [ 458.337167][T16536] veth1_vlan: entered promiscuous mode [ 458.620231][T16536] veth0_macvtap: entered promiscuous mode [ 458.653350][T16536] veth1_macvtap: entered promiscuous mode [ 458.744128][T16536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.793066][T16536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.904405][T13810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.904497][T13810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.904537][T13810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.904575][T13810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.553258][T13826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.553284][T13826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.671748][T17013] xt_ecn: cannot match TCP bits for non-tcp packets [ 459.675816][T17013] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2995'. [ 459.703056][T16610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.703077][T16610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.826722][T17018] netlink: 'syz.5.2996': attribute type 32 has an invalid length. [ 459.845007][T17017] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2996'. [ 459.886460][T17021] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2995'. [ 459.938031][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2995'. [ 460.292119][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 460.412462][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 460.814416][T17043] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3003'. [ 460.840543][T17045] block nbd0: NBD_DISCONNECT [ 460.840577][T17045] block nbd0: Send disconnect failed -32 [ 460.840603][T17045] block nbd0: shutting down sockets [ 461.689712][T17078] netlink: 'syz.5.3009': attribute type 2 has an invalid length. [ 461.862969][T17078] : entered promiscuous mode [ 461.871054][T17082] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 463.064251][T17115] netlink: 'syz.7.3019': attribute type 1 has an invalid length. [ 463.209643][T17122] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 463.275722][T17115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.493523][T17129] __nla_validate_parse: 4 callbacks suppressed [ 463.493546][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3023'. [ 463.493587][T17129] nbd: socks must be embedded in a SOCK_ITEM attr [ 463.496626][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'. [ 464.215774][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3028'. [ 464.646625][T17161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3032'. [ 464.898304][ T32] INFO: task syz.3.2083:13397 blocked for more than 143 seconds. [ 464.898335][ T32] Not tainted syzkaller #0 [ 464.898347][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.898359][ T32] task:syz.3.2083 state:D stack:26304 pid:13397 tgid:13390 ppid:5617 task_flags:0x400040 flags:0x00080002 [ 464.898428][ T32] Call Trace: [ 464.898437][ T32] [ 464.898463][ T32] __schedule+0x17db/0x58f0 [ 464.898523][ T32] ? __pfx___schedule+0x10/0x10 [ 464.898558][ T32] ? schedule+0x90/0x2b0 [ 464.898584][ T32] schedule+0x164/0x2b0 [ 464.898610][ T32] schedule_preempt_disabled+0x13/0x30 [ 464.899085][ T32] __mutex_lock+0x7c1/0x1550 [ 464.899121][ T32] ? __mutex_lock+0x5d4/0x1550 [ 464.899151][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 464.899293][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 464.899331][ T32] ? kernel_text_address+0xa5/0xe0 [ 464.899360][ T32] ? __kernel_text_address+0xd/0x30 [ 464.899385][ T32] ? unwind_get_return_address+0x4d/0x90 [ 464.899430][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 464.899474][ T32] ? stack_trace_save+0xa9/0x100 [ 464.899511][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 464.899550][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 464.899632][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 464.899664][ T32] ? kasan_save_track+0x4f/0x80 [ 464.899689][ T32] ? kasan_save_track+0x3e/0x80 [ 464.899713][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 464.899737][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 464.899774][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 464.899829][ T32] ? netlink_dump+0x1e7/0xee0 [ 464.899862][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 464.899894][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 464.899921][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 464.899945][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 464.900011][ T32] ? genl_rcv+0x28/0x40 [ 464.900035][ T32] ? netlink_unicast+0x7bd/0x940 [ 464.900091][ T32] ? netlink_sendmsg+0x813/0xb40 [ 464.900125][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 464.900162][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 464.900191][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 464.900219][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 464.900248][ T32] ? do_syscall_64+0x166/0x520 [ 464.900274][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.900350][ T32] ? rcu_is_watching+0x16/0xb0 [ 464.900386][ T32] ? trace_kmalloc+0x2a/0xf0 [ 464.900425][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 