last executing test programs: 6m5.382437231s ago: executing program 2 (id=1716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010425bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6644020000000000540012800b00010062726964676500004400028005002c0002000000080004000500000005002900000000000c001f000a000000000000000c0020"], 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="1588040000030000003800350000000800250001000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x40880) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@flushsa={0x30, 0x1c, 0x800, 0x70bd25, 0x25dfdbfb, {0x33}, [@XFRMA_IF_ID={0x8}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x30}}, 0x20000844) socket(0x2b, 0x1, 0x1) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4004000) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0xfffffffffffffdef) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 6m4.48980854s ago: executing program 2 (id=1722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x40060}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x890) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m4.198225305s ago: executing program 2 (id=1725): socket$inet(0x2, 0x6, 0x634a) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x80000004, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a0000000000080017003e7d1c1d93c5c9240494ee979d532dc2d792c36af6b531a067970c99f24dd423fcea23c83ffbf8111daa969f028ffce60c412a5ff9", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001340), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x11, &(0x7f00000011c0)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r5, 0x11, 0x2100, 0x0, &(0x7f0000001340), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000000c0)={{r6}, "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"}) 6m3.847570326s ago: executing program 2 (id=1731): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x31b4, 0xffffffff, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x24, 0x0, 0x9, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 6m3.568747402s ago: executing program 2 (id=1734): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x3, 0xd00, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9323e5c3d87a2eecc0cf928a84"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, 'Idd'}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c811) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000300)={0x0, 0x800b, 0x1}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0xad9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f00000003c0)={r6, 0xffffffffffffffff, 0x800}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000440)={r6, @in6={{0xa, 0x4e20, 0x6b56d820, @private1, 0x50f}}}, &(0x7f0000000500)=0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x9, 0x0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x17, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%pi6 \x00'}, 0x20) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x6219, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x20, 0x1, &(0x7f0000000540)=@raw=[@ldst={0x0, 0x0, 0x1, 0x8, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000580)='GPL\x00', 0x4, 0xff, &(0x7f00000005c0)=""/255, 0x41000, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xc, 0x9, 0x5}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r9, r1, r10, r11, r12, r13, r14, r15, r16, r17], 0x0, 0x10, 0x1}, 0x94) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000d40)=@gcm_256={{0x304}, "11c76cdd5b1c0daa", "dd64f85186666a4e1e67cb5c9f77af638942cfbd788e93edd8396702145a6d79", "40e1712e", "7389d06f934e7fd2"}, 0x38) r18 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r18, 0x84, 0x71, &(0x7f0000000dc0)={r6, 0xb}, 0x8) r19 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r19, 0x29, 0xcf, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) 6m3.294905991s ago: executing program 2 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 5m47.987841149s ago: executing program 32 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 5m38.686376446s ago: executing program 0 (id=1877): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) 5m38.405407532s ago: executing program 0 (id=1879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000580)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x0, 0x1, 0x2}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000004240)=0x0) sendmmsg$sock(r2, &(0x7f0000005880)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="1e41efe57272114d26", 0x9}, {&(0x7f0000000140)="5dbcf21ab2214c91764d4fcb63656ee010d5ce2032802d807984d974755ec1b0e8ca740e2c341d258bc727a3ba69e131dd0f71f3072b8d3573aafcd259bab899f83117d89cf568b8c5e590d3dbe0df7ea655ec61413d4e1e9a7fcef348af86248ffeb369211f0b8992ef4e5d75e60d07c47f3b44a0f48c68a8d65502d4293e0f8cef99f6cc", 0x85}], 0x2}}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="434ffc667a3da0812d5b05fe2f4de2adcda88e2574b5b5d3234754c7d9e1cbfe6998c928db75b24bb08c0f6c31f7c33a8a90fc7893d8f1e1b1338b1333bc", 0x3e}, {&(0x7f0000000300)="e16670ac2048dfa5a2e610d986f970f4dc82dc98cc4fab8231861cb6c29826c78eec6d80807f396301536eac2345e0e95adf357c53e9dad85268f67a74f3296108a4a660abc38db5408e83344688ea44f8f8a6bf55fe736ed58c9d014a639d844059e962aa1fa4e61c199e87675ad76b1e09603becd4252bb339c29d1b31f8a2ab49b75c2b025c0577d6f862bf2cb8b8a5bdb3d41c4925290521e2f4ff6f78f977d800d0dea4b68d292519cf0317e26a1886a6679e44b7bd2531664c699cfae6696c414b6d0008", 0xc7}, {&(0x7f0000000400)="e0ac1f337388eb866a9a70422d9734606b8b2501ac7476a9671fb1ea42619a9e02a42d8aab7532ca6b389d848e0784db9283859c0316b5ab8d80162ebff1d6274a150f18dc45361363e2a1c444d75f2967054f360d81da57a4785b41fac674fcb8dd59e3035ca82d42d91fa913d9b6488a9d825af829a7ff8961d4b996f1c314ef183a1e29fd579554a544be82fe4535cd98b0ffb6932ae5e3ce768a530502b917b0683098bdb07dd4314ba1f438e5d15e3cf142", 0xb4}], 0x3, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}}, {{&(0x7f0000001740)=@sco={0x1f, @none}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000017c0)="b609388d4dea38d33d2c59f6be9b87c7d2cbbf737ea52d95fe8b97064771f70a56f6df740bea95a5bc19119b161177ddcb5e7e807496dcd2250631fed4e3b9f23287020b94b5c539a4041a3e367546ba84fa8ad96bce938233f90f0047b848a8a5c72368cf4b6abf33140ff2876331c3ea1f721f92cfb6abf1ccef752ce302141e00d94e5c2c419c8ea18322f2a0dd5d58b5e7fd04b60f00cb5a2e2e64421b3cd69aa8584d9b26d109b78c6a5a9fe8237a8260bde4882620926153b56bca7cd647ac76d2e60a63c74275ee236425e5560f549120f49316067eaf1d210c858c1e70d9498ef8", 0xe5}, {&(0x7f00000018c0)="fd54b08505f58c537d8282d22cbed5e38a42bb88d775b46cb43413837055", 0x1e}, {&(0x7f0000001900)="86f138300e4dee1afd9122d146e3de92932acd65942825c81c2e5cf8befe17f8a9ab3cec648a9692be51b7e029f3f5e0a9ee36c7c94b3a7be790762220e0942f50088d044bbab254f1b4bbc43a72780ec14e40683b9728af", 0x58}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="a917935bd32d095d3210ccc39960aba9c01443d6dd91f3cc0ff8dace475d4062d21424270e9c9e186f39a458b75b02887a6bcf5e2fa8e99ea5a3cdbaceeeabf39dbacad8131d0debbea01df21e6a9a8ad435b60c4731f797e8b85182dc2123c1a2023270dac5501f58f68bee1238d57d96d545b4f2364615", 0x78}, {&(0x7f0000002a00)="a5c9ffd8f16c534d7aadea6a02cbf2413c93f43e021b20dcb3221d0c9232380231d86ed7d001774c84b0b024485f25f53c1ffdfdf7bca690e814d3dc19811014b6805a8876ec793433cb39a90c04c30484b17d56478688572821c0b8245d0cb80fcc881262ba7cb3f0f8b57eb48b707cc7e2a4cc687431f03d62d747a3deafdcc063b80525eb3a6a87aa9c5693f70ed9dc0310a0540c252d16ddf6a5794a5e39634455c52735f8fc29dc44187f6e366279729f90719ebfbcd64c00bc", 0xbc}], 0x6, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{&(0x7f0000002bc0)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002c40)="aa6454dfb2bccc0a73c2b7d3b198dc94bbede99b2464ddb745449b0e4a458b12aebdb65565c78ba5de4de6aa392145c338f122e50b89a18740ac437534ccb1edee3dc1d1d62c", 0x46}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="f69ffda2bb3608ada0614b046512ebee76e11055d7aef3e29ec9614d032adf9743c0cfaeead3a648caf3e839dff77176b80823230adb8a966994fe175038484983a5eb9fc6f98f4400ab36020de28ab73ba52376cedad579f043b6f732d179ca66f124afd64fa8820382f6cb995d769437b38a97c723906a9af766f739af7223ae688fdeb996214bd52c8559913a1bd0123101aa18f365f025a3ac1def920bf5b3aee0f0", 0xa4}, {&(0x7f0000003d80)="1ec1b60bd7ac1bc0baab574ceaea3e7cc3000a591f9ba674d21f5fc4ce87cd858a8c23cccda978e75b1d8ccbccf9663f66e8767a87126a006141c8f0ff27185e31e68636f857822280e4c1ab7994ec53e7", 0x51}, {&(0x7f0000003e00)="3f39497fb9e308d99dd4b255c92b6a4cf3bae2ded1cf", 0x16}, {&(0x7f0000003e40)="d7fb6c185b31ee8de777f7c41c7c82b40d7bff47594485b7dbd7bc25d97646fce1728633c4962ac01e64bf18d984087e32e5884c5f21bee91bcb49edf7e7b2325b531cfc66584a15de61cc1bbdf1d76f6cc31c4ebc771d6809cfed2a0a516df2dbec4d5a9679b99d249abc2a", 0x6c}, {&(0x7f0000003ec0)="61187e051075d5fcd3fe72c325e016958203f52e031efacc512ebf33a671cfbe0f4189ea1decbcdf011bf90ca292ae092855e4d3eb74452df7ff45bdc6aa252ab36b0ae53bbf9f30ae48940e014bf24b65dcd5e71226fa", 0x57}, {&(0x7f0000003f40)="2acb7de6d77d9225aa92571135adcde711c3ce8a7473c61b4031344c3865e8b1e7", 0x21}, {&(0x7f0000003f80)="83351000c1c8e3bc7cc8548ae1d43bb3b882432e99dadc72dc8cc2313dde", 0x1e}], 0x9}}, {{&(0x7f0000004080)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004100)="129f945e70bb15707ff3377a0c2075537b83c3ed50e4f450b5f5f1a4b37d6f3f8df48a6e686300bc5eb25caf28ca5042fdcd46af1e60a5bb171dc42093e86730", 0x40}], 0x1, &(0x7f0000004180)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}], 0xc0}}, {{&(0x7f0000004280)=@nfc={0x27, r3, 0x1, 0x1}, 0x80, &(0x7f0000005740)=[{&(0x7f0000004300)="332697695ebbb7bd6adbd105fcfd21bc3eab543c5e3dfbdeafe88295858b9ab7fbbd539d60f306767c6a642e716c5ff3ea580f110472a233096b6d1f4f7c84c8ee169b64faffb3f39a78860910b42466ff3fa9353b1899fca93a8cec0529019420c3bcc5ca287da17c89787561d7e47c9ef56ed4c607dadd01be18294ac4a30d", 0x80}, {&(0x7f0000004380)="71c38cd9585c5421989fa5ae1fbb02e8ac86924e3f514d616269d47c5bee4d3f43271f8e6cbe8081542a1da7feff9dd5a0f750", 0x33}, {&(0x7f00000043c0)="30d6e2ca4bb5f9af7840d0fd53aee9f83cb4ba47c5f07491635d08185434b32e7dfd10af988fa087f96bdc3cffd533612303b3510665bf527f0bbce1c0bfcec301a83accc557fd4f2707356110a0ed59d196d670db0cea562ff996db22e197d3ff5dd5fa2a0140b70afc83fb92e36cad6ef8c41f6fa98774dabf6e966c9699258693b9124557d339184f0f56c1384c58331ed92a35b843681fc5e3f80900ffe6e6de62dff7c6", 0xa6}, {&(0x7f0000004480)="63cb60069680d426ccb297978013cacd90a4d78ef60715ef5093b5930c30b403de1fbb4db8f96136cf19ea13a760895feabd5298c78d11de975032798120fc48c419ea65afbcfe45ec4bfd157ec690a1ad686087d326e40cc9fb07c03566747ce0bafaf19021e03b8f469ddfbb34ede6f24df172a7296dbc29059f3c16a66a830711858894c2a8b9ec6674af54ee52e4a993a68c41d301a8d22213f6c27ddd169f9fa549f1a9a9c4596e", 0xaa}, {&(0x7f0000004540)="a57d01bf9cca7185d323e133d379854bb15e437c04dd9768ac63895cda683459b195b4e5303c72022f01f4fce2db224a0a2a28eb92035ade295084670ab7781bc63e4adfa48430b6b3801626f5d59fb5ec6a0089249fb0c66bdab8ebda6000b405f6b5e7c1085be5456956bb513d324f7bd11d6af097dd0573727a1ec2001486f689c414e2925d80c165cf551e966edb957624c3e4bd068b620697e7a80456e0815fa57eff32846159f68a31f174feaa9e894d677890dd2950b05d822bd3eb3cd35ce250a6c1d4cf91e0f964d90a40ed51ca2057b6d9cbcb037d8f55c8aa", 0xde}, {&(0x7f0000004640)="a8532f8ea4d3c7e510091b553af10b433b9227d0b334f8005383fcfc3fbaf4c11ab2b697efb48a98da7fa623b971fb8d1dbdd2bdf0795b7d0fd79b7b986afadd15bc4b9559124a972a60990b72f7d4e0aa0190213011a5635305a74de940e19c8936e5cd53c228a22bf9be33d00e766bed467f40b5241d0f8516ed96d1e18a0c1b6396654680479a6b388ee60462406c0ff338e354ecc892b3611bdbc1e6b9c355918b005d2d772bf90534310758e8bf0ed9d36ba4cba9d9f584a880534eb244b43c08bcedbe057249e4fac79fcba1412cc2", 0xd2}, {&(0x7f0000004740)="c804367fc33cc988f512746c1af13e0686e53f3f00f137bedf1cf1d73a020bf379ce30c7af134eedb1a077b1b4deaa4ea158dce115df87422c6d581a6c6c1af45490c62afc54186bb8b79be5e8fa8857865add0c1c7e04bc7520683dfa6db1897fd56bd369c6430375a6e873100ac42f97a2c93a38dc3bb7ae1064601dced11eedd4f25016c60ebac7e627c4539536ae72e4a70c2627ba43abbdbfb329d58b17446bd26684677b35aeb3f36dace24ab23af841f1b8ea671c1c93e94f986874fcaf2daa23c712f61a5d13d620f5247455561cc987af43f6fd0cf1e3eb41248f5a3b57c7af6010eba9231e2609ee7d589c5a7e2af01c797d1f093a1c443d60a76cb429e02b34be5bc754d098f61384783aeb0d6d8c3b147afcd770e392d60b891c0bfa58b95ec2f14c44d5a5b5ec1c9468743b33ff1dcea9bdc947179b75999bb0da035e73c9bde4de22aeccfd996b9f9e55ad87515cedc917165741e94c608b6581d60b3b8f4751eff9497c4b8da12e865811b6653743d184f1c77009cbc6e38ffb9a20588f0187881381b8b790ac73a4e6d3e5fc6c6c0100c60a21baec24486aa672382a08226774386dd8726ac1c53fa2dc45510ca821ed303bd1b04069d2c30db807188d3382d117f9a9a59b2ec1874746570bbdd285eeef3dbed7b1165486fbba6fce2efc2c37dfa97a19d00f775183de82c06d94e0f91f8e0b6c892e327db96a0341ddb34a5faa155680dba2a727b44f9418b91bc2bd07c0e08b2ef6d964037dc1cfa816d660b59bc6741ed768b79436f45ded8fca4a3504e47e8957c05f124e31b8a89d21f8700dfb54a4328759b54d4d426e905daf7f63da8f6d787167a28c2d4a8e2676be298bc35bda8b67124bc1160c2cc606300cea20b64d9995a75489d8657886308224687824e7751585e8d77b35381744b4f56b9b2424aaa0c735acfee15084d8bab762ef0ab5747bcec5847f54a80ddfdc95a1aad2df1b4a45150db0af1850ac979319aee1ba04996a65d7f240f5c8eb31e17b5ac7746c4caf5c3a976ed2cc8d4cd41702116ce8c4c76ba2c695f5e840d7f59e5ca4ef5b26bcbd55440728e9ca8ead13fcb84fd4e06c75fa5bbc2b44d067f29365efe8509f56545f735b2baf351fd0dde1d5afa34c2f81cd0471129e14e25199860898ad32a40e5be6546dd839ed695b0ed2fce1f41bde3d3e4d3125bd2b338c5239b44b9e3b8296788100c957b280175aee14e6b35c751019695f08224e2e0d1d9a6663a8720ca37b74cf1e134a06b1a00dd3e10109e38889f5332243f9ca3c04eebd8226f089464b45f31cf56662c2693590c349f675bdfd5acf199cef11f84b3c6a40dafda5d1bf0e9cfafcd92612ec38740da1a356cb73e7f2e9d49d5e03227aa89e939404863082417d50ffb29933ea73e7113382413603dbd3cc5356f6d1ee35b4536b39a3cccfb85c5d7845cd11c665b49bc89903a751af49d6fbc97ec33c222297ee257c13e8f0ae16e7619c39001da9d7e69cac6a312db09e245d8eb593ec042947e9f09b336d3fd6f48cccb3571710ffb682911c54e94ed2597c74c898012e5ead85e17e1b007c856740890c2edb5b73538b17ae319cc3865f7360a389e4ed4bb7da36dfc1803668d7e9f5813c71cf1a3ca9000169049968494fea302a659441145814403293551ab306c590a82044dcdc3dd689b9d550cc74ca3d52d7ae012bec82a3078b8045d7c57ad55425c8d15226bebbddebd5a22a08c446c939d209b5f62d2e31ec6e226bf905d72809f0bd237b6c80bb68998531466b4ebe589514af47df80228788b48e84b546008663b18319efb9f875dc9839f31af0a0f0e2b0f9b0d649b2bfa15be1691478607e40bc8cfdc617bd09b1dbdff763bb63ad6d6a583320341b3cfdbbfc723c5fa0227bb1cb95eab086911cae17cb93e870a2b33eccbc0cc798443db3dc806c782d176ce19bd4a8e09daa60d0e377faa579f57e7ab2c8b2fe72dae1d2e3573d5536532c311dcc84dfa7f25f9519ba7170fd1ae9a47329988f556f423d87d1a45dbd2d0b59b01f519662725851814d4059fe45f4bf805e72b5588a832c034c8c252b67be615ea0fc9b0c6794a29306d2986fba8970445fc93930ad09e9ed31ba64549d1bd313987eb724650eb11b363509c5e68c16adacc2b7c5ae848eec9409d4834e1bde0a2404dddbf2a024a39f7d00826ac73daf28eaafc8946fd9715f05062814fe8354507c4931a4a876f83f6d37f3081dd4519183f69aff8602da919196a5d6957e9ddb745638f610ca0e53690d4ed6d6cf1d0538b77f3fee7a275c98a4afd6574e0666bfb318488e13aea5ff30b4503904d0c051bcc98d5876b7441433a6969e55604f751c30a08a7ff740e6f2e82357567807bd1f1215313689a58624c7152be95af6bab4e43ebd149703466cf5be5b6a073500d0b262eeddb8c1d74d87daa168120c7521e7f54e098c76ad2fae1054091838d6dc5d8d9efc7a7dfc54d4e08aa3adee5fcba2354772323c1ceb8eb9315ce86badbfe9b8ba296522fbc5b1e52b68f3eb834c719bff5103b7d15bac325047ca8dc80c685c3878e91d74d1264a3c19636ee4c89a9e379ae135a6ce40fa1eb379827ead359fc7146ffe179541e3c6414fbd123f5f3385b74846e04fef3aea44c57d5c97ddc0aa9e4fc39a6994b2885ae80dbf312c5bd8276d414c3894928751ffdcb07273baa36f7dc31e5faef50cc50297d80ec57b69386e1bff77e11301f788818390592d5b87f233a0861464d423eb62b744b12fc449011c8ef7c77b53f8a566bd53f821f29994037b748462a0f73faf169e7a1233d255b367504205545331c40be8fbc8c73161c9cbe482da4171d69d187ecfbd22b7b7ecedfa6ebe84fdcd457eb43ae473ce44d79ad9189a12e17b3901103141093b76a67bfa0aa6a5acc765a0dbd6f4c7039e8fdcfcc26a93aee7c629d474fdffcc7fbcb5e38cafbb80792da81576a48824cb9c9afa6c5cce314cf839a3124451e24aa407dd7ccdfa74ee1275d7eee4c2714b511a639e0a18f569ca5a38897ee54d3eccc41cd45bef3883d3bc88c59c344a867348754d9315dca17b26e1171c309cafeafa1167cbc95d57868d720d4b7d44caffb2a54d76929fd3fcd8bb8769f86adb5b41ef5deb33f128241936839fa9eba59ac13ece1fca5a5e651ad69b8735a13f943330c4bd6671b8906ce02cd389eb1669e70de7e15ab5a2a6e13b898548bf7247bbb407da31b97893bc2a9401f3ab5c3e11b5109aa7dff388f962f3f7f90ad18b449097740519177c09b472201ec2fd4ef303d5ac0eb7b83d8688d024fe54794bbe8a0d1774ace7bea3866212fa7a497c108ac41653686ed8f84b4abd17bb61e78829b39db8b69dfab7225bcd6db605466ab9c3a836ed5f715ee673ee35c5291dadc795ef51e28331d6c395c1f7cf6bb39dea67107553a6689c5726fd3616802d4288706b468f5e20285c81de309f9bc6803bf52d0c191a69c5eda69203c58aaa4fa1e038ba581c3093b67c3208472e75c4d5a1e6461cfee85546915bc7172cf2d356d05571c9370ed88d903ff6b2655ef3e125d0836808919e315b950bf70616e0c820e9d9e23726373b69e40d3af213ced018dbfd1d1c2fd76e5a584af4c8eb35d83063924d45b0dbf283e6918e0d4c00c8f2386c44c92d1a84c6a6f27375649f360829ff3f7cc325825097565f1d452f40654e894a49ff3c734384c9b16636767f49491320adec8d3230be8b5c92fcc1a1c4c67f34f09f0ae8646508e45c814175606854fe53004c34db3af1d35406197031299e39a9ac064ac0948d778b21972a9a2390ee814e7e12fcaf2202b31a27aee43f9d928797c43aa0d2c17b44a3a3fd09efa1fa2b9041b4d168044e17a50eeeabf92e242277681d3461804613f2929831911ec9f0ba701be2c6a54e8a746720e9e63213455df0efaac0dca59c5f6f5aadef2edaee9603ab7cd8d9d6f7b8bc2e3fb288acdf0fe1bfa5614ee89634022bbb4ccd264136665b0d0343f08e8a2903f8fabef0b360877779b887d122417dc48659a924d5350e4758509109dd5c72861763dfa2e65dffae079857c8a6d8f9371b960802dd062ad174373026ef77ec8619f02807a8a74f812a29c85ce8d78c5916cae097b0fa537d0982270632508416216e1f0d3bd9881c59d98e6b1f13912787a5d685f74d33685cba0ed7f39cab5b40ed8bffc77a99c9d0136a83ea3b44db4c9df53b8d3fba20070d89c6c2ae5c66a540dd016b8976b4a2062e2d6cc46ca4ddfddcb155f83bfddf2c30ebf9b1ddf9a9a7e5c4328c12971819dd257bcdfdd78c2f7690336dba71cddb60776c1d9b6488b9084843b483aa3e809e648047599c67fa0ba5dd73c55ef1ada87c5d5b0aa4120168cc0e977df8b7d41a6fe262e0f95969c4f5ff8bed17b7706aec2f1523a29509c1b2b6736669dc6348981fbd259270f14616c81d99689315d34adb75a9111318b42532b5748429bf2bf91124501ceaab3e6eb88499d267bcb8d5a9e8a07f91820fa9c4cb7e1a23fbf69d6bd2868d4020ae9bd1605bd9b4af39acb04e54f67510ef208534c077ec266c750e691bf4a5540d39ec55acc9875b70fd80abdd09a1ccd1e6db97281e8510f1e6470323bdcff93e3001b8be52ef94da833386349dce7c37855e5b43fc926da3bc0c90db771c3a966613b09f0e463b1b9040a27be2162ac2fd28f7a85a448f56a41a101aa5542ab433d98469541342ceb5098e360595951e2d1d4590fabf71f4bc6feff33b3530cb58877fb25fbe5c22a5e44982c9e08b7c0952ef7b97d89316074c9f70d092c3e4b048b91fe342b6394050dceb6545f99e2526aadd3ecae2fd697edea1645ee03ef55b981082886dafba833a284917a89cf1ce3ffb138bef8ddb1627ac26d83aa7e4ded212d66ab504d3fadd589ef01fc294f9d00f63720b78e085a9866f8d7d12cd27b00535ae1d4c5becfaf035e5ce5bb6e03cd6d7f34fb858d40c05f3d3816382e02e1431a1ad172437cc1a442bee06790a89d4172c7efff996c4adbc43a4012fd392c3a0b6a1449658b8ec1c64a8395de0ad796f21b0bf06cc857ec77f0c65503de317b068cd5519537777bfe5312b20bd50380b5b416f3b7a753314037147732658436f26f05ded6e4ce99ce31af5fee59916cb789b829e72e1210ff9561bb0770d604972390b8225e804f98a9a0c2765cc645d63e01aba88a979535f509e7b98eb08ceeb725f5ac48882b366c7ad4d8dd890c757a2dd921c633481b3db9d9b7dbc56b383f6dcbdf03ac941309aec5d58453cef3ab24d24911f6fc98f36368bb29238a278455553552ebb998741a344829c342ff4da165d803d16dae1233d133a7a0e3d93ac256240748c9675e22b284e5f49382c974a82f6bd595a65da8ad8da666289c7652aaf48eabb22cc33c586639409b0c62316520074ac927072e126b28d7700ca92ad3fb2a98e209451f341e765019dc15ab49d1d763446b924622cd87ba228a035c4a3c1af1301903af7a5cf6954d6dccaac6a7e49c406d7798108ae84a75c07942cc340eec33739bc5444a81f67a4d8c9de25933f8e58233ecee5acce21779f32962348beaf0fe87d7ebcc129e5c840df2fce4ab8c4b7e3322034cc40384f247a48c1db9f2d150c30e5f08af8542f4699fd285d610a5b05144b351777297ea574f29d007d85b5c22d5c5d358fd0028476afd431f792197ac637ffdd931ebd9ca4959998a8862e837d150b53368d9a2c21873c89ec9b64d11dc70afb61", 