last executing test programs: 4m14.37693756s ago: executing program 3 (id=195): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, r0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x93, 0x4, [@volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @restrict={0xd}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @datasec={0x9, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x81d, 0xa}, {0x4, 0xa92, 0x3}, {0x5, 0x3, 0x5660}, {0x4, 0x10, 0x1}, {0x3, 0x2, 0x9761}, {0x1, 0x10, 0x3}, {0x1, 0x6, 0xff}], "d36808"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000740)=""/75, 0xb0, 0x4b, 0x0, 0x7}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x6}]}, &(0x7f0000000280)='GPL\x00', 0x5f, 0x88, &(0x7f00000002c0)=""/136, 0x1f00, 0x0, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0x81, 0xead7}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r6, 0x1], &(0x7f0000000900)=[{0x4, 0x1, 0x2, 0x4}, {0x4, 0x3, 0xe, 0xa840aae54a60ed8c}, {0x2, 0x2, 0x7, 0x1}, {0x0, 0x4, 0x5}, {0x5, 0x3, 0x6, 0x7}, {0x5, 0x2, 0x5, 0xe182db6da53df93c}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback=r7, 0x3, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)={@map=r1, r7, 0x17, 0x20, r7, @void, @void, @void, @value=r2, r9}, 0x20) bind$802154_raw(r8, &(0x7f0000000bc0)={0x24, @short={0x2, 0x2, 0x7c821d6521cf358f}}, 0x14) r10 = socket$xdp(0x2c, 0x3, 0x0) r11 = openat$cgroup_ro(r8, &(0x7f0000000c00)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r11, 0x84, 0x12, &(0x7f0000000c40)=0x274, 0x4) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f0000000c80)=[{0x2, 0x3, {}, {0x1, 0x0, 0x1}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xff}, {0x1, 0x1, 0x7}, 0x1, 0xfd}, {0x1, 0x1, {0x2, 0x0, 0x4}, {}, 0x0, 0xfd}, {0x2, 0x1, {0x0, 0xff, 0x1}, {0x6ea46857d94c1812, 0xff}, 0x2, 0xff}], 0x80) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x10000, 0x0) pwritev(r12, &(0x7f0000002040)=[{&(0x7f0000000d40)="4434b1b1c623eeb97256cfbba20c94ff623bf055278ce7c0a53fe27ce781e69558c9ce3b3e594e66c3cb794ceee07043cf5513b7f9fd18716ddd43cc8ac97f57b6719521d97fe01ddd24ecd221f529889ec0b652499c4b64f99a92eb7993a025b4ff78b9", 0x64}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="ffbc9ff4a2afe7b0f2", 0x9}, {&(0x7f0000000e40)="efb86fb5b37e781f99d34ca2db21452c907ffa236303c83c39aff1db9ac5708576956191c2c21fcd0801a68d879d8fd939d8d3980f0ad7e34530bb079221e035f075253f944c670d9291fc48458b0df32476b3bc79ffd08fec0bcc797983b807c17f9e7623b9c07b9948353476e4ee76dc0e62cbcd99112edc7d9297a98e9202b8aa5351e6b5fe2de547002c5ac8d9c10f24add6a3777fd0df1bcf4f9bd77fc027873e3a7d06ae3ff4153daf47b67053fc93921fa6ae16c5bc985c042b4a62b9cb34d5a6f7ee9d75283641e94c8631ab4388bee3888517266c066ce344602565e499fda6d5f5ec286357086a7589cb8a2740e04b5f19326138b8df10aa323bed8d8112f1a1e563f7d59f4538e1941c5640a6019073c9541a18f15e69731065000408d199d323dbdfa37502255fd24ce3fd3d65418eab29791dfce00f201eed560f64140a7586efaee53d3b62dc9a1077fb93463277ffbaf437dcd6e395b7bcdc139a8ab81d99bf86c8a64e635b8ea6d52e0a008c3fd42752d64bc9e340041ea06ed13e0ce30cf2ba65759246184b44cf1929e6b482719fe4cf62eaa45af4451836275188f35092a300ebaad841661f48af63a017c1cb31a1af439e6dec97bc716054fc5a1459d1804a0551bc6aeee28fe5a12729a869fa5d4f87441f6306b89d846e51a802dd20c98ab13a1d950a83131e57efcc6177028027c592f8c09d16b24acc80c2c7479b18f79081ad4be98c8a53504c8b3e8fc6d33aa5f459f0db9134c8ae84455dfd92d472cf63f38b4d90451ee22dbd6bf41804684235b877a86e9747f6d8f72c083eca9fd1fb59c95e9483b52a6d14c6147a925dcdee2db27e48002f6b49f9b1f01e54c8837eb105dbe34d5c0dbdedbbe5d6f836ba82e928cb141d6b8f9cc34f5fa12f537dd95081cfdd587841694e16baef38eb217d2467f98034443f697a01ea7f3275cbab303068e7698eeae4ca88c4df7faecc65235bfa6de0c74edac4d08246cbe9e4771551da0d9880c31fcaf32687adfddd9dfa4afdf09a3938f30edfa696e0a54fb49ee83dc7c7c23244f51f82ad00e55901d6f415cbab9a5d916cd210b7f6956575daaf30f11246ddeb2770de0d57b15494adf8aea258be28f6447adc04ef0a7c8e40df2286d4bd87910dca7424fedadfb2a854b0b274de1b8802b3571c7c5c71adab42433296d8284238105f6a77827ee1a68b044b2104c81c0ff9290c5031a206cfc1ced589a731fbbcc2050b374526edf2c26adbe8552da7901197c5796e38e0e1bb75ae115bd0d12b6e79d8be2c338dfa6f6f26edbd8d4bded40669d575268359bf78707cc88a72e179bcdeb60e4baf41e8ec44fb0318a20163474aa825fd30c0b202d09beac7db1998f7d41c16b2c7b819707b7b6abed003d6e6e0ed239024b6468fcc0ac41fed757f7e8a66438ff40e922d55feef13ba3845b225adeb8f32423c145d7a0e3b74523703b1663934d262716ba2516742370080425f575d0210fe9bdb3d87f9e6529fad743954764e9bf24697bf0a430e2f93eaea3eaeaf15fd48b3d7c3d1cbcee7ea7ab5d74442ef6a6d4859f67d6358ea097fab786207032c2d8f178e9f7151535b9ec0fd47f526fbf6aa53039e372b7659ba54d97d06a91a793f52b0f9ca83eb12842a9b2dbca4f1588a2a0df60833c7fe33ad437890288c565903f2db182ba112f34f98c6a3635435d80879a0e7118423d19810a73a8dfdb41ccb3aa109c1065ee639408063a7e7588bc71f3b2b868a2b7839272799f0034988f7c8f3bdd30de6bec61ecb0ea0b58cafc6c3114a2d9aef60ffb10031eec024767a97e4e8d3dd43fc2531d47a51b38e3ca9f425c9e9ff45d47ecf9b4ab149233d7f042214860d2b2607f05d35fbfd5bfc8c7577c0edf531454454dea42aed832f0e5f823d88044f1698eb2308b0ebf25d7e835e2e5d3bb9fb31ac6da9b7c9199e396c3c5a4f7f5be88c032ab69cb024db31704dc76896ce37a3af08c38366db183128c025c83841cede53b45db8516e29f2c78f1552859e6aa1a6f89e694f349bbdc0e51e4a6bd85d9e24c6f772ce185aa524f7a3353a9b3c009fca69a9331603ae9120d2e3ce4629dccf56cd2880c01ff8b490cfb05117f5acb3aeb94389a2ce3ad87b0bfcb1f9a551f8535a26eb72b8aee4868109b2e2ed279c94f291fa750420428c9cbc0e14ab3fb5c04ce02fa811bb769bfd8bd5418a47ce57d2aa1266900d45dfeda502973da99ae54d12696294b8fb6ee1e48ae41207f414ed5ab143eac8963a96ad6375b0d0aa986e983980b1850d4f96f8c04a013b45d6b33af32706bbf9919aa3af73bdac98e5a17c193b84408bd37e924f009d47e4602dc69b4c0018b969341a07444270f825575f75ad73d83b6bcf555c222c0c8c02c95a010446edc3935dfc3d005442e6e9e709d7988d913a243e0854eb84d6002cc9239f5d30e9449648f790d95c394795f065a0de6a074cc94b493c889b025ad5ffe7a1c012d0f27e13bac3d64291d96f52ab9c14cddb30e1aed3fbe5a6e8c9887be77c4475aa8afdb1231ba63186ed3ff847c7d37d7ec12a9d20e0dfacbce6ef4d4a954c744b5c7f5c04e9bb7bcac831ffb9039e2db048706677d07bd164d034d6505cf2595cacb942eecb48aa31d203b5a3e6610aaed9e167319dc37461d1dc862ebdaffa486af622743bbd703210c02867c830d0fbe1c27a99e984f18c48e397eaa057bb89629f5a8cbe76078ea41a5c2a2197d8758f7957294b4d88974f9c5044e2a5bcd25b79f3d3a472ba173094b3b44c5f82c94cf2f099b6383100af8fa0b12275d2f9cd9573be643c778800b6c97a487a8fa0370cfedfc5c77d0b420a195740b80f92c77292838a0a66efb7b78e5055cbb2d95f07d199592d78e88978d9a2df37d18dc14f2b1aac5883caaec0fb4a00d7e99aa12d32ecbf57a6d15156e82b5dcb810f9e930d6b6709bc7b12b317ce0ab44428db2b30ad1cdf672e798275885cd1d8062b546d177075cdcab82b5bc2c314a03ee22dc2f4d0b97046c5c594af18eb824c3a759e7645480229211ebcb6d7ce6b71e36781f8b5c6053e89e36a3acd583d16dace677d31262d8c7295f5014c340fb6f74384e470d07dfca292740d6e0c606faf2627ba9efb1d332fbd3489c4932ac922f171b41da5ae00eee3cfa6db521b7b5be6959f0c74e5c9e6500bbaeca7b55dcd4c28c3be01845ce92e7d64c74892480a6b2606230838753199698e04b4914bfd97c7eea6b616f3f280118f559bb9756cbd030e99ae705ed17081b03a6dc90cb2ff577f05312f83f778e49aa830c12e30ea25c2c51b91ed6641bb880ac7d2ced9e9dc49f4020c1651129bb98e1d8437a6efe6f3845e70419ecb2d119d29ac08e7da2868fd165e97533413d80739be2b3b9450dd9a013f5d86bd0c5b8396694377d7957f56f105e8196f6851024c1ac7f0406c6bb43191cd70899c6dd8fb098687404538f9038bfec049e651f3a690bb703a324f2d1b0150ff57355a6e78ba39511757c47d125cee0fb6ecf139bfdc95c04565ad728dd7bfc0164a97d7ac4efc3ed5807f24fd002dac7d3bab11a83018fd27d9e63ac590297645589ffc9fbe22c161957153aca0871182de4c34c187edc4f06a6b6161ce4688a5355eefd76405675d56b946cbae20ee7221a4260d6697a126bdbcbb7db9303ac0f32d1437d1f83a2fc9eb8a4327d4f77f98fc411a5a99416b6d67535af2c3cedf63f08440f7e43e77884021fc47f9ba786d0c496eb76d5713f5d5c180e10d584e7e13aff1d360586d800f3540d390b46fe96a2704a607d68443fd89126d179c313d73064774f5f320ed884a1b600a4fe612f93fb10235dbf558b6adc7ce43291b0baa6694e573e8322e02089d62c71694074e45f0c5f4afef8d9c0d803c7e0dcb6cc4c0a431c0fd423d1b7377cc61a22b5118f014c228caa553b2a5518973c3a27e88e0215f285c810c49b6b8c133bcea52c7ab5c0f6e49e91b346d71dfcf45460ba3e05f8ba9de36a588100f61bc2a574c10b10a53bfebfdfc622d2c959570fa2d0e4bdc6b34e4cae97bbd40d9a25eb724ba76a780db646036edf3c2b8586d610e9db0d36557300959131d6a4ee444df6fb88c3db664a1428622ee915a19693c28a879137a696daf92fb06f104d8853ce82743711f034b7e30462ac72e39d270f7f432f9d37ff1b3cd37009529be2937eacb918b7e1be5da1471e6ba5dfed67df7af23ecb9ea0f035e55cd0c5e21783cf313e325bf20083910c90448fbe88422f08ae5af343ccc456ee38e126955ee751d6f10da6c210069adf14c05453dea3f992a14f99b4a6910de4db6314f4abdaaf4722e70dccf628ed13965b809c18af145c14065966086a0ad9946ca60ee8532384463bcf44bee44e31716e8ce22d375ef23bdff0691956c7c20602e5a4112aca53fb67cf4685bbdb024414e6950e7b756215934ca413cfad28a99934acada4cad435e38c02a489b74ba75ecb1d78a793e5f90f1421dc1f7fccded9db1488b8be04fb5e0aa1c902a6b4e78c0213e99796afd5f146a59331469ba89519b26b96a6d390e8c9315ea5f1a2192f259f79e8d286e0c886fbc936e1b356e2db41776438a411dda5911fd04d920d6af19b670f74fa304b685188e8848450ad7d9af576e8d178f8bb70ac00f42f7f5fb2905862be924b685d06042eef1f80dac109523fd38d8db162e763fc1c68b1484757965c8545a0613e4c5019191d9d6c77f1f5592408bb2065a454f133dba1a83486dbaf2f6f8e9947df18d2b60578ee24a704e248ee0388027d037e91e2272eaa21de49134866015a551ea680767dc0281253b3a7e027d69a3132a582e3ffb78639010e6f08ea2e9e19f61ed2385cad6a8db2fd68aef69e3b12e1bbe5a2af983322242b9992c2b21158fe679a5298e52627ff6bd33e0a4dff0ceba69025c7d41aa0987c7071e0d74e4c41e4373388be1d69dd60e45b4acc2ed10ff19900ac6c8461e539fec04549844c7c18f00df11db879ff3581e931423bad096bfcf730c3810ab204f62c010630aa8bd8e46428d1fba533d70f77aaf35a1b53b565fd7b36aabe6121bac5bc495013e799d17949773a6edb559db3780c634edff115a9522d1b00442451d253be643268bbef7cccc83d836e3d86107d255b67d5a3b1cac5cd31f35b0e74ea2d9d3ca91e01537d453c2355fc7d90362f73de408e0bba16c1fe5c40c1781fbbf6714c929b4d8f274095c67e8c2492b534b9734cfe445043a6e99f97b511efa47ee6f75479b98debb5953c445cee8f84fa82089714d979de778f8a34a364ddf8d156e212dc88df39bf0c80c8555350a6656cd9f2c5f92fee8243db86017156dd5a5efe0ae08fbe67ea87811d2a934eea1e5ffb5d4f12ddd789f321920185e567da87e7dede5ff7a58c5a85ec9168e89714ca378f408d8afd934e71659e065df03021ef13424568cce05678222299c5cca361ea7fe4352bdee43b12a16e405fde0ed05dec3754757656cfb810772d05cadb1f2f10335ceb6edc7f6895f62ccfc188ca3b6f96b4c332a596c684332e8c02ab908490a53a7a14c59c83b9b281b330976db03e599719577349e05199e580caec5c25a193cf2920cf852ca21dbb94114e8c889c2fb449c931db80a47a0dffe32c81640ac30baba51a6fb71a9d6026e59654e7174d954fe7aeaf91ede84b44f5cf6b8824c85f7ccee1353581d6b46c4ad4f386d001a8318c9bfcc19e737a104d6b9571efb6c6225e001da9a548c42601ac3fa8e9c4e97", 0x1000}, {&(0x7f0000001e40)="02b110de4c3efa5c984d3856e75cf79a6fb1e6911eac96e5316797387b103bba0b85ec67261a8bc5ef2ff04db46052974c85d6c216a0b0637be5688d4332cec9ca501d6f03991103a8d6748245bb649d7da7a257d5906d10bb9bae927c10430c824ac6d05946ab4d2e58f150cb24e79405537b5edf4485bfba47c3a76a3b39bfffb6f1f40453b4d0abc802f7f406b848e4a2475ebc7d479408e8e5d734be5f90d089adfa3dc0146a9e45e4fd18f1f9673deeba2fef81d80693a721c2688f0e13db5a3882d9656597495651", 0xcb}, {&(0x7f0000001f40)="1d60ae05355f8073b771c0e13624786bd64b7b3c1b6697990f44840851451fbd8662b8486a0631e9f3462e9eb9934b1e7e33c620693d8492093a4c6bdb33ec7ecf646f4ce75dbed953697dc516c549834cc0a6f5071c9c840364845dc72a37633479726c9c01d5fcc07aa59e37ec343309caa81e2f0ab0b885b0184fd7966bbcd200e3eb687cc58041908195bc74fc9d800cfc47bd30e047dd1089b0a3874255452a22db2b2caf5d49ca3f627c47dc99294e16277d17baa97ba466b88a1665597e", 0xc1}], 0x6, 0x5, 0xfffffffe) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r13, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, 0x1412, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x28}}, 0x4000000) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f00000021c0)={0x2}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r11) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x40, r14, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002400)={r11, &(0x7f0000002340)="3422493a07849d9004e8e99023f18405b3f7ef5b6c44eba7287aead5359e99c4d12d08a0e00045c0a2a37b1011e87b5418d750b94bde00e775d9f529134565049c73e78d3f6b86a8", &(0x7f00000023c0)=@tcp=r8}, 0x20) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@generic={&(0x7f0000002480)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002440)={@fallback=r15, r8, 0x17, 0x10, 0x0, @void, @value=r8, @void, @void, r9}, 0x20) ioctl$XFS_IOC_DIOINFO(r13, 0x800c581e, &(0x7f0000002500)) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002540)=r4, 0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r16, 0x40047211, &(0x7f0000002580)=0x1) sendmsg$802154_raw(r8, &(0x7f00000026c0)={&(0x7f00000025c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000002680)={&(0x7f0000002600)="65b28a1a340534a3834a1ed194697f4d98ed2186c0f436199d25328439039b78bce0ee0afc4fe3cb0db0a20a6ce3dd8d59c4157e67ee77366299a963193faeb429aabe82865dfd28365d6be92462f649e7763f3b3104c774c4e1ca3bee494e7e64", 0x61}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008800) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002980)=@bpf_ext={0x1c, 0x1c, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ldst={0x3, 0x1, 0x1, 0x5, 0x3, 0x30, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002800)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000002840)=""/46, 0x41100, 0x40, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000002880)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000028c0)={0x5, 0xa, 0xc, 0x6}, 0x10, 0x2fa36, 0xffffffffffffffff, 0x4, &(0x7f0000002900)=[r8, 0x1, r8, r8, r8, r8, r11, r8, r8], &(0x7f0000002940)=[{0x0, 0x5, 0x0, 0x3}, {0x2, 0x3, 0x8, 0x4}, {0x5, 0x3, 0x8, 0x3}, {0x5, 0x3, 0x1, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002b80)={@cgroup=r5, r17, 0x2a, 0x10, r11, @void, @value=r11}, 0x20) 4m14.373781457s ago: executing program 3 (id=198): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x806}, @void, @eth={@local, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1d, 0x65, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "9ac0d2b883382ee00c"}}}}}, 0x33) sendfile(r2, r2, 0x0, 0x9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES16=r8], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendfile(r6, r7, 0x0, 0x3ffffffffffffa) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket(0x2d, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x71093b6b2ad1fe86, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x1c, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'veth1_to_team\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24040001}, 0x4) bind$inet(r10, 0x0, 0x0) getsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f00000001c0)=""/178, &(0x7f0000000280)=0xb2) 4m14.025586332s ago: executing program 3 (id=203): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (rerun: 64) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) (async) sendto$unix(r3, &(0x7f00000004c0)="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", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000300)={r2}) (async) close(0x3) (async) socket$inet(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0) (async) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0xfffb, @random="b17f79760fd5", 'bond0\x00'}}, 0x1e) (async) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$can_j1939(r8, &(0x7f00000001c0)={0x1d, r9, 0x102030405060708, {0x0, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x0, {0x0, 0xee}, 0x2}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0c07060504030201", 0x8}}, 0x0) (async, rerun: 32) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000000200)=0x8) (rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400", @ANYBLOB], 0x44}}, 0x0) 4m13.611990827s ago: executing program 3 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @loopback, 0x2}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(0x3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0xdc, 0x30, 0x1, 0x1, 0x0, {0x0, 0x0, 0x6a00}, [{0xc8, 0x1, [@m_mirred={0xc4, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r4}}]}, {0x75, 0xa, "2277631db64dec68c7be7e6fe1819640d08d50032c8df8da6ccc2574b6054233ea268074c7543ad498eb8dc18e0454c2e880fe8620a2185120010f19bd684f94fd92b9edaf778b0111858349b1c6f239a7e941b0c380cfd4c1fb09c53cbb0af13e2c8c27447831ecee16eefc3f3db589da"}, {0xc}, {0xc}}}]}]}, 0xdc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xaf}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffff74}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x8c}}, 0x20040041) r6 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000280200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000280200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000004c0)) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r9}}, 0x18}}, 0x20044050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00', 0x1}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_police={0x74, 0x4, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000020}, @TCA_POLICE_TBF={0x21, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 4m13.539652848s ago: executing program 3 (id=206): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) 4m13.439502557s ago: executing program 3 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000), 0x4) close(r5) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r2, &(0x7f0000000400)="00008847", 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 3m58.19322708s ago: executing program 32 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000), 0x4) close(r5) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r2, &(0x7f0000000400)="00008847", 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 2m28.575325807s ago: executing program 0 (id=1087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00883ebbbbbbbbbbbbaaaaaaaaaa2886dd679ba79600008800fc01000000000000000000000000000020010000000000000000000000000001"], 0x3a) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000780080008000000000005000100060000000500050001ffe50005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x24000044) 2m26.06499556s ago: executing program 0 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 2m25.705585376s ago: executing program 0 (id=1099): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x891f, &(0x7f0000000000)={'dummy0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="9d96914067bf7a3be5510b29b4105063f34b32429eef3c72b4c002496c9b12df6146088387e103fd4e6cd6aee9", 0x2d, 0x1, &(0x7f00000000c0)={0x11, 0x7, r2, 0x1, 0x8, 0x6, @remote}, 0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xc}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x1170, 0x1170, 0xf0, 0x1170, 0x200, 0x1398, 0x1398, 0x200, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x13, 0x81}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xd8, 0x9, 0x7, 'snmp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000480)={r6, 0x4}, &(0x7f0000000700)=0x8) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="6800000002060100000000060000000001000000120003006269746d61703a69702c6d61630000e5bf2f0005000400000000000900020073797a30000000001c0007800c00028008000100000000000c000180080001400000000005000500020000000500010006000000"], 0x68}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r8) 2m24.756647936s ago: executing program 0 (id=1108): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{r1}, 0x3, &(0x7f0000000180)=[0xad7c, 0x3, 0x9], 0xab8, 0x9}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0x7}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4010) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) 2m24.595884682s ago: executing program 0 (id=1109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400fcfffffffddbdf251200000046e6d4b8174ae8b4ced5a19032841e42a32aeb2be3e113798a1e6ed6e07f4de6886edf2a5235cd28e9b589ab8731c17c0dfb968ef7d02065056ac540bb3b8c234c1782af9fad03692ca24c35d9b63b321c28eaadf2a2443814d258965efa00dd02d70dcd407d34000000000000000038d856"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0xb4, r3, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa0, 0x1, '\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc1\x9fz\x14T\xd5o\xdd\xf9m3vH\xf7\xcf\xc3\xc0A?\xc7\xce^\x12\xbc\xba\xd6\x80\xb7\xa9\xbc\xc9\x0e\x8ek\x83a\xdb\x14\xf7\xe8\xfb\xa0\f\x12\xf3R\xf8\xeb\xfb\xa7\xc0j_[\xc0\x1d}M\x81\xc2\x02\xbc\x84\xd4&RTP\xa7\xfb\xefe+\xfcuy\x832i\x87m\tB\x86\xf24S[\x89\x7f\xe23\xc6bj\xa7\xe4\x9c\x8eH\x86\xd9\xd4#\xa6\xda\x88\xbf\xf3\xe4\f\xf1jT\x80j\xcd\x1a\x1b\xd8^\xef\x99\x14\x8a*\xe6K\x87c\x93my\x18\xe8H\x103\xf0'}]}, 0xb4}}, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0xb4, r3, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa0, 0x1, '\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc1\x9fz\x14T\xd5o\xdd\xf9m3vH\xf7\xcf\xc3\xc0A?\xc7\xce^\x12\xbc\xba\xd6\x80\xb7\xa9\xbc\xc9\x0e\x8ek\x83a\xdb\x14\xf7\xe8\xfb\xa0\f\x12\xf3R\xf8\xeb\xfb\xa7\xc0j_[\xc0\x1d}M\x81\xc2\x02\xbc\x84\xd4&RTP\xa7\xfb\xefe+\xfcuy\x832i\x87m\tB\x86\xf24S[\x89\x7f\xe23\xc6bj\xa7\xe4\x9c\x8eH\x86\xd9\xd4#\xa6\xda\x88\xbf\xf3\xe4\f\xf1jT\x80j\xcd\x1a\x1b\xd8^\xef\x99\x14\x8a*\xe6K\x87c\x93my\x18\xe8H\x103\xf0'}]}, 0xb4}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x10000) 2m24.202145736s ago: executing program 0 (id=1113): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}}, 0x4004804) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0xd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) 2m18.664674798s ago: executing program 5 (id=1171): sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00042cc7"], 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r4, &(0x7f0000000080), 0x1a1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r8) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r9, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xdb1, 0xa32, 0x5}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x840) 2m17.624367649s ago: executing program 5 (id=1180): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @empty, 0x1005}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) write(r0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) close(r3) 2m14.902874031s ago: executing program 5 (id=1184): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x9, 0x6c8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x23, 0x0, 0x0) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x35, 0x2, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x180, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11a, 0x6, 0x0, 0x1, [@typed={0xee, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x180}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmmsg(r7, &(0x7f0000003b80)=[{{&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="4733d46d5b4d99a7c55386290f1257215755f1eb05c79602dcc57c9cdfffcb4399ac93fe25d92759a6c98d744e35048310e791b101e146066944a0834fb6bfed35d01295b5244d0ebaaa539fb01b312b4a84c5f586b86517cd7c1f837b1457a5f706ceb1e47d8473d8970673d8d38a4783b2cc07aeece356bf7524d4c6ac075b5d221cdfd2ff3315c0b17a2b62599be03545e936c3b80b191df392446cebb81c894c4420f187e52b4ef1166fcd581b9a2d20facb108901f6b59e15336f962ea887cbaa18fd5244", 0xc7}, {0x0}, {&(0x7f0000000880)="a6a6", 0x2}, {&(0x7f00000008c0)="0a684301f4d5", 0x6}], 0x4, &(0x7f0000000940)=[{0x80, 0x10a, 0x7, "e480088795cfaf6b6557548f12b8f21e8e8c96ad6ff1d3fc7654381ad36d5a6dc8b4a42fc408b46786b21d20e827131a2f494f7f8936686cc432b158f306bbce02d577b94140b624c337b95d1f3462b72d63fd5a87bf05484a5b40d03d70311f7dea4fdd3f4ae17de6ba0aeb8b"}, {0xc8, 0x114, 0x6, "6289a38cf73f63e649aba369fe144d499b696d3ddf42d0d7f6ae6141877932c687a5199bc4e30fca3fb9170db9e6bbddee12b2503f6f1615e465035b0afb96da96c59be21b247c9b04438b075307b256595d29443c1ae8b74685de8bf54dd258c2df3838d6929df723a28da65c83a137617396e820fad8f15914d1c7892cb157641dd8d2fc2ecb00eefb670ca2651015e00ef4c9520d1cd98deb69f4e01e9b42873ff09ed742dfc0a00a71e2562394c59aa87eaf953df0"}, {0x80, 0x3a, 0x7, "dfd1e67d190073412e5ab3f99cf374df7903c79ce7882f72c1e00fadab985ec052875399733b85e1c2b62ac39de0c9ab8826dd8ef36cca7cf244cb17fda7411f3ee79767e0ce014c8d37de537c90a63d7e5792a5451969a63fcfe90a94343732a64c90e4f644c90c3a991a"}], 0x1c8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=[{0x18, 0x118, 0x7, "913da335"}, {0x78, 0x119, 0x3, "49aac147621ac4b23f5756a20fa43b235605084584dfe562bb4edcba93bcfa7e05e174d24aa4ad9af8c18c50817ef90d0acdc49a5fbd2d294eed63c06713d903c92bd0abef70d5c1503ab710d3eae6812118de7f1681791e01cf16bdf49d01d7a14ed01c"}, {0x10, 0x112, 0x1}, {0xa8, 0x1a, 