464.900451][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 464.900474][ T32] ? netlink_dump+0x1e7/0xee0 [ 464.900538][ T32] ? netlink_dump+0x1e7/0xee0 [ 464.900579][ T32] genl_dumpit+0x10b/0x1b0 [ 464.900610][ T32] netlink_dump+0x711/0xee0 [ 464.900656][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 464.900714][ T32] ? genl_start+0x497/0x6d0 [ 464.900766][ T32] __netlink_dump_start+0x589/0x7b0 [ 464.900805][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 464.900835][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 464.900860][ T32] ? genl_get_cmd+0x523/0x960 [ 464.900889][ T32] ? __pfx_genl_start+0x10/0x10 [ 464.900912][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 464.900934][ T32] ? __pfx_genl_done+0x10/0x10 [ 464.901004][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 464.901036][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.901085][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 464.901116][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 464.901157][ T32] netlink_rcv_skb+0x226/0x4a0 [ 464.901190][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.901216][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.901263][ T32] ? down_read+0x2be/0x330 [ 464.901294][ T32] genl_rcv+0x28/0x40 [ 464.901316][ T32] netlink_unicast+0x7bd/0x940 [ 464.901357][ T32] netlink_sendmsg+0x813/0xb40 [ 464.901398][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.901439][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 464.902606][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.902643][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 464.902681][ T32] ____sys_sendmsg+0x54e/0x850 [ 464.902715][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.902753][ T32] ? import_iovec+0x73/0xa0 [ 464.902783][ T32] ___sys_sendmsg+0x2a5/0x360 [ 464.902811][ T32] ? __lock_acquire+0x747/0x2de0 [ 464.902837][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.902870][ T32] ? futex_wait+0x2a2/0x390 [ 464.902933][ T32] ? __fget_files+0x2a/0x420 [ 464.902962][ T32] ? __fget_files+0x3a2/0x420 [ 464.903010][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 464.903042][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.903117][ T32] do_syscall_64+0x166/0x520 [ 464.903142][ T32] ? trace_irq_disable+0x3b/0x140 [ 464.903163][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.903186][ T32] ? clear_bhb_loop+0x70/0xc0 [ 464.903213][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.903236][ T32] RIP: 0033:0x7fd8d279e159 [ 464.903255][ T32] RSP: 002b:00007fd8d36a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.903279][ T32] RAX: ffffffffffffffda RBX: 00007fd8d2a26180 RCX: 00007fd8d279e159 [ 464.903296][ T32] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005 [ 464.903310][ T32] RBP: 00007fd8d283506b R08: 0000000000000000 R09: 0000000000000000 [ 464.903324][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.903337][ T32] R13: 00007fd8d2a26218 R14: 00007fd8d2a26180 R15: 00007ffc654fda68 [ 464.903371][ T32] [ 464.903462][ T32] [ 464.903462][ T32] Showing all locks held in the system: [ 464.903514][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 464.903609][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 464.903696][ T32] locks held by kworker/u8:2/41: 3, last CPU#1: [ 464.903711][ T32] #0: ffff88803290c140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 464.903771][ T32] #1: ffffc90000b17c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 464.903831][ T32] #2: ffff88807e23f098 (&p->tcfa_lock){+.-.}-{3:3}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 464.903916][ T32] locks held by getty/5374: 2, on CPU#0: [ 464.903948][ T32] #0: ffff888035c430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.904157][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 464.904231][ T32] locks held by udevd/10385: 1, on CPU#0: [ 464.904248][ T32] #0: ffff888026f3e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 464.904352][ T32] locks held by syz.1.1784/12230: 2, on CPU#0: [ 464.904370][ T32] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.904428][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 464.904495][ T32] locks held by syz.3.2083/13397: 3, on CPU#1: [ 464.904511][ T32] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.904568][ T32] #1: ffff888023ddd6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 464.904634][ T32] #2: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 464.904704][ T32] locks held by syz.2.2438/14744: 2, on CPU#0: [ 464.904721][ T32] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.904778][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 464.904844][ T32] locks held by syz-executor/16536: 4, last CPU#0: [ 464.904861][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 464.904924][ T32] #1: ffff888029807678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 464.905000][ T32] #2: ffff8880298069b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 464.905100][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 464.905182][ T32] locks held by syz.4.3030/17155: 2, last CPU#0: [ 464.905198][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 464.905333][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 