0x1000}], 0x7, &(0x7f00000057c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x90}}], 0x6, 0x0) write(r1, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000005c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000640)='A', 0xfffff, 0x40008c1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001700)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/4095, 0xfff}, {0x0}], 0x2}, 0x5}], 0x1, 0x102, 0x0) 5m38.113500266s ago: executing program 0 (id=1883): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x608400, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) pread64(r1, &(0x7f0000000340)=""/236, 0xec, 0x2) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x100000, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=@newqdisc={0x114, 0x28, 0x100, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff}, {0xd, 0xb}}, [@TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xfff8, 0x801, 0x0, 0x7, 0x5, 0x5}}, {0xe, 0x2, [0x9, 0x10, 0x5, 0x5, 0xa]}}, {{0x1c, 0x1, {0x8, 0x0, 0x6, 0xd000000, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0xfff7]}}, {{0x1c, 0x1, {0x4, 0x4, 0xf58, 0x7ac, 0x1, 0x385}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x3, 0x2, 0x10000, 0x2, 0x10001, 0x6, 0x4}}, {0xc, 0x2, [0x9, 0x74f7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x8, 0x7, 0x7, 0x20000, 0x3, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0xe86b]}}, {{0x1c, 0x1, {0xf9, 0x3, 0x10, 0x6, 0x0, 0x7f, 0x0, 0x8}}, {0x14, 0x2, [0xe, 0x4, 0x80, 0x7, 0x80, 0x9, 0x5, 0x2]}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="24200400858d0000340012800e00010069703665727370616e00000020000280050016000200000004001200060018000200000005001700000000000000280048dc00006dd4b24046b20c6b96325ca10eca01ca59e8dfb64199965d6852886f940528bb0c4114960337d53c4cbe38b2fbe5e3db3fad7fb840dcf6aa689ecc28a1ccb4384d1c3b24bea4a4411302196718becbf9cd8806f383ce36db15d8c465cf54a08b093d89f8d79e8dc68247cf48b2dc87b7a52d8933b0778fcb32ac1e1d8e47eff4c6849f3e44899ac918ec6874924fe8b306b17de590d602a320d9917e88eeb0a3b98acbf9b832dfce8220da7f7554ebe00e3cb33bf861303e8b737781"], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 5m37.761546828s ago: executing program 0 (id=1886): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000043000100000000000000000002000000ffffffffffffffff6361636865000000"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000024000000"], 0x0, 0x44, 0xfffffffffffffe12}, 0x28) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0x24, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0x1, &(0x7f0000000480)="cd52f116a4ea98f3d6295539e58b92af98246947f353785c1f62d7604c8caee77e23af1c1ce309c3b0dabb17817c3c029a0cf0884c80dc2edb437731b6be54f7d2cb6f18e19fbced1d7a86ab22db9fc46487542c41987e6ab315529d30f236cc15ab79dfe4e060974d0733424c4ebc7f6b2cdc209b036ed72059f81d17ca58d7683f53156f0301a478cb26a76da31fd44e7317f8c22b658417cff0b46fd09b20c1b2a95705c5abba17eae1f2c3440bb4809f3688ec8fc2d6ecb7352051d0e55e", &(0x7f0000000540)=""/41}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003c000000340000000a000000000000000200000d00000000000000000202000000000000040000000000000001000005000000000200000002000000000000000000612e2e2e615f6100d5fe2111eb52ef0b1695c6448066c175d0cba5f1802918bec31698d63d9b0456709a4fc0460a15c08c09541628dae27941d5"], &(0x7f0000000740)=""/28, 0x56, 0x1c, 0x1}, 0x28) close(r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x4, 0x2005, 0x0, @mcast2, @mcast2, 0x40, 0x10, 0x8, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=@delqdisc={0x120, 0x25, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {0x2, 0xe}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ded}, @qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x7, 0x6, 0xb, 0x9, 0xa, 0x6, 0xc, 0xf, 0xf, 0x1, 0xd, 0x9, 0xe, 0xb, 0x1, 0xa], 0x0, [0x2, 0x7, 0xea, 0x8, 0xe6b, 0x5, 0x40, 0x73d7, 0x80, 0x6, 0x4, 0x6, 0x3, 0x6, 0xb334], [0x1000, 0x2, 0x3, 0x778b, 0x9, 0xf90b, 0x8000, 0x1ff, 0x9, 0x6, 0x4, 0xf, 0x5, 0x5, 0x93, 0x9]}}]}}, @qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x437d8000, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x40000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffffe1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3c6, 0x1000}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x805}, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a40)={'pimreg1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000bc0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r7, &(0x7f0000000c00)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000c40), 0x40000000000017d, 0x888) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xe4f, 0x400, 0x1000, 0x3, 0x7fffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1d23}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000884) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x24004095, &(0x7f0000000d80)={0x11, 0x88a8, r6, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 5m37.024291361s ago: executing program 0 (id=1888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newtfilter={0x2134, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2100, 0x2, [@TCA_MATCHALL_ACT={0x20fc, 0x2, [@m_sample={0xc8, 0x17, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4fab}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fffffff, 0x2, 0x8, 0x3, 0x7fffffff}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x19a, 0x6, 0x10000000, 0x0, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x3, 0x3, 0x8, 0x800}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd937}]}, {0x2a, 0x6, "8990d3eb3dd06a32189415f62fef327d580ed2dd1fcd625810fa4593be703fc9288476681ce5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x10b4, 0x1c, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-\\\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'TPROXY\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x1, 0x8, 0xf98}}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x401, 0x3, 0x4c7}}, @TCA_DEF_DATA={0x14, 0x3, 'veth0_to_batadv\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x4, 0x6, 0xe, 0x9}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_police={0xcec, 0xe, 0x0, 0x0, {{0xb}, {0xcac, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x0, 0x5, 0x1c, {0x2, 0x0, 0x7fff, 0x8, 0x4, 0x800}, {0x1, 0x0, 0x2, 0x59, 0x5, 0x8}, 0xa1cb, 0x2, 0x80000001}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x5e, 0x8, 0x5, {0xb, 0x1, 0x6f, 0x7f, 0x200, 0x9891}, {0x7, 0x0, 0x10, 0x9, 0x100, 0xfffffffa}, 0x8, 0x400}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7fffffff, 0x5, 0xf, 0x10000, 0x1, 0x4, 0x4, 0x800, 0x3b8, 0x3fc000, 0x0, 0x3a, 0x8, 0x3800000, 0x4, 0x3, 0x9, 0x400, 0x3ff, 0x7ff, 0x7d12e708, 0xc1, 0x3, 0xc3, 0x6, 0x3, 0x400, 0x80, 0x800, 0x80, 0xfffffff0, 0x0, 0x1, 0x5, 0x0, 0x31d3, 0x10000, 0x9, 0x9, 0x9, 0x6, 0x10000, 0xfffeffff, 0x72, 0x5, 0x2, 0x9, 0x1000, 0x3, 0x5, 0x0, 0x80000000, 0x26059160, 0x3, 0x4, 0x4, 0x40, 0xd, 0x0, 0x81, 0x7fffffff, 0x986, 0x8001, 0x5, 0x2, 0x483, 0x4, 0x3, 0xf, 0x101, 0x2, 0xd, 0x100, 0xfffffff9, 0x5, 0x7ff, 0x6168, 0x80, 0x80000001, 0xe, 0x8001, 0x6, 0x3, 0x3, 0x10000, 0x3, 0xffff59f2, 0x2, 0x3, 0x3, 0x40, 0xf, 0x3, 0x4, 0x3cb9, 0x4, 0x2, 0x2, 0xfffffff8, 0x5, 0x6, 0x1000, 0x8001, 0x7, 0x4, 0x3, 0x8, 0x401, 0x800, 0x8, 0x7f, 0x3, 0x0, 0x3, 0x4, 0x3, 0xfff, 0xf, 0x1, 0x8, 0x6ad5, 0x7, 0x2, 0x9, 0x5, 0x96e, 0x3, 0x1, 0x1, 0x92, 0x0, 0xffffffff, 0x401, 0x9, 0x80005, 0x1, 0xffffffe9, 0x6, 0x5, 0x2b, 0x950, 0x8, 0x76, 0x4, 0x0, 0x3, 0x7f, 0x8b4d, 0x3, 0x2, 0xf87, 0x0, 0x64d, 0x3, 0x9, 0xfffffffd, 0x0, 0x3, 0x9, 0x9, 0x3, 0x8, 0x4, 0x8, 0x24, 0x7d80000, 0x8, 0x3, 0x5, 0xff, 0xc4f, 0x6, 0x8, 0x9, 0x5, 0xb, 0x8, 0x3, 0x1000, 0x9, 0xfffffff6, 0xffff, 0xfffff262, 0x8, 0x0, 0x37, 0x5, 0x8, 0x4, 0x0, 0x2, 0xe4, 0x2, 0x5078, 0x2, 0xffffffff, 0x3ff00000, 0x7, 0xead, 0xfffff739, 0x0, 0xffff7000, 0xffffffff, 0x9, 0x1, 0xfffffffc, 0xfdc, 0xfffffff1, 0x0, 0xc6d, 0xdc7, 0x0, 0x6, 0xe78c, 0x5, 0x5, 0xaf, 0x6, 0xfffffffd, 0x4, 0x7fffffff, 0x7, 0x800, 0x2e4c54b2, 0x1, 0x7, 0x9, 0x1, 0x6, 0x4, 0x6, 0x5, 0x1, 0x4, 0x1, 0x5, 0x0, 0x8, 0x3, 0xffffff61, 0x69a, 0xfffffffa, 0xda98, 0x28, 0x80000000, 0x9, 0x4, 0x100, 0x1, 0xff, 0x8, 0x6, 0x6, 0x1, 0xa0]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x1, 0x7, 0x2, 0x1, 0x40, 0x7f, 0x4, 0x7fff, 0x79, 0x1, 0xfffffff4, 0xe, 0x3, 0xba, 0x0, 0x8, 0xf, 0x80000001, 0x9, 0xffff, 0xfff, 0x2, 0xffff2177, 0x2, 0x47, 0xfff, 0x12, 0x6, 0x8, 0x40, 0x9, 0x5, 0xdf, 0x7fffffff, 0x5, 0x9, 0x0, 0x2c5f, 0x9, 0x9, 0x9, 0x4, 0x6, 0x6ca, 0x81, 0x1533, 0x8, 0xc, 0x5, 0xb, 0xfffffc2a, 0x0, 0x7fff, 0x0, 0x8, 0x8, 0x1, 0x10000, 0x1d3, 0x3, 0x2, 0xc764, 0xfa8f000, 0x9, 0xfffffd70, 0x3, 0x4, 0x40, 0x4, 0x3, 0xa, 0x5, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, 0x401, 0x7fffffff, 0x7, 0xf08, 0x5, 0x6, 0x6, 0x0, 0x6, 0x6, 0x81, 0x101, 0xa, 0x2196ab06, 0x4, 0x4a68e42b, 0x4, 0xfffffffc, 0x9, 0x8, 0xe2, 0x82, 0x8, 0x40, 0x8a3, 0x8, 0x9, 0x4, 0x1, 0x1, 0x1ff, 0xc5, 0xffffff97, 0x8, 0x3, 0x1, 0x4, 0x7, 0x2, 0x2, 0x7, 0x6, 0xfffffbff, 0x1, 0x8001, 0x6, 0x101, 0xffff, 0x80, 0x5, 0x7, 0x1, 0x7, 0x0, 0x80000000, 0x7, 0x0, 0xfffffffb, 0x1, 0x8, 0x0, 0x1, 0x5, 0x3, 0x800, 0xfffffffe, 0x7, 0xe164, 0x6, 0x5, 0x2b, 0x2, 0xce0a, 0xe000, 0x400, 0x8, 0x4, 0x8, 0x401, 0x80000000, 0xfffffffb, 0x5, 0x0, 0x7, 0x8, 0x7c60, 0x6, 0x9, 0x9, 0x8000, 0x5, 0x4, 0x4, 0xfffffff9, 0x3, 0x6, 0x6, 0x2, 0x3, 0x2, 0x7, 0x1, 0x36, 0xa3, 0x0, 0x6, 0x80000000, 0x0, 0xe, 0x1000, 0x2, 0x6, 0x8, 0x8, 0x0, 0x9, 0x7, 0x5, 0xcea, 0x16d, 0x401, 0x800, 0x6, 0xffff, 0x1, 0x1, 0x6, 0x5, 0x5, 0x0, 0x9, 0x40, 0xa4, 0x8, 0x6, 0x8, 0x8, 0x6, 0x10, 0x5, 0x4, 0xd29, 0x8000, 0x7, 0x2, 0x1, 0x8001, 0xff, 0x7, 0x9, 0x401, 0x2a36, 0x4, 0x9, 0x1, 0x6, 0x1, 0x9, 0x7fffffff, 0xd, 0x2, 0xffffffff, 0x9, 0xb8, 0x6ea0, 0xb8cd, 0x1, 0x6, 0x4, 0x300, 0x10000, 0x8, 0xee47, 0x200, 0x7, 0x5, 0x0, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x0, 0x9, 0x7fffffff, 0xd2, 0x200001, 0xfffffff2, 0x200, 0x2, 0x7ff, 0x3, 0x3, 0x3, 0x8, 0x2, 0x7, 0x5, 0x4, 0x8, 0x57, 0x3c7, 0xcd, 0xf, 0x80, 0xfffffe00, 0x2, 0x0, 0xfff, 0x5, 0x3, 0x3, 0x100, 0xd7, 0x6, 0x2, 0xa562, 0x8, 0x0, 0x50, 0xc, 0x5, 0x7, 0x1, 0x2817b9e, 0x7, 0x3, 0x2, 0x7, 0x1, 0xd1, 0x4, 0x80000000, 0x1ff, 0x1000, 0x935f, 0x4, 0x7, 0x6, 0x6f, 0x0, 0xd3, 0x6, 0xb, 0x4, 0x3, 0x6, 0x4, 0x6, 0x102d15d9, 0x1, 0x1, 0x8, 0x6, 0x9, 0x799, 0x6, 0x7, 0x0, 0x3, 0x1fc0000, 0x1, 0x8, 0x47, 0x1, 0xc63b, 0x8, 0x401, 0x9, 0x4c9, 0x5, 0x5, 0x40, 0x10, 0xe, 0xf, 0x9, 0x7, 0x0, 0x3, 0x9cc, 0x1, 0xe6c, 0x9, 0xfffffffc, 0xf, 0x6, 0xb, 0xfff, 0x0, 0x9, 0x4f1e, 0x5, 0xe, 0x4, 0x8, 0x3, 0x9, 0x57d6, 0x2, 0x1, 0xfffffff9, 0xc, 0xf, 0x4, 0xc, 0x10, 0x3, 0xffffffff, 0x9, 0xfffffff9, 0x3, 0x6, 0xe, 0x6, 0x101, 0x64d2, 0x5, 0xa8b, 0x0, 0x5ae54ca3, 0xd6, 0xe7, 0x4, 0x400, 0x9, 0x1, 0x6, 0x5, 0x999, 0x0, 0x2, 0xe20, 0x0, 0x3, 0xa1, 0x8, 0x2, 0x5, 0x1, 0xfffffc01, 0x1, 0x6, 0x3, 0xc2, 0x5, 0x8820, 0x8, 0x5de57d24, 0x10000, 0x10000, 0x8, 0x6, 0x7, 0xf2, 0xc81, 0x5, 0x5, 0x6, 0x8, 0x8d57, 0x2, 0x8, 0x0, 0x7, 0xd, 0x6, 0x7fff, 0x1, 0x1, 0x4, 0x9, 0x7ff, 0x92, 0x8, 0x585, 0x4, 0xe0e, 0x1, 0x6, 0x9, 0x6, 0x3, 0x4, 0x0, 0x4, 0x3, 0x4, 0xc1b1, 0x8, 0x1ed4, 0xffff, 0x7, 0x4, 0x45, 0x4, 0x563, 0x6e, 0xd, 0x9, 0xffffffff, 0x1, 0xfffffff8, 0x7066, 0xabad, 0x95, 0x5c, 0x6da, 0x3, 0x5, 0x10000, 0xf, 0xfffffffe, 0x6, 0x1, 0xffffffff, 0x9, 0x77, 0xffffffc0, 0x8, 0x8, 0x2c4a, 0x1a7, 0x4, 0x1, 0x9, 0x5dd853fa, 0x6, 0x2c66, 0x2, 0x3, 0x9, 0x10001, 0x7fff, 0x3, 0xfffffff9]}]]}, {0x15, 0x6, "fea58668561e98f8d25bf8b4c35c3d3cc5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x15c, 0x15, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x14, 0x3, 'veth0_to_bridge\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x3, 0x2, 0x4}}, @TCA_DEF_DATA={0xb, 0x3, '#-\a)8!\x00'}, @TCA_DEF_DATA={0x8, 0x3, '+.[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xe47, 0x3ff, 0x2, 0x2, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x0, 0x7, 0x10, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x100, 0x5, 0x401, 0x7f}}]}, {0xa8, 0x6, "c362ce5c5a978b8b192dfa34f8436ae8368949e011b996de604f942c1efc297528fb4938f7ba60a21990f98edae52cf3378f4336b31a30615b69e041b44474b32dd5d6c61864a2bc253ecc107cbb0da58652ebb229bb5f20c29803cdb2060ba72f761d1b8f02e0f0d3a95fc7c19e219662522b28b2a1b44ef72befb28d55e18a04dfa559f2fddcd9f9e81681d6df2bdcb014d59f8ad2174886ecc075c0636c7726f66bea"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ct={0xcc, 0x1f, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_MARK={0x8, 0x5, 0x3966}]}, {0x82, 0x6, "790f7a34e73c793d7f9930300ea04a136b07e695056de0aa63003684120f7d88967657484075bcfa3786a0c3ff2fed5af334acf3a87e763d2bdbde94d5df821bb34cec5174b3dbec03c86d97b71cf0232b993f75894283b915cc578d73fd4d0e15edebfa94b42fe69c8c09e73dee87c6494bb73112630812b5a1ea7edbd8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x68, 0x16, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x2, 0x5, 0x101, 0x4}}, @TCA_DEF_DATA={0x6, 0x3, '&\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'geneve0\x00'}]}, {0x10, 0x6, "0ab5ca40e2dad222f745d49b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x2134}}, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r7 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000000414010025bd7000fedbdf2508000100000000009b044fdd32eec5e809a39c39a1343672763f00cffd0aaa30c75999df51c40ab8146d50058a7361c581db490ac3c9e0734e4dfc06000000000000"], 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000ac0)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r9}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pK \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40), 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000c80)='cgroup.clone_children\x00', 0x2, 0x0) epoll_create1(0x0) 5m36.332903475s ago: executing program 0 (id=1892): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x700, 0x8708, 0x100, 0x69, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x64, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0x1f, 0x3, [{0x2, 0xa, "9f812eafedaa9ff2"}, {0x0, 0x8, "152df4b30ad5"}, {0x7, 0x7, "b055091cce"}]}]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, 0x1, 0x1, '\x00', r0, r1, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, 0x1, 0x1, '\x00', r0, r1, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7ff}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c814) 5m21.212641058s ago: executing program 33 (id=1892): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x700, 0x8708, 0x100, 0x69, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x64, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0x1f, 0x3, [{0x2, 0xa, "9f812eafedaa9ff2"}, {0x0, 0x8, "152df4b30ad5"}, {0x7, 0x7, "b055091cce"}]}]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, 0x1, 0x1, '\x00', r0, r1, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, 0x1, 0x1, '\x00', r0, r1, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7ff}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c814) 2m30.774525538s ago: executing program 5 (id=2790): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x15, 0x301, 0x0, 0x100, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140011000200001a0002000000200000", 0x17) 2m30.657039622s ago: executing program 5 (id=2792): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2m29.280578166s ago: executing program 5 (id=2800): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3}, 0x10000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001680)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000001900)=0x4818, 0x4) bind$can_j1939(r3, &(0x7f0000001940)={0x1d, r4}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000001980)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f00000019c0)={&(0x7f0000001a00)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000001a40)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x4406f) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000070601080000ebffffff00000a0000440800064000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newsa={0x160, 0x10, 0x1, 0x4, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x3503, 0xa, 0x1, 0x0, 0xcd}, [@sa_dir={0x5, 0x21, 0x1}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x70bd2b, 0x0, 0xb}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x160}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x304, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x401}]}, 0x58}}, 0x8000) 2m28.263554522s ago: executing program 5 (id=2808): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c74657200000000000000ecffffff008265d23b31ef000000000000fb2e355af01698afcd8e337e0500000000000000fe9614b9008a5ecb05fc"], &(0x7f0000000040)=0x29) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240)="110000001000"/22, 0x16) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000140)="5a2b73e31132fc09374fd9c07f992abc254ec9b32b203c1e5254fce851c7f7c5abafdc14044a5781be15bc985e6e58b2fd113d011dbf2d4b551c0a2d4f28426761d39c1e0dcae24f3a50449bf5ce48f54e47f98eab24c3d726c9361b5ab7d461148d730b934cba97428f9df3c534cf1c4370404682b0a9479cf1c73c85f2d01db25303bf885630935a806587e6dc385304e5163a0522729c1fac5dba85b48cf8192f684a3e2881f584bca0edf0f04aebc9acd7c956e8885bc0ba5dc43aa9b5159e0fc396764b43969105113fd25cd59f3d6acf0fdaac392f287ffe4ea2357e3ba500", &(0x7f0000000280)=""/117}, 0x20) 2m28.025198638s ago: executing program 5 (id=2810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x1d}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m27.62539473s ago: executing program 5 (id=2812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r2, &(0x7f00000003c0)="10f8bc270fa20770033d2f55ffff4106140c410287b692b34d8062fbdf4c9d78739a5445d394c8d8993f292cab35fba69beb4d254ecf3d457d428dfd2478bf17a82dbef2cce85e9fef15d4cd", &(0x7f0000000540)=@tcp=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000005c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m12.2783817s ago: executing program 34 (id=2812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r2, &(0x7f00000003c0)="10f8bc270fa20770033d2f55ffff4106140c410287b692b34d8062fbdf4c9d78739a5445d394c8d8993f292cab35fba69beb4d254ecf3d457d428dfd2478bf17a82dbef2cce85e9fef15d4cd", &(0x7f0000000540)=@tcp=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000005c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 1m7.113797392s ago: executing program 1 (id=3290): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) unshare(0x24020400) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r3, 0x84, 0x80, &(0x7f0000000180)="1400000009000000", 0x8) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, 0x0) 1m6.061750739s ago: executing program 1 (id=3302): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x802}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x8c1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', r4, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1m5.724325631s ago: executing program 1 (id=3307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, r2, 0x1, 0x4004, 0xf7ffffff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20008000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1ead6811}, 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000400)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) sendmmsg(r5, &(0x7f00000006c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)='O', 0x36}], 0x1}}], 0x1, 0x0) unshare(0x28000600) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000800)="00000002e9970a00", 0x8) sendto$inet6(r8, 0x0, 0x0, 0x20004001, 0x0, 0x0) poll(&(0x7f00000003c0)=[{r3, 0x2005}, {r4, 0x4040}], 0x2, 0x10000009) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94) 1m5.462655261s ago: executing program 1 (id=3308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000500)={0x0, 0x7}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d8, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff4, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x5609c29893963bef}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000240)=0x8, 0x4) r6 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x52c) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000580)=@abs={0x0, 0x7, 0x6a0000e0}, 0x6e) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000540)=0x4, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m4.57735497s ago: executing program 1 (id=3316): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffff13, 0x400add0, &(0x7f0000000000)={0xa, 0x4e24, 0x10789e, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x1, 0x50, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000100)=0x10) r3 = socket$inet(0x2, 0xa, 0x265) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000001c0)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}}) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000700)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000740)) r7 = epoll_create1(0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000180)=0x8) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000000800)=0x4, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r12, &(0x7f0000000900), &(0x7f0000000940)=@udp=r11}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000d15100008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24}, 0x94) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r14, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r15, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008850}, 0x8000) sendto$inet(r13, &(0x7f0000000900)="f29471436e697521", 0x8, 0x24004090, &(0x7f0000000980)={0x2, 0x4e23, @multicast1}, 0x10) 1m4.251724671s ago: executing program 1 (id=3322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x7, 0x0, 0x64}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)={0x2, 'oK'}, 0x3) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1eaa000000000000791010000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff2}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x1d8, [0x200000000340, 0x0, 0x0, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x8, 0x22eb, 'bond0\x00', 'geneve0\x00', 'team_slave_0\x00', 'ip_vti0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @random="06273e15ebf8", [0x0, 0x0, 0xff, 0xff], 0x0, 0xb0, 0xe8, 0x118, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x4, 0x6, 0xdc, 0x6, 0xd90}}}], [@snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x250) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'dummy0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) connect$pppoe(r9, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r9, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6, 0x2}, 0x20) 13.865380917s ago: executing program 35 (id=3322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x7, 0x0, 0x64}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)={0x2, 'oK'}, 0x3) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1eaa000000000000791010000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff2}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x1d8, [0x200000000340, 0x0, 0x0, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x8, 0x22eb, 'bond0\x00', 'geneve0\x00', 'team_slave_0\x00', 'ip_vti0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @random="06273e15ebf8", [0x0, 0x0, 0xff, 0xff], 0x0, 0xb0, 0xe8, 0x118, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x4, 0x6, 0xdc, 0x6, 0xd90}}}], [@snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x250) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'dummy0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) connect$pppoe(r9, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r9, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6, 0x2}, 0x20) 2.635525786s ago: executing program 8 (id=3481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r0], &(0x7f0000000340), 0x10, 0x9}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000500)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x366, 0x10, &(0x7f00000009c0), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r6}, &(0x7f0000000b00), &(0x7f0000000b40)=r4}, 0x20) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x188f}, 0x38) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002400), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002440)={r7, 0x0, 0xe40, 0xfffffe6d, &(0x7f00000024c0)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000002500)='\x00', 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x3d, &(0x7f0000000b80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @ldst={0x0, 0x1, 0x3, 0x9, 0xa, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='syzkaller\x00', 0xf, 0x0, 0x0, 0x21700}, 0x94) 2.45347518s ago: executing program 6 (id=3484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0100", 0x10, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0xfe}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x9}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) 2.391204983s ago: executing program 4 (id=3485): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000840000000040900010073797a30"], 0x108}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206210100000000000000000000000005000400000000000900020073797a3000000000050001000700c7734b22dce656e9000014000300686173683a69702c706f72742c69"], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000000100)={0x52dd2409, 0xfffeffff, 0x40, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000040)=[{0xd, 0xfe, 0x8}, {0x1f, 0xfe}, {0x11, 0x101, 0x6}, {0x1a, 0x101}]}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES16=r9], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000220000000000000080000006b1189000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x3, @remote}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c000180140001800800ff0fe000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x6c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.339552105s ago: executing program 6 (id=3486): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000240)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000280)={0x2, &(0x7f0000000680)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000700)="333a1f63", 0x4}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001000db07004cdb688d49eecc3f2fc541", @ANYRES32=0x0, @ANYBLOB="8040010010250400050010000500000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1d15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1200}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20011}, 0x8000002) clock_gettime(0x0, &(0x7f00000008c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xa, &(0x7f00000009c0)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000630000001500020000000000810100000000000085000000560000009500"], &(0x7f0000000a40)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000a80)={0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r9) getsockname$packet(r9, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000021c0)=@newtfilter={0x19dc, 0x28, 0xd27, 0x0, 0x20000000, {0x0, 0x0, 0x0, r10, {}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x19b0, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x1990, 0x1, [@m_ctinfo={0x78, 0x5, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7ebb}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x2ce, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0xcc, 0xa, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x800, 0x4, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0xfffffffd, 0x10000007, 0x60, 0x2b290bdc}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x6, 0x7, 0x0, 0x1000}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x3, 0x800, 0x3}, 0x1, r10}}]}, {0x1d, 0x6, "6780a4d9196648f1f42b6e4d67e0df7d3e5603cd645ee85670"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_nat={0x111c, 0x1, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x3, 0x9, 0x100}, @empty, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa3bf, 0x9, 0x2, 0x7f, 0x8}, @dev={0xac, 0x14, 0x14, 0x1a}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8000, 0x7, 0x2ad, 0x1}, @multicast1, @broadcast, 0x5cbb6a790a7e7ac0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x5, 0x7fff, 0x6}, @multicast1, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9f, 0xb, 0x8, 0x46, 0x401}, @broadcast, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x7, 0x5, 0x4, 0x30000}, @loopback, @multicast2, 0xffffffff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x114, 0x20, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8a83}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x6, 0x7, 0x9, 0x2f6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x17}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa70f7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xde, 0x0, 0x1000, 0x9}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10, 0x81, 0x0, 0x80000001}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}]}, {0x63, 0x6, "eeb687b6f41883c1b72b4b06e5e7c6e90f56d414d1723d7607edf6e65214850ea62bf4c0134d7ebf35dae0e53ab928757e7b179832ec273a5e519fe6bf7ca6fe96ad87a7d2664147aed46ef731e4f3787092762eb57d7c2d501b471a0e4cc5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x11c, 0x19, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf4ba, 0x9, 0x5, 0x9, 0x5}, @loopback, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x1, 0x3, 0x40, 0x5}, @local, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1000007, 0x0, 0x10, 0xd}, @loopback, @remote, 0xffffff00}}]}, {0x7a, 0x6, "fe5daf060b72b44b5a8257607b15941cab90e373e3454615a929d4ee5be09dc3438ba87f3c9ce9b261b982e2a0323e22f06289b9cbc0a6085c9eecc5a8f0ed1b17f44218cd78716432d83999ae9a4f8dee998eb93a3953cce57c40b900c854992bf19142851f9d817dc0793115d5d55cbf51dd19d6ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x204, 0x1c, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x0, 0x20000000, 0x6, 0x10}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1e000000, 0x5, 0x10000000, 0x5, 0x1}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0xffffffffffffffff, 0x1, 0xb7c6}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0xd1c0, 0x0, 0x3, 0x6}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8001, 0x5, 0x9c, 0xffffffff}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81000, 0xe5, 0x4, 0x4, 0x7f}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xf, 0x0, 0x7, 0x200}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x5, 0x4, 0x400, 0xff}, 0x2, r10}}]}, {0xd6, 0x6, "acd4693cd6e1478c94c0be23eddc25111752f5c348873e313b3f24c715ebe57682466d11ab9d2be1572d0c708f58736e767991311a6a1421f9766c1f5ca22608ffa09f32d2270a8fdbe1b279a663b3d9ed0c65238f227d0f195681b912d97f398a5c5a42601a5373dfa9a346202816375ce56d21f0040026b6ac1ee2ef4bbf959ea16d36febfe4a1d76564a149cdc886de8ae74326dc167c91433a18a7d941e5aafcba600868d0db25a19675cf8e4899a46718b63586fadf76e3907d61df92d0923525f98000a15e4f8d2b1034d6055767db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x1d0, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x2, 0x8001, 0x5}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x71, 0x2}, @multicast1, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xff, 0x7, 0x3, 0x3}, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x9, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0xffffffffffffffff, 0xfffff000, 0x5}, @multicast1, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x200, 0x1, 0x2, 0x8}, @multicast1, @empty, 0xffffffff, 0x1}}]}, {0xde, 0x6, "3837aa777a077140898582563efad972cb0bb6111aa83cb12a19662207dfc88ad0f09afc6127f32baf7b7ba910b5adedb15fb8a5ade75e4c02a47fc2375955a4bbe157016b90df5d3213fc1db5de371b5c9b828db42ac6c7e4f92ebfa6ab047384c9fe8b9e68a5b30244a83bb5d0ff8ed5e13be00799187f330979b31299cd14d601263eeb484472476da13a8ec0857335557a729f7549e8388d94958a4ba325fc3a4897d11a23af6a371573dffb506db2c7e6f82f649aaa150d0c7a57ab6df1b080531d3cc5689fcf40b5641b57b0ea2d7c61117996b52f761a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x54, 0x19, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x24}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x14, 0x6, "0ae22ee0697b7433b28f160b91570db8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xd4, 0x17, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0xb8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb3a60}]}, {0x7e, 0x6, "80dace20780ee921539c44d08bd08d37e2a92400fe70c47ac28a4334a29c46e99661ff71fd5becf98cf9dde4f5afe621e49c8310f5ce478973a76a925b6c239fb9783b97bc33b75caf0d7e4c66998df9363dd42ebb47309d08acba317391ad102597f01c7fd2f267a1c19dad688515ed0cc5ca532181976ad709"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x19dc}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000007000000040000000000001102000000ffffffff06000000000000010000000032007601100000000000001000000000020000000000001204000000060000000003000a02000000005f612e006100"], &(0x7f00000018c0)=""/100, 0x63, 0x64, 0x0, 0x17, 0x10000}, 0x28) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001940)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x2, 0xa, &(0x7f0000001a80)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r12, @ANYBLOB="000000000000000079005816000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x4, 0xee, &(0x7f0000001b40)=""/238}, 0x80) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001c40), 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000001c80)={{r5, &(0x7f0000001d00)='GPL\x00', 0x2040, &(0x7f0000001d40)={@align=0x8, {0x12a8, 0x2fc1, 0x400, 0x5}}, 0x9, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4}, {[0x2, 0x4, 0xc, 0x8]}, 0xa7, 0x7c, &(0x7f0000001e00)=""/124}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x15, &(0x7f0000001f40)=ANY=[@ANYBLOB="180000007f00000000000000f7ffffff18240000", @ANYRES32=0x1, @ANYBLOB="0000000000000000c5410cb3f4f0972c67887794416a9000ffffffff1864000001000000000000005d0d0000b7080000000000007b8af8ff00000000b7080000890000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000"], &(0x7f0000002000)='GPL\x00', 0xfffffffa, 0xb8, &(0x7f0000002040)=""/184, 0x41000, 0x4, '\x00', r10, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x0, 0x7, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002140)=[r12, r13, 0x1, 0xffffffffffffffff, r14], &(0x7f0000002180)=[{0x4, 0x1, 0x8, 0xa}, {0x4, 0x1, 0xb, 0xc}, {0x2, 0x1, 0x5, 0x4}, {0x3, 0x4, 0x4, 0xb}], 0x10, 0x6}, 0x94) 2.286387452s ago: executing program 8 (id=3487): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) (async) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 2.080071515s ago: executing program 3 (id=3489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000201010100000000000000000a0000043c0002800c00028005000100880000002c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000ed0300022cbd7000fddbdf25c0ee7083dd838ef4f0e5db092d0b512fe421014d7a3367f2f5c38b92c160071c0b62000fead406d8e5333dfb3899a70a2364840e963fc871d86706d66870e3bacba02c4e0683997cd0f46c1bc5cccc57e1dfcb0364abc8b2842c25d9855b3406a576fc936f9650625e3bf2fb69594b6d307c8bf26e4fc22c743f7dd3d3ddd64c0e80ca936a4f1ffb1cf7eb13ca877d019941b968ba761ba4a57fe06c7f92a6735b55cdb354fc3d01a4323ce7e02d5366d0f1d4c60bfb66ae34278b"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000003c0)={{r1, &(0x7f00000001c0)='\x00', 0x210803, &(0x7f0000000200)={@align=0x1, {0x0, 0x3ff, 0x1, 0x4a}}, 0x2, &(0x7f0000000480), &(0x7f0000000300)=0x1}, {[0x7, 0x5, 0x8cd2, 0x5]}, 0x3, 0x48, &(0x7f0000000340)=""/72}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000440)=0xff, 0x4) 2.021297054s ago: executing program 6 (id=3490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000780)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$tun(r2, &(0x7f00000007c0)=ANY=[], 0xfdef) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0xc}]}]}]}, 0x3c}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) close(r7) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000001c0)=0x2005, 0x4) socket$netlink(0x10, 0x3, 0x13) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='xfrm0\x00'}) sendmsg$inet6(r8, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000000000000290000003e00"], 0x18}, 0x3400c8d4) 2.003992412s ago: executing program 7 (id=3491): socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) 1.976965056s ago: executing program 8 (id=3492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="240000005e00250e00200000000000050000008010003e800c00328005"], 0x24}], 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c0002800500010000000000080007400000000008000840000000013c000e802c000180140003"], 0xd8}}, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000140)={0x5, 0x7, 0x40, 0x8001}, 0x10) 1.837468129s ago: executing program 3 (id=3493): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) close(0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1.836837559s ago: executing program 4 (id=3494): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, &(0x7f0000000740)="60000000000800650100000000000000000000ffffffff0000000000000000000000000000013b00", 