0xa, "e053f807a9cca550b895a0e8431427178b4c18955ae8c78c88ede54513373b1c570f507b91751bc2a92414100d63cfa1dea67aaabf194378d1ee64a6a08f1e5a84dc66198e4f1806b8ef591fa79755f2c9d899c18bda30678e3f8728bcac5c44f7800e84356bdab9abff737cc79c48d3b8360576cdde7dd60ea27645b44fb059a19ecc1edc81abe1f7df198e9048bd6d8254329952da"}, {0xff0, 0x29, 0x2, "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"}, {0x30, 0x108, 0x8, "c1a70876349c6c724b8cc8a565105364e52999a642f79600b2deb8"}], 0x1168}}, {{&(0x7f00000035c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x3, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003640)="fd64d9389091ddc80fc89699d67a76f9c7ac52789ff11cdf6b5b4354b33e769aab02d847e2bef548476ac40f", 0x2c}, {&(0x7f0000003680)="9888c55d9d37cc10a1e067a7a11ec0fe27604b85b1968be4be185b551ae7d9ae", 0x20}, {&(0x7f00000036c0)="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", 0xfc}, {&(0x7f00000037c0)="5170d65ee65ff8d7578762c9c2c57e7f208a21c436d13bc473bee8e5cd821c8148fa6ff9841050a02e87aeaa7529f2d13047834f07325f08b28468240cdc6b97cb56d7d0f3", 0x45}, {&(0x7f0000003840)="c9854ae7c71f73c370bb2b22267c616fb2273c18a51507469fb7162b869bc21e0e0058703d255b4ab60386c06173d00f2d54b3a285062233ed8c89c3c848067fd295b6d7f6cfd659454dca5cf8cccb5028f91522ba720fe4e73ffeacd286648509a4db299aeefdab152460fd6a4d3a031c31e69ff052", 0x76}, {&(0x7f00000038c0)="c37c3ea3a8fbb0d35c46ba97df384425c003597d83bc6cef40981175f5a2e45746bd5de52c30996c1c99a5d651729d83c411f5d964a87506747a299eeaf5a06c594d8ff6c3c010fd2fc20b6f8f60ab1e8901683caf6ec16e", 0x58}, {&(0x7f0000003940)="40bc8c2ad1992a13e1163c9707c871275c682e1f598fdc2defcd57ba643ed10dcb0eb2b72ecd7f4f5fa913c7af53a22923343db71d7ced62b5b1d744cbe36d249558b370094996ae1c02250c9109b70b2768de8b03337ad117120a969ab3a0e5f309ba2f0a35ea6a7a62a5b8359047", 0x6f}], 0x7, &(0x7f0000003ac0)=[{0xc0, 0x0, 0x1, "0a61384e0e671e30311de9c6723e052b8131ad319c16d1bd7edfad848aba6215503f640edc6f3372ae4e3997e35dcf8de90da8a30b0978cfcdcdb8757ee4a5dcf2b329936a54edcccbcce8a96175de7e0ad6d46e66068c6a798e28f4dbd4c1ad892ecb2ead2fe914d8d3fa2a0ecc7f58c698ca79ef858e43e92686722dffe267b2391e485e160fe5daea778e84f29dda6a583d9db45415939842ea7a23f4c6fb63da0987f855c3d4fc51c79b"}], 0xc0}}], 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xdbcd78cf0f854f85}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 2m13.915774762s ago: executing program 5 (id=1195): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x7) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) syz_emit_ethernet(0xc6, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8080081003900080045fc00b0006400000011907800000000ffffffff00004e22009c907801000000ffffffffc63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7fb87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741874427be29c95b93303cd1be9716d01efc0c9ca574199dd70000000045227a29c5acbb7097cd14ba0aa22984e0aeafde90bd933b89b3a4beac08"], 0x0) socket(0x2b, 0x80801, 0x1) (async) listen(r0, 0x7) (async) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) (async) syz_emit_ethernet(0xc6, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8080081003900080045fc00b0006400000011907800000000ffffffff00004e22009c907801000000ffffffffc63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7fb87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741874427be29c95b93303cd1be9716d01efc0c9ca574199dd70000000045227a29c5acbb7097cd14ba0aa22984e0aeafde90bd933b89b3a4beac08"], 0x0) (async) 2m13.584670425s ago: executing program 5 (id=1199): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt(r1, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) (async) shutdown(r0, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x12, 0x2, 0x70bd2b, 0x25dfdbff, {0x1c}, [@typed={0xc, 0x12b, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x891e, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8, &(0x7f00000000c0)="bd", 0x1) (async) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x100) listen(r6, 0x9) listen(r6, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r6, @ANYRES64=r3, @ANYRESDEC=r0], 0x38}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000001c0)={0x1, 'pimreg0\x00'}) 2m13.328719514s ago: executing program 5 (id=1202): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a00000200500050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) (async) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a00000200500050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145000014000b0000000600000a0000010a000002005000500000000200000002601003e80000000001000101", 0x2e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r2, 0xa947c000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r2, 0xa947c000) pwritev(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000040)="3dff284f5dde56fcd8d654479b2d401b8689df3402d7411f9f6f52", 0x1b}, {&(0x7f0000000400)="fc0427b8a639c5014294d28e2be9b99be82cf155ae5eadc3bf4c0098c00363112d2f4581abf2c21a4aa85fa865dab603d84c30ca9628f9ba661ec9426d51e5fb4677363b7c8c0be7f7ab3d64e61774e70e06d280b303b41164ec3a2a2de92d3e3e497b616b6f3706ddf3523f2303d0f61a5992f2e112e326a96446874ab4343ef77d231d976c067505425f0cdbe57220f24b425d8cfa05fc032ee30ec33b0ea7a40b2b1f296d19d3bd8bc2efd590598a6f627af0ee6f372ddf3f7efdaf7311a48d59236857", 0xc5}, {&(0x7f0000000500)="c91f66a470bbd7de25e52e610225496b9131758c2eaeb7dce91a4fa15c211c324c20736b235ec325dd72bcc0e3f64d3a49ef4ff46aaa3a9a25e7b354ed11e4ac03823dac33b5b6c3ee643f1f605cb5775859a7a719050aa39fa6ec63392645877f2a4a7f143a696802e0aeeadb8cf93b37d2d68738c3568c5c14c9958c3b73f7fdfbaa2326cd3b1086d9f7df3c6c8f866445b701b088ec79fbf2155e72ecafb16bc9ac877b31c37e0114324045b8a34130eaaef6637234b1392fe8dccc", 0xbd}, {&(0x7f0000000800)="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", 0x1000}], 0x4, 0x8001, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xf, 0xe, 0x6, 0xe, 0xc, 0xc, 0x9, 0x7, 0xf, 0x2, 0x0, 0x3, 0x5, 0x1, 0x7, 0xf], 0x0, [0x2, 0xfd, 0x0, 0xfa, 0xd2, 0x7, 0x7ff, 0x5710, 0x5, 0xe000, 0x8, 0xf, 0x2, 0x8, 0x9dd1], [0x4, 0x7d, 0xce, 0x7f, 0x0, 0xb5, 0x4, 0x6, 0x7, 0x7ff, 0x86, 0x7, 0x0, 0x2, 0xf4c3, 0x3]}}]}}]}, 0x8c}}, 0x0) 2m9.009024016s ago: executing program 33 (id=1113): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}}, 0x4004804) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0xd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) 1m58.082996061s ago: executing program 34 (id=1202): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a00000200500050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) (async) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a00000200500050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145000014000b0000000600000a0000010a000002005000500000000200000002601003e80000000001000101", 0x2e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r2, 0xa947c000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r2, 0xa947c000) pwritev(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000040)="3dff284f5dde56fcd8d654479b2d401b8689df3402d7411f9f6f52", 0x1b}, {&(0x7f0000000400)="fc0427b8a639c5014294d28e2be9b99be82cf155ae5eadc3bf4c0098c00363112d2f4581abf2c21a4aa85fa865dab603d84c30ca9628f9ba661ec9426d51e5fb4677363b7c8c0be7f7ab3d64e61774e70e06d280b303b41164ec3a2a2de92d3e3e497b616b6f3706ddf3523f2303d0f61a5992f2e112e326a96446874ab4343ef77d231d976c067505425f0cdbe57220f24b425d8cfa05fc032ee30ec33b0ea7a40b2b1f296d19d3bd8bc2efd590598a6f627af0ee6f372ddf3f7efdaf7311a48d59236857", 0xc5}, {&(0x7f0000000500)="c91f66a470bbd7de25e52e610225496b9131758c2eaeb7dce91a4fa15c211c324c20736b235ec325dd72bcc0e3f64d3a49ef4ff46aaa3a9a25e7b354ed11e4ac03823dac33b5b6c3ee643f1f605cb5775859a7a719050aa39fa6ec63392645877f2a4a7f143a696802e0aeeadb8cf93b37d2d68738c3568c5c14c9958c3b73f7fdfbaa2326cd3b1086d9f7df3c6c8f866445b701b088ec79fbf2155e72ecafb16bc9ac877b31c37e0114324045b8a34130eaaef6637234b1392fe8dccc", 0xbd}, {&(0x7f0000000800)="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", 0x1000}], 0x4, 0x8001, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xf, 0xe, 0x6, 0xe, 0xc, 0xc, 0x9, 0x7, 0xf, 0x2, 0x0, 0x3, 0x5, 0x1, 0x7, 0xf], 0x0, [0x2, 0xfd, 0x0, 0xfa, 0xd2, 0x7, 0x7ff, 0x5710, 0x5, 0xe000, 0x8, 0xf, 0x2, 0x8, 0x9dd1], [0x4, 0x7d, 0xce, 0x7f, 0x0, 0xb5, 0x4, 0x6, 0x7, 0x7ff, 0x86, 0x7, 0x0, 0x2, 0xf4c3, 0x3]}}]}}]}, 0x8c}}, 0x0) 4.940356626s ago: executing program 4 (id=1654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f00000001c0)=0x2, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="25790952e11c000000", 0x9}], 0x1}, 0x4004) (async) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000440)=""/74, 0x4a}], 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2348, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x10010, r3, 0xdd267000) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) (async) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="01154e00010000112233445588fbca010001160cbfbcd16470adc14fd446ccc8e55e", 0x22, 0x44011, &(0x7f0000000040)={0x11, 0x0, r5, 0x0, 0x0, 0x0}, 0x14) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x12c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "c9c7f0f26b8b47717ebe955c85b7ea8bbe45b94e62fdf90a2c3f59af6d3ce17733c4fd1392313ea3d2dc7f567face07c817146c50107b3ef2d2bfe5f71fe63a3e30e1c9d42ba07514cd50a468a1ca534863a81990084e05e9750a9f74f006d13aef51411370387b89e854a64758a445a0d3e6b640ab571a2ad70987b4fcc7baf7981ff248f5ff33f8a60f01a321d3ce79529a7cef9565c81a5f53948ccd5cdc3f309eb4ce42f4986a277316048"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000300)=0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x40, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x147, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid=r8}]}]}, 0x20}}, 0xc000) 3.978132568s ago: executing program 4 (id=1662): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000400)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00008d00"}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r9, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048804}, 0x40081) 3.464062911s ago: executing program 4 (id=1666): r0 = socket(0x10, 0x3, 0x2f98e60a) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x25, 0x9be2bffda59ca533, @void}, 0x10) ppoll(&(0x7f0000000340)=[{r4, 0x4000}, {r0, 0x2000}, {r1, 0x8000}, {r0, 0x4}], 0x4, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x4edf]}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendto$x25(r0, &(0x7f00000001c0)="46099b9ce8d67fb27f5a60e33ba4a19494b7dc4209f2ae074ce12b6041960bc9f18a3708a875ac2742c32c79f41f6132ff31acc91cf6a052fb3a6a4cee3e670bc7c4d9291f2b91e76bacffdd1f324d9106f096d61e42337245f29154b687973e5c98bec59065d83fa733b9f99a00916d35c88e4f896618436611a804a8007a56fc91eedbcaf3fcbe4aef00b09d83aa", 0x8f, 0x20004000, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = epoll_create(0xa) r7 = socket$nl_rdma(0x10, 0x3, 0x14) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000280)={0x70000000}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x5, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) 3.102590014s ago: executing program 7 (id=1672): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) mmap(&(0x7f000084a000/0x2000)=nil, 0x2000, 0x2000006, 0x11, 0xffffffffffffffff, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x3f8, 0xc8, 0x0, 0x3f8, 0x3f8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xfffff6cd, 0x1ff, 0x3}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x39}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0xe8e9, 0xfffffffd]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x1, 0x6, 0x2, 0x4, 0x2], 0x1, 0x2}, {0x0, [0x5, 0x6, 0x4, 0x3, 0x1, 0x2], 0x4, 0x3}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'veth0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x73, 0x2, 0x46}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}, @common=@icmp={{0x28}, {0xf, "f315"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x2, 0x1, 0x0, 0x5, 0x2], 0x4, 0x7}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x0, 0x4, 0x6], 0x6, 0x1}}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0xffffff00, 'caif0\x00', 'ipvlan1\x00', {0xff}, {}, 0xff, 0x1, 0x41}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x3}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2d}, 0xffffffff, 0xff000000, 'bridge0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x67, 0x2, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "c10d"}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xf, 0x803, 0xfffffffd) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x10, &(0x7f0000000040), 0x4) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000500)="4bd41cc409de433d348b38e2a0db81c616af564f84ca7f989e138e4eb82728d5250c6ee2e66dd77c68aabecae41009910d2405343ea62681d5464a7d8b168c278c1928d6c761b695934737e2b6fc47acedcc074e7ae5b3b2c507b5cae87f03e60cbe257c705f29cc888c659113db0e815db225edd49a4effadb46bbd16d94f454452bed68d524768896b82c187a338e5331a40c4934de21e1c5eca55df41a8d542fedf3134b5363834c6", 0xffffffffffffffb1}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f00000005c0)="c372e1df4cc9753e5c2de4f339dc00e954ed420800000000000000cd17da500b574cef1209e56e040afe71c1ee92f2ceff3099bbb65e3820c944f5d6f991627266306ef525f326b308bbbfd3cd0225081aa555945809e6518057600883e35488cd13334b4c1f672e48bcea85dbb739601d49a2287ee787e208000000c2b0c03b5a", 0x81}], 0x3) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket(0x15, 0x2, 0x402) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x21}, 0xe79}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x4}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00d59f1a2ec96c7b402f000000"], 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000000c0)) connect$inet6(r4, &(0x7f0000000100)={0x2, 0x4e23, 0x20000000, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 2.829112913s ago: executing program 2 (id=1674): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r0 = socket(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000080)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000280)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000206050000000000000000000000000005000100070000000500050000000000050004000000000009000000000000000000000010000300687773683a69702c6d616300ea905df7bead4643eebcb8464d512c06bb52408b68dd255dfadc4faf6cef410693688d9b66cffb9caf950c7993126748899c64493a3be5bdd74d0f209e361a94356bb71a6d33a0a447d894912f7a47"], 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) clock_gettime(0x2, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001002400128009000100766c616e000000001400028006000100020000000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB="769ce778be4c56aa12aea934e109a1885ebad55d4f6dece7c9493b427a0885a73ddafbcacfd2c73aa4b03bf8d406d1c931acad3c7b48fd6e2c615518e9496c09f12ff252584d50d94e164e8e61b31be1e5ca4bb079df8ec82d827e5400cbc2963e9eb66a8d76a06249c81a536a7ac84b50220fef4f302825e7c1e2a8c771e64ca72c54f72ded9b325575d930e83b2e6972d1dedcdd5e8a95c259f1e1f29fc64e5ab9071d9e298044a56add8ae16ffb20ff21"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.826800311s ago: executing program 7 (id=1676): ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'\x00', 0xab6}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @broadcast, 0x0}, &(0x7f0000000080)=0xc) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={r0, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000100)={'ipvlan1\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @multicast1}, 0x20, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)='vlan0\x00', 0x1, 0x5, 0xff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000000700)={&(0x7f00000002c0)=0x8, 0x2a, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000006c0)}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r4, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000940)) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000980)={@none, 0x0, 0x70, 0x6, 0xf, 0x898, "adc48562232e1c189d3584caa9716fe3aa648abd6faae59faf9e9eca0fd06d40cac1f44966d4479284bac512fae876de0206ae91bfd865854095f368fed93fb54c46db1dc752947881668da275a7b61ec630b550477222d7351ed86d1a7dbf8717d47c3aadc8ddfead0e1455d6c4dcb9ceb4bfb626e2203e5fcd898cb1d899e0"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x20004000) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000b40)=0x4, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000b80)="c8e85ebdb9e334c08e10678fe9bcf81917ee898840e3dd5baddec88070a623ac5d2601571da7dbb129b1009e46fe686d1f25b1d2ea782439528905c059ae051f153ed540e28ef863924e1cbab054bc59a0b23e7a72177d963250d0c2380418e66f8f3dd07ea77b469bdad6a6630ca92fd252ea0713f9a28f8bac71df4c26eafcdcae9d68c64549261eed81b459b457256ec13488bd66634461efe02dd9e61570ffbf844d85408de6d566e6aebad42cd34038d69a8a232b330ae3d3ac67954a8bef5ba044ad7f8857556138", 0xcb, 0x90, &(0x7f0000000c80)={0x11, 0x3, r5, 0x1, 0x43, 0x6, @broadcast}, 0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000d00)={'veth1_to_bridge\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x114, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5c}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7b9}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4f0}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x0, 0x6, 0xffff]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9e, 0xac, "1feafba75068196a7d078eff945547f3151dfbd0201cdc61f824452a7e63bc0c40131b9751bb0a3a4061b06c880089aaa861a6a19a6c3a500a3a33574622771ff20a9f1f9eae7cb6c81567fd161f345f0b56710835f178ce7e2e49c6e75bb7efa9397a1368353b719e520ea898de4023857f1fabf680444a87be05e82e158088fbd17aceb47b17808a1c1bcfa1864afde2d1e99acb1c272ba4cd"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb, 0xbe, "9215c56760be8b"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x2000c040}, 0x24000050) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@can_newroute={0x24, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_LIM_HOPS={0x5, 0xd, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r8, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0], 0x0, 0x56, &(0x7f0000001140)=[{}, {}], 0x10, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) sendmsg$nl_route_sched_retired(r11, &(0x7f0000001440)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=@deltclass={0x4c, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xa, 0x6}, {0x10, 0x8}, {0xfff3, 0x8}}, [@c_atm={{0x8}, {0x20, 0x2, [@TCA_ATM_HDR={0x9, 0x3, "c7822b036c"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x6}}, @TCA_ATM_FD={0x8, 0x1, r8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2.471628506s ago: executing program 4 (id=1678): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f418490309860762750", 0x13}], 0x4}}], 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x250}}, 0x0) 2.394529839s ago: executing program 2 (id=1679): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xdc0, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 2.299649674s ago: executing program 7 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a0000000800000004ffff26bb12e61000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000100"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000004c0)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x9, [@union={0xa, 0x4, 0x0, 0x5, 0x0, 0x3, [{0x2, 0x1, 0x7f}, {0x8, 0xd373, 0x8}, {0x0, 0x0, 0x4}, {0xc, 0x4, 0x7fffffff}]}, @enum64={0xc, 0x5, 0x0, 0x13, 0x1, 0xe, [{0xd, 0x86, 0x1}, {0xe, 0x1, 0x5}, {0x10, 0xdc, 0x6}, {0x3, 0xb58, 0x4}, {0xb, 0x5}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @enum64={0x8, 0x6, 0x0, 0x13, 0x0, 0xa, [{0x5, 0x8, 0x7}, {0xb, 0x2c0, 0x6}, {0x6, 0x999e, 0x200}, {0x9, 0x6, 0x5}, {0x4, 0x2, 0x800}, {0x5, 0x5, 0x74000000}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000000300)=""/190, 0x111, 0xbe, 0x0, 0x5}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 2.165221095s ago: executing program 2 (id=1683): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xecc42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000000)={0x100000001, 0x1}) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xecc42, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r4) (async) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000000)={0x100000001, 0x1}) (async) 2.11625942s ago: executing program 4 (id=1684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000015c0)="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", 0xe0a}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20044080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a329, 0x10400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 1.785871982s ago: executing program 1 (id=1687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000001640)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018180000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000050) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x1000) 1.567267923s ago: executing program 6 (id=1688): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000080)={0x4, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x16, 0x0, [@mcast2, @remote]}, 0x28) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000100)={{0x3a, @multicast1, 0x4e23, 0x4, 'nq\x00', 0x7b, 0x8, 0x28}, {@multicast1, 0x4e20, 0x10000, 0xff8, 0x4, 0x5}}, 0x44) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x1], 0x5, 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0xff}}}, {{@ipv6={@private1, @private1, [0xff, 0xffffffff, 0xff, 0xff000000], [0xff000000, 0xff, 0xff000000], 'ipvlan1\x00', 'wlan1\x00', {}, {0xff}, 0x3a, 0x0, 0x6, 0x4}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x7e51, 0xdc], 0x1, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 'ip6gretap0\x00', {0x6}}}}, {{@uncond, 0x0, 0x1b0, 0x2d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3ff, 0x8000, 'bm\x00', "e93917a9cb65159da46210fe9838fdbfa26ebc049b5a62e4203fd03ce5b863f4efc6e6534306bd858631f481658b06c5bdf6464d02f85d3be423f8f30b66912ca437cd2285ed2ab2a2ec0db6d969c196809f651cd4e9f87f9f2c8b7498671c62ed3a3c6fdf8523bb8f5ede5e96ab9850ab69cef22da69ed2c80bff08403fc370", 0x14, 0x2, {0x5}}}, @common=@dst={{0x48}, {0xffffff95, 0x0, 0x0, [0x8001, 0x7, 0x2, 0x9, 0x8, 0x0, 0x1a32, 0x4, 0x3, 0x4, 0x5, 0x0, 0x6, 0xf, 0x8, 0x9], 0xa}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:hwclock_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) getpeername$packet(r3, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c80)={{r1, &(0x7f0000000940)='%\'!..\x00', 0x72000, &(0x7f0000000980)={@_ha_fsid={[0x5, 0x3]}, {0x8, 0x1, 0x59, 0x7fffffffffffffff}}, 0x1, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0xfffffffc}, 0x2, &(0x7f0000000c40)=[{0x3, 0x8001, &(0x7f0000000a40)=',}/\x00', &(0x7f0000000a80)="fb6557def55c738326e29ca0c0e1d2cdaf80a7aa5d6add2757d180fd02ed1118789fb627a4a7ce684a6b04652cf7837e49dd78c740fb8a09efabd8f807b6560110106defb5ff7052fcefdef4ce573f3381a4b0225699e8477720ef0d787bc5", 0x5f, 0x2}, {0x3, 0x2, &(0x7f0000000b00)='!