464.905388][ T32] locks held by syz.7.3033/17162: 1, last CPU#0: [ 464.905405][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __split_page_owner+0x2c/0x330 [ 464.905465][ T32] locks held by syz.6.3034/17165: 2, last CPU#0: [ 464.905481][ T32] #0: ffff888029804378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 464.905544][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 464.905606][ T32] [ 464.905613][ T32] ============================================= [ 464.905613][ T32] [ 464.905628][ T32] NMI backtrace for cpu 0 [ 464.905642][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 464.905667][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.905680][ T32] Call Trace: [ 464.905689][ T32] [ 464.905699][ T32] dump_stack_lvl+0xe8/0x150 [ 464.905733][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 464.905797][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.905835][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 464.905873][ T32] sys_info+0x135/0x170 [ 464.905924][ T32] watchdog+0xfd7/0x1030 [ 464.905955][ T32] ? watchdog+0x1c7/0x1030 [ 464.905991][ T32] kthread+0x38b/0x480 [ 464.906014][ T32] ? __pfx_watchdog+0x10/0x10 [ 464.906034][ T32] ? __pfx_kthread+0x10/0x10 [ 464.906058][ T32] ret_from_fork+0x514/0xb70 [ 464.906101][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 464.906137][ T32] ? __switch_to+0xc89/0x1420 [ 464.906171][ T32] ? __pfx_kthread+0x10/0x10 [ 464.906194][ T32] ret_from_fork_asm+0x1a/0x30 [ 464.906255][ T32] [ 464.906286][ T32] Sending NMI from CPU 0 to CPUs 1: [ 464.906343][ C1] NMI backtrace for cpu 1 [ 464.906356][ C1] CPU: 1 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 464.906376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.906387][ C1] Workqueue: bat_events batadv_tt_purge [ 464.906471][ C1] RIP: 0010:enqueue_hrtimer+0x85/0x2c0 [ 464.906503][ C1] Code: 3c 28 00 74 08 48 89 df e8 48 62 83 00 48 8b 3b 48 83 c7 18 be ff ff ff ff e8 67 8e 30 0a 41 89 c4 31 ff 89 c6 e8 1b 67 13 00 <45> 85 e4 0f 84 6c 01 00 00 e8 0d 62 13 00 eb 05 e8 06 62 13 00 4c [ 464.906518][ C1] RSP: 0018:ffffc90000a18e18 EFLAGS: 00000046 [ 464.906533][ C1] RAX: ffffffff81b46895 RBX: ffff8880b8728540 RCX: ffff888020ea0000 [ 464.906546][ C1] RDX: 8000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 464.906558][ C1] RBP: 0000000000000000 R08: 0000000000000100 R09: 0000000000000004 [ 464.906568][ C1] R10: dffffc0000000000 R11: fffff520001431b8 R12: 0000000000000001 [ 464.906580][ C1] R13: dffffc0000000000 R14: ffff88807e23f138 R15: 0000000000000000 [ 464.906611][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 464.906626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.906639][ C1] CR2: 00007fe3889aedc0 CR3: 0000000077be0000 CR4: 00000000003526f0 [ 464.906656][ C1] Call Trace: [ 464.906662][ C1] [ 464.906671][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 464.906707][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 464.906736][ C1] handle_softirqs+0x226/0x860 [ 464.906762][ C1] ? do_softirq+0x77/0xd0 [ 464.906788][ C1] ? batadv_tt_purge+0x4ae/0xa10 [ 464.906814][ C1] do_softirq+0x77/0xd0 [ 464.906836][ C1] [ 464.906842][ C1] [ 464.906848][ C1] __local_bh_enable_ip+0x100/0x140 [ 464.906872][ C1] batadv_tt_purge+0x4ae/0xa10 [ 464.906903][ C1] ? process_scheduled_works+0x97a/0x1630 [ 464.906928][ C1] process_scheduled_works+0xc3d/0x1630 [ 464.906968][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.906997][ C1] ? assign_work+0x3cf/0x5d0 [ 464.907023][ C1] worker_thread+0xa47/0xfb0 [ 464.907055][ C1] ? __kthread_parkme+0x71/0x1f0 [ 464.907091][ C1] kthread+0x38b/0x480 [ 464.907108][ C1] ? __pfx_worker_thread+0x10/0x10 [ 464.907132][ C1] ? __pfx_kthread+0x10/0x10 [ 464.907150][ C1] ret_from_fork+0x514/0xb70 [ 464.907168][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 464.907196][ C1] ? __switch_to+0xc89/0x1420 [ 464.907222][ C1] ? __pfx_kthread+0x10/0x10 [ 464.907240][ C1] ret_from_fork_asm+0x1a/0x30 [ 464.907277][ C1] [ 464.907318][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 466.098949][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 466.108097][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.118172][ T32] Call Trace: [ 466.121475][ T32] [ 466.124428][ T32] vpanic+0x56d/0xa60 [ 466.128456][ T32] ? __pfx_vpanic+0x10/0x10 [ 466.132997][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 466.138578][ T32] panic+0xc5/0xd0 [ 466.142335][ T32] ? __pfx_panic+0x10/0x10 [ 466.146789][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 466.151845][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 466.158042][ T32] watchdog+0x1030/0x1030 [ 466.162403][ T32] ? watchdog+0x1c7/0x1030 [ 466.166845][ T32] kthread+0x38b/0x480 [ 466.170950][ T32] ? __pfx_watchdog+0x10/0x10 [ 466.175669][ T32] ? __pfx_kthread+0x10/0x10 [ 466.180288][ T32] ret_from_fork+0x514/0xb70 [ 466.184904][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 466.190056][ T32] ? __switch_to+0xc89/0x1420 [ 466.194786][ T32] ? __pfx_kthread+0x10/0x10 [ 466.199412][ T32] ret_from_fork_asm+0x1a/0x30 [ 466.204234][ T32] [ 466.207881][ T32] Kernel Offset: disabled [ 466.212213][ T32] Rebooting in 86400 seconds..