0x28, 0x4000040, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x32, &(0x7f0000000300)={@link_local, @random="4bb7e00d2cac", @val={@void, {0x8100, 0x6}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0xfa, 0x0, @void}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="80000200e13b000008001b", @ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x4054) 1.743183467s ago: executing program 8 (id=3495): r0 = socket$phonet(0x23, 0x2, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000280)=[{&(0x7f00000002c0)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002"], 0xc3}, 0x1, 0x100000000000000}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x6990a000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070300000000000300000d"], &(0x7f00000005c0)=""/4089, 0x4a, 0xff9, 0x9, 0x32e}, 0x28) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000540)=@ethtool_sset_info={0x37, 0x47c1, 0x9}}) 1.69446383s ago: executing program 3 (id=3496): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000009c0)='P', 0x1}], 0x1}}], 0x1, 0x42) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x82, &(0x7f0000000a00)="1af3050013000000", 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)='/', 0x1}], 0x1, 0x1) writev(r0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000a40)={0xffffffffffffffff, &(0x7f0000000b40)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000bc0)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000c00)='ns/pid_for_children\x00') close(0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xe, 0x4, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x44, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfffffcd4}, @NL80211_ATTR_PMKID={0x14, 0x55, "2c4a6ec839e54cb9205cae953f6aa098"}]}, 0x44}}, 0x10000010) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x305ae31f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50a2b371}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d4b1dcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c6b8276}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23fb59fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1732ec2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15d3654}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c7007cd}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c649ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x135bc6e3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15aea340}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fa1733}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80053}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x227858f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67ffad68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26ae408e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6270bd4e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x550ab21e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74311672}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb41c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b065173}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80fd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5285307b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3af67e2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40004}, 0x800) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.141846194s ago: executing program 7 (id=3497): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0xd, 0x2}, @l2={0x1f, 0xfffc, @any, 0x1, 0x1}, @ethernet={0x6, @broadcast}, 0x7, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000000)='bond_slave_1\x00', 0x7, 0x5, 0x7}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="bd0636b1bcb417cc45e55658ab3d5af430c4d3ff56408f600795fbc5e69826ab54e43323ef4f3f19272359d9386fb4ce3086f3b1d62987fb840a10ab43b4fcc496903c6ec0277729d51d199889849a07b1c5e5b03cd4182fca6a693f257cf26b5132d334c8be3fe39465cd68feefbaf8b46ea7686f52b256e34b822533b6a6df7623ffc24303b1603545915d1975ca452babf5a4a24366564e69635e3f923ac2d438134f41d3925190219173a41266f08adb9247bc52969d5737bdb32addc6c6b64028c42636ba0be00664", 0xcb}, {&(0x7f0000000200)="d736a4029bd27a176c508b91acad5b5d57730c814375f1cbe53b1a283dc867dd4846b6204eba1bd7306bcf7353963b2d5aaacae8eb1914f0842d247c7f4802c2dd13f85e3353fce2762f3cef98e239c71442282ece9658ea19d1c8f5c22a3bd4c5bb7878e3c4139e238d6abad15cdbc31b6963403c3e", 0x76}], 0x2}, 0x40010) sendmsg$nl_generic(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x14, 0x5e, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.141333166s ago: executing program 4 (id=3498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000f00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r0, 0x0, 0xe, 0x44, &(0x7f0000000fc0)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) 1.140608642s ago: executing program 6 (id=3499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x72ac}]}}]}, 0x38}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ed680b3fafa7c37388f8d3f4d62bc15ecb4d91675767999d146aef7798738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9b008537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bda00000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a3d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d6122966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84"], &(0x7f0000001d40)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001d80), 0x0, 0x10, &(0x7f0000001dc0), 0xffffffffffffffd8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.138913602s ago: executing program 4 (id=3500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900070073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000600)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000680)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x42, 0x6}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) r8 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r8, &(0x7f0000000440)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000480)={0x20, 0x8005}, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="27031c00160014000000002f39afacf706e105000500894f00050003ae0b80558ddbfa05145c331beb4934dcba9b37786fd80825", 0x34}, {&(0x7f0000000200)="fa", 0x1}, {&(0x7f0000000240)="000000894f", 0x5}], 0x3}, 0x4801) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1900000004009990cd5f729db60537f9eb3e0000040000000229e88e4e4891fb3db2b3c32ddc5eb6835f8f7007669ddfcc3615fdb1790732521a52b2b3deb2aad227a10fe70cefdaf47512a3d0ac4b203a177656146ccff5ce849d6319be"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r11}, 0xc) getsockopt$inet6_tcp_buf(r9, 0x6, 0x21, &(0x7f00000002c0)=""/109, &(0x7f0000000340)=0x6d) bind$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9}, 0x1c) 1.138262813s ago: executing program 7 (id=3501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, 0x0, 0x0, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.137610461s ago: executing program 7 (id=3502): syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000100)={0x1c, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4804) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x51de, 0x2, 0x1, 0x3d7cc392}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) (rerun: 64) 1.069632632s ago: executing program 3 (id=3503): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000000b40), 0x4000095, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0xffefffff}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x9, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0xdef}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000079004001000000001800000000fd00000000000000000000950000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1.024691849s ago: executing program 7 (id=3504): r0 = socket(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000400), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x2}], 0x10}, 0x20008810) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x2, 0x1d9}, &(0x7f0000000440)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000480)={r5, 0x8}, &(0x7f0000000500)=0x8) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000210425bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="00410000000201002000128008000100677265001400028006000f00"], 0x40}}, 0x24000014) (rerun: 64) 893.303164ms ago: executing program 4 (id=3505): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={0x2, 0x4, 0x30, 0x1, 0x3}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x7f00, 0x1, 0xfb, 0x40, r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22, @loopback}}, 0x2a96, 0x6, 0x6b77, 0x80000000, 0x93}, &(0x7f0000000300)=0x98) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9b5e}, 0x1, {[0x80000001, 0x9a, 0x2, 0x1, 0x1, 0x6, 0x2, 0x1]}}, 0x5c) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000003c0)={r4, 0x0, 0x4253, 0x2}, 0x10) getsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_sctp_SCTP_REUSE_PORT(r3, 0x84, 0x24, &(0x7f0000000480)=0x6203, 0x4) r7 = openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000500), 0x3) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000540)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x100, '\x00', r1, r7, 0x3, 0x3}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f0000000640)={0x1, [0x0]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000680)={'pim6reg0\x00', 0x600}) r9 = socket(0x11, 0x2, 0x1) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3fda}, 0x1c) sendto$inet6(r5, &(0x7f0000000700)="1a2cb8dacff8c7d52af1070065e0b7655c11a7b7ad94f9bff5e4428de46f11344557c878d22bf089c8a14a1991e998ea662d85f5bd782803209e5b", 0x3b, 0x0, &(0x7f0000000740)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r7, 0x84, 0x25, &(0x7f0000000780)={r6, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x5a, 0x800, 0x100}, &(0x7f0000000840)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r2, 0x84, 0x25, &(0x7f0000000880)={r10, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x6}}, 0x96, 0x3, 0x9}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000980)=0x102008, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1053}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x76c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x44001) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@ifindex=r1, 0x11, 0x0, 0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0]}, 0x40) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000c00), 0x4) 641.468949ms ago: executing program 4 (id=3506): r0 = socket(0x18, 0x4, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="06008864080014000800020701ab2f434a532710a9fbc1893bb3ecc15ce09408a14bbb2296c5d3281d93bd5937962b748db736cfac8e57ae3e513877f9d8b48b746223b12a63cad4a05038cd9d9020aea2bf00e3aa8e90c31aac3df6aa9e849392fd990b421720b45488170e40c21c8925f099"], 0x22) getsockopt(r0, 0x1, 0x7, &(0x7f0000000f00)=""/4096, &(0x7f0000001f00)=0x1000) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001f40)={0x2}, &(0x7f0000001f80)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001fc0)={r3, 0x8, 0x3e}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000b80)={0x1, &(0x7f0000000340)=[{0x80000006}]}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24}, {0x4, 0xa}, {0xc}, {0x0, 0x8, {0x2, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000005200)={{0x0, 0x0, 0x6, 0x101, 0xbd, 0x8, 0x33, 0x0, 0x0, 0x42b, 0x276201ca, 0xffffffffffff0000, 0x7, 0x5, 0x629d}, 0x18, [0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x6}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r11 = socket$inet(0x2, 0x2, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000cc0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x80, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff3, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x48840) sendmsg$nl_route_sched(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newtfilter={0x2c, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0x0, 0xffff}, {0xffe3, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) 640.706055ms ago: executing program 3 (id=3507): socket(0x400000000010, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000e40)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000f80)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c2", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) close(0x4) socket(0x400000000010, 0x3, 0x0) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000e40)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000f80)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r1, &(0x7f0000000000)="c2", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="e3", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) (async) close(0x4) (async) 440.753654ms ago: executing program 3 (id=3508): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback}}}}}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r2 = accept4(r0, &(0x7f0000000440)=@caif, &(0x7f00000004c0)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000500)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 413.827787ms ago: executing program 6 (id=3509): socketpair(0x8, 0x2, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000280)={@loopback, @multicast1, @local}, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES64=r5], 0x0, 0x34}, 0x28) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES64=r3, @ANYRESDEC=r5], &(0x7f00000005c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="101000000000000008000d0005000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r6], 0x40c}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000308010100000000000000000500b21da1345812304f62619180f1ddd41800080c00048008100140000000a50500030007840000000900010073797a3100000000050003008400000005000300016c0000050003002100000e090001007e71c141a3ec21ff9b7973797a390000002a3bf9fb6d16"], 0x58}, 0x1, 0x0, 0x0, 0x20000881}, 0x4008005) 341.720002ms ago: executing program 8 (id=3510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x3, 0x2, 0xb, 0x2, 0xfffffffffffffffe, 0x1}, @map_fd={0x18, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x401, 0x75, &(0x7f0000000140)=""/117, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0x7, &(0x7f0000000640)=[r4], &(0x7f0000000680)=[{0x0, 0x3, 0xf}, {0x5, 0x5, 0x2, 0x9}, {0x2, 0x3, 0x0, 0xc}, {0x0, 0x1, 0x1, 0x2}, {0x0, 0x1, 0xc, 0x4}, {0x1, 0x4, 0xf, 0x4}, {0x4, 0x5, 0xd, 0x3}], 0x10, 0x2}, 0x94) 274.508662ms ago: executing program 8 (id=3511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) getsockopt$inet_int(r1, 0x0, 0x1a, 0x0, &(0x7f00000002c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000140)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x32}, 0xa, @in6=@local, 0x3500, 0x1, 0x0, 0x4, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}}, 0x2000800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x400}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000100)={0x2, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 259.046417ms ago: executing program 7 (id=3512): connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_bond\x00'}}, 0x1e) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) (async, rerun: 64) splice(r0, 0x0, r1, 0x0, 0x3000, 0x100000000000000d) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 0s ago: executing program 6 (id=3513): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) (async, rerun: 32) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 32) r1 = accept$phonet_pipe(r0, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) write(r0, 0x0, 0x6000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1e8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xed, 0x7}}}}, [@NL80211_ATTR_FRAME={0x198, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xf}, @device_a, @device_a, @initial, {0x8, 0x3}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x401, @random=0x4, 0x20c, @void, @void, @void, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0xb7, {0xfa, 0x7c, 0x2, "148d3296d8974d9ff2388c4383a28445a814bef5219eaa08f0a1b3343d0868b96af65af4d975c27572ec146de2d59581ead9b3676a29bc0a49a5a525f9068624d68606cd37cffb8845c61248161e887516d8816963e830f00a30ca6a56ec395e06bc377c0f4cf5544ebae8a1a634fba0ccb905d99db672b2a87903321722e006e39802813661c95583bb3ca5ea713211e678dba9233000820719330bd1f5e5929eac6dc23cd668b5ace8ea43d3a8097e48acf0df"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x9, 0x34, 0x3}}, @void, @void, @void, @val={0x76, 0x6, {0x0, 0xb, 0x1b, 0x6}}, [{0xdd, 0x49, "622308429e4d3ba9740199974ce948c4877f0bc1d73523c84091b529c863b8ea24ad00190938bd97953280cbcbac0ae44361dc7d59a4ebf7d6fefaa72cd1d2578726d6119b913043e7"}, {0xdd, 0x49, "2fce07f7822467d24c4187aca09e49e2d3b9ccca0fad0afa0d2d065e890a82069fc52234aab5aaa29e2150ef29833fc28dc797aa5cdcc3353cd37367390f6efdea24cd510b7262db29"}, {0xdd, 0x6, "87b86e81130b"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000540)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000002e000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): t mode [ 561.683323][T17909] hsr_slave_0: left promiscuous mode [ 561.691386][T17909] hsr_slave_1: left promiscuous mode [ 562.254849][T17927] FAULT_INJECTION: forcing a failure. [ 562.254849][T17927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.254885][T17927] CPU: 1 UID: 0 PID: 17927 Comm: syz.6.2768 Not tainted syzkaller #0 PREEMPT(full) [ 562.254909][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 562.254922][T17927] Call Trace: [ 562.254931][T17927] [ 562.254941][T17927] dump_stack_lvl+0xe8/0x150 [ 562.254979][T17927] should_fail_ex+0x410/0x560 [ 562.255017][T17927] _copy_to_user+0x31/0xb0 [ 562.255071][T17927] bpf_verifier_vlog+0x496/0x900 [ 562.255114][T17927] bpf_verifier_log_write+0x11d/0x1a0 [ 562.255151][T17927] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 562.255184][T17927] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 562.255208][T17927] ? __kvmalloc_node_noprof+0x52a/0x820 [ 562.255246][T17927] verbose_arg_track+0x161/0x610 [ 562.255285][T17927] analyze_subprog+0x2ccd/0x9df0 [ 562.255315][T17927] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 562.255412][T17927] ? __pfx_analyze_subprog+0x10/0x10 [ 562.255442][T17927] ? __x64_sys_bpf+0xba/0xd0 [ 562.255466][T17927] ? do_syscall_64+0x166/0x520 [ 562.255487][T17927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.255557][T17927] ? call_instance+0x263/0x560 [ 562.255595][T17927] ? rcu_is_watching+0x16/0xb0 [ 562.255627][T17927] ? call_instance+0x263/0x560 [ 562.255656][T17927] ? trace_kmalloc+0x2a/0xf0 [ 562.255687][T17927] ? call_instance+0x263/0x560 [ 562.255716][T17927] ? __kvmalloc_node_noprof+0x52a/0x820 [ 562.255750][T17927] ? __kvmalloc_node_noprof+0x340/0x820 [ 562.255779][T17927] ? call_instance+0x263/0x560 [ 562.255806][T17927] ? call_instance+0x263/0x560 [ 562.255857][T17927] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 562.255891][T17927] ? bpf_tracing_func_proto+0x72/0x180 [ 562.255956][T17927] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 562.255996][T17927] ? __kvmalloc_node_noprof+0x340/0x820 [ 562.256027][T17927] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 562.256058][T17927] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 562.256099][T17927] bpf_compute_live_registers+0x8d3/0x1ff0 [ 562.256156][T17927] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 562.256202][T17927] bpf_check+0x2744/0x2ef0 [ 562.256263][T17927] ? __pfx_bpf_check+0x10/0x10 [ 562.256294][T17927] ? bpf_obj_name_cpy+0x194/0x1e0 [ 562.256320][T17927] bpf_prog_load+0x14d1/0x1c20 [ 562.256363][T17927] ? __pfx_bpf_prog_load+0x10/0x10 [ 562.256420][T17927] __sys_bpf+0xd0d/0xd90 [ 562.256477][T17927] ? __pfx___sys_bpf+0x10/0x10 [ 562.256521][T17927] ? __fget_files+0x2a/0x420 [ 562.256566][T17927] ? ksys_write+0x242/0x270 [ 562.256602][T17927] ? __pfx_ksys_write+0x10/0x10 [ 562.256635][T17927] __x64_sys_bpf+0xba/0xd0 [ 562.256666][T17927] do_syscall_64+0x166/0x520 [ 562.256687][T17927] ? trace_irq_disable+0x3b/0x140 [ 562.256714][T17927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.256737][T17927] ? clear_bhb_loop+0x70/0xc0 [ 562.256766][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.256788][T17927] RIP: 0033:0x7f1c3659f559 [ 562.256809][T17927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.256828][T17927] RSP: 002b:00007f1c374b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.256852][T17927] RAX: ffffffffffffffda RBX: 00007f1c36825fa0 RCX: 00007f1c3659f559 [ 562.256868][T17927] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 562.256882][T17927] RBP: 00007f1c374b7090 R08: 0000000000000000 R09: 0000000000000000 [ 562.256897][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.256921][T17927] R13: 00007f1c36826038 R14: 00007f1c36825fa0 R15: 00007ffdfd8e6e68 [ 562.256956][T17927] [ 562.924384][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2769'. [ 563.265244][T17960] netlink: 'syz.1.2772': attribute type 18 has an invalid length. [ 563.265268][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'. [ 564.165047][T17944] tipc: Enabling of bearer rejected, failed to enable media [ 564.180386][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 564.331734][T17960] netlink: 'syz.1.2772': attribute type 18 has an invalid length. [ 564.331760][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'. [ 564.683002][T17992] FAULT_INJECTION: forcing a failure. [ 564.683002][T17992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.683032][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.3.2779 Not tainted syzkaller #0 PREEMPT(full) [ 564.683060][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 564.683072][T17992] Call Trace: [ 564.683080][T17992] [ 564.683088][T17992] dump_stack_lvl+0xe8/0x150 [ 564.683121][T17992] should_fail_ex+0x410/0x560 [ 564.683154][T17992] _copy_to_user+0x31/0xb0 [ 564.683185][T17992] bpf_verifier_vlog+0x496/0x900 [ 564.683219][T17992] bpf_verifier_log_write+0x11d/0x1a0 [ 564.683248][T17992] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 564.683269][T17992] ? __kvmalloc_node_noprof+0x52a/0x820 [ 564.683304][T17992] ? arg_track_eq+0x503/0x7a0 [ 564.683335][T17992] analyze_subprog+0x2cc2/0x9df0 [ 564.683359][T17992] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 564.683438][T17992] ? __pfx_analyze_subprog+0x10/0x10 [ 564.683462][T17992] ? __x64_sys_bpf+0xba/0xd0 [ 564.683482][T17992] ? do_syscall_64+0x166/0x520 [ 564.683500][T17992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.683557][T17992] ? call_instance+0x263/0x560 [ 564.683581][T17992] ? rcu_is_watching+0x16/0xb0 [ 564.683606][T17992] ? call_instance+0x263/0x560 [ 564.683629][T17992] ? trace_kmalloc+0x2a/0xf0 [ 564.683654][T17992] ? call_instance+0x263/0x560 [ 564.683678][T17992] ? __kvmalloc_node_noprof+0x52a/0x820 [ 564.683705][T17992] ? __kvmalloc_node_noprof+0x340/0x820 [ 564.683730][T17992] ? call_instance+0x263/0x560 [ 564.683752][T17992] ? call_instance+0x263/0x560 [ 564.683794][T17992] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 564.683820][T17992] ? bpf_tracing_func_proto+0x72/0x180 [ 564.683873][T17992] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 564.683907][T17992] ? __kvmalloc_node_noprof+0x340/0x820 [ 564.683940][T17992] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 564.683965][T17992] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 564.684001][T17992] bpf_compute_live_registers+0x8d3/0x1ff0 [ 564.684047][T17992] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 564.684085][T17992] bpf_check+0x2744/0x2ef0 [ 564.684127][T17992] ? __pfx_bpf_check+0x10/0x10 [ 564.684154][T17992] ? bpf_obj_name_cpy+0x194/0x1e0 [ 564.684176][T17992] bpf_prog_load+0x14d1/0x1c20 [ 564.684215][T17992] ? __pfx_bpf_prog_load+0x10/0x10 [ 564.684267][T17992] __sys_bpf+0xd0d/0xd90 [ 564.684301][T17992] ? __pfx___sys_bpf+0x10/0x10 [ 564.684338][T17992] ? __fget_files+0x2a/0x420 [ 564.684377][T17992] ? ksys_write+0x242/0x270 [ 564.684402][T17992] ? __pfx_ksys_write+0x10/0x10 [ 564.684430][T17992] __x64_sys_bpf+0xba/0xd0 [ 564.684456][T17992] do_syscall_64+0x166/0x520 [ 564.684474][T17992] ? trace_irq_disable+0x3b/0x140 [ 564.684496][T17992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.684516][T17992] ? clear_bhb_loop+0x70/0xc0 [ 564.684539][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.684558][T17992] RIP: 0033:0x7f14ff79f559 [ 564.684576][T17992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.684592][T17992] RSP: 002b:00007f15005e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.684613][T17992] RAX: ffffffffffffffda RBX: 00007f14ffa25fa0 RCX: 00007f14ff79f559 [ 564.684627][T17992] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 564.684639][T17992] RBP: 00007f15005e3090 R08: 0000000000000000 R09: 0000000000000000 [ 564.684652][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.684663][T17992] R13: 00007f14ffa26038 R14: 00007f14ffa25fa0 R15: 00007ffebcfe3048 [ 564.684696][T17992] [ 566.103495][T18019] syzkaller1: entered allmulticast mode [ 566.145925][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 566.146284][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 566.152130][T18024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.214863][T18029] netlink: 'syz.1.2784': attribute type 3 has an invalid length. [ 566.327443][T18036] Bluetooth: hci0: unsupported parameter 5135 [ 566.327470][T18036] Bluetooth: hci0: unsupported parameter 8192 [ 566.327484][T18036] Bluetooth: hci0: unsupported parameter 5135 [ 566.327498][T18036] Bluetooth: hci0: unsupported parameter 8192 [ 566.556925][T18042] netlink: 'syz.5.2792': attribute type 1 has an invalid length. [ 566.657366][T18042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.821361][T18044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.821816][T18044] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 566.934366][T18044] bond3: (slave gre2): Error -95 calling set_mac_address [ 567.054788][T18042] gretap1: entered promiscuous mode [ 567.079800][T18042] bond3: (slave gretap1): making interface the new active one [ 567.108634][T18042] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 567.245836][T18049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 567.262925][T18049] bond3: (slave bond4): Enslaving as an active interface with a down link [ 567.331540][T18052] bond3 (unregistering): (slave gretap1): Releasing active interface [ 567.363838][T18052] bond3 (unregistering): (slave bond4): Releasing active interface [ 567.555337][T18052] bond3 (unregistering): Released all slaves [ 567.688129][T18063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2797'. [ 567.688158][T18063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2797'. [ 567.819419][T18066] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2798'. [ 568.027433][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2799'. [ 568.093237][T18074] ipvlan2: entered allmulticast mode [ 568.093261][T18074] veth1: entered allmulticast mode [ 568.109330][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 568.387586][T18087] trusted_key: syz.4.2802 sent an empty control message without MSG_MORE. [ 568.508762][T18076] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 568.576258][T18076] bond3 (unregistering): Released all slaves [ 568.718399][T18099] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2806'. [ 569.222138][T18123] gretap1: entered promiscuous mode [ 569.484439][T18126] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 569.576957][T14166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 569.581392][T14166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 569.600321][T14166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.604515][T14166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.614972][T14166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.983868][T18140] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 570.017773][T18144] ip_tables: iptables: counters copy to user failed while replacing table [ 570.049501][T18145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2815'. [ 570.640095][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 571.320087][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 571.362786][T16718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.362826][T16718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.362856][T16718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57953 - 0 [ 571.715872][ T5638] Bluetooth: hci4: command tx timeout [ 571.938918][T16718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.938959][T16718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.938988][T16718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57953 - 0 [ 572.197441][T18127] wg0 speed is unknown, defaulting to 1000 [ 572.550847][T16718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.550886][T16718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.550915][T16718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57953 - 0 [ 572.817752][T16718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.817792][T16718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.817820][T16718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57953 - 0 [ 573.016672][T18261] FAULT_INJECTION: forcing a failure. [ 573.016672][T18261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.016708][T18261] CPU: 1 UID: 0 PID: 18261 Comm: syz.4.2826 Not tainted syzkaller #0 PREEMPT(full) [ 573.016733][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 573.016747][T18261] Call Trace: [ 573.016756][T18261] [ 573.016766][T18261] dump_stack_lvl+0xe8/0x150 [ 573.016806][T18261] should_fail_ex+0x410/0x560 [ 573.016845][T18261] _copy_to_user+0x31/0xb0 [ 573.016881][T18261] bpf_verifier_vlog+0x496/0x900 [ 573.016920][T18261] bpf_verifier_log_write+0x11d/0x1a0 [ 573.016953][T18261] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 573.016977][T18261] ? __kvmalloc_node_noprof+0x52a/0x820 [ 573.017012][T18261] ? arg_track_eq+0xd9/0x7a0 [ 573.017046][T18261] analyze_subprog+0x2cc2/0x9df0 [ 573.017073][T18261] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 573.017161][T18261] ? __pfx_analyze_subprog+0x10/0x10 [ 573.017186][T18261] ? __x64_sys_bpf+0xba/0xd0 [ 573.017216][T18261] ? do_syscall_64+0x166/0x520 [ 573.017233][T18261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.017285][T18261] ? call_instance+0x263/0x560 [ 573.017307][T18261] ? rcu_is_watching+0x16/0xb0 [ 573.017332][T18261] ? call_instance+0x263/0x560 [ 573.017356][T18261] ? trace_kmalloc+0x2a/0xf0 [ 573.017384][T18261] ? call_instance+0x263/0x560 [ 573.017411][T18261] ? __kvmalloc_node_noprof+0x52a/0x820 [ 573.017443][T18261] ? __kvmalloc_node_noprof+0x340/0x820 [ 573.017471][T18261] ? call_instance+0x263/0x560 [ 573.017497][T18261] ? call_instance+0x263/0x560 [ 573.017545][T18261] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 573.017576][T18261] ? bpf_tracing_func_proto+0x72/0x180 [ 573.017638][T18261] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 573.017675][T18261] ? __kvmalloc_node_noprof+0x340/0x820 [ 573.017704][T18261] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 573.017735][T18261] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 573.017772][T18261] bpf_compute_live_registers+0x8d3/0x1ff0 [ 573.017823][T18261] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 573.017864][T18261] bpf_check+0x2744/0x2ef0 [ 573.017912][T18261] ? __pfx_bpf_check+0x10/0x10 [ 573.017940][T18261] ? bpf_obj_name_cpy+0x194/0x1e0 [ 573.017962][T18261] bpf_prog_load+0x14d1/0x1c20 [ 573.018001][T18261] ? __pfx_bpf_prog_load+0x10/0x10 [ 573.018053][T18261] __sys_bpf+0xd0d/0xd90 [ 573.018086][T18261] ? __pfx___sys_bpf+0x10/0x10 [ 573.018123][T18261] ? __fget_files+0x2a/0x420 [ 573.018161][T18261] ? ksys_write+0x242/0x270 [ 573.018207][T18261] ? __pfx_ksys_write+0x10/0x10 [ 573.018255][T18261] __x64_sys_bpf+0xba/0xd0 [ 573.018282][T18261] do_syscall_64+0x166/0x520 [ 573.018301][T18261] ? trace_irq_disable+0x3b/0x140 [ 573.018324][T18261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.018344][T18261] ? clear_bhb_loop+0x70/0xc0 [ 573.018368][T18261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.018387][T18261] RIP: 0033:0x7f362659f559 [ 573.018407][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.018424][T18261] RSP: 002b:00007f362749a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.018446][T18261] RAX: ffffffffffffffda RBX: 00007f3626825fa0 RCX: 00007f362659f559 [ 573.018460][T18261] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 573.018473][T18261] RBP: 00007f362749a090 R08: 0000000000000000 R09: 0000000000000000 [ 573.018485][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.018497][T18261] R13: 00007f3626826038 R14: 00007f3626825fa0 R15: 00007ffde38176a8 [ 573.018530][T18261] [ 573.652401][T18262] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 573.762272][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 573.762330][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 573.799842][ T5638] Bluetooth: hci4: command tx timeout [ 573.841414][T18268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2827'. [ 573.930719][T18271] ip_tables: iptables: counters copy to user failed while replacing table [ 574.151817][T18275] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2829'. [ 574.248472][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 574.248718][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 574.664744][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 574.942037][T18268] tipc: Resetting bearer [ 575.741432][T18268] bridge0: port 1(team0) entered disabled state [ 575.741660][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.865587][ T5638] Bluetooth: hci4: command tx timeout [ 575.911866][T18268] tipc: Resetting bearer [ 577.076187][T16727] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 60387 - 0 [ 577.076222][T16727] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.076261][T16727] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 60387 - 0 [ 577.076286][T16727] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.076318][T16727] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 60387 - 0 [ 577.076341][T16727] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.076373][T16727] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 60387 - 0 [ 577.076397][T16727] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.622074][T16718] tipc: Resetting bearer [ 577.949212][ T5638] Bluetooth: hci4: command tx timeout [ 578.190037][T16718] bond6 (unregistering): (slave gretap1): Releasing active interface [ 578.243796][T16718] bond9 (unregistering): (slave gretap3): Releasing backup interface [ 578.318826][T16718] bond7 (unregistering): (slave geneve4): Releasing active interface [ 578.406967][T16718] tipc: Disabling bearer [ 578.643684][T18305] __nla_validate_parse: 1 callbacks suppressed [ 578.643705][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2837'. [ 578.676984][T16718] bond8 (unregistering): (slave bridge9): Releasing backup interface [ 578.677013][T16718] bond8 (unregistering): (slave bridge9): the permanent HWaddr of slave - 22:0b:b1:c9:75:fa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 578.677045][T16718] bridge9 (unregistering): left promiscuous mode [ 578.677069][T16718] bond8 (unregistering): (slave bridge10): making interface the new active one [ 578.677087][T16718] bridge10 (unregistering): entered promiscuous mode [ 578.753176][T16718] bond8 (unregistering): (slave bridge10): Releasing backup interface [ 578.753207][T16718] bridge10 (unregistering): left promiscuous mode [ 578.788021][T16718] team0: Port device bridge11 removed [ 578.818656][T16718] .