\x00', &(0x7f0000000b40)="1ca8428f63b809ede2a3cc985192e93d0c7cacc5f2a47ce1f5d945d97d9da9e7b02e4c954c402c69345a366d201ee63dc5ede938552c5a9aa102d239155ae4dc2715fe049818d44aef1c8a1410649cb176c99e0a87eb2ec44c35bc0df704b1dc42247640633b8d04af6f8019272aaf0e857a841e6718b0dccb2a653d2853640d1bb68bbdfc216e3b499b7ad8d73d8f32605b361efc6cefbe0c9ecfdf9a91e2528dc48fe6131dd90fa066f6893edf8509f3157677033b4eef2f94b0eb41aab530e5e691d9e91e4e526406f8894599bb9dfd05a6a4b9efa08e277731f8cf5444bac061737170120f1e4f65fbba00", 0xed}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5) r6 = accept4$phonet_pipe(r5, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0xc0000) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000d80)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000011c0)={{r6}, r7, 0x0, @unused=[0x401, 0x5, 0x186, 0x4], @devid=r8}) getpeername$llc(r5, &(0x7f00000021c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002200)=0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r2, 0x10a89000) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000002240)={'ip6erspan0', 0x32, 0x30}, 0xd) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000002280)={@private, @remote}, &(0x7f00000022c0)=0xc) r9 = getpid() syz_open_procfs$namespace(r9, &(0x7f0000002300)='ns/net\x00') ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000002440)={r2, &(0x7f0000002340)='\x00', 0x40000, &(0x7f0000002380)={@align=0x80000000, {0x2, 0x1ad8, 0x7, 0x4d2}}, 0x7, &(0x7f00000023c0), &(0x7f0000002400)=0x81}) clock_gettime(0x0, &(0x7f0000002540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002480)={0x8000000000000000, 0x8, 0x6, 0x8325, 0x3, 0xfffffffffffffffb, 0x2, 0x1}, &(0x7f00000024c0)={0xfffffffffffffff8, 0x4, 0x8, 0x7, 0xffffffffffffffff, 0xd, 0xe6f7, 0x9}, &(0x7f0000002500)={0x7fffffffffffffff, 0x4, 0x9, 0x7, 0x1, 0x1, 0x101, 0x1}, &(0x7f0000002580)={r10, r11+60000000}, &(0x7f0000002600)={&(0x7f00000025c0)={[0x2]}, 0x8}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000002640)=0x6) sendmsg$nl_route(r5, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@newneigh={0x60, 0x1c, 0x100, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, r4, 0x1, 0xc8a531550e0159d3, 0xa}, [@NDA_SRC_VNI={0x8}, @NDA_VNI={0x8, 0x7, 0x4}, @NDA_CACHEINFO={0x14, 0x3, {0x7fff, 0xa5, 0x1, 0x5}}, @NDA_VNI={0x8, 0x7, 0x8}, @NDA_NH_ID={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040814}, 0x4880) r13 = socket(0x1a, 0x2, 0x101) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r12, 0x40786e88, &(0x7f0000002a80)={{&(0x7f00000027c0)=[{0x6, 0x4, 0x6, {0xffff, 0x8}, 0x2, 0x8000, 0xddc}, {0x3, 0xff, 0x28c6, {0x400, 0x91}, 0x3, 0x3, 0x7338}, {0x22, 0x7fffffffffffffff, 0x1, {0x7, 0x7}, 0x10000, 0x0, 0x2}, {0x9, 0x9, 0x6, {0x10001, 0x4}, 0x1, 0x1, 0x8}], 0x4, 0x40, 0x3, 0x6}, {&(0x7f00000028c0)=[{0x152, 0x6}, {0xfffffffffffffffe, 0x2}, {0x0, 0x9}], 0x3, 0x10, 0x6, 0xdd31}, {&(0x7f0000002900)=[0x6, 0xb, 0xa773], 0x3, 0x8, 0x800, 0x6}, {&(0x7f0000002940)=[{0x0, 0xffffffffffffa853, 0xffffffffffff2990, 0x80000001, 0x8}, {0x7fffffffffffffff, 0x4b0f, 0x1, 0x4, 0x7}, {0x9, 0x4, 0x40, 0x8000000000000001, 0x5}, {0x1, 0x6, 0x0, 0x10, 0x7}, {0x9, 0x2, 0x0, 0x3, 0x40}], 0x5, 0x28, 0x5, 0xa3}, {&(0x7f0000002a40)=[0x2, 0x8000000000000001, 0xe, 0x4], 0x4, 0x8, 0x40}}) sendmsg$NFT_BATCH(r13, &(0x7f0000003a80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003a40)={&(0x7f0000002b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb58}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x5, 0xc, "d0"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0xe00, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd94, 0x3, 0x0, 0x1, [{0x350, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x70, 0x6, 0x1, 0x0, "6cab57da0a618893dd031f4db5539cc3a583eb26bf514eda8968900d1022c5644c14c510bc795421e3ac97d2cf07f54ed805f4a1155c4d28461d16745f4608231e445e6d97aa507fa655208a073cb80d2eba90f3f797686e7885adc5278921e964d87c3e48958f24051bcff5"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf8}, @NFTA_SET_ELEM_KEY={0x244, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "01cb738f514be9ed9528a6e825c113a2a7cd83fa3b6428d877c121b79e703b4f4dda264aacd41348f7172cb2e56ccb14a0e716209a1f4bdebcebe88e351d32f26f481293a43e9c08342abf964197849b215866a0e0a35d26c50d7d796b67c1dd060da29638ae510068700d76323a2713f08f98465c02e46e635a55ea54d0c56cde212522b44106c273efa113081d39a26f7be68484084791a5c26c633545fa0b59d903a5089cc59edd681a9c87fbb5fd20056b9cba3771db6800f27dcf93141cb25caa052efe3d556aba0e8df5627872d20e6360da21830e47269aa798e4765fc3563998571a1b7f47928dd44104e7c6387488d16622dd8b72ab"}, @NFTA_DATA_VALUE={0x69, 0x1, "696f073a97a99e17337b2e849ce63e13ed0d71820f10b1cd88a8089ab3db88e5e9824630bfd0902a23d123062d5758c46c7557b1c6f1ed0e47de5513deada73ae6b5dfa5a24a19ba6a0e4dd0168b4b5f3b3a4681e5fc63595eb7b24362701a98d27472c8c0"}, @NFTA_DATA_VALUE={0xc4, 0x1, "8e7bb0dbf7a9d4de68d56c774d5e27660c8d9da6cc8aeaaeccf163f1947e0389afdd853ab9c3dc6e7c0a22117f17f95e202e77481cdb4bd701ca670452714fc840c520586ad7fceff902531852c987567c32e4efe18cf1f85e8f13b4a98b5593aaf215b280c80937b467b6921b588907c3e091261df6be3522b129fc0d76d734abc95d49c3738867f611ac3cfe2bdf645cdb3752c0cb2c159d2db34b24a98820e02abdb6fbaac8dd9ee4e729456d540635c055f36dce7d01691a777e2a52356e"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}, {0x3c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x2c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "a4278eca60efc833a887fd5e777a9228a7545481c3d7fe88b659f7e0712537556173821804e140e87bb88191a1ed2cebf66d78050bf99d10e11a349699dc42b92bf9baa2cfe33a6af0c469a29c762e7093d74a1967467bec57913573c536c8d0d49f8eb3259c06ef733ed9685854cd0b9d223c93ff7be1fb9838c8c67b31dddb8a9d85c551eddd06149a348744f7fe18a9e0ce3c27d3c7074229e9be510b0bcb7fa4f73decb9ff3680d9422fe699394ff8d054e0d5377d13"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb, 0x1, "3fc28dbe56be84"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xad, 0x1, "9a94bd972696b4e277ea405fffa63253ea98d1649a61aedf2524f917838d9e341e672494b03c4d953696104ecba1457f7dfae3ac507752e12051498f083d81745de5d7a4d922d668de66fbff8867ad4d5c2de560721cde2224dd384d97668e09d27f9c94ab52cd298234b0faab1cbacbcc8788a8a5bb31b41885182dedeba0467908c827e3e79c12f6cb66a14dfa49a1c2b086b75f8e9f7affa23a34488eba1820ddc254f09ac66a80"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "d2fb8509b1cf04ec488558eb18072a74d7ed7ec0d004da483e2035362445bedc9c44bf36938786a4c16cb90e2bf1e8abc321d95cc37c13f3aacc2f22c10c36d5744f4a79f8375e4a4946ddc3db396c7e7a6fa16d6885fbe35da8bb569f5699749c9845ba74333242dec14bf380801aa5ca8272935d7aa1bfcc37a7cc9afdae4f0630dbfb9e99493828cad5"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x184, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x35373b592c85fc6a}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1b}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x401}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1000}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1f}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x12}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'string\x00'}]}}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xea}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x134, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x69, 0x1, "76b696eaa6189561d65a2a28ae5b7894723467668caf986d8e7c203d199813707adb104bac6013d7823c3c87bb7e3dba99f982ec6de146d0a0653b0935d8a5f4e390f7ab8db21c75d54e669b896f03b26ec0c25b318d1f4e5c38c45f9282a01ab143d620d0"}, @NFTA_DATA_VALUE={0x2f, 0x1, "bad473524ba2d28c216633563b686b84df1dc22f14de6fb5547c5ce98ef6cf4bc0abe86349ad3857c19751"}, @NFTA_DATA_VALUE={0x56, 0x1, "2b956d784015d6e7caf94d1f0144828abae95b21b839ecd13357ce3cb0bc65ac6a166b558aa8c9b2f599e28ff4a73e35e384d449acdc60c7d138153352a3a3d1acb9858fb9454d6ca7cdeca2cd618fe45d81"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "c4b6bea2dee7be"}, @NFTA_SET_ELEM_USERDATA={0xd2, 0x6, 0x1, 0x0, "8713e8f690f0b9f4d18a43512b155a4b7e117c168fddc86c4c3f97bacb1e1dbddb8418275717a74dcb869f0a82f8cf84c9b3f9adfb120808b7ce7294cc4c9a2b391687123c80a752c63034bb1b13c68a1e50aafc4bbf363af230ff899af04c72229f7757b15d066925ad9f08f6daa980b6eb0e6c7fbfdc51a6a691f451e7b45736c76b9e3e6e0b725114c556fb748365565d99a6478c246c34823cff60a6f7be9cbcd56bb1d31199136244715bda7045c2f29e5d55ca1f84e28fd37e647cfaac72a6ea27f246d9f9ec1d72e1aec1"}, @NFTA_SET_ELEM_USERDATA={0xa, 0x6, 0x1, 0x0, "0365d55547c0"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd0ad}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x22c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcb, 0x6, 0x1, 0x0, "5b0627e6381aa638ff648d7ce953308cef4c41ae1697b60faaecfa9f01604885820cbb258e34f0fedab97a954e4b72cf03476c78730adcecd317dda1ced6b62033888695038cab0024a3ae8a0bfc37ce20357d031c545c7337920eacbb592d2ba7409a53dee9b5e838c64d2c502af06a0378eb92299b3ec66ed18558a21c310276808eecbb28d193fec5fb4d793a181cea7cef9e0b0e24507452d5b799dc92384ef4cd8f6b344535b40fdfc5498ef99e005f89a562bf4d558fb55b3c4b955c9584869f560e1d9d"}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xe6, 0x6, 0x1, 0x0, "27a0a20774b9773e635fbe55c003276c41ff171d3e61256662cd638bdf3b2bc4d4d1b0c99f1f363752285ab75eb37e8c7fc81d4fceaac8beff28c6b26213de1cebbc1d0e9e4d2cf800450859b76c35335e0e0ce8ab36501472ddd43f8dab97bccaa81f4e44ae05508d212f54eedb673c69b08d7656181e06206573a52a971e850f298ea601e8cdd12a3de323189b6e89f59a5f83bd1bf98cead74a6388fc041152734efc5e34d1bbe613f4e393228001b908db566ec4957c82fa7bced7a444ae1c5a95ee55ef6bd5c9b09ee666ebc4755d14157fcb39eb24e2dd191145abef5f08cd"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0xef0}, 0x1, 0x0, 0x0, 0x4}, 0x4008800) 1.428385534s ago: executing program 2 (id=1689): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x800) 1.399213442s ago: executing program 1 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "ad59edcbc00f44c4"}, 0x5}}]}, 0x2c}}, 0x4000006) 1.268229103s ago: executing program 7 (id=1691): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x4, 0xa, 0x0, 0x2c, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x2, 0x4}}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=@can_delroute={0x54, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0xfffffffffffffff9, 0x7, 0x4}}, @CGW_DST_IF={0x8, 0xa, r11}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x8, 0x8cff5605425265a5, 0x0, 0x0, "1fa07befeaf8d94d"}, 0x1}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1}, 0x2, 0x2, 0x0, 0x0, "0c03290b9c02bd81"}, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000c00}, 0x20044894) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="806be808", @ANYRES16=r3, @ANYBLOB="120c2bbd7000fedbdf2508000000080003000700000005000500050000002800068014000400ff020000000000000000000000000001060001000a000000060001000a00000008000400060000002c000180060005004e2200000800030000000000060005004e21000008000700", @ANYRES32=r5, @ANYBLOB="050002000c00000005000500010000003c000680060005004e21000008000700", @ANYRES32=r6, @ANYBLOB="14000400fe8000000000000000000000000000aa14000400fe80000000000000000000000000003b1c000180060005004e22000008000700", @ANYRES32=r7, @ANYBLOB="060005004e2100000800040008000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 1.267722748s ago: executing program 2 (id=1692): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$LINK_GET_NEXT_ID(0x24, &(0x7f0000000080)={0x2}, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000080)="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") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21100480}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="989a0000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf25070000000c00990007000000300000000c00178004000300040001001c00e700a3a05ec34e15d8146e97b16b8b33ec1244309e5549b277ee1c00e700ff03f71dfdaed0f93e3ff4a54d75d0aacd40bd99edc912480a00e80008021100000000000a00e80008021100000000001c00e700fa05690d9e534b609aece2f2395e0e2851d75bf726f9f000"], 0x98}}, 0x80c4) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.18837269s ago: executing program 1 (id=1693): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 1.149140834s ago: executing program 6 (id=1694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="184300000000000000000000000000009500000000000000072b6d3b7e93f005eac5a5c22a47fe7e4914f256f0143bb5b92c9a42cc50ba139df3cd413b141da9c0c801c9f55c95f3d7402150044cced06acac7943b889d1de22d9cb5a39dda7c2f4b67009c344d8e2e38de76353d2d34a9101bdbbad38ac6b4fa9a0f0c4c84fad5a78152aa064508457b28c8700c90105d5508f40c7a7feeeabb6383dd783192a6aa051305aaa0d0e0fa1ac637d92749806e8728f13f56cfd7dcd98b0c1d604859d9b57a3149"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800459200280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54200002907800e7"], 0x0) 916.439801ms ago: executing program 1 (id=1695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 841.589384ms ago: executing program 1 (id=1696): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(r1, &(0x7f0000000000)="01", 0x1) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000200)={'pimreg\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 827.418256ms ago: executing program 6 (id=1697): pipe(&(0x7f00000006c0)={0xffffffffffffffff}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r2, &(0x7f0000000100)=@abs={0x27}, 0x6e) (async) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) sendmsg$nl_generic(r0, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40442000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x248, 0x2d, 0x406, 0x70bd25, 0x25dfdbff, {0x1a}, [@nested={0x150, 0xad, 0x0, 0x1, [@typed={0xc, 0x135, 0x0, 0x0, @u64=0x7}, @generic="cbdca6c30dac45ab34606c1671736e822b5a27cddb48e3526b21c4e13b7a036427b08e9ae1b2e81a05debab07312a3f86d180c9aeb1acc17d20e709d46729f5ed6991b541111b31b658ff6b275183148cc9f4cc910d6f26aaf072a5deaeb4840633f4f580b425c63726eda5df8a082e0fa7091d4f33210e9978a63a0617a3c18889ca01a3e2fea2045759a7f49737eec3f428b3f04a64bac66fe029319ae7e8c2264f79adafa6928e78a8c8b1705ed8b", @generic="ba57d41ae714abac4b45cb7f99cbad03e5d065ddb2e5590fb6a1e77877d74c4899f88694cab895d9b44f0e9b769330a7c63b7862bf1ceea23f68", @generic="0417e66527445a514a417e9a5dd0b8bd0363b4394f1c29eb37530cbf57d23cdc24a9231f5306b44fefdd5230e8d90162d2b1a41cc247f0c8381e709e9997798b64dd53c7493a88796350131ede2c1d44306a", @nested={0x4, 0x15f}]}, @nested={0x8, 0x140, 0x0, 0x1, [@nested={0x4, 0x102}]}, @generic, @generic="a707ca2dd27e3d526149ebcbf5c2081b922b5e9a98cee252eeee42c9b69084a09ac3c20bdce4f6378f2ea6fc", @generic="1d1c6d316a80a635c9998c04a7d938b697c8eccfc585469e416afa688957fcb3eafeab883e776634eeb248e8fe85e04a2a75d6b3f78ca3b5e216492106172316b04d9d5543349d71c8df78e1c215132e31294d38f232810bb2ca17c5a2c66ab7197784ec7b7d47fc5105d285d84b6fe26846a25f0e9853c9389ccc3ecc1f30158d029b48a2ab1f752ddb2c6dc2c09f2f29d70189e8ffd6a51c72caa128994dc5ae6413d2dc6bdef934510a717a"]}, 0x248}}, 0x4000800) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x400, 0xc11d, 0x6, 0x6000}, {0x4, 0x3, 0x800, 0x101, 0x524d, 0x4}, 0x5, 0x0, 0x1520}}]}}]}, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x400000, &(0x7f00000001c0)={@align=0x8000000000000000, {0x9, 0x0, 0x2, 0x5c2}}, 0x568c, &(0x7f0000000200), &(0x7f0000000240)=0x80}, {[0x0, 0x14f, 0xd77f, 0x3ff]}, 0x9, 0x7d, &(0x7f0000000280)=""/125}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x24, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0x9, 0x4, 0x4, 0xca, 0x7f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f0000000640)={{0x1, 0x7, 0x8, 0x94, 0x3}, &(0x7f0000000580)=[{}]}) 480.247204ms ago: executing program 4 (id=1698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffff7f, 0x0, {0x0, 0x0, 0x74, r3, {0x4, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x804) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x0, {0x0, 0x1000000}}]}}, &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008800}, 0x400c880) sendto$packet(r5, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 478.914216ms ago: executing program 7 (id=1699): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d5, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x1, 0xffff, 0x8253c, 0xa, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x9}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="114345012008ba000000375186dd", 0xe, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x7, 0x6, @local}, 0x14) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{0xf464, 0xb, 0x8, 0x7}, {0x0, 0xe0, 0x3c, 0x7}, {0x2, 0x2, 0x4, 0x1}, {0xa917, 0x6, 0x3, 0x100}, {0x6, 0x8, 0x0, 0x8}]}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x331}, 0x14}}, 0x40004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000080)=0x80000000, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc}, 0x0) 468.300933ms ago: executing program 2 (id=1700): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}}, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x9af7a656d270fda5}]}}}]}, 0xa0}}, 0x0) 458.332487ms ago: executing program 1 (id=1701): r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x40000, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20}}, 0xe8) (rerun: 64) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x80000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0xa9, "28108e11b1f1a16ac44a5440212bd5e2f3c2257b1cd27d613e29cdf8c30b6226403986ac1bd176e6add87f54ce6e11f171233bcc23f30dd3ea6bc848ee355676655b97e1f71ac6f4b4fc345de2078a9ad93472764f148e25540acc9d2b236e5e68015e4b1de450176d1d2b3e050a0ac2eeb18f72ce68a214b4af6ec9f83bda68bb3586526806644d2f3515849d5f77a41b019424eff0b62944d26c382d6419c933e86dc881051693e6"}, &(0x7f0000000280)=0xb1) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 404.494256ms ago: executing program 6 (id=1702): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) write$tun(r2, &(0x7f0000000500)=ANY=[], 0x9b) (async) sendmmsg$inet(r2, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="d8594edeb049b37b7e6d6a73d6f31b9f8af63c10b397cdadac8fbd71973231b2730ce9ebda14fb80241392d82917ebca9d722dc04f16f3d688d9527512bf5d83b6c4a0e0f63641556453f7f1b195879ad7494e9758d40f68a371beec90ca5b19071fa2c07ee63e6b0945fee2cc690d9f790cf9e2715042d31072b04c7f5ae65cb37c6c74a0de2825aa1d70cb5e51420b7107b5eb3d359744546c7ab194e8f582d699c151add5c2129ee39ebfd4866f084c6812b50c9438eebbcdcbd38a6d6687cc4bc4eaa7c9cce76278516a2579560b6345c71a7e7ec60af26425fdce54b48b8f419a9cd2", 0xe5}, {&(0x7f0000000500)="d21cf493eca764ec78080a073ce1a4e0ee4e2478bc1237c198e46b1ef89a23a495f31bf5dcd976f08bbddd91067ec0dae873706aaa6de9df61888677f7df781fa6506b86222b3d1740097b361d81fa63bccd86da6ddd59faf39503541d8f088f0f25d56e4b7821f6fd3f07f8629d9b880b8142c617281e0c9e2cbf6d90a48c3e6f9fa066b94321a866a2bd2e5a7e370623bd5acddd0c51896c986fcc5a3c1e6b37302da68e52f940788c5f4fd6a80568694d1946ad09c5e8f28bac2604de4f9ecf115fb8344e38e85a022a67d0c0d02531b1c2b8bda3e60855e3694e0ac0bc8897111c1ba57b1da5d7", 0xe9}, {&(0x7f0000000640)="b5414c8a453991be7faae4cc4dfd6c242e602b752ad7da9c1161b6b07d048725f691dfdb70509f9739699f9d51453f38c86613b3e4ae28d52c2f53eefa688a44c8b4844265bbc8c1a0a72fe18a3dd5ff5ab96383ceffda85ec5ba6bb43737f153009f5d4aefb05e42e1196733c69c8a4bd8dc8e6ea988f22dd928eb8", 0x7c}, {&(0x7f00000006c0)="c63bee085a6745c00331dd5df94f4b1eb84216181af575f418ba32c8a803db3c73045e5139ce2c113798ebf594b54f8d974256fe5c19b59583e4", 0x3a}, {&(0x7f0000000740)="c3a94e0f2cd96b2f938f21ca425f144fc6db9e4d94cdfb475e9c758bd8d12143f44f5bdd66f6a8b605ef0fc2b556d303e9a95ac5a47fe2a5886e8406e38c4a3e5535fab9a37ebf0e0f741ea972eb0563fa4bcd0055cf80b081b34293b71f3abe53320d959be7bab725ed3bf6b293275258547e20c456e7f3fca8d9a0e735fdde10518697f3c8f1a38ff18c93fd0f7b47700585626eb6350f114b341554269c707965615e929e4e823b9cdca7cde9b72ddd253702f1018d66e09f85a3122930895334537d7df78a39b33463d603369e3086aa183dbabb29a09003613dc3c98400ee764eebdc22cc1bf8f1b886e2d3f00c10d0", 0xf2}], 0x5, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x48}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000000980)="f8841b2017bcb8cbfd28edecee6fcc505e8192caf76046cf44c1fcb2f9d5aba8e1802a", 0x23}, {&(0x7f0000000a40)="9f833d48512cf3901ee245fa4a409f67d44338e123a554b8c26e96eff5c924f1c72965574543678c1e29cf1680311f0ec552e60d3c957fdf17e289bba2441d0565b311fac220e3a3e88da22a39ed1d705d6d7425e22e052c49e13a726151495142fd6e2a63fe56a46853d7c420d169cbd718e2f6ca0230838cd8e79d71dde903852601cf9c74018f32e14c24fcf73a521ef43521a54a03c211e8985a64c617954a5052", 0xa3}, {&(0x7f0000000b00)}], 0x3}}], 0x2, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x1}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000180)="ebb37f2065a9efdc5c5bfa917018873299795dceafcca87fadd67dc964379cf6b424b59eee1ab7aaca1bccc0534bb426347f87da48d32d94e67ec50c575bd7632b8c1eb8c7bb0d58c3e3fb1547742f1a41c896a11d0b29e8935572485770d8e7aa9e1570b50d51d4e14314138d20e542eb86c2c7a69afc3eb5eed71ab7c0819014309b91079fb5500eaa4a09de94c41c498462eda491e8906eee7776eba7dca78c25952a9d9b38ecc143df4b737e194048", 0xb1}, {&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="1ab3df32e1d784388abc0248890f951679f44e85486c378f0b95ee4185139dc51e6135a9b8d62ef55f8e6a734eebbe034bef", 0x32}, {&(0x7f0000000400)="66a46855c63df201c72b40254a653729c20ce5c9e8a7536b08d52195ff780b186d691e645980a3aa4a4fc0f5915f5e368d89e7da92feadee4e62568bca8fff8f17", 0x41}, {&(0x7f0000000480)="b284e4570e3f82d85ef5ec25e0be793c1be6e36e", 0x14}, {&(0x7f0000000600)="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", 0x1000}], 0x6}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) write$tun(r4, &(0x7f00000016c0)={@val={0x0, 0x6002}, @val={0x3, 0x80, 0xdfe6, 0x3, 0x89, 0x4}, @ipv6=@esp={0xf, 0x6, "77a490", 0x4bd, 0x32, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[@fragment={0x0, 0x0, 0xf, 0x0, 0x0, 0x13, 0x68}, @routing={0x0, 0x4, 0x0, 0x6, 0x0, [@loopback, @local]}, @fragment={0x87, 0x0, 0x4, 0x1, 0x0, 0x1, 0x66}, @srh={0x87, 0x6, 0x4, 0x3, 0xfa, 0x40, 0x1, [@private1, @private0, @empty]}, @dstopts={0x16, 0x1f, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @pad1, @generic={0x7, 0x7b, "508a5fbe67fcbd91e50c9d76a1cca292ed64c9ce36cecd6c916271417e3a2377dbdd0db13bd361c44ccc3a9e3d42b78b6810bdf69e1baaa4b35b01d8c5e497874e8f8dd1ee4ba12428aae77dca9678c30ce5eed29a6091d1ce1babe956b886ac2c18a206cc15bc100423d7493f59da04d5a5879dd50cfaedae8159"}, @pad1, @ra={0x5, 0x2, 0xfffc}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xda}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x58, {0x3, 0x14, 0x80, 0x3, [0x3ff, 0x6, 0x4, 0x400, 0x7, 0x2, 0x5, 0x6, 0x1, 0x5]}}, @ra={0x5, 0x2, 0xfffb}]}, @srh={0x33, 0x6, 0x4, 0x3, 0x1, 0x40, 0x8, [@dev={0xfe, 0x80, '\x00', 0x3d}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}, @hopopts={0x62}, @dstopts={0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}], {0x4d6, 0x6, @cc={0x1, 0x0, 0x2, 0x2, 0x380000000000, 0xfffffff8, 0x4, [@runt="144c50ffc172dd", @runt="c6ee2f2f9341c9c19da25b7be6694834f56120e665027cc244d00773d336f4dcdc649a2a14188760169b3c04c77b96c7d6462b23b43092", @ipv6=@esp={0x3, 0x6, "9ba72a", 0x25a, 0x32, 0x0, @mcast1, @mcast1, {[@dstopts={0x3c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xffff}, @ra={0x5, 0x2, 0x5f}]}, @srh={0x29, 0x10, 0x4, 0x8, 0x4, 0x10, 0x6, [@remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback]}, @hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @hopopts={0x2b, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x156}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @generic={0x5, 0x3, "9bcd3c"}, @enc_lim, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xff}]}, @dstopts={0x6, 0x1, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @fragment={0x8, 0x0, 0x2, 0x1, 0x0, 0x2, 0x65}, @fragment={0x0, 0x0, 0x4, 0x1, 0x0, 0x2, 0x66}, @routing={0x84, 0xc, 0x1, 0x6, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4d6, 0x800, @basic={0x0, 0x0, 0x9, [@runt="db28b2445d7a57cce7051b86be8b4671788d5c41479a1e065806030204e3ed4deeb4", @ipv4=@icmp={{0x1c, 0x4, 0x0, 0x3, 0x8f, 0x67, 0x0, 0x9, 0x1, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x2b, 0xd6, [@rand_addr=0x64010101, @private=0xa010101, @broadcast, @empty, @private=0xa010101, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x7b, 0x3, 0x3, [{@local, 0x8}, {@empty, 0x1}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0xc, [{@rand_addr=0x64010100, 0xfffff23e}, {@broadcast, 0x8}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0xa, 0xd, 0x66, 0x1, 0x5, 0xde, 0x6, @empty, @multicast1}, "400256"}}]}, "d33b2f", 0x3}}}]}, "f3f622", 0x3}}}}, 0x4f3) 259.787416ms ago: executing program 7 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, r2, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x20}}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000a00000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000140)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000b03e2bdb4459327d6a62419ac16714538faa6d6d66b38d76379a84229f9309820741ae4154e63af7ce95d96f13511ce57f87d07ce754669694010530f3fec7cffdbeb653b113a24a98a9c55d863b509b2e1fc27ad5215678f1148ebeac0ccf0e", @ANYRES16=r5, @ANYBLOB="59e3000000000000000008000000100004800900050073797a3000000000"], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x22c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x14}, 0x2000c080) 126.498032ms ago: executing program 6 (id=1704): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x9, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x48}}, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1705): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000007c0)={r2, 0x5}, &(0x7f0000001800)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) kernel console output (not intermixed with test programs): d IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.160028][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.251993][ T3408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.252029][ T3408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.349615][ T5856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 