` (unregistering): Released all slaves [ 578.859173][T16718] bond1 (unregistering): (slave vlan5): Releasing backup interface [ 578.881707][T16718] bond1 (unregistering): Released all slaves [ 578.928586][T16718] bond2 (unregistering): Released all slaves [ 578.955233][T16718] bond3 (unregistering): Released all slaves [ 578.984582][T16718] bond4 (unregistering): (slave veth11): Releasing active interface [ 578.999648][T16718] bond4 (unregistering): Released all slaves [ 579.021314][T16718] bond5 (unregistering): Released all slaves [ 579.055379][T16718] bond6 (unregistering): Released all slaves [ 579.100954][T16724] smc: removing ib device syz0 [ 579.102126][T16718] bond0 (unregistering): Released all slaves [ 579.129495][T16718] bond7 (unregistering): Released all slaves [ 579.171939][T16718] bond8 (unregistering): Released all slaves [ 579.200657][T16718] bond9 (unregistering): Released all slaves [ 579.222603][T16718] bond10 (unregistering): Released all slaves [ 579.724457][T16724] smbdirect: ib_dev[syz0] removed [ 580.040801][T18322] netlink: 'syz.4.2840': attribute type 16 has an invalid length. [ 580.040838][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2840'. [ 580.490523][T18338] rdma_rxe: rxe_newlink: failed to add lo [ 580.706039][T18352] netlink: 'syz.3.2843': attribute type 16 has an invalid length. [ 580.706064][T18352] netlink: 'syz.3.2843': attribute type 17 has an invalid length. [ 581.130942][T18352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.143083][T18352] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.505217][T18352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.505247][T18352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.560366][T18352] veth1_vlan: left promiscuous mode [ 581.563690][T18352] veth0_vlan: left promiscuous mode [ 581.586870][T18352] veth0_vlan: entered promiscuous mode [ 581.608962][T18352] veth1_vlan: entered promiscuous mode [ 581.653302][T18352] veth0_macvtap: left promiscuous mode [ 581.663898][T18352] veth0_macvtap: entered promiscuous mode [ 581.706151][T18352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.708626][T18352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.711940][T18352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.749539][T18352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.769301][T18352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.795200][T18352] gretap1: left promiscuous mode [ 581.806636][T18352] bond2: left promiscuous mode [ 581.806655][T18352] bridge1: left promiscuous mode [ 581.809637][T18352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.851774][T18352] macsec1: left promiscuous mode [ 581.870904][T18352] bridge4: left promiscuous mode [ 581.870928][T18352] bridge4: left allmulticast mode [ 581.873776][T18352] ip6erspan0: left allmulticast mode [ 581.955214][T18352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.973688][T18352] vlan3: left promiscuous mode [ 581.973712][T18352] bond0: left promiscuous mode [ 581.973728][T18352] bond_slave_0: left promiscuous mode [ 581.973953][T18352] bond_slave_1: left promiscuous mode [ 582.063704][T18352] bond4: left promiscuous mode [ 582.064806][T18352] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.119917][T18352] 8021q: adding VLAN 0 to HW filter on device bond5 [ 582.124313][T18352] bond6: left promiscuous mode [ 582.124335][T18352] veth3: left promiscuous mode [ 582.150379][T18352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 582.273209][T18352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 582.322571][T18352] 8021q: adding VLAN 0 to HW filter on device bond8 [ 582.323974][T18352] vlan5: left allmulticast mode [ 582.323994][T18352] bond0: left allmulticast mode [ 582.324008][T18352] bond_slave_0: left allmulticast mode [ 582.324027][T18352] bond_slave_1: left allmulticast mode [ 582.367216][T18352] geneve2: left promiscuous mode [ 582.373576][T18352] veth4: left allmulticast mode [ 582.699587][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 582.722661][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.722809][T16725] bridge0: port 2(bridge_slave_1) entered listening state [ 583.141732][T16725] bridge0: port 1(team0) entered blocking state [ 583.141867][T16725] bridge0: port 1(team0) entered listening state [ 583.189020][T18127] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.190044][T18127] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.190390][T18127] bridge_slave_0: entered allmulticast mode [ 583.281060][T18127] bridge_slave_0: entered promiscuous mode [ 583.315114][T18127] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.319713][T18127] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.320067][T18127] bridge_slave_1: entered allmulticast mode [ 583.367755][T18127] bridge_slave_1: entered promiscuous mode [ 583.850128][T18127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.882243][T18127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.171693][T18127] team0: Port device team_slave_0 added [ 584.220003][T18127] team0: Port device team_slave_1 added [ 584.439167][T16731] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 60387 - 0 [ 584.439209][T16731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.536679][T16729] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 60387 - 0 [ 584.536717][T16729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.538087][T16729] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 584.538151][T16729] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 584.566459][T16729] bond6: active interface up! [ 584.620695][T16718] tipc: Disabling bearer [ 584.642654][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2850'. [ 584.644609][T16718] tipc: Left network mode [ 584.691254][T16723] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 60387 - 0 [ 584.691293][T16723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.691337][T16723] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 60387 - 0 [ 584.691365][T16723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.934314][T18412] netlink: 'syz.3.2853': attribute type 4 has an invalid length. [ 584.934337][T18412] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2853'. [ 584.951187][T18127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.951264][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.952699][T18127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.971823][T18398] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2850'. [ 584.988945][T18404] bridge_slave_0: left allmulticast mode [ 584.988977][T18404] bridge_slave_0: left promiscuous mode [ 584.989268][T18404] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.259048][T18127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.259068][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.259098][T18127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.399575][T14166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.412878][T14166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.420718][T14166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 585.433680][T14166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 585.442812][T14166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 585.513435][T18412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.606586][T18418] bridge0: port 1(team0) entered disabled state [ 585.606813][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.123087][T18127] hsr_slave_0: entered promiscuous mode [ 586.134984][T18127] hsr_slave_1: entered promiscuous mode [ 587.545710][ T5638] Bluetooth: hci0: command tx timeout [ 587.729575][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 588.240871][T18487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.504328][T18488] xt_CT: No such helper "syz0" [ 588.718024][ T30] audit: type=1800 audit(1793018429.131:23): pid=18493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2865" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3026 res=0 errno=-22 [ 589.018184][T18506] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2866'. [ 589.046672][T18419] wg0 speed is unknown, defaulting to 1000 [ 589.625653][ T5638] Bluetooth: hci0: command tx timeout [ 589.883787][T16718] hsr_slave_0: left promiscuous mode [ 589.900628][T16718] hsr_slave_1: left promiscuous mode [ 589.913733][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2869'. [ 589.999039][T16718] veth1_macvtap: left promiscuous mode [ 589.999626][T16718] veth0_macvtap: left promiscuous mode [ 590.473880][T18535] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2873'. [ 590.575779][T18536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2873'. [ 590.689153][T18539] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2873'. [ 590.716869][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2873'. [ 591.256453][T16718] team0 (unregistering): Port device veth1_to_hsr removed [ 591.703577][T18524] syz_tun: left allmulticast mode [ 591.703995][T18524] syz_tun: left promiscuous mode [ 591.704976][T18524] bridge0: port 3(syz_tun) entered disabled state [ 591.706225][ T5638] Bluetooth: hci0: command tx timeout [ 591.763521][T18524] bridge_slave_1: left allmulticast mode [ 591.763551][T18524] bridge_slave_1: left promiscuous mode [ 591.765334][T18524] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.813164][T16718] IPVS: stop unused estimator thread 0... [ 593.489360][T18587] netlink: 'syz.3.2880': attribute type 11 has an invalid length. [ 593.489384][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 593.563196][T18127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 593.580432][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.580825][T18590] lo: entered allmulticast mode [ 593.583169][T18590] lo: left allmulticast mode [ 593.600543][T18127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 593.641950][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.642905][T18127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 593.678250][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.687954][T18127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 593.711418][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.788055][ T5638] Bluetooth: hci0: command tx timeout [ 593.857985][T18606] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 593.889502][T18606] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2882'. [ 594.095230][T18127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.320088][T18419] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.320194][T18419] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.320332][T18419] bridge_slave_0: entered allmulticast mode [ 594.323876][T18419] bridge_slave_0: entered promiscuous mode [ 594.363082][T18127] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.363839][T18419] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.363950][T18419] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.364118][T18419] bridge_slave_1: entered allmulticast mode [ 594.395729][T18419] bridge_slave_1: entered promiscuous mode [ 594.444054][T16722] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.444164][T16722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.463739][T18419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.487496][T18419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.610504][T16728] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.610625][T16728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.640922][T18419] team0: Port device team_slave_0 added [ 594.663409][T18419] team0: Port device team_slave_1 added [ 594.823885][T18419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.823905][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.823957][T18419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.884204][T18419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.884221][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.884248][T18419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.126111][T18419] hsr_slave_0: entered promiscuous mode [ 595.128967][T18419] hsr_slave_1: entered promiscuous mode [ 595.129733][T18419] debugfs: 'hsr0' already exists in 'hsr' [ 595.129754][T18419] Cannot create hsr debugfs directory [ 595.641385][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 595.642372][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2890'. [ 596.105096][T18419] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 596.142316][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.144160][T18419] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 596.160106][T18686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2893'. [ 596.190987][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.193966][T18419] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 596.229215][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.230220][T18419] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 596.255365][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.432670][T18700] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 596.508608][T18419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.556122][T18419] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.579366][T16725] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.579477][T16725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.623149][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.623251][T16725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.754977][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 597.082979][T18127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.318818][T18735] netlink: 'syz.6.2900': attribute type 11 has an invalid length. [ 597.359826][T18127] veth0_vlan: entered promiscuous mode [ 597.400779][T18127] veth1_vlan: entered promiscuous mode [ 597.589273][T18127] veth0_macvtap: entered promiscuous mode [ 597.613931][T18127] veth1_macvtap: entered promiscuous mode [ 597.685271][T18755] netlink: 'syz.3.2904': attribute type 9 has an invalid length. [ 597.685294][T18755] netlink: 'syz.3.2904': attribute type 4 has an invalid length. [ 597.744162][T18756] bridge13: entered allmulticast mode [ 597.768517][T18127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.841532][T18127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.869220][T18761] netlink: 'syz.4.2903': attribute type 1 has an invalid length. [ 597.952945][T18761] 8021q: adding VLAN 0 to HW filter on device bond15 [ 598.031148][T18766] bond15: (slave veth0_to_bond): making interface the new active one [ 598.033011][T18766] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 598.044891][T16723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.079204][T18753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2903'. [ 598.079238][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 598.101489][T18761] bond15: entered promiscuous mode [ 598.101512][T18761] veth0_to_bond: entered promiscuous mode [ 598.101715][T18761] bond15: entered allmulticast mode [ 598.101731][T18761] veth0_to_bond: entered allmulticast mode [ 598.210052][T18761] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 598.257810][T16728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.305552][T16724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.349893][T16725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.509601][T16722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.509625][T16722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.676042][T16729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.676103][T16729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.964156][T18800] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2910'. [ 599.048594][T18800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2910'. [ 599.048619][T18800] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2910'. [ 599.048803][T18800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2910'. [ 599.192195][T18419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.580072][T18825] syzkaller0: entered promiscuous mode [ 599.580097][T18825] syzkaller0: entered allmulticast mode [ 600.064756][T18419] veth0_vlan: entered promiscuous mode [ 600.090646][T18419] veth1_vlan: entered promiscuous mode [ 600.216945][T18419] veth0_macvtap: entered promiscuous mode [ 600.250368][T18419] veth1_macvtap: entered promiscuous mode [ 600.553755][T18419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.616437][T18419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.658971][T16729] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.659019][T16729] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.659054][T16729] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.659089][T16729] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.836582][T14166] Bluetooth: hci0: command 0x0405 tx timeout [ 600.861127][T16724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.861150][T16724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.960297][T16725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.960321][T16725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.082047][T18903] bond0: entered promiscuous mode [ 601.082076][T18903] bond_slave_0: entered promiscuous mode [ 601.084541][T18903] bond_slave_1: entered promiscuous mode [ 601.109046][T18903] batadv0: entered promiscuous mode [ 601.142123][T18903] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 601.191311][T18903] bond0: left promiscuous mode [ 601.191338][T18903] bond_slave_0: left promiscuous mode [ 601.191609][T18903] bond_slave_1: left promiscuous mode [ 601.219295][T18903] batadv0: left promiscuous mode [ 601.649638][T18917] syzkaller0: entered promiscuous mode [ 601.649663][T18917] syzkaller0: entered allmulticast mode [ 601.837762][T18927] netlink: 'syz.3.2933': attribute type 11 has an invalid length. [ 601.937038][T18928] __nla_validate_parse: 67 callbacks suppressed [ 601.937060][T18928] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2932'. [ 601.970742][ T5638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 601.975187][ T5638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 601.985160][ T5638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 601.997742][ T5638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 602.010744][ T5638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 602.209565][T18940] sctp: [Deprecated]: syz.7.2936 (pid 18940) Use of int in max_burst socket option. [ 602.209565][T18940] Use struct sctp_assoc_value instead [ 602.210486][T18940] netlink: 'syz.7.2936': attribute type 1 has an invalid length. [ 602.255200][T18940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.279437][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2935'. [ 602.279463][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2935'. [ 602.365143][T18939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 602.382956][T18944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.402154][T18944] bond5: (slave bond0): making interface the new active one [ 602.404793][T18944] bond5: (slave bond0): Enslaving as an active interface with an up link [ 602.405173][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2936'. [ 602.545773][T18939] bond5 (unregistering): (slave bond0): Releasing active interface [ 602.569240][T18939] bond5 (unregistering): Released all slaves [ 603.314029][T18929] wg0 speed is unknown, defaulting to 1000 [ 603.432019][T18991] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 603.470876][T18994] team0: left allmulticast mode [ 603.470901][T18994] team_slave_0: left allmulticast mode [ 603.470919][T18994] team_slave_1: left allmulticast mode [ 603.470934][T18994] bridge11: left allmulticast mode [ 603.472713][T18994] team0: left promiscuous mode [ 603.472731][T18994] team_slave_0: left promiscuous mode [ 603.472934][T18994] team_slave_1: left promiscuous mode [ 603.473181][T18994] bridge11: left promiscuous mode [ 603.473604][T18994] bridge0: port 1(team0) entered disabled state [ 603.486610][T18997] ip_tables: iptables: counters copy to user failed while replacing table [ 603.578667][T18997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2950'. [ 603.586830][T18994] bridge_slave_1: left allmulticast mode [ 603.586907][T18994] bridge_slave_1: left promiscuous mode [ 603.590742][T18994] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.663163][T18994] bond0: (slave bond_slave_0): Releasing backup interface [ 603.706588][T18994] bond0: (slave bond_slave_1): Releasing backup interface [ 603.748961][T18994] team0: Port device team_slave_0 removed [ 603.778672][T18994] team0: Port device team_slave_1 removed [ 603.785214][T18994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 603.842468][T18997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2950'. [ 603.844468][T19000] tipc: Enabled bearer , priority 0 [ 603.910393][T19006] netlink: 'syz.7.2952': attribute type 1 has an invalid length. [ 603.910419][T19006] netlink: 4320 bytes leftover after parsing attributes in process `syz.7.2952'. [ 603.924212][T19006] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2952'. [ 603.924282][T19006] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2952'. [ 604.106220][ T5638] Bluetooth: hci7: command tx timeout [ 604.126225][T19008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2953'. [ 604.492068][T19024] vlan0: entered promiscuous mode [ 604.688148][T19038] syzkaller0: entered promiscuous mode [ 604.688173][T19038] syzkaller0: entered allmulticast mode [ 604.695046][T19038] 0: reclassify loop, rule prio 0, protocol 800 [ 605.008549][T19042] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 605.123778][T19046] veth0_virt_wifi: entered promiscuous mode [ 605.183033][T19042] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 605.211624][T18929] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.211808][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.212233][T18929] bridge_slave_0: entered allmulticast mode [ 605.240324][T18929] bridge_slave_0: entered promiscuous mode [ 605.257650][T18929] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.257767][T18929] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.259485][T18929] bridge_slave_1: entered allmulticast mode [ 605.264189][T18929] bridge_slave_1: entered promiscuous mode [ 605.428386][T18929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.446818][T18929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.566713][T18929] team0: Port device team_slave_0 added [ 605.637706][T18929] team0: Port device team_slave_1 added [ 605.853056][T18929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.853074][T18929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.853103][T18929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.869231][T18929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.874588][T18929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.874665][T18929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.158708][T19093] netlink: 'syz.6.2966': attribute type 1 has an invalid length. [ 606.194952][ T5638] Bluetooth: hci7: command tx timeout [ 606.304830][T18929] hsr_slave_0: entered promiscuous mode [ 606.305133][T19098] netlink: 'syz.6.2966': attribute type 10 has an invalid length. [ 606.325384][T18929] hsr_slave_1: entered promiscuous mode [ 606.338275][T18929] debugfs: 'hsr0' already exists in 'hsr' [ 606.338335][T18929] Cannot create hsr debugfs directory [ 606.364641][T19093] batman_adv: batadv0: Adding interface: dummy0 [ 606.364660][T19093] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.364697][T19093] batman_adv: batadv0: Interface activated: dummy0 [ 606.448339][T19094] batadv0: mtu less than device minimum [ 606.450158][T19094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 606.451791][T19094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 606.453401][T19094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 606.455126][T19094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 606.458236][T19094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 606.581849][T19103] netlink: 'syz.7.2967': attribute type 1 has an invalid length. [ 606.601077][T19098] batadv0: entered promiscuous mode [ 606.601106][T19098] batadv0: entered allmulticast mode [ 606.620132][T19098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.787818][T19107] batman_adv: batadv0: Adding interface: dummy0 [ 606.787840][T19107] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.787877][T19107] batman_adv: batadv0: Interface activated: dummy0 [ 606.793209][T16725] tipc: Subscription rejected, illegal request [ 606.794855][T19107] netlink: 'syz.7.2967': attribute type 10 has an invalid length. [ 606.794894][T19107] batadv0: entered promiscuous mode [ 606.794914][T19107] batadv0: entered allmulticast mode [ 606.810181][T19107] bridge0: port 3(batadv0) entered blocking state [ 606.810470][T19107] bridge0: port 3(batadv0) entered disabled state [ 606.883778][T19107] bridge0: port 3(batadv0) entered blocking state [ 606.883911][T19107] bridge0: port 3(batadv0) entered forwarding state [ 606.926873][T16724] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 606.926897][T16724] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 607.122148][T19103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 607.122170][T19103] IPv6: NLM_F_CREATE should be set when creating new route [ 607.122221][T19103] IPv6: NLM_F_CREATE should be set when creating new route [ 607.529558][T18929] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.853808][T18929] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.001572][T19165] __nla_validate_parse: 5 callbacks suppressed [ 608.001591][T19165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2979'. [ 608.032771][T19166] x_tables: unsorted entry at hook 4 [ 608.101510][T18929] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.149629][T19148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'. [ 608.175178][T19149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'. [ 608.272430][ T5638] Bluetooth: hci7: command tx timeout [ 608.273321][T19176] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2980'. [ 608.292467][T18929] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.389181][T19180] netlink: 'syz.6.2981': attribute type 1 has an invalid length. [ 608.456821][T16729] net_ratelimit: 38 callbacks suppressed [ 608.456925][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.460822][T19184] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2981'. [ 608.517726][T19183] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 608.544158][T19183] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2980'. [ 608.544186][T19183] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2980'. [ 608.956973][T18393] udevd[18393]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 608.979020][T16718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.117974][T18929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 609.308700][T18929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 609.309950][T18929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 609.336585][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2987'. [ 609.485707][T16718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.921890][T18929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 609.922462][T19211] lo: MTU not usable for tipc bearer [ 609.922498][T19211] tipc: Enabling of bearer rejected, failed to enable media [ 609.961897][T18929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 609.977583][T18929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 609.978638][T18929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 610.005672][T16718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.013149][T18929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.138861][T19241] SET target dimension over the limit! [ 610.226108][T18929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.304160][T19244] netlink: 'syz.6.2993': attribute type 3 has an invalid length. [ 610.325195][T18929] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.346643][ T5638] Bluetooth: hci7: command tx timeout [ 610.362398][T16728] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.362506][T16728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.417949][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.418091][T16725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.517282][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.560077][T19257] Bluetooth: MGMT ver 1.23 [ 610.560115][T19257] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 610.692770][T19262] ip6gre1: entered promiscuous mode [ 610.692793][T19262] ip6gre1: entered allmulticast mode [ 610.928748][T19283] ip6gretap1: entered allmulticast mode [ 610.929078][T19280] nci: nci_start_poll: failed to set local general bytes [ 610.931835][T19283] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 610.934105][T19283] batman_adv: batadv0: Adding interface: ip6gretap1 [ 610.934121][T19283] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.934155][T19283] batman_adv: batadv0: Interface activated: ip6gretap1 [ 610.934172][T19283] batadv0: mtu less than device minimum [ 610.935884][T19283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.937924][T19283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.941561][T19283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.945206][T19283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 611.084343][T19290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 611.084367][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 611.576855][T18929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.577746][T16727] net_ratelimit: 20 callbacks suppressed [ 613.577771][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.687454][T19265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.085659][T16725] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.595909][T16725] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.048016][T19342] syzkaller0: entered promiscuous mode [ 615.048039][T19342] syzkaller0: entered allmulticast mode [ 615.107310][T16722] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.184258][T19363] __nla_validate_parse: 4 callbacks suppressed [ 615.184281][T19363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3015'. [ 615.214984][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'. [ 615.429269][T18929] veth0_vlan: entered promiscuous mode [ 615.501023][T18929] veth1_vlan: entered promiscuous mode [ 615.505132][T19367] syzkaller0: entered promiscuous mode [ 615.505154][T19367] syzkaller0: entered allmulticast mode [ 615.580938][T18929] veth0_macvtap: entered promiscuous mode [ 615.595867][T18929] veth1_macvtap: entered promiscuous mode [ 615.616494][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.769880][T18929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.805276][T18929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.878571][T19393] ip_tables: iptables: counters copy to user failed while replacing table [ 615.905700][T16728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.905754][T16728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.905795][T16728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.905833][T16728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.136016][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.140401][T19400] syzkaller0: entered promiscuous mode [ 616.140428][T19400] syzkaller0: entered allmulticast mode [ 616.224268][T16729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.224292][T16729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.290741][T16727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.290764][T16727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.646133][T16723] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.853033][T19430] xt_CT: No such helper "snmp" [ 617.155670][T16718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.666350][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.686720][T16727] net_ratelimit: 1 callbacks suppressed [ 618.686759][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.200802][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.307228][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 619.664808][T19460] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3037'. [ 619.712439][T16725] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.737356][T19460] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3037'. [ 619.914080][T19461] bridge0: port 3(batadv0) entered disabled state [ 619.914413][T19461] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.915018][T19461] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.006012][T19461] batman_adv: batadv0: Interface deactivated: dummy0 [ 620.168495][T14166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.169793][T14166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.174475][T14166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.222170][T16718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.222713][T14166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.228164][T14166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 620.371861][T19461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.417430][T19461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.677018][T16728] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.677071][T16728] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.677111][T16728] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.677149][T16728] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.727455][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 621.236124][T16725] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 621.268322][T19521] syzkaller0: entered promiscuous mode [ 621.268339][T19521] syzkaller0: entered allmulticast mode [ 621.270184][T19479] wg0 speed is unknown, defaulting to 1000 [ 621.750567][T16723] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.253257][T19479] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.253440][T19479] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.253587][T19479] bridge_slave_0: entered allmulticast mode [ 622.266439][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.292652][T19479] bridge_slave_0: entered promiscuous mode [ 622.322048][T19479] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.322172][T19479] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.322333][T19479] bridge_slave_1: entered allmulticast mode [ 622.346987][T14166] Bluetooth: hci1: command tx timeout [ 622.351546][T19479] bridge_slave_1: entered promiscuous mode [ 622.387108][T19562] syzkaller0: entered allmulticast mode [ 622.403593][T19561] syzkaller0: MTU not usable for tipc bearer [ 622.403631][T19561] tipc: Enabling of bearer rejected, failed to enable media [ 622.403849][T19564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3057'. [ 622.468090][T19479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.472980][T19479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.527216][T19479] team0: Port device team_slave_0 added [ 622.530617][T19479] team0: Port device team_slave_1 added [ 622.573321][T19479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.573341][T19479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.573370][T19479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.609906][T19479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.609926][T19479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.609956][T19479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.777662][T16728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.916014][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'. [ 622.922480][T19479] hsr_slave_0: entered promiscuous mode [ 622.941785][T19479] hsr_slave_1: entered promiscuous mode [ 622.942642][T19479] debugfs: 'hsr0' already exists in 'hsr' [ 622.942662][T19479] Cannot create hsr debugfs directory [ 622.991686][T19576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3062'. [ 622.994096][T19576] tipc: Enabling of bearer rejected, failed to enable media [ 623.059824][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'. [ 623.173599][T19583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3065'. [ 623.173631][T19583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3065'. [ 623.287173][T16725] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.294910][T19594] Bluetooth: MGMT ver 1.23 [ 623.341410][T19593] ip6gretap0: entered promiscuous mode [ 623.343005][T19593] batadv0: entered promiscuous mode [ 623.417276][T19597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3069'. [ 623.529031][T19479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 623.529068][T19479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.676099][T19479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 623.676140][T19479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.799971][T16728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.862314][T19615] IPVS: Scheduler module ip_vs_mh not found [ 623.897773][T19479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 623.897814][T19479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.072466][T19628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3075'. [ 624.149473][T19631] xt_IDLETIMER: timeout value is zero [ 624.302773][T19479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 624.302813][T19479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.316345][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.441087][ T5638] Bluetooth: hci1: command tx timeout [ 624.596767][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 624.596792][T19646] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3077'. [ 624.657639][T19643] bond5: entered promiscuous mode [ 624.657661][T19643] bond5: entered allmulticast mode [ 624.661262][T18393] udevd[18393]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 624.837247][T16728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.044235][T19668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.090459][T19674] lo: entered promiscuous mode [ 625.090640][T19674] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 625.121872][T19674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.153251][T19674] bond2: (slave lo): Enslaving as an active interface with an up link [ 625.154208][T19479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 625.174186][T19479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.182764][T19479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 625.198756][T19479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.201513][T19479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 625.223482][T19479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.224559][T19479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 625.243392][T19479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.345795][T16725] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.385932][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 625.584469][T19479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.651295][T19479] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.671032][T16728] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.671122][T16728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.704874][T19689] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 625.739399][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.739507][T16729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.780355][T19687] nbd: nbd64 already in use [ 