88.428880][ T3408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.428912][ T3408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.796777][ T5870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.832769][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 88.965812][ T5874] bond1: Invalid ad_actor_system MAC address. [ 88.965856][ T5874] bond1: option ad_actor_system: invalid value (1) [ 89.008251][ T5874] bond1 (unregistering): Released all slaves [ 89.090220][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 89.131581][ T5890] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.330064][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 89.446441][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 89.446498][ T5910] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 89.480908][ T5910] Zero length message leads to an empty skb [ 90.328128][ T5941] netlink: 'syz.1.41': attribute type 8 has an invalid length. [ 90.328165][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 90.349432][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.351239][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.400234][ T5942] netlink: 36 bytes leftover after parsing attributes in process `syz.1.41'. [ 90.468262][ T5945] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 90.478047][ T5945] netlink: 'syz.4.44': attribute type 3 has an invalid length. [ 90.485800][ T5945] netlink: 172 bytes leftover after parsing attributes in process `syz.4.44'. [ 90.495267][ T5945] NCSI netlink: No device for ifindex 813332851 [ 90.766387][ T5958] digital: digital_start_poll: Unknown protocol [ 90.806720][ T5969] netlink: 48 bytes leftover after parsing attributes in process `syz.2.49'. [ 90.983438][ T5981] netlink: 'syz.3.51': attribute type 23 has an invalid length. [ 91.131274][ T5994] netlink: 'syz.3.51': attribute type 23 has an invalid length. [ 91.875856][ T989] cfg80211: failed to load regulatory.db [ 92.074441][ T6040] syzkaller0: entered promiscuous mode [ 92.074490][ T6040] syzkaller0: entered allmulticast mode [ 94.214810][ T6004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.483186][ T6044] bridge1: entered promiscuous mode [ 94.483235][ T6044] bridge1: entered allmulticast mode [ 94.498491][ T6044] team0: Port device bridge1 added [ 94.542534][ T6044] bridge0: port 3(team0) entered blocking state [ 94.542759][ T6044] bridge0: port 3(team0) entered disabled state [ 94.552187][ T6044] team0: entered allmulticast mode [ 94.552278][ T6044] team_slave_0: entered allmulticast mode [ 94.552350][ T6044] team_slave_1: entered allmulticast mode [ 94.600900][ T6044] team0: entered promiscuous mode [ 94.607313][ T6044] team_slave_0: entered promiscuous mode [ 94.613503][ T6044] team_slave_1: entered promiscuous mode [ 94.620639][ T6044] bridge0: port 3(team0) entered blocking state [ 94.620801][ T6044] bridge0: port 3(team0) entered forwarding state [ 94.791710][ T6057] syzkaller0: entered promiscuous mode [ 94.791750][ T6057] syzkaller0: entered allmulticast mode [ 94.805969][ T6057] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 94.955565][ T6071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.392389][ T6098] __nla_validate_parse: 2 callbacks suppressed [ 95.400552][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.78'. [ 95.951715][ T6120] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 96.174054][ T6135] IPv6: sit1: Disabled Multicast RS [ 96.204932][ T6135] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 96.260892][ T6146] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 96.327440][ T6149] netlink: 'syz.4.90': attribute type 32 has an invalid length. [ 96.335757][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 96.505371][ T6149] bond1: Setting coupled_control to off (0) [ 96.571415][ T6160] Bluetooth: MGMT ver 1.23 [ 96.930172][ T6189] tipc: Started in network mode [ 96.930221][ T6189] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 96.950291][ T6189] tipc: Enabled bearer , priority 10 [ 96.992152][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 97.275085][ T6212] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 97.527526][ T6220] IPv6: NLM_F_REPLACE set, but no existing node found! [ 97.747007][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.103'. [ 97.920244][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 97.936903][ T5751] tipc: Node number set to 4269801488 [ 98.491929][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 98.491981][ T6273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 98.676203][ T6281] netlink: 'syz.2.118': attribute type 2 has an invalid length. [ 98.764332][ T6287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'. [ 98.780749][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 98.944840][ T6294] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.956531][ T6295] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.040310][ T6299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.245822][ T6305] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.268522][ T6305] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 99.716343][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 99.720204][ T6341] netlink: 'syz.4.133': attribute type 2 has an invalid length. [ 99.730376][ T6342] netlink: 'syz.4.133': attribute type 2 has an invalid length. [ 99.747297][ T6334] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 99.913528][ T6341] : entered promiscuous mode [ 100.104686][ T6355] netlink: 'syz.4.137': attribute type 6 has an invalid length. [ 100.104748][ T6355] netlink: 'syz.4.137': attribute type 5 has an invalid length. [ 100.586179][ T6383] __nla_validate_parse: 5 callbacks suppressed [ 100.586230][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 100.586245][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.145'. [ 100.747020][ T6386] netlink: 80 bytes leftover after parsing attributes in process `syz.0.146'. [ 100.965784][ T6391] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 100.974871][ T12] IPVS: starting estimator thread 0... [ 100.988824][ T6391] netlink: 'syz.1.148': attribute type 21 has an invalid length. [ 100.988866][ T6391] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.989133][ T6391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.989151][ T6391] IPv6: NLM_F_CREATE should be set when creating new route [ 100.989231][ T6391] IPv6: NLM_F_CREATE should be set when creating new route [ 100.989263][ T6391] IPv6: NLM_F_CREATE should be set when creating new route [ 101.084740][ T6392] IPVS: using max 24 ests per chain, 57600 per kthread [ 101.214531][ T6400] netlink: 116 bytes leftover after parsing attributes in process `syz.4.151'. [ 101.302553][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 101.318457][ T6406] netlink: 44 bytes leftover after parsing attributes in process `syz.1.153'. [ 101.687660][ T6409] syzkaller0: entered promiscuous mode [ 101.693434][ T6409] syzkaller0: entered allmulticast mode [ 101.897127][ T6441] netlink: 56 bytes leftover after parsing attributes in process `syz.0.161'. [ 103.327614][ T6469] netlink: 244 bytes leftover after parsing attributes in process `syz.4.168'. [ 103.507711][ T6471] dvmrp8: entered allmulticast mode [ 103.701280][ T6492] sctp: [Deprecated]: syz.0.175 (pid 6492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.701280][ T6492] Use struct sctp_sack_info instead [ 103.730656][ T6497] netlink: 'syz.1.176': attribute type 21 has an invalid length. [ 103.732697][ T6498] sctp: [Deprecated]: syz.0.175 (pid 6498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.732697][ T6498] Use struct sctp_sack_info instead [ 103.755711][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 103.871284][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 104.288456][ T6516] team0: Port device team_slave_0 removed [ 104.553657][ T6529] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 104.960399][ T6545] netlink: Conntrack attr has 1 unknown bytes [ 104.960445][ T6545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.026501][ T6542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.572272][ T6565] block nbd0: Unsupported socket: should be TCP or UNIX. [ 105.606872][ T6563] netlink: 'syz.0.196': attribute type 3 has an invalid length. [ 105.972256][ T6577] netlink: 'syz.1.201': attribute type 17 has an invalid length. [ 105.972291][ T6577] __nla_validate_parse: 7 callbacks suppressed [ 105.972313][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 105.972340][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 106.287319][ T6606] ip_tables: iptables: counters copy to user failed while replacing table [ 108.873913][ T6578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.142640][ T6624] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 1, id = 0 [ 109.149974][ T6621] netlink: 'syz.0.211': attribute type 3 has an invalid length. [ 109.282351][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'. [ 109.305355][ T6626] xt_CT: No such helper "netbios-ns" [ 109.331488][ T6625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.212'. [ 109.521423][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 109.694890][ T6654] netlink: 'syz.4.217': attribute type 11 has an invalid length. [ 109.695089][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.217'. [ 112.469171][ T6643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.715134][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'. [ 112.737253][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 112.740125][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 112.801660][ T6679] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 112.935051][ T6687] syzkaller1: entered promiscuous mode [ 112.935133][ T6687] syzkaller1: entered allmulticast mode [ 113.000980][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 113.001024][ T6687] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 113.079915][ T6694] netlink: 104 bytes leftover after parsing attributes in process `syz.4.230'. [ 113.089746][ T6694] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 113.104834][ T6694] netlink: 104 bytes leftover after parsing attributes in process `syz.4.230'. [ 113.115539][ T6694] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 113.359709][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 113.552294][ T6718] netlink: 284 bytes leftover after parsing attributes in process `syz.4.237'. [ 113.704874][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 113.761115][ T6731] bond1 (unregistering): Released all slaves [ 114.832734][ T6786] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 114.931573][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.996461][ T6800] veth0: entered promiscuous mode [ 115.061301][ T6790] veth0: left promiscuous mode [ 115.142634][ T6809] ip6t_ah: unknown flags 5 [ 115.302055][ T6818] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 115.309978][ T6818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.259'. [ 115.321996][ T6818] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20000 [ 115.329111][ T6818] xt_hashlimit: max too large, truncated to 1048576 [ 115.336789][ T6818] No such timeout policy "syz1" [ 115.482100][ T6838] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 115.496244][ T6838] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20003 [ 115.612460][ T6840] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 115.614971][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.618370][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.618487][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.618565][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.978280][ T6860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.028505][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x29 [ 118.931372][ T6854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.330232][ T6904] __nla_validate_parse: 3 callbacks suppressed [ 119.330471][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 119.502038][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.502260][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.502464][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.502697][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.503784][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.504146][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.506604][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.507930][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.510316][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 119.510971][ T6910] openvswitch: netlink: Flow key attr not present in new flow. [ 120.026519][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 120.044166][ T6924] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 120.053350][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 120.131859][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 120.163246][ T6931] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.326863][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 120.472394][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.294'. [ 120.489843][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.294'. [ 120.515007][ T6945] syzkaller0: entered promiscuous mode [ 120.515058][ T6945] syzkaller0: entered allmulticast mode [ 120.579165][ T6948] netlink: 92 bytes leftover after parsing attributes in process `syz.2.295'. [ 120.640757][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 121.036394][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 121.571593][ T6994] netlink: 'syz.1.309': attribute type 5 has an invalid length. [ 122.151874][ T4935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.159628][ T4935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.161507][ T4935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.167321][ T4935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.168410][ T4935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.915448][ T3408] wlan1: Trigger new scan to find an IBSS to join [ 123.022058][ T7062] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.203057][ T7044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.296783][ T7075] gtp0: entered promiscuous mode [ 123.296825][ T7075] gtp0: entered allmulticast mode [ 123.709909][ T7090] sctp: [Deprecated]: syz.0.329 (pid 7090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.709909][ T7090] Use struct sctp_sack_info instead [ 124.125436][ T7094] syzkaller0: entered promiscuous mode [ 124.133264][ T7094] syzkaller0: entered allmulticast mode [ 124.284064][ T4935] Bluetooth: hci5: command tx timeout [ 124.596972][ T7142] __nla_validate_parse: 10 callbacks suppressed [ 124.604909][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 125.683605][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.861851][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.876314][ T12] wlan1: Trigger new scan to find an IBSS to join [ 125.881041][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.881386][ T7021] bridge_slave_0: entered allmulticast mode [ 125.897500][ T7021] bridge_slave_0: entered promiscuous mode [ 125.930624][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 125.944392][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.944565][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.958440][ T7021] bridge_slave_1: entered allmulticast mode [ 125.972037][ T7021] bridge_slave_1: entered promiscuous mode [ 126.125686][ T7021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.144471][ T7021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.263099][ T7021] team0: Port device team_slave_0 added [ 126.271895][ T7021] team0: Port device team_slave_1 added [ 126.353159][ T4935] Bluetooth: hci5: command tx timeout [ 126.386178][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.386209][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.386232][ T7021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.404959][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.405017][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.405093][ T7021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.546196][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 126.608232][ T7173] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 126.616487][ T7173] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.347'. [ 126.631107][ T7021] hsr_slave_0: entered promiscuous mode [ 126.638650][ T7021] hsr_slave_1: entered promiscuous mode [ 126.648549][ T7021] debugfs: 'hsr0' already exists in 'hsr' [ 126.648578][ T7021] Cannot create hsr debugfs directory [ 126.744727][ T7180] netlink: 'syz.0.349': attribute type 12 has an invalid length. [ 126.763597][ T7182] TCP: TCP_TX_DELAY enabled [ 126.789178][ T7184] netlink: 'syz.0.349': attribute type 12 has an invalid length. [ 126.880447][ T7180] bond1: option primary_reselect: invalid value (255) [ 126.880726][ T7187] netlink: 72 bytes leftover after parsing attributes in process `syz.1.348'. [ 126.880764][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 126.905777][ T7187] net_ratelimit: 23 callbacks suppressed [ 126.905821][ T7187] openvswitch: netlink: Message has 8 unknown bytes. [ 126.931603][ T7180] bond1 (unregistering): Released all slaves [ 127.093865][ T7184] bond1: option primary_reselect: invalid value (255) [ 127.112662][ T7184] bond1 (unregistering): Released all slaves [ 127.181936][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.355'. [ 127.194759][ T7200] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 127.379440][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 127.401400][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 127.607630][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 127.712506][ T7215] syzkaller0: entered promiscuous mode [ 127.712552][ T7215] syzkaller0: entered allmulticast mode [ 128.442991][ T4935] Bluetooth: hci5: command tx timeout [ 128.915714][ T49] wlan1: Trigger new scan to find an IBSS to join [ 128.990155][ T7210] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 129.201261][ T7246] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 129.285625][ T7021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.314979][ T7021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.399790][ T7021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.418728][ T7021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.428086][ T7021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.439745][ T7021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.451741][ T7021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.465279][ T7021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.696284][ T7269] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 129.717143][ T7270] netlink: 'syz.2.374': attribute type 11 has an invalid length. [ 129.725079][ T7270] __nla_validate_parse: 8 callbacks suppressed [ 129.731436][ T7270] netlink: 224 bytes leftover after parsing attributes in process `syz.2.374'. [ 129.834796][ T12] wlan1: Creating new IBSS network, BSSID 52:b4:91:fb:f4:af [ 129.854947][ T7279] netlink: 'syz.4.375': attribute type 2 has an invalid length. [ 129.986374][ T7021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.028255][ T7021] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.056988][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.057284][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.090041][ T3389] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.090273][ T3389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.191562][ T7292] netlink: 120 bytes leftover after parsing attributes in process `syz.4.378'. [ 130.521936][ T4935] Bluetooth: hci5: command tx timeout [ 130.765684][ T7316] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 130.765733][ T7316] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 131.148988][ T7021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.310997][ T7351] netlink: 'syz.1.390': attribute type 2 has an invalid length. [ 131.311037][ T7351] netlink: 188 bytes leftover after parsing attributes in process `syz.1.390'. [ 131.618301][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 131.642527][ T7366] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 131.762500][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 131.807314][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 131.889847][ T7371] openvswitch: netlink: Missing key (keys=40, expected=100) [ 132.016305][ T7388] netlink: 72 bytes leftover after parsing attributes in process `syz.4.399'. [ 132.042742][ T7388] netlink: 72 bytes leftover after parsing attributes in process `syz.4.399'. [ 132.062031][ T7388] netlink: 72 bytes leftover after parsing attributes in process `syz.4.399'. [ 132.062226][ T7388] netlink: 72 bytes leftover after parsing attributes in process `syz.4.399'. [ 132.100983][ T7388] openvswitch: netlink: Missing key (keys=40, expected=100) [ 132.187772][ T7021] veth0_vlan: entered promiscuous mode [ 132.208520][ T7021] veth1_vlan: entered promiscuous mode [ 132.251118][ T7392] netlink: 'syz.2.402': attribute type 29 has an invalid length. [ 132.264835][ T7021] veth0_macvtap: entered promiscuous mode [ 132.279800][ T7021] veth1_macvtap: entered promiscuous mode [ 132.306819][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.332362][ T7392] netlink: 'syz.2.402': attribute type 29 has an invalid length. [ 132.344421][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.440645][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.441333][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.441414][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.441488][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.559387][ T7405] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 132.567233][ T7405] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 132.616141][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.616177][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.659580][ T7407] vlan3: entered promiscuous mode [ 132.667636][ T7407] geneve1: entered promiscuous mode [ 132.673410][ T7407] vlan3: entered allmulticast mode [ 132.673426][ T7407] geneve1: entered allmulticast mode [ 132.809472][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.809503][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.839075][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839202][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.060432][ T7431] netlink: 'syz.1.410': attribute type 33 has an invalid length. [ 133.214030][ T7443] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 133.933337][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933396][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933442][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933475][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933507][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933596][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933630][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933663][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 133.933695][ T7475] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 134.150175][ T7486] sctp: [Deprecated]: syz.4.423 (pid 7486) Use of int in max_burst socket option. [ 134.150175][ T7486] Use struct sctp_assoc_value instead [ 135.235433][ T7521] batadv_slave_0: entered promiscuous mode [ 135.387012][ T7549] __nla_validate_parse: 37 callbacks suppressed [ 135.392701][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.438'. [ 135.394187][ T7549] netlink: 14 bytes leftover after parsing attributes in process `syz.5.438'. [ 135.416215][ T7552] SET target dimension over the limit! [ 135.430440][ T7553] netlink: 300 bytes leftover after parsing attributes in process `syz.0.439'. [ 135.730397][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.743725][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.854536][ T7520] batadv_slave_0: left promiscuous mode [ 135.873053][ T3408] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.873104][ T3408] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.873148][ T3408] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.873182][ T3408] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.220196][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 136.271049][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 136.987337][ T7607] syz_tun: entered allmulticast mode [ 136.996510][ T7606] lo: entered allmulticast mode [ 137.819471][ T7605] syz_tun: left allmulticast mode [ 138.277685][ T7555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.489233][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 138.509349][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 138.529982][ T7616] team0 (unregistering): Port device team_slave_1 removed [ 138.566140][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.451'. [ 138.566200][ T7621] netlink: 48 bytes leftover after parsing attributes in process `syz.5.451'. [ 138.634377][ T3408] IPVS: starting estimator thread 0... [ 138.650858][ T7621] geneve2: entered promiscuous mode [ 138.650900][ T7621] geneve2: entered allmulticast mode [ 138.684601][ T7615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.734926][ T7633] IPVS: using max 27 ests per chain, 64800 per kthread [ 138.802375][ T7637] sctp: [Deprecated]: syz.5.456 (pid 7637) Use of int in maxseg socket option. [ 138.802375][ T7637] Use struct sctp_assoc_value instead [ 139.037540][ T7642] net_ratelimit: 10231 callbacks suppressed [ 139.037587][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.037663][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.037754][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.037874][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.037959][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.044228][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.044270][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.044305][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.044339][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.044373][ T7642] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.323489][ T7661] nftables ruleset with unbound set [ 139.332013][ T7663] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 139.389484][ T7663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.409235][ T7666] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 139.919631][ T7684] xt_ecn: cannot match TCP bits for non-tcp packets [ 140.349650][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.475'. [ 140.386491][ T7701] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 140.436939][ T4935] block nbd0: Receive control failed (result -32) [ 140.488125][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 140.619411][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 140.801245][ T7727] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 140.801307][ T7727] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 140.801348][ T7727] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 140.851948][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 140.940729][ T7734] bond4: entered promiscuous mode [ 140.940766][ T7734] bond4: entered allmulticast mode [ 141.056904][ T7741] netlink: 256 bytes leftover after parsing attributes in process `syz.5.483'. [ 141.951026][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.492'. [ 142.059223][ T7771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.211032][ T7782] netlink: 'syz.0.493': attribute type 4 has an invalid length. [ 142.377802][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 142.377883][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 142.653322][ T7802] syzkaller0: entered promiscuous mode [ 142.653367][ T7802] syzkaller0: entered allmulticast mode [ 142.741198][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.501'. [ 142.908451][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 142.934809][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.501'. [ 143.253457][ T7827] xt_LOG: prefix is not null-terminated [ 143.262271][ T7828] xt_LOG: prefix is not null-terminated [ 143.350295][ T7833] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 143.509680][ T7840] syzkaller0: entered promiscuous mode [ 143.509793][ T7840] syzkaller0: entered allmulticast mode [ 144.779969][ T7909] Bluetooth: MGMT ver 1.23 [ 145.368882][ T7938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.599247][ T7950] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 145.612613][ T7950] batman_adv: batadv0: Adding interface: gretap1 [ 145.619354][ T7950] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.648420][ T7950] batman_adv: batadv0: Interface activated: gretap1 [ 145.776598][ T7925] FAULT_INJECTION: forcing a failure. [ 145.776598][ T7925] name failslab, interval 1, probability 0, space 0, times 1 [ 145.776668][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.2.532 Not tainted syzkaller #0 PREEMPT(full) [ 145.776690][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.776707][ T7925] Call Trace: [ 145.776718][ T7925] [ 145.776726][ T7925] dump_stack_lvl+0xe8/0x150 [ 145.776757][ T7925] should_fail_ex+0x410/0x560 [ 145.776790][ T7925] should_failslab+0xa8/0x100 [ 145.776815][ T7925] __kmalloc_noprof+0xfe/0x720 [ 145.776844][ T7925] ? bpf_test_init+0x9f/0x150 [ 145.776864][ T7925] ? bpf_test_init+0x9f/0x150 [ 145.776890][ T7925] bpf_test_init+0x9f/0x150 [ 145.776916][ T7925] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 145.776953][ T7925] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.776982][ T7925] ? __fget_files+0x2a/0x420 [ 145.777010][ T7925] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.777035][ T7925] bpf_prog_test_run+0x2c5/0x340 [ 145.777060][ T7925] __sys_bpf+0xa22/0xd90 [ 145.777136][ T7925] ? __pfx___sys_bpf+0x10/0x10 [ 145.777227][ T7925] ? __fget_files+0x2a/0x420 [ 145.777339][ T7925] ? ksys_write+0x242/0x270 [ 145.777421][ T7925] ? __pfx_ksys_write+0x10/0x10 [ 145.777497][ T7925] __x64_sys_bpf+0xba/0xd0 [ 145.777561][ T7925] do_syscall_64+0x166/0x520 [ 145.777627][ T7925] ? trace_irq_disable+0x3b/0x140 [ 145.777672][ T7925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.777743][ T7925] ? clear_bhb_loop+0x70/0xc0 [ 145.777799][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.777846][ T7925] RIP: 0033:0x7f33d619e159 [ 145.777905][ T7925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.777946][ T7925] RSP: 002b:00007f33d7062028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.778001][ T7925] RAX: ffffffffffffffda RBX: 00007f33d6425fa0 RCX: 00007f33d619e159 [ 145.778038][ T7925] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 145.778068][ T7925] RBP: 00007f33d7062090 R08: 0000000000000000 R09: 0000000000000000 [ 145.778098][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.778126][ T7925] R13: 00007f33d6426038 R14: 00007f33d6425fa0 R15: 00007fffc8c907d8 [ 145.778227][ T7925] [ 146.116440][ T7963] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 146.116483][ T7963] __nla_validate_parse: 9 callbacks suppressed [ 146.116514][ T7963] netlink: 84 bytes leftover after parsing attributes in process `syz.1.542'. [ 146.116581][ T7963] netlink: 'syz.1.542': attribute type 2 has an invalid length. [ 146.116617][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 146.300673][ T7976] netlink: 168 bytes leftover after parsing attributes in process `syz.1.547'. [ 146.438260][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 146.738299][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 146.891410][ T8013] netlink: 'syz.0.556': attribute type 5 has an invalid length. [ 146.903925][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 147.252479][ T8024] net_ratelimit: 16961 callbacks suppressed [ 147.252529][ T8024] netlink: NAT attribute has 4 unknown bytes [ 147.252553][ T8024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.370198][ T8030] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 147.610363][ T8043] IPVS: Unknown mcast interface: rose0 [ 147.787672][ T8051] Cannot find map_set index 2 as target [ 148.187846][ T8076] netlink: 'syz.4.573': attribute type 21 has an invalid length. [ 148.187885][ T8076] netlink: 128 bytes leftover after parsing attributes in process `syz.4.573'. [ 148.240419][ T8081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 148.343581][ T8081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.574'. [ 148.404502][ T8076] netlink: 3 bytes leftover after parsing attributes in process `syz.4.573'. [ 148.479409][ T8079] bridge2: entered promiscuous mode [ 148.479528][ T8079] bridge2: entered allmulticast mode [ 148.555778][ T8094] block nbd2: NBD_DISCONNECT [ 148.760407][ T8101] x_tables: duplicate underflow at hook 1 [ 148.808688][ T8105] block nbd1: not configured, cannot reconfigure [ 148.817068][ T8098] IPv6: addrconf: prefix option has invalid lifetime [ 148.853055][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.577'. [ 149.309354][ T8112] nbd1: detected capacity change from 0 to 63 [ 149.425776][ T8126] netlink: 'syz.4.581': attribute type 12 has an invalid length. [ 149.425818][ T8126] netlink: 'syz.4.581': attribute type 29 has an invalid length. [ 149.425856][ T8126] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 149.432298][ T4935] block nbd1: Receive control failed (result -104) [ 149.501275][ T8133] openvswitch: netlink: IP tunnel dst address not specified [ 149.501325][ T8133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.950668][ T8150] pim6reg: entered allmulticast mode [ 149.961807][ T8155] pim6reg: left allmulticast mode [ 150.400250][ T8179] xt_ecn: cannot match TCP bits for non-tcp packets [ 150.921021][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921021][ T8198] Use struct sctp_sack_info instead [ 150.921105][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921105][ T8198] Use struct sctp_sack_info instead [ 150.921308][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921308][ T8198] Use struct sctp_sack_info instead [ 150.921423][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921423][ T8198] Use struct sctp_sack_info instead [ 150.921527][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921527][ T8198] Use struct sctp_sack_info instead [ 150.921628][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921628][ T8198] Use struct sctp_sack_info instead [ 150.921734][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921734][ T8198] Use struct sctp_sack_info instead [ 150.921826][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921826][ T8198] Use struct sctp_sack_info instead [ 150.921932][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.921932][ T8198] Use struct sctp_sack_info instead [ 150.922035][ T8198] sctp: [Deprecated]: syz.0.602 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.922035][ T8198] Use struct sctp_sack_info instead [ 151.288010][ T8215] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 151.297497][ T8215] __nla_validate_parse: 8 callbacks suppressed [ 151.298173][ T8215] netlink: 152 bytes leftover after parsing attributes in process `syz.2.605'. [ 151.472278][ T8215] .`: renamed from bond0 (while UP) [ 151.995265][ T8246] lo: entered promiscuous mode [ 151.997301][ T8246] tunl0: entered promiscuous mode [ 152.011417][ T8246] gre0: entered promiscuous mode [ 152.049640][ T8246] gretap0: entered promiscuous mode [ 152.080420][ T8246] erspan0: entered promiscuous mode [ 152.108576][ T8246] ip_vti0: entered promiscuous mode [ 152.284288][ T8253] netlink: zone id is out of range [ 152.296611][ T8253] netlink: zone id is out of range [ 152.297039][ T8253] netlink: zone id is out of range [ 152.297642][ T8253] netlink: zone id is out of range [ 152.297849][ T8253] netlink: zone id is out of range [ 152.298051][ T8253] netlink: zone id is out of range [ 152.298225][ T8253] netlink: zone id is out of range [ 152.298399][ T8253] netlink: zone id is out of range [ 152.319602][ T8253] netlink: zone id is out of range [ 152.319614][ T8253] netlink: zone id is out of range [ 152.471030][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 152.641745][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.618'. [ 152.686918][ T8258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.767211][ T8262] vlan2: entered promiscuous mode [ 152.767250][ T8262] bond0: entered promiscuous mode [ 152.795077][ T8262] vlan2: entered allmulticast mode [ 152.795115][ T8262] bond0: entered allmulticast mode [ 152.884346][ T8280] netlink: 48 bytes leftover after parsing attributes in process `syz.4.617'. [ 152.941636][ T8270] bond0: (slave gtp1): refused to change device type [ 152.987189][ T8283] atomic_op ffff8880555aa9e0 conn xmit_atomic 0000000000000000 [ 153.001230][ T8288] netlink: 48 bytes leftover after parsing attributes in process `syz.4.617'. [ 153.181583][ T8283] bond0: entered promiscuous mode [ 153.181624][ T8283] bond_slave_0: entered promiscuous mode [ 153.184805][ T8283] bond_slave_1: entered promiscuous mode [ 153.193665][ T8283] batadv0: entered promiscuous mode [ 153.206630][ T8283] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 153.220033][ T8283] bond0: left promiscuous mode [ 153.220082][ T8283] bond_slave_0: left promiscuous mode [ 153.220615][ T8283] bond_slave_1: left promiscuous mode [ 153.222103][ T8283] batadv0: left promiscuous mode [ 153.356806][ T8293] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.798973][ T8312] erspan0: entered promiscuous mode [ 154.640678][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 154.648218][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 155.106543][ T8352] netlink: 64 bytes leftover after parsing attributes in process `syz.0.637'. [ 155.204632][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.637'. [ 155.204695][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.637'. [ 155.324374][ T8360] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 155.448436][ T8360] team0: entered allmulticast mode [ 155.448491][ T8360] team_slave_0: entered allmulticast mode [ 155.448530][ T8360] team_slave_1: entered allmulticast mode [ 155.460682][ T8360] bridge0: port 3(team0) entered blocking state [ 155.461007][ T8360] bridge0: port 3(team0) entered disabled state [ 155.506890][ T8360] team0: entered promiscuous mode [ 155.506938][ T8360] team_slave_0: entered promiscuous mode [ 155.507428][ T8360] team_slave_1: entered promiscuous mode [ 155.526673][ T8360] bridge0: port 3(team0) entered blocking state [ 155.526967][ T8360] bridge0: port 3(team0) entered forwarding state [ 156.148415][ T8379] veth0: entered promiscuous mode [ 156.229170][ T8378] veth0: left promiscuous mode [ 157.632690][ T8423] xt_TCPMSS: Only works on TCP SYN packets [ 157.676517][ T8423] net_ratelimit: 1392 callbacks suppressed [ 157.676578][ T8423] netlink: NAT attribute has 8 unknown bytes [ 157.676638][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.751666][ T8423] __nla_validate_parse: 6 callbacks suppressed [ 157.751714][ T8423] netlink: 36 bytes leftover after parsing attributes in process `syz.5.654'. [ 157.828051][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 157.863402][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 158.235532][ T8445] netlink: 'syz.0.660': attribute type 3 has an invalid length. [ 158.235765][ T8445] netlink: 244 bytes leftover after parsing attributes in process `syz.0.660'. [ 158.668513][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 159.222819][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'. [ 159.467333][ T8484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.669'. [ 159.468454][ T8484] netlink: 548 bytes leftover after parsing attributes in process `syz.0.669'. [ 159.903021][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 160.416872][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'. [ 160.416941][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'. [ 160.921215][ T8518] can: request_module (can-proto-4) failed. [ 160.951053][ T8520] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.506849][ T8537] Bluetooth: hci0: unsupported parameter 5135 [ 161.514560][ T8537] Bluetooth: hci0: unsupported parameter 8192 [ 161.530187][ T8537] Bluetooth: hci0: unsupported parameter 5135 [ 161.543079][ T8537] Bluetooth: hci0: unsupported parameter 8192 [ 161.750148][ T4935] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 162.768200][ T8580] vlan2: entered promiscuous mode [ 162.768252][ T8580] bridge0: entered promiscuous mode [ 163.087575][ T8611] __nla_validate_parse: 6 callbacks suppressed [ 163.088273][ T8611] netlink: 112 bytes leftover after parsing attributes in process `syz.5.703'. [ 163.411741][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 163.620840][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.706'. [ 164.913139][ T3408] wlan1: Trigger new scan to find an IBSS to join [ 165.657140][ T8581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.690885][ T8627] netlink: 'syz.5.706': attribute type 1 has an invalid length. [ 165.690923][ T8627] netlink: 228 bytes leftover after parsing attributes in process `syz.5.706'. [ 165.780565][ T8634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.709'. [ 165.979277][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.710'. [ 166.088217][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 166.088251][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 166.128670][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 166.137740][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 166.137766][ T3383] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.154563][ T3408] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.171775][ T3408] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.211692][ T3408] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.281335][ T8693] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 167.891073][ T8720] syzkaller1: entered promiscuous mode [ 167.891113][ T8720] syzkaller1: entered allmulticast mode [ 168.117444][ T8726] netlink: Failed to add  helper -22 [ 168.125456][ T8726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.612567][ T8734] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 168.745947][ T8736] __nla_validate_parse: 7 callbacks suppressed [ 168.752299][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'. [ 168.821356][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 168.832503][ T8738] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 169.139879][ T8749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.741'. [ 169.154491][ T8749] netlink: 72 bytes leftover after parsing attributes in process `syz.1.741'. [ 169.159419][ T8746] netlink: 'syz.1.741': attribute type 5 has an invalid length. [ 169.340848][ T8754] netlink: 64 bytes leftover after parsing attributes in process `syz.1.742'. [ 169.668994][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 169.678290][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 169.873076][ T12] wlan1: Trigger new scan to find an IBSS to join [ 170.601987][ T8710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.797188][ T12] wlan1: Creating new IBSS network, BSSID be:f5:4e:3a:5f:e3 [ 170.839466][ T8767] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 171.072177][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.747'. [ 171.087563][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.747'. [ 171.127022][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.747'. [ 171.170352][ T8783] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:19999 [ 171.487327][ T8793] netlink: 'syz.5.755': attribute type 1 has an invalid length. [ 172.002452][ T8812] netlink: NAT attribute has 5 unknown bytes [ 172.009854][ T8812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.844335][ T8854] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 173.567054][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.568171][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.775460][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.790543][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.040988][ T8847] batman_adv: batadv0: Interface deactivated: gretap1 [ 174.083294][ T8854] __nla_validate_parse: 5 callbacks suppressed [ 174.089617][ T8854] netlink: 292 bytes leftover after parsing attributes in process `syz.5.770'. [ 174.101035][ T8853] syzkaller1: entered promiscuous mode [ 174.101819][ T8853] syzkaller1: entered allmulticast mode [ 174.124391][ T3383] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.124651][ T3383] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.124907][ T3383] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.125155][ T3383] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.440822][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.773'. [ 174.441617][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.773'. [ 174.441875][ T8875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.573239][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 174.582283][ T8877] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 174.590964][ T8877] netlink: 'syz.1.774': attribute type 2 has an invalid length. [ 174.961302][ T8905] netlink: 'syz.4.782': attribute type 2 has an invalid length. [ 175.255842][ T8920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.786'. [ 175.624782][ T8937] netlink: 104 bytes leftover after parsing attributes in process `syz.4.791'. [ 175.696936][ T8938] ip_tables: iptables: counters copy to user failed while replacing table [ 177.782352][ T8893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.814644][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 178.087758][ T8953] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 178.127028][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 178.140290][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 178.257333][ T8969] netlink: 'syz.1.800': attribute type 29 has an invalid length. [ 178.364040][ T8970] netlink: 'syz.1.800': attribute type 29 has an invalid length. [ 178.373034][ T8972] netlink: 'syz.1.800': attribute type 29 has an invalid length. [ 178.577429][ T8978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.802'. [ 179.557208][ T2043] block nbd1: Possible stuck request ffff888026f75080: control (read@0,1024B). Runtime 30 seconds [ 179.558717][ T2043] block nbd1: Possible stuck request ffff888026f75240: control (read@1024,3072B). Runtime 30 seconds [ 179.578638][ T9018] __nla_validate_parse: 3 callbacks suppressed [ 179.578680][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 179.578709][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 179.578767][ T9018] netlink: 'syz.1.814': attribute type 15 has an invalid length. [ 179.628694][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 179.638009][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 179.647216][ T9018] netlink: 'syz.1.814': attribute type 15 has an invalid length. [ 179.657477][ T3383] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 179.657909][ T3383] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 179.658002][ T3383] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 179.658138][ T3383] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 179.800001][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 179.827207][ T9021] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 179.871484][ T9027] netlink: 'syz.1.817': attribute type 39 has an invalid length. [ 180.304289][ T9042] bridge_slave_0: left allmulticast mode [ 180.310074][ T9042] bridge_slave_0: left promiscuous mode [ 180.317948][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.341439][ T9042] bridge_slave_1: left allmulticast mode [ 180.341475][ T9042] bridge_slave_1: left promiscuous mode [ 180.341679][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.388293][ T9042] bond3: (slave veth0_to_bond): Releasing active interface [ 180.486190][ T9042] bond0: (slave bond_slave_0): Releasing backup interface [ 180.502183][ T9042] bond0: (slave bond_slave_1): Releasing backup interface [ 180.511554][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.520340][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.528823][ T9042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.245963][ T9060] bridge0: port 3(syz_tun) entered blocking state [ 181.252697][ T9060] bridge0: port 3(syz_tun) entered disabled state [ 181.259785][ T9060] syz_tun: entered allmulticast mode [ 181.269500][ T9060] syz_tun: entered promiscuous mode [ 181.276126][ T9060] bridge0: port 3(syz_tun) entered blocking state [ 181.276240][ T9060] bridge0: port 3(syz_tun) entered forwarding state [ 181.810430][ T8987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.109790][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 182.218992][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 182.231991][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 182.232138][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 182.232282][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 183.555960][ T9140] syzkaller0: entered promiscuous mode [ 183.562855][ T9140] syzkaller0: entered allmulticast mode [ 183.608173][ T9139] tipc: Started in network mode [ 183.608694][ T9139] tipc: Node identity 4612cd9435f5, cluster identity 4711 [ 183.609978][ T9139] tipc: Enabled bearer , priority 0 [ 183.793970][ T9139] tipc: Resetting bearer [ 184.197487][ T9159] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 184.416519][ T9159] netlink: 'syz.5.841': attribute type 1 has an invalid length. [ 184.416559][ T9159] netlink: 'syz.5.841': attribute type 1 has an invalid length. [ 184.615203][ T9176] __nla_validate_parse: 43 callbacks suppressed [ 184.615316][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 184.984389][ T9131] tipc: Resetting bearer [ 185.328882][ T9131] tipc: Disabling bearer [ 185.402703][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 185.419993][ T8870] tipc: Node number set to 1944571284 [ 185.593470][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 185.641662][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 185.667431][ T9190] nbd: couldn't find device at index 15663104 [ 185.862629][ T9195] netlink: 27 bytes leftover after parsing attributes in process `syz.1.848'. [ 186.100455][ T9208] netlink: 'syz.1.853': attribute type 7 has an invalid length. [ 186.103743][ T9208] netlink: 'syz.1.853': attribute type 8 has an invalid length. [ 186.641413][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.641480][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.641532][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.641572][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.641634][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.682994][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.683067][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.683120][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.683162][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 186.683201][ T9202] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 187.105710][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.860'. [ 187.288316][ T9237] veth4: entered promiscuous mode [ 187.297556][ T9237] veth4: entered allmulticast mode [ 187.595169][ T9243] syzkaller1: entered promiscuous mode [ 187.595973][ T9243] syzkaller1: entered allmulticast mode [ 187.693089][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 187.726283][ T9263] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 187.726565][ T9263] netlink: 'syz.0.867': attribute type 4 has an invalid length. [ 187.726609][ T9263] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.867'. [ 187.778895][ T9266] bridge_slave_1: left promiscuous mode [ 187.785084][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.823579][ T9270] netlink: 64 bytes leftover after parsing attributes in process `syz.0.867'. [ 187.835706][ T9266] bridge_slave_0: left allmulticast mode [ 187.838911][ T9266] bridge_slave_0: left promiscuous mode [ 187.848835][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.125839][ T9271] syzkaller1: entered promiscuous mode [ 188.126738][ T9271] syzkaller1: entered allmulticast mode [ 188.480743][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 188.776967][ T9298] netlink: 'syz.5.877': attribute type 2 has an invalid length. [ 188.921040][ T9301] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 189.017759][ T9301] bond3 (unregistering): Released all slaves [ 189.263886][ T9312] syzkaller1: entered promiscuous mode [ 189.266014][ T9312] syzkaller1: entered allmulticast mode [ 189.486252][ T9318] bond1 (unregistering): Released all slaves [ 189.748557][ T9330] netlink: 'syz.2.884': attribute type 10 has an invalid length. [ 189.848258][ T9335] xt_ecn: cannot match TCP bits for non-tcp packets [ 189.884159][ T9318] bond1 (unregistering): Released all slaves [ 190.044795][ T9330] team0: Port device vlan0 added [ 190.152542][ T9318] bond1 (unregistering): Released all slaves [ 190.283899][ T9348] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 190.862102][ T9370] __nla_validate_parse: 5 callbacks suppressed [ 190.872491][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 190.882457][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.894'. [ 190.929846][ T3389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.012938][ T159] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.015619][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.015714][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.057178][ T9380] netlink: 56132 bytes leftover after parsing attributes in process `syz.1.896'. [ 191.257348][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 191.257388][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 191.257459][ T9394] netlink: 'syz.4.899': attribute type 4 has an invalid length. [ 191.384183][ T9397] netlink: 108 bytes leftover after parsing attributes in process `syz.2.900'. [ 191.789792][ T9410] netlink: 68 bytes leftover after parsing attributes in process `syz.4.905'. [ 191.828260][ T9416] netlink: 68 bytes leftover after parsing attributes in process `syz.4.905'. [ 191.862269][ T9418] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 191.949558][ T9418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.100622][ T9420] bond4: (slave veth0_to_bond): making interface the new active one [ 192.137439][ T9420] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.282553][ T9432] net_ratelimit: 3502 callbacks suppressed [ 192.288691][ T9432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.999500][ T9459] netlink: 64 bytes leftover after parsing attributes in process `syz.0.920'. [ 193.432715][ T9472] bond2: option updelay: invalid value (18446744073709551615) [ 193.445765][ T9472] bond2: option updelay: allowed values 0 - 2147483647 [ 193.455950][ T9472] bond2 (unregistering): Released all slaves [ 193.570795][ T9477] netlink: 'syz.4.925': attribute type 3 has an invalid length. [ 193.571256][ T9477] netlink: 'syz.4.925': attribute type 4 has an invalid length. [ 193.571307][ T9477] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.925'. [ 193.776941][ T9490] netlink: 'syz.2.930': attribute type 12 has an invalid length. [ 193.798855][ T9491] netlink: 'syz.2.930': attribute type 12 has an invalid length. [ 194.277014][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.277082][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.770626][ T9515] bond1: option mode: invalid value (10) [ 194.869837][ T9515] bond1 (unregistering): Released all slaves [ 195.682248][ T9546] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 196.538357][ T9564] __nla_validate_parse: 3 callbacks suppressed [ 196.538409][ T9564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.954'. [ 196.697002][ T9588] netlink: 'syz.5.956': attribute type 4 has an invalid length. [ 196.876182][ T9587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'. [ 198.324365][ T9636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.962'. [ 198.529841][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.529885][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.529918][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.529935][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.529952][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.529968][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.529985][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.530002][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.530018][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.530034][ T9642] tc action pedit 'at' offset 5 out of bounds [ 198.530063][ T9642] 0: reclassify loop, rule prio 0, protocol 800 [ 198.820063][ T9648] netlink: 25 bytes leftover after parsing attributes in process `syz.0.965'. [ 199.316189][ T9568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.451438][ T9659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.970'. [ 199.680639][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.971'. [ 199.751559][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 199.809587][ T9674] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 199.819298][ T9674] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 199.824868][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 199.837231][ T9674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.976'. [ 199.863942][ T9674] dummy0: entered promiscuous mode [ 200.036752][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 200.062282][ T9682] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.375986][ T9698] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.860302][ T132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.477511][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 201.477749][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 201.478236][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 201.478400][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 201.478466][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 202.208265][ T9747] __nla_validate_parse: 4 callbacks suppressed [ 202.208315][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 202.311073][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.998'. [ 202.342169][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 202.443950][ T9762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1000'. [ 202.611795][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.670201][ T9771] bridge_slave_0 (unregistering): left allmulticast mode [ 202.677554][ T9771] bridge_slave_0 (unregistering): left promiscuous mode [ 202.677641][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.181241][ T9789] netlink: 'syz.1.1006': attribute type 39 has an invalid length. [ 203.512311][ T9795] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1008'. [ 203.524624][ T9794] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1008'. [ 203.649920][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 203.668364][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 203.910878][ T9814] netlink: 'syz.1.1015': attribute type 11 has an invalid length. [ 203.921875][ T9813] netlink: 'syz.1.1015': attribute type 11 has an invalid length. [ 204.124222][ T9823] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1018'. [ 204.126583][ T9822] netlink: 'syz.4.1017': attribute type 3 has an invalid length. [ 204.172444][ T9825] IPVS: length: 8 != 1152 [ 204.179644][ T9825] nbd2: detected capacity change from 0 to 63 [ 204.187827][ T9825] block nbd2: NBD_DISCONNECT [ 204.201012][ T9825] block nbd2: Disconnected due to user request. [ 204.220663][ T1714] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.220814][ T1714] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.220903][ T1714] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 204.220932][ T1714] Buffer I/O error on dev nbd2, logical block 2, async page read [ 204.220952][ T1714] Buffer I/O error on dev nbd2, logical block 3, async page read [ 204.265239][ T9825] block nbd2: shutting down sockets [ 204.274031][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.274169][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.295268][ T1714] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 204.295312][ T1714] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.295357][ T1714] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.295376][ T1714] Buffer I/O error on dev nbd2, logical block 2, async page read [ 204.295393][ T1714] Buffer I/O error on dev nbd2, logical block 3, async page read [ 204.321787][ T1714] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 204.321813][ T1714] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.321829][ T1714] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.321975][ T1714] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 204.322119][ T1714] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 204.330845][ T1714] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 204.345313][ T2043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.346978][ T2043] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.364937][ T5630] ldm_validate_partition_table(): Disk read failed. [ 204.415654][ T5630] Dev nbd2: unable to read RDB block 0 [ 204.457395][ T9820] bond1: option all_slaves_active: invalid value (222) [ 204.466996][ T9820] bond1 (unregistering): Released all slaves [ 204.475855][ T5630] nbd2: unable to read partition table [ 204.536345][ T5630] ldm_validate_partition_table(): Disk read failed. [ 204.551355][ T5630] Dev nbd2: unable to read RDB block 0 [ 204.562434][ T5630] nbd2: unable to read partition table [ 204.745923][ T9833] vlan4: entered promiscuous mode [ 204.756808][ T9833] bridge0: entered promiscuous mode [ 204.792235][ T9837] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 204.824783][ T9834] syzkaller0: entered promiscuous mode [ 204.824825][ T9834] syzkaller0: entered allmulticast mode [ 205.175497][ T9842] netlink: 'syz.0.1023': attribute type 83 has an invalid length. [ 205.842579][ T9871] Bluetooth: hci0: unsupported parameter 5135 [ 205.842618][ T9871] Bluetooth: hci0: unsupported parameter 8192 [ 205.842645][ T9871] Bluetooth: hci0: unsupported parameter 5135 [ 205.842660][ T9871] Bluetooth: hci0: unsupported parameter 8192 [ 206.080536][ T9875] netlink: 'syz.0.1032': attribute type 9 has an invalid length. [ 206.297714][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'. [ 207.364863][ T9911] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 207.376615][ T9909] macvlan0: entered promiscuous mode [ 207.842397][ T9924] __nla_validate_parse: 2 callbacks suppressed [ 207.842602][ T9924] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1046'. [ 207.842827][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1046'. [ 207.845482][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1046'. [ 207.881840][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1046'. [ 208.086569][ T9928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.750223][ T9955] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.775196][ T9954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1058'. [ 208.816888][ T9954] syzkaller1: entered promiscuous mode [ 208.822497][ T9954] syzkaller1: entered allmulticast mode [ 208.859977][ T9959] syzkaller0: entered promiscuous mode [ 208.865637][ T9959] syzkaller0: entered allmulticast mode [ 208.872646][ T9959] syzkaller0: mtu less than device minimum [ 208.887640][ T9955] openvswitch: netlink: IP tunnel dst address not specified [ 208.916810][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 209.037956][ T9967] netlink: NAT attribute has 4 unknown bytes [ 209.044319][ T9967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.123522][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 209.342363][ T9981] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 209.352450][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'. [ 209.465934][ T9981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.607277][ T9984] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 209.656276][ T2043] block nbd1: Possible stuck request ffff888026f75080: control (read@0,1024B). Runtime 60 seconds [ 209.656535][ T2043] block nbd1: Possible stuck request ffff888026f75240: control (read@1024,3072B). Runtime 60 seconds [ 209.684401][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 209.815563][ T1156] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.271351][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 210.271396][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 211.259310][T10048] netlink: 'syz.5.1083': attribute type 49 has an invalid length. [ 211.300963][T10053] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 211.302621][T10053] dummy0: entered promiscuous mode [ 211.447324][T10063] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 213.908076][T10084] __nla_validate_parse: 3 callbacks suppressed [ 213.908130][T10084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1093'. [ 213.908151][T10084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1093'. [ 214.450097][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 214.458451][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 214.497068][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 214.531652][T10118] hsr_slave_0: left promiscuous mode [ 214.564490][T10118] hsr_slave_1: left promiscuous mode [ 214.713222][T10130] netlink: 'syz.1.1103': attribute type 5 has an invalid length. [ 214.770621][T10134] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1099'. [ 214.793035][T10133] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 214.806889][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 214.978769][T10139] syzkaller0: entered promiscuous mode [ 214.978803][T10139] syzkaller0: entered allmulticast mode [ 215.062370][T10139] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1101'. [ 215.090475][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 215.162570][T10145] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.188460][T10145] bond2: (slave lo): making interface the new active one [ 215.197927][T10145] bond2: (slave lo): Enslaving as an active interface with an up link [ 215.222157][T10145] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 215.309562][T10153] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1108'. [ 215.594928][T10151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1107'. [ 215.647307][T10156] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 215.664301][T10159] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 216.414717][T10190] Bluetooth: MGMT ver 1.23 [ 216.420916][T10189] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1118'. [ 216.667721][T10195] x_tables: duplicate underflow at hook 2 [ 216.918629][T10199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.050313][T10201] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 217.054235][T10201] gretap1: entered promiscuous mode [ 217.066336][T10201] gretap1: entered allmulticast mode [ 217.481818][T10215] xt_ecn: cannot match TCP bits for non-tcp packets [ 217.615579][T10219] Cannot find del_set index 4 as target [ 217.944342][T10233] Bluetooth: hci0: unsupported parameter 5161 [ 217.950602][T10233] Bluetooth: hci0: unsupported parameter 8192 [ 217.956914][T10233] Bluetooth: hci0: unsupported parameter 5161 [ 217.963793][T10233] Bluetooth: hci0: unsupported parameter 8192 [ 218.514359][ T4935] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 218.516095][ T4935] Bluetooth: hci5: Injecting HCI hardware error event [ 218.518706][ T5629] Bluetooth: hci5: hardware error 0x00 [ 218.707105][T10258] netlink: 'syz.2.1142': attribute type 11 has an invalid length. [ 218.866996][T10264] veth0_to_bond: entered allmulticast mode [ 218.939699][T10274] __nla_validate_parse: 11 callbacks suppressed [ 218.940035][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1145'. [ 219.762350][T10300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1151'. [ 219.870151][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1153'. [ 219.889100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.038586][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1155'. [ 220.063487][T10309] netlink: 'syz.5.1155': attribute type 10 has an invalid length. [ 220.101248][T10309] team0: Port device dummy0 added [ 220.140173][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1155'. [ 220.165725][T10313] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 220.368748][T10317] C: renamed from lo (while UP) [ 220.386378][T10317] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 220.400530][T10317] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 220.673580][ T5629] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 220.935451][T10334] block nbd4: not configured, cannot reconfigure [ 220.950787][ T49] IPVS: starting estimator thread 0... [ 221.042857][T10339] IPVS: using max 28 ests per chain, 67200 per kthread [ 221.098281][T10338] bond5: entered promiscuous mode [ 221.098993][T10338] bond5: entered allmulticast mode [ 221.100152][T10338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.129727][T10350] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1168'. [ 221.151695][T10350] gtp0: entered promiscuous mode [ 221.151739][T10350] gtp0: entered allmulticast mode [ 221.339011][T10353] netlink: 'syz.2.1169': attribute type 83 has an invalid length. [ 221.420547][T10357] netdevsim netdevsim1 : renamed from netdevsim0 [ 221.571676][T10367] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1172'. [ 221.623295][T10360] xt_CT: No such helper "netbios-ns" [ 221.829972][T10372] netlink: zone id is out of range [ 221.830589][T10372] netlink: zone id is out of range [ 221.847879][T10372] netlink: zone id is out of range [ 221.850068][T10372] netlink: zone id is out of range [ 221.850362][T10372] netlink: zone id is out of range [ 221.850388][T10372] netlink: zone id is out of range [ 221.850408][T10372] netlink: zone id is out of range [ 221.850500][T10372] netlink: zone id is out of range [ 221.854654][ T9616] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.443100][T10394] syzkaller1: entered promiscuous mode [ 222.443457][T10394] syzkaller1: entered allmulticast mode [ 225.160216][T10407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1183'. [ 225.400355][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1184'. [ 225.400589][T10421] net_ratelimit: 6 callbacks suppressed [ 225.400812][T10421] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.625684][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 225.823612][T10429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.970377][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 225.970440][T10435] netlink: 'syz.4.1193': attribute type 30 has an invalid length. [ 225.970470][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 226.653860][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'. [ 226.698815][T10463] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1201'. [ 226.699014][T10463] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1201'. [ 227.249270][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 227.393385][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 227.676612][T10495] syzkaller1: entered promiscuous mode [ 227.676658][T10495] syzkaller1: entered allmulticast mode [ 228.056875][T10516] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1213'. [ 228.148345][T10521] syzkaller0: entered promiscuous mode [ 228.148389][T10521] syzkaller0: entered allmulticast mode [ 228.175844][T10516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.467675][T10534] netlink: NAT attribute has 4 unknown bytes [ 228.475232][T10534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.033405][T10593] netlink: 'syz.2.1233': attribute type 30 has an invalid length. [ 230.299855][T10601] __nla_validate_parse: 2 callbacks suppressed [ 230.300075][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 230.578747][T10618] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1237'. [ 230.605311][T10618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1237'. [ 231.524876][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.534335][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.545915][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.567313][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.575374][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.947455][T10672] netlink: get zone limit has 8 unknown bytes [ 231.981056][T10672] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 231.981097][T10672] netlink: 7490 bytes leftover after parsing attributes in process `syz.4.1247'. [ 232.339780][T10681] tipc: Enabling of bearer rejected, failed to enable media [ 232.587109][T10688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1251'. [ 232.624689][T10692] sit0: entered promiscuous mode [ 232.659472][T10692] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 232.659523][T10692] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1252'. [ 232.920158][T10698] netlink: 'syz.4.1254': attribute type 23 has an invalid length. [ 232.976771][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 233.294616][T10710] netlink: 'syz.4.1258': attribute type 10 has an invalid length. [ 233.643730][ T4935] Bluetooth: hci6: command tx timeout [ 233.865419][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 234.039916][T10648] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.048087][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.055740][T10648] bridge_slave_0: entered allmulticast mode [ 234.058484][T10648] bridge_slave_0: entered promiscuous mode [ 234.078000][T10742] atomic_op ffff8880330f31e0 conn xmit_atomic 0000000000000000 [ 234.095392][T10648] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.103391][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.103866][T10648] bridge_slave_1: entered allmulticast mode [ 234.106499][T10648] bridge_slave_1: entered promiscuous mode [ 234.300157][T10744] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1266'. [ 234.323549][T10648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.346577][T10648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.496450][T10648] team0: Port device team_slave_0 added [ 234.520339][T10648] team0: Port device team_slave_1 added [ 234.645454][T10648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.645491][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.645516][T10648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.695458][T10648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.695503][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.695532][T10648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.905778][T10648] hsr_slave_0: entered promiscuous mode [ 234.908703][T10648] hsr_slave_1: entered promiscuous mode [ 234.911159][T10648] debugfs: 'hsr0' already exists in 'hsr' [ 234.911183][T10648] Cannot create hsr debugfs directory [ 235.249009][T10762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1271'. [ 235.304126][T10762] syzkaller0: left promiscuous mode [ 235.304172][T10762] syzkaller0: left allmulticast mode [ 235.440785][T10762] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1271'. [ 235.440937][T10762] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1271'. [ 235.451083][T10762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1271'. [ 235.713055][ T4935] Bluetooth: hci6: command tx timeout [ 235.746028][T10648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.772400][T10648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.787543][T10648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.815270][T10648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.828002][T10648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.861563][T10648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.872583][T10648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.934052][T10648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.006646][T10786] netlink: 'syz.1.1277': attribute type 4 has an invalid length. [ 236.048425][T10784] netlink: 'syz.1.1277': attribute type 4 has an invalid length. [ 236.345861][T10648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.388312][T10648] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.428592][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.428817][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.430968][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 236.459465][ T9612] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.459671][ T9612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.645253][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 236.685119][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 237.154160][T10817] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 237.154229][T10817] netlink: 'syz.2.1285': attribute type 3 has an invalid length. [ 237.156800][T10817] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1285'. [ 237.191413][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 237.215216][T10817] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1285'. [ 237.232460][T10817] gretap0: entered promiscuous mode [ 237.354016][T10825] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1285'. [ 237.569848][T10834] xt_l2tp: unknown flags: 10 [ 237.601856][T10834] xt_l2tp: unknown flags: 10 [ 237.793367][ T4935] Bluetooth: hci6: command tx timeout [ 238.078832][T10848] can: request_module (can-proto-0) failed. [ 238.309490][T10859] syzkaller0: entered promiscuous mode [ 238.309537][T10859] syzkaller0: entered allmulticast mode [ 238.344949][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.026279][T10648] veth0_vlan: entered promiscuous mode [ 239.039257][T10648] veth1_vlan: entered promiscuous mode [ 239.099070][T10648] veth0_macvtap: entered promiscuous mode [ 239.121082][T10648] veth1_macvtap: entered promiscuous mode [ 239.179239][T10648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.218976][T10648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.264625][ T1009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.264696][ T1009] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.264772][ T1009] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.264881][ T1009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.538129][T10891] syzkaller0: entered promiscuous mode [ 239.538176][T10891] syzkaller0: entered allmulticast mode [ 239.626525][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.626575][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.714770][ T2043] block nbd1: Possible stuck request ffff888026f75080: control (read@0,1024B). Runtime 90 seconds [ 239.715023][ T2043] block nbd1: Possible stuck request ffff888026f75240: control (read@1024,3072B). Runtime 90 seconds [ 239.819039][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.819080][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.873220][ T4935] Bluetooth: hci6: command tx timeout [ 240.877673][T10945] __nla_validate_parse: 5 callbacks suppressed [ 240.878508][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1316'. [ 240.878552][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1316'. [ 241.544902][T10948] sctp: [Deprecated]: syz.4.1318 (pid 10948) Use of int in max_burst socket option deprecated. [ 241.544902][T10948] Use struct sctp_assoc_value instead [ 241.629126][T10955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1317'. [ 241.721824][T10951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.740858][T10951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.980968][T10965] team0: entered promiscuous mode [ 241.981033][T10965] team_slave_0: entered promiscuous mode [ 241.981608][T10965] team_slave_1: entered promiscuous mode [ 241.982114][T10965] vlan0: entered promiscuous mode [ 242.162458][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 242.169522][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 242.178799][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 242.187550][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 242.195921][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.969370][T10967] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.969608][T10967] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.970150][T10967] bridge_slave_0: entered allmulticast mode [ 242.972103][T10967] bridge_slave_0: entered promiscuous mode [ 242.975363][T10967] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.975539][T10967] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.976722][T10967] bridge_slave_1: entered allmulticast mode [ 242.978814][T10967] bridge_slave_1: entered promiscuous mode [ 243.012938][T10967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.016132][T10967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.055461][T10967] team0: Port device team_slave_0 added [ 243.091006][T10967] team0: Port device team_slave_1 added [ 243.162680][T10967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.176435][T10967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.176487][T10967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.192542][T10967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.192580][T10967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.192627][T10967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.324939][T10967] hsr_slave_0: entered promiscuous mode [ 243.327308][T10967] hsr_slave_1: entered promiscuous mode [ 243.329602][T10967] debugfs: 'hsr0' already exists in 'hsr' [ 243.329645][T10967] Cannot create hsr debugfs directory [ 243.589288][T10930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.758086][T10967] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.810902][T10967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.821236][T10967] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.872137][T10967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.890988][T10967] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.945077][T10967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.946174][T10967] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.996367][T10967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.069347][T10988] netlink: 'syz.2.1321': attribute type 4 has an invalid length. [ 244.090989][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1322'. [ 244.091041][T10996] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 244.276702][ T4935] Bluetooth: hci7: command tx timeout [ 244.495363][T10967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.555984][T10967] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.601274][T11010] IPVS: ip_vs_add_dest(): server weight less than zero [ 244.623848][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.623983][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.652841][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.652977][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.287822][ T4935] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 245.360340][T11031] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1333'. [ 245.752008][T11045] No such timeout policy "s" [ 245.761221][T11045] netlink: Failed to associated timeout policy 's' [ 245.920482][T11055] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 246.332596][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 246.354084][ T4935] Bluetooth: hci7: command tx timeout [ 246.782455][T11070] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.822530][T11078] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1341'. [ 246.822752][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 246.972573][T10967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.048487][T11080] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 247.064800][T11080] bond6 (unregistering): Released all slaves [ 247.325732][T11070] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.618026][T11070] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.864510][T11070] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.242934][ T9616] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.273577][ T9612] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.287339][T10967] veth0_vlan: entered promiscuous mode [ 248.304608][ T132] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.323738][T10967] veth1_vlan: entered promiscuous mode [ 248.331952][T11112] 8021q: VLANs not supported on ipvlan1 [ 248.348701][ T9612] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.444838][ T4935] Bluetooth: hci7: command tx timeout [ 248.456265][T10967] veth0_macvtap: entered promiscuous mode [ 248.468554][T10967] veth1_macvtap: entered promiscuous mode [ 248.545350][T11114] 8021q: VLANs not supported on ipvlan1 [ 248.559156][ T4935] Bluetooth: hci2: unexpected event 0x0e length: 0 < 3 [ 248.647516][T10967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.698153][T11126] x_tables: duplicate underflow at hook 1 [ 248.710319][T10967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.752679][T11123] tipc: Enabling of bearer rejected, failed to enable media [ 248.872953][ T1156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.995667][ T9622] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.996877][ T9622] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.996934][ T9622] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.180370][T11140] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 249.213878][T11140] bond6 (unregistering): Released all slaves [ 249.470991][T11142] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 249.485822][T11142] bond6 (unregistering): Released all slaves [ 249.582612][T11154] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1360'. [ 249.582657][T11154] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1360'. [ 249.652782][T11162] pim6reg: entered allmulticast mode [ 249.680512][T11165] pim6reg: left allmulticast mode [ 250.059610][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.059649][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.236902][T11183] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.293557][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.293763][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.333708][T11186] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1367'. [ 250.468775][T11188] tipc: Started in network mode [ 250.468817][T11188] tipc: Node identity ce406030a435, cluster identity 4711 [ 250.469015][T11188] tipc: Enabled bearer , priority 0 [ 250.489630][T11188] syzkaller0: entered promiscuous mode [ 250.497019][T11188] syzkaller0: entered allmulticast mode [ 250.513869][ T4935] Bluetooth: hci7: command tx timeout [ 250.752304][T11198] xt_CT: No such helper "snmp_trap" [ 250.822067][T11201] bridge_slave_1: default FDB implementation only supports local addresses [ 250.977431][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 250.992309][T11187] tipc: Resetting bearer [ 251.066149][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 251.095064][T11187] tipc: Disabling bearer [ 251.215268][T11228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1380'. [ 251.602497][T11242] Bluetooth: hci0: unsupported parameter 5135 [ 251.609171][T11242] Bluetooth: hci0: unsupported parameter 8192 [ 251.615423][T11242] Bluetooth: hci0: unsupported parameter 5135 [ 251.615456][T11242] Bluetooth: hci0: unsupported parameter 8192 [ 251.635326][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1385'. [ 252.154361][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1388'. [ 252.557737][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1394'. [ 252.700060][T11278] netlink: 'syz.2.1395': attribute type 21 has an invalid length. [ 252.700700][T11278] netlink: 'syz.2.1395': attribute type 6 has an invalid length. [ 252.700759][T11278] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1395'. [ 252.891638][T11287] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 253.110524][T11298] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1402'. [ 253.123867][T11294] bond5: (slave geneve3): making interface the new active one [ 253.138560][T11294] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 253.158348][ T1431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.158437][ T1431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.158475][ T1431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.176973][ T1431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.344063][T11301] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 253.359685][T11302] xt_socket: unknown flags 0x8 [ 253.431071][T11306] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1407'. [ 253.524717][T11307] netlink: 'syz.2.1407': attribute type 11 has an invalid length. [ 253.595798][T11318] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 253.623453][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 253.635448][T11320] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 253.692105][T11316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1407'. [ 253.729168][T11305] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.738833][T11305] bond6: (slave bond7): making interface the new active one [ 253.747053][T11305] bond6: (slave bond7): Enslaving as an active interface with an up link [ 253.822014][T11301] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 253.838478][T11329] ªªªªªª: renamed from vlan1 [ 254.012387][T11332] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 254.257769][T11343] netlink: Unknown nat attribute (0) [ 254.257817][T11343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.288397][T11343] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1416'. [ 254.375062][T11350] netlink: 'syz.6.1420': attribute type 18 has an invalid length. [ 254.375086][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 254.464355][T11351] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 254.585054][ T1431] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.670184][T11351] bond6: entered promiscuous mode [ 254.676631][T11351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.752402][T11358] ipvlan2: entered allmulticast mode [ 254.758649][T11358] bond6: entered allmulticast mode [ 254.803073][ T9622] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.803366][ T9622] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.009021][T11359] bond6: (slave bridge5): making interface the new active one [ 255.012579][T11359] bridge5: entered promiscuous mode [ 255.028667][T11359] bridge5: entered allmulticast mode [ 255.038074][ T159] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.125509][T11359] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 255.135511][ T59] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.499773][T11383] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 255.721287][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721358][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.357468][T11412] batman_adv: batadv0: Adding interface: veth0 [ 256.366692][T11412] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.385342][T11412] batman_adv: batadv0: Interface activated: veth0 [ 256.450684][T11413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.451491][T11413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.492242][T11413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.524470][T11413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.539967][T11413] batman_adv: batadv0: Interface deactivated: veth0 [ 256.549674][T11413] batman_adv: batadv0: Removing interface: veth0 [ 256.891224][T11440] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 257.292694][T11453] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 257.326801][T11458] __nla_validate_parse: 11 callbacks suppressed [ 257.328024][T11458] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1449'. [ 257.368048][T11453] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.391992][T11458] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.462442][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 257.540495][T11453] bond7: (slave bridge6): making interface the new active one [ 257.560885][T11453] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 257.578477][T11449] set match dimension is over the limit! [ 257.659126][T11466] netlink: 'syz.7.1450': attribute type 2 has an invalid length. [ 258.046914][T11477] netlink: 'syz.2.1452': attribute type 33 has an invalid length. [ 258.388920][T11494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1459'. [ 258.535426][T11483] bond8: (slave bond_slave_0): Device is not bonding slave [ 258.535829][T11483] bond8: option active_slave: invalid value (bond_slave_0) [ 258.644315][T11483] bond8 (unregistering): Released all slaves [ 258.912971][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 259.142642][T11521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1464'. [ 259.159120][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 259.302668][T11521] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 259.576248][T11535] vlan1: entered allmulticast mode [ 259.576477][T11535] veth0_vlan: entered allmulticast mode [ 259.654518][T11529] macsec0: entered allmulticast mode [ 259.722501][T11529] veth1_macvtap: entered allmulticast mode [ 259.725115][T11529] macsec0: left allmulticast mode [ 259.725174][T11529] veth1_macvtap: left allmulticast mode [ 259.867881][T11524] netlink: 'syz.6.1466': attribute type 1 has an invalid length. [ 259.968875][T11524] block nbd296: server does not support multiple connections per device. [ 259.969153][T11524] block nbd296: shutting down sockets [ 260.241853][T11552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.334151][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'. [ 260.334195][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'. [ 260.334266][T11554] netlink: 'syz.2.1473': attribute type 4 has an invalid length. [ 260.440996][T11559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.547342][T11563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.708696][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.041971][T11576] bond2: entered allmulticast mode [ 261.057031][T11576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.086248][T11531] infiniband syz0: set down [ 261.101803][T11531] infiniband syz0: added ipvlan1 [ 261.134534][T11531] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 261.147966][T11531] infiniband syz0: Couldn't open port 1 [ 261.168508][T11531] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 261.185111][T11531] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 261.203046][T11531] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 261.254290][T11531] RDS/IB: syz0: added [ 261.259384][T11531] smc: adding ib device syz0 with port count 1 [ 261.260831][T11531] smc: ib device syz0 port 1 has no pnetid [ 262.338872][T11623] Bluetooth: hci0: unsupported parameter 5135 [ 262.339339][T11623] Bluetooth: hci0: unsupported parameter 8192 [ 262.339381][T11623] Bluetooth: hci0: unsupported parameter 5135 [ 262.339413][T11623] Bluetooth: hci0: unsupported parameter 8192 [ 262.355198][T11625] netlink: 4148 bytes leftover after parsing attributes in process `syz.7.1489'. [ 262.632776][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 263.121889][T11645] netlink: 'syz.7.1494': attribute type 21 has an invalid length. [ 263.158236][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1493'. [ 263.158707][T11646] netlink: 'syz.2.1493': attribute type 7 has an invalid length. [ 263.158743][T11646] netlink: 'syz.2.1493': attribute type 8 has an invalid length. [ 263.158779][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 263.267721][T11646] .`: entered promiscuous mode [ 263.268105][T11646] bond_slave_0: entered promiscuous mode [ 263.270151][T11646] bond_slave_1: entered promiscuous mode [ 263.375800][T11646] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 263.386235][T11646] hsr1: Slave B (.`) is not up; please bring it up to get a fully working HSR network [ 263.403391][T11646] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 263.415557][T11646] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 263.712654][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 263.818079][T11655] netlink: 'syz.1.1498': attribute type 33 has an invalid length. [ 263.899909][T11655] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 263.921292][T11655] bond8 (unregistering): Released all slaves [ 264.015336][T11663] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1500'. [ 264.066884][T11663] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1500'. [ 264.078312][T11663] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1500'. [ 264.118155][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.125881][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.158370][T11669] netlink: 'syz.7.1499': attribute type 4 has an invalid length. [ 264.310631][T11678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1502'. [ 264.310674][T11678] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1502'. [ 264.647326][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 264.701498][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 268.752302][ T4985] udevd[4985]: worker [5643] /devices/virtual/block/nbd1 is taking a long time [ 269.795137][ T2043] block nbd1: Possible stuck request ffff888026f75080: control (read@0,1024B). Runtime 120 seconds [ 269.795500][ T2043] block nbd1: Possible stuck request ffff888026f75240: control (read@1024,3072B). Runtime 120 seconds [ 286.057386][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.873328][ T2043] block nbd1: Possible stuck request ffff888026f75080: control (read@0,1024B). Runtime 150 seconds [ 299.873719][ T2043] block nbd1: Possible stuck request ffff888026f75240: control (read@1024,3072B). Runtime 150 seconds [ 316.982444][ T9612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.157119][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.163841][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.956520][ T2043] block nbd1: Possible stuck request ffff888026f75080: control (read@0,1024B). Runtime 180 seconds [ 329.956730][ T2043] block nbd1: Possible stuck request ffff888026f75240: control (read@1024,3072B). Runtime 180 seconds [ 331.844196][ T4985] udevd[4985]: worker [5643] /devices/virtual/block/nbd1 timeout; kill it [ 331.855408][ T4985] udevd[4985]: seq 12799 '/devices/virtual/block/nbd1' killed [ 338.165605][T11696] IPVS: set_ctl: invalid protocol: 44 172.20.20.14:20002 [ 338.204966][T11690] bond8 (unregistering): Released all slaves [ 338.401222][T11716] netlink: 'syz.4.1508': attribute type 9 has an invalid length. [ 338.401423][T11716] netlink: 'syz.4.1508': attribute type 4 has an invalid length. [ 338.984256][T11738] __nla_validate_parse: 1 callbacks suppressed [ 338.984305][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1514'. [ 339.111321][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 339.138692][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 339.414892][T11753] veth0_vlan: left promiscuous mode [ 339.429896][ T8869] veth0_vlan: entered promiscuous mode [ 340.193941][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1524'. [ 340.245299][T11772] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1524'. [ 340.286078][T11775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1525'. [ 340.311780][T11766] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.403400][T11776] netlink: 'syz.6.1526': attribute type 28 has an invalid length. [ 340.403592][T11776] netlink: 'syz.6.1526': attribute type 3 has an invalid length. [ 340.403784][T11776] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1526'. [ 340.590418][T11766] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.627118][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 340.720919][T11786] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1527'. [ 340.754963][T11791] syzkaller0: left promiscuous mode [ 340.755664][T11791] syzkaller0: left allmulticast mode [ 340.996337][T11766] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.140013][T11793] syzkaller0: entered promiscuous mode [ 341.140046][T11793] syzkaller0: entered allmulticast mode [ 341.230352][T11766] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.545350][T11806] trusted_key: syz.1.1532 sent an empty control message without MSG_MORE. [ 341.803735][ T9622] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.883221][ T9622] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.892849][ T159] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.955058][ T9622] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.223799][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1536'. [ 342.341836][T11827] erspan0: entered promiscuous mode [ 342.367215][T11827] erspan0: left promiscuous mode [ 342.444718][T11839] block nbd2: Unsupported socket: should be TCP or UNIX. [ 342.934872][T11855] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 343.120781][T11862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.295718][T11862] macvlan3: entered promiscuous mode [ 343.295755][T11862] macvlan3: entered allmulticast mode [ 343.311090][T11862] bond8: (slave macvlan3): Error -22 calling dev_set_mtu [ 343.954977][T11890] bond8: entered promiscuous mode [ 343.964172][T11890] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.000133][T11890] __nla_validate_parse: 5 callbacks suppressed [ 344.007716][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 344.030497][T11890] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.045871][T11890] bond8: (slave sit2): The slave device specified does not support setting the MAC address [ 344.046682][T11890] bond8: (slave sit2): Error -95 calling set_mac_address [ 344.195836][T11907] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1557'. [ 344.298065][T11909] netlink: 'syz.6.1558': attribute type 10 has an invalid length. [ 344.298103][T11909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1558'. [ 344.298205][T11909] team0: entered allmulticast mode [ 344.298239][T11909] team_slave_0: entered allmulticast mode [ 344.298261][T11909] team_slave_1: entered allmulticast mode [ 344.298579][T11909] bridge0: port 3(team0) entered blocking state [ 344.298688][T11909] bridge0: port 3(team0) entered disabled state [ 344.351002][T11909] team0: entered promiscuous mode [ 344.359011][T11909] team_slave_0: entered promiscuous mode [ 344.359242][T11909] team_slave_1: entered promiscuous mode [ 344.360134][T11909] bridge0: port 3(team0) entered blocking state [ 344.360350][T11909] bridge0: port 3(team0) entered forwarding state [ 344.390113][T11904] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 344.444301][T11913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1560'. [ 344.453721][T11913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1560'. [ 344.716672][T11919] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 345.411780][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1566'. [ 345.449016][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802948f800: rx timeout, send abort [ 345.827975][T11953] SET target dimension over the limit! [ 345.902743][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1569'. [ 345.903371][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1569'. [ 345.948947][ C0] vcan0: j1939_tp_rxtimer: 0xffff888049401400: rx timeout, send abort [ 345.957561][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802948f800: abort rx timeout. Force session deactivation [ 346.449240][ C0] vcan0: j1939_tp_rxtimer: 0xffff888049401400: abort rx timeout. Force session deactivation [ 346.798685][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 346.887567][T11982] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1574'. [ 347.149875][T11993] netlink: 'syz.2.1575': attribute type 5 has an invalid length. [ 347.473405][T11990] bond3: entered allmulticast mode [ 347.906964][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.136705][T12034] syzkaller0: entered promiscuous mode [ 348.142831][T12034] syzkaller0: entered allmulticast mode [ 348.838060][T12057] netlink: 'syz.6.1594': attribute type 21 has an invalid length. [ 348.850868][T12057] netlink: 'syz.6.1594': attribute type 6 has an invalid length. [ 349.824397][T12086] __nla_validate_parse: 9 callbacks suppressed [ 349.824450][T12086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 350.890683][T12120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1607'. [ 351.006367][T12120] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 351.083306][T12120] bond7 (unregistering): Released all slaves [ 351.142173][T12130] nbd: couldn't find device at index 15663104 [ 351.430852][T12138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1611'. [ 351.624372][T12147] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1613'. [ 351.685106][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 352.048261][T12162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1617'. [ 352.165002][T12169] netlink: 'syz.2.1618': attribute type 178 has an invalid length. [ 352.631063][T12190] netlink: 'syz.4.1624': attribute type 2 has an invalid length. [ 352.631102][T12190] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1624'. [ 352.694694][T12189] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1626'. [ 352.730185][T12188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.806951][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1627'. [ 353.140158][T12208] openvswitch: netlink: Flow key attribute not present in set flow. [ 353.522821][T12232] netlink: 'syz.4.1637': attribute type 10 has an invalid length. [ 353.523985][T12232] veth0_macvtap: left promiscuous mode [ 353.575183][T12232] team0: Device veth0_macvtap failed to register rx_handler [ 353.817105][T12239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1642'. [ 354.929761][T12276] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 354.991235][T12279] __nla_validate_parse: 5 callbacks suppressed [ 354.991683][T12279] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1652'. [ 355.038416][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 355.076878][ T5629] Bluetooth: hci6: command 0x0406 tx timeout [ 355.491945][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1656'. [ 355.718304][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 355.718356][T12295] macvlan0: left promiscuous mode [ 355.718548][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1658'. [ 356.051958][T12304] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1660'. [ 356.114961][T12307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1661'. [ 356.134957][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 356.346332][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1663'. [ 356.698496][T12333] ip6t_ah: unknown flags 5 [ 356.751941][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1669'. [ 357.405248][T12353] veth5: entered allmulticast mode [ 358.523746][T12402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.523780][T12402] IPv6: NLM_F_CREATE should be set when creating new route [ 358.523831][T12402] IPv6: NLM_F_CREATE should be set when creating new route [ 358.638608][T12406] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 358.647341][T12406] x_tables: duplicate underflow at hook 2 [ 358.895721][T12414] netlink: 'syz.7.1691': attribute type 83 has an invalid length. [ 358.976034][T12420] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 359.329361][T12434] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 359.804293][T12446] hsr_slave_1 (unregistering): left promiscuous mode [ 359.900340][T12465] IPVS: nq: FWM 3 0x00000003 - no destination available [ 360.001963][T12450] __nla_validate_parse: 8 callbacks suppressed [ 360.017173][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1700'. [ 360.033685][ T33] INFO: task syz.0.1113:10171 blocked for more than 143 seconds. [ 360.033736][ T33] Not tainted syzkaller #0 [ 360.033764][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.033793][ T33] task:syz.0.1113 state:D stack:25312 pid:10171 tgid:10170 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 360.033878][ T33] Call Trace: [ 360.033892][ T33] [ 360.033910][ T33] __schedule+0x17db/0x58f0 [ 360.034136][ T33] ? __pfx___schedule+0x10/0x10 [ 360.034182][ T33] ? schedule+0x90/0x2b0 [ 360.034235][ T33] schedule+0x164/0x2b0 [ 360.034274][ T33] schedule_preempt_disabled+0x13/0x30 [ 360.034310][ T33] __mutex_lock+0x7c1/0x1550 [ 360.034383][ T33] ? __mutex_lock+0x5d4/0x1550 [ 360.034426][ T33] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 360.034543][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 360.034591][ T33] ? __nlmsg_put+0xef/0x1b0 [ 360.034690][ T33] ? genlmsg_put+0x137/0x2e0 [ 360.034741][ T33] nfsd_nl_listener_get_doit+0x104/0x610 [ 360.034774][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 360.034811][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 360.034858][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 360.034907][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 360.034959][ T33] ? __dev_queue_xmit+0x29b/0x3820 [ 360.075833][ T2043] block nbd1: Possible stuck request ffff888026f75080: control (read@0,1024B). Runtime 210 seconds [ 360.075954][ T2043] block nbd1: Possible stuck request ffff888026f75240: control (read@1024,3072B). Runtime 210 seconds [ 360.105337][ T33] genl_rcv_msg+0x614/0x7a0 [ 360.105385][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.105415][ T33] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 360.105450][ T33] ? __pfx_ref_tracker_free+0x10/0x10 [ 360.105639][ T33] netlink_rcv_skb+0x226/0x4a0 [ 360.105666][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.105708][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.136982][ T33] ? down_read+0x2be/0x330 [ 360.137085][ T33] genl_rcv+0x28/0x40 [ 360.137157][ T33] netlink_unicast+0x7bd/0x940 [ 360.137259][ T33] netlink_sendmsg+0x813/0xb40 [ 360.137323][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.137398][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 360.137615][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.137672][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 360.137789][ T33] ____sys_sendmsg+0x54e/0x850 [ 360.137852][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.161855][ T33] ? import_iovec+0x73/0xa0 [ 360.162031][ T33] ___sys_sendmsg+0x2a5/0x360 [ 360.162084][ T33] ? __lock_acquire+0x6df/0x2e50 [ 360.162234][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.162297][ T33] ? futex_wait+0x2a2/0x390 [ 360.162451][ T33] ? __fget_files+0x2a/0x420 [ 360.162546][ T33] ? __fget_files+0x3a2/0x420 [ 360.227624][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 360.227655][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.227689][ T33] do_syscall_64+0x166/0x520 [ 360.227799][ T33] ? trace_irq_disable+0x3b/0x140 [ 360.227986][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.228026][ T33] ? clear_bhb_loop+0x70/0xc0 [ 360.228047][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.228064][ T33] RIP: 0033:0x7fd0bf79e159 [ 360.228079][ T33] RSP: 002b:00007fd0c068f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.228099][ T33] RAX: ffffffffffffffda RBX: 00007fd0bfa25fa0 RCX: 00007fd0bf79e159 [ 360.228113][ T33] RDX: 0000000004004804 RSI: 0000200000000640 RDI: 0000000000000005 [ 360.228126][ T33] RBP: 00007fd0bf83503b R08: 0000000000000000 R09: 0000000000000000 [ 360.228137][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.228146][ T33] R13: 00007fd0bfa26038 R14: 00007fd0bfa25fa0 R15: 00007ffc79506e58 [ 360.228169][ T33] [ 360.228226][ T33] [ 360.228226][ T33] Showing all locks held in the system: [ 360.228236][ T33] locks held by pr/ttyS0/16: 3, last CPU#0: [ 360.228250][ T33] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 360.228301][ T33] #1: ffffc90000007cc0 ((&im->timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 360.228361][ T33] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 360.228467][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 360.228481][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 360.228541][ T33] locks held by kworker/u8:3/49: 4, last CPU#1: [ 360.228554][ T33] #0: ffff888031a85140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.228617][ T33] #1: ffffc90000ba7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.228848][ T33] #2: ffff88801e3af9c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 360.228999][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x41f/0xfc0 [ 360.229056][ T33] locks held by kworker/u8:6/159: 3, last CPU#1: [ 360.229070][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.229163][ T33] #1: ffffc90002e6fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.229360][ T33] #2: ffff88802c09d258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 360.229609][ T33] locks held by kworker/u8: ** replaying previous printk message ** [ 360.229609][ T33] locks held by kworker/u8:7/1009: 5, last CPU#1: [ 360.229647][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.229789][ T33] #1: ffffc90004c77c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.229926][ T33] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 360.230077][ T33] #3: ffffffff8ee38180 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 360.230208][ T33] #4: ffffffff8ebff620 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x5f/0x110 [ 360.230413][ T33] locks held by getty/5375: 2, on CPU#0: [ 360.230449][ T33] #0: ffff8880359a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 360.230675][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 360.230819][ T33] locks held by udevd/5643: 1, on CPU#1: [ 360.230852][ T33] #0: ffff888026efb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 360.231073][ T33] locks held by syz.3.207/6612: 2, on CPU#0: [ 360.231107][ T33] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 360.231240][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 360.231375][ T33] locks held by syz.0.1113/10171: 2, on CPU#1: [ 360.231408][ T33] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 360.231536][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 360.231654][ T33] locks held by syz.5.1202/10468: 3, on CPU#0: [ 360.231683][ T33] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 360.231793][ T33] #1: ffff8880278316e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 360.231906][ T33] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 360.232085][ T33] locks held by syz.5.1202/10469: 2, on CPU#0: [ 360.232122][ T33] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 360.232260][ T33] #1: ffff8880278316e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 360.232386][ T33] locks held by syz.4.1698/12460: 2, last CPU#1: [ 360.232420][ T33] #0: ffff8880349adcf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 360.232580][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 360.422331][ T33] locks held by syz.1.1701/12451: 4, last CPU#1: [ 360.422378][ T33] #0: ffffffff902424e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 360.422608][ T33] #1: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 360.426919][ T33] #2: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x3c1/0x6f0 [ 360.427065][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 360.438982][ T33] locks held by syz.1.1701/12452: 4, last CPU#1: [ 360.439018][ T33] #0: ffff8880258c36b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 360.439142][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 360.439312][ T33] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 360.439448][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 360.439576][ T33] locks held by syz.2.1700/12450: 1, on CPU#1: [ 360.439606][ T33] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 360.512500][ T33] locks held by syz.7.1703/12464: 2, last CPU#1: [ 360.512546][ T33] #0: ffff888035219078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 360.513189][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 360.513330][ T33] [ 360.513348][ T33] ============================================= [ 360.513348][ T33] [ 360.513388][ T33] NMI backtrace for cpu 1 [ 360.513417][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 360.513470][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.513505][ T33] Call Trace: [ 360.513525][ T33] [ 360.513542][ T33] dump_stack_lvl+0xe8/0x150 [ 360.513651][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 360.513791][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.513887][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 360.513963][ T33] sys_info+0x135/0x170 [ 360.514035][ T33] watchdog+0xfd7/0x1030 [ 360.514118][ T33] ? watchdog+0x1c7/0x1030 [ 360.514194][ T33] kthread+0x38b/0x480 [ 360.514255][ T33] ? __pfx_watchdog+0x10/0x10 [ 360.514308][ T33] ? __pfx_kthread+0x10/0x10 [ 360.514367][ T33] ret_from_fork+0x514/0xb70 [ 360.514431][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 360.514522][ T33] ? __switch_to+0xc89/0x1420 [ 360.514605][ T33] ? __pfx_kthread+0x10/0x10 [ 360.514659][ T33] ret_from_fork_asm+0x1a/0x30 [ 360.514799][ T33] [ 360.514927][ T33] Sending NMI from CPU 1 to CPUs 0: [ 360.514993][ C0] NMI backtrace for cpu 0 [ 360.515007][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 360.515029][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.515042][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 360.515129][ C0] Code: e8 4e b3 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 7c c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a 10 75 06 cc 44 89 f9 80 e1 07 [ 360.515156][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 360.515194][ C0] RAX: 1ffffffff35a6400 RBX: 00000000000003fd RCX: 0000000000000000 [ 360.515205][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 360.515215][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 360.515225][ C0] R10: dffffc0000000000 R11: ffffffff85720780 R12: dffffc0000000000 [ 360.515237][ C0] R13: 0000000000000000 R14: ffffffff9ad320c0 R15: 0000000000000000 [ 360.515249][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 360.515262][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.515273][ C0] CR2: 00007ffb55f2d380 CR3: 0000000059a36000 CR4: 00000000003526f0 [ 360.515288][ C0] Call Trace: [ 360.515294][ C0] [ 360.515301][ C0] wait_for_lsr+0x184/0x2f0 [ 360.515349][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 360.515372][ C0] serial8250_console_write+0xaa1/0x1200 [ 360.515395][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 360.515423][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 360.515446][ C0] ? __schedule+0x17f1/0x58f0 [ 360.515474][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 360.515500][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 360.515520][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 360.515543][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 360.515565][ C0] nbcon_kthread_func+0x679/0x880 [ 360.515584][ C0] ? nbcon_kthread_func+0x163/0x880 [ 360.515600][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 360.515618][ C0] ? __kthread_parkme+0x71/0x1f0 [ 360.515642][ C0] ? __kthread_parkme+0x199/0x1f0 [ 360.515666][ C0] kthread+0x38b/0x480 [ 360.515681][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 360.515696][ C0] ? __pfx_kthread+0x10/0x10 [ 360.515711][ C0] ret_from_fork+0x514/0xb70 [ 360.515727][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 360.515751][ C0] ? __switch_to+0xc89/0x1420 [ 360.515773][ C0] ? __pfx_kthread+0x10/0x10 [ 360.515789][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.515820][ C0] [ 360.580620][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 361.320696][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 361.329825][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.339901][ T33] Call Trace: [ 361.343192][ T33] [ 361.346143][ T33] vpanic+0x56d/0xa60 [ 361.350142][ T33] ? __pfx___schedule+0x10/0x10 [ 361.355017][ T33] ? __pfx_vpanic+0x10/0x10 [ 361.359548][ T33] panic+0xc5/0xd0 [ 361.363290][ T33] ? __pfx_panic+0x10/0x10 [ 361.367723][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 361.373195][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 361.378597][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 361.384775][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 361.390950][ T33] watchdog+0x1030/0x1030 [ 361.395296][ T33] ? watchdog+0x1c7/0x1030 [ 361.399732][ T33] kthread+0x38b/0x480 [ 361.403812][ T33] ? __pfx_watchdog+0x10/0x10 [ 361.408516][ T33] ? __pfx_kthread+0x10/0x10 [ 361.413131][ T33] ret_from_fork+0x514/0xb70 [ 361.417738][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 361.422877][ T33] ? __switch_to+0xc89/0x1420 [ 361.427593][ T33] ? __pfx_kthread+0x10/0x10 [ 361.432200][ T33] ret_from_fork_asm+0x1a/0x30 [ 361.436994][ T33] [ 361.440624][ T33] Kernel Offset: disabled [ 361.444994][ T33] Rebooting in 86400 seconds..