625.858448][T16723] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.160896][T18393] udevd[18393]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 626.367342][T16728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.505977][ T53] Bluetooth: hci1: command tx timeout [ 626.876117][T16725] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 627.052377][T19479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.198591][T19479] veth0_vlan: entered promiscuous mode [ 627.212219][T19479] veth1_vlan: entered promiscuous mode [ 627.273477][T19479] veth0_macvtap: entered promiscuous mode [ 627.288289][T19479] veth1_macvtap: entered promiscuous mode [ 627.334681][T19479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.389858][T19479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.391257][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 627.430658][T16729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.496423][T16729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.550787][T16724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.554277][T16728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.895618][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.405962][T16723] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.595677][ T53] Bluetooth: hci1: command tx timeout [ 628.919195][T16728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.426138][T16728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.937082][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.090567][T19761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.090998][T19769] netlink: 'syz.1.3099': attribute type 11 has an invalid length. [ 630.091019][T19769] netlink: 'syz.1.3099': attribute type 11 has an invalid length. [ 630.091033][T19769] __nla_validate_parse: 56 callbacks suppressed [ 630.091046][T19769] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3099'. [ 630.264202][T16723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.264221][T16723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.330547][T19795] bond0: (slave bond_slave_1): Releasing backup interface [ 630.340217][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3107'. [ 630.340306][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3107'. [ 630.391036][T16728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.391059][T16728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.446141][T16723] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.576044][T19796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3108'. [ 630.646783][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.702437][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.702594][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.702744][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.702889][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.703042][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.703186][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.704240][T19817] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3112'. [ 630.708148][T19812] netlink: 'syz.6.3111': attribute type 11 has an invalid length. [ 630.950382][T19817] tap0: tun_chr_ioctl cmd 1074025677 [ 630.950535][T19817] tap0: linktype set to 805 [ 630.963560][T16728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.989228][T19817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3112'. [ 631.044979][T19825] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 631.061457][T19825] bond_slave_0: entered promiscuous mode [ 631.061481][T19825] bond_slave_0: entered allmulticast mode [ 631.092578][T19825] bond0: (slave bond_slave_0): Releasing backup interface [ 631.111371][T19825] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 631.150338][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3114'. [ 631.472419][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 631.578010][T19843] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3118'. [ 631.589264][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 631.636796][T19861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 631.662588][T19861] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 631.744177][T19861] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 631.783944][T19866] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 631.865331][T19869] openvswitch: netlink: Missing valid actions attribute. [ 631.865363][T19869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.168718][T19886] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 632.827188][T19916] geneve2: entered promiscuous mode [ 632.829054][T16722] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.829159][T16722] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.829236][T16722] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.846165][T16727] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.124550][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3141'. [ 633.424344][T19933] netlink: 'syz.6.3145': attribute type 10 has an invalid length. [ 633.424502][T19933] batadv0: left promiscuous mode [ 633.424522][T19933] batadv0: left allmulticast mode [ 633.477890][T19933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.507993][T19935] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 633.828124][ T5296] veth0_macvtap: left promiscuous mode [ 633.930058][T19958] netlink: 'syz.7.3150': attribute type 32 has an invalid length. [ 634.002811][T19960] SET target dimension over the limit! [ 634.052232][T19963] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 634.263661][T19971] bridge1: entered promiscuous mode [ 634.301152][T19971] ip6erspan0: entered allmulticast mode [ 634.312913][T19971] netlink: 'syz.4.3153': attribute type 4 has an invalid length. [ 634.312937][T19971] netlink: 'syz.4.3153': attribute type 2 has an invalid length. [ 634.576221][T19984] net_ratelimit: 8 callbacks suppressed [ 634.576242][T19984] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 634.807996][T19990] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 634.809058][T19990] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 635.156250][T20018] __nla_validate_parse: 12 callbacks suppressed [ 635.156273][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 635.289118][T20023] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 635.321914][T20023] netlink: 'syz.1.3168': attribute type 10 has an invalid length. [ 635.341175][T20024] netlink: 69 bytes leftover after parsing attributes in process `syz.7.3169'. [ 635.360928][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3169'. [ 635.537695][T20030] tc_dump_action: action bad kind [ 635.678674][T20002] netlink: 'syz.3.3163': attribute type 34 has an invalid length. [ 635.678699][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 635.842744][T20045] xt_TPROXY: Can be used only with -p tcp or -p udp [ 635.990205][T20049] netlink: 'syz.6.3176': attribute type 7 has an invalid length. [ 635.990229][T20049] netlink: 'syz.6.3176': attribute type 8 has an invalid length. [ 636.014024][T20047] netlink: 'syz.1.3174': attribute type 12 has an invalid length. [ 636.014047][T20047] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3174'. [ 636.014093][T20047] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3174'. [ 636.292072][T20058] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3179'. [ 636.763242][T20087] validate_nla: 2 callbacks suppressed [ 636.763265][T20087] netlink: 'syz.1.3188': attribute type 126 has an invalid length. [ 636.996376][T20102] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 637.010274][T20103] netlink: 'syz.1.3191': attribute type 10 has an invalid length. [ 637.026631][T20102] netlink: 'syz.1.3191': attribute type 10 has an invalid length. [ 637.515139][T20103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.558607][T20103] team0: Port device netdevsim1 added [ 637.827332][T20131] x_tables: duplicate underflow at hook 2 [ 639.212861][T20154] sctp: [Deprecated]: syz.3.3202 (pid 20154) Use of int in max_burst socket option. [ 639.212861][T20154] Use struct sctp_assoc_value instead [ 639.247337][T20151] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 639.928491][T20186] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.412092][T20211] syzkaller0: entered promiscuous mode [ 642.412118][T20211] syzkaller0: entered allmulticast mode [ 642.459187][T20232] x_tables: ip_tables: realm match: used from hooks PREROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 642.490830][T20230] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3217'. [ 642.532274][T20236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3219'. [ 643.296509][T20252] bond6: Removing last ns target with arp_interval on [ 643.358062][T20272] batman_adv: batadv0: Adding interface: syzkaller0 [ 643.358079][T20272] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.358108][T20272] batman_adv: batadv0: Interface activated: syzkaller0 [ 643.417131][T20244] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 643.519086][T20244] batman_adv: batadv0: Removing interface: syzkaller0 [ 643.915502][T20294] ip6t_frag: unknown flags 4 [ 643.948527][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3234'. [ 644.023908][T20294] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3234'. [ 644.303744][T20310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3240'. [ 644.470390][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3243'. [ 644.470416][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3243'. [ 644.512371][T20316] netlink: 'syz.4.3244': attribute type 1 has an invalid length. [ 644.653221][T20330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3247'. [ 644.723631][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3248'. [ 644.811560][T20335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3249'. [ 644.872521][T20340] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 645.350189][T20359] nbd1: detected capacity change from 0 to 63 [ 645.670547][T14166] block nbd1: Receive control failed (result -104) [ 645.893270][T20392] ip6t_rt: unknown flags 1F [ 646.290708][T20415] netlink: 'syz.7.3265': attribute type 29 has an invalid length. [ 646.309737][T20415] netlink: 'syz.7.3265': attribute type 29 has an invalid length. [ 646.659421][T20425] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 646.664512][T20425] bond4 (unregistering): Released all slaves [ 648.153097][T20409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.184296][T20469] ksmbd: Unknown IPC event: 8, ignore. [ 648.490677][T20500] __nla_validate_parse: 5 callbacks suppressed [ 648.490698][T20500] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3276'. [ 648.677956][T20509] bond0: (slave gretap0): Opening slave failed [ 649.198808][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3283'. [ 649.495213][T20548] 8021q: VLANs not supported on wg0 [ 650.020415][T20545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3285'. [ 650.047950][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3285'. [ 650.125143][T20575] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3294'. [ 650.176097][T16726] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 650.176149][T16726] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 650.176187][T16726] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 650.176236][T16726] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 650.510398][T20590] netlink: 75 bytes leftover after parsing attributes in process `syz.6.3295'. [ 650.532226][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3296'. [ 650.631422][T20590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.633625][T20590] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.655258][T20590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.721408][T20590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.721437][T20590] batadv0: mtu less than device minimum [ 650.722947][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.724370][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.725872][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.727304][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.728736][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.730116][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.731561][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.733020][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.734439][T20590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.785208][T20590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.862520][T20590] veth1_vlan: left promiscuous mode [ 650.864239][T20590] veth0_vlan: left promiscuous mode [ 650.874806][T20590] veth0_vlan: entered promiscuous mode [ 650.888300][T20590] veth1_vlan: entered promiscuous mode [ 650.912741][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.914330][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.932188][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.934198][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.120316][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3304'. [ 651.169464][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3304'. [ 651.199808][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3301'. [ 651.337013][T16726] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.337719][T16726] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.367485][T16726] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.367659][T16726] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.427036][T20627] batadv_slave_0: entered promiscuous mode [ 651.464135][T20628] syzkaller0: entered promiscuous mode [ 651.464159][T20628] syzkaller0: entered allmulticast mode [ 651.688167][T20623] batadv_slave_0: left promiscuous mode [ 651.875878][T20606] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 651.972030][ T1745] block nbd1: Connection timed out, retrying (0/1 alive) [ 651.972785][ T1745] block nbd1: Connection timed out, retrying (0/1 alive) [ 651.972852][ T1745] block nbd1: Connection timed out, retrying (0/1 alive) [ 651.972920][ T1745] block nbd1: Connection timed out, retrying (0/1 alive) [ 651.973328][ T1745] block nbd1: Dead connection, failed to find a fallback [ 651.973350][ T1745] block nbd1: shutting down sockets [ 651.982077][ T1745] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.982615][ T1745] Buffer I/O error on dev nbd1, logical block 3, async page read [ 651.982850][ T1745] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.982877][ T1745] Buffer I/O error on dev nbd1, logical block 2, async page read [ 651.982901][ T1745] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.982983][ T1745] Buffer I/O error on dev nbd1, logical block 1, async page read [ 651.983071][ T1745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.983142][ T1745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 651.990941][ T1716] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 651.990986][ T1716] Buffer I/O error on dev nbd1, logical block 0, async page read [ 651.991021][ T1716] Buffer I/O error on dev nbd1, logical block 1, async page read [ 651.991038][ T1716] Buffer I/O error on dev nbd1, logical block 2, async page read [ 651.991054][ T1716] Buffer I/O error on dev nbd1, logical block 3, async page read [ 651.992328][ T1716] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 651.992360][ T1716] Buffer I/O error on dev nbd1, logical block 0, async page read [ 651.992380][ T1716] Buffer I/O error on dev nbd1, logical block 1, async page read [ 652.008629][ T1716] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 652.009999][T20641] raw_sendmsg: syz.1.3308 forgot to set AF_INET. Fix it! [ 652.017819][ T1716] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 652.018097][ T1716] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 652.027970][ T1745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.046468][T20371] ldm_validate_partition_table(): Disk read failed. [ 652.098918][T20371] Dev nbd1: unable to read RDB block 0 [ 652.116722][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 652.141776][T20371] nbd1: unable to read partition table [ 652.271309][T20371] ldm_validate_partition_table(): Disk read failed. [ 652.272688][T20371] Dev nbd1: unable to read RDB block 0 [ 652.274138][T20371] nbd1: unable to read partition table [ 652.784508][T20675] geneve2: entered promiscuous mode [ 652.789984][T20681] xt_bpf: check failed: parse error [ 652.882834][T20685] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 652.976861][T20688] netlink: 'syz.6.3325': attribute type 3 has an invalid length. [ 653.018121][T20692] netlink: 'syz.4.3323': attribute type 1 has an invalid length. [ 653.134714][T20692] bond1: entered promiscuous mode [ 653.135259][T20692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.149242][ T53] Bluetooth: hci0: command 0x0405 tx timeout [ 653.149354][T14166] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 653.202087][T20694] bond1: (slave bridge2): making interface the new active one [ 653.202113][T20694] bridge2: entered promiscuous mode [ 653.231772][T20694] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 653.373961][T20695] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 653.632901][T20726] netlink: 'syz.4.3330': attribute type 1 has an invalid length. [ 653.749960][T20721] __nla_validate_parse: 5 callbacks suppressed [ 653.749979][T20721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3329'. [ 653.822883][T20726] veth3: entered allmulticast mode [ 653.871669][T20726] bond2: (slave veth3): Enslaving as an active interface with a down link [ 653.938339][T20734] bond2: (slave veth0_to_bond): making interface the new active one [ 653.941004][T20734] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 654.031421][T20726] macvlan2: entered promiscuous mode [ 654.031448][T20726] macvlan2: entered allmulticast mode [ 654.032296][T20726] bond2: entered promiscuous mode [ 654.032317][T20726] veth0_to_bond: entered promiscuous mode [ 654.035320][T20726] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 654.071898][T20726] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth3 [ 654.073675][T20726] bond2: left promiscuous mode [ 654.073697][T20726] veth0_to_bond: left promiscuous mode [ 654.224303][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 654.224332][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 654.324282][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 654.324311][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 654.409823][T20766] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3335'. [ 654.600053][T20770] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3337'. [ 654.689860][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3338'. [ 654.704681][T20780] tc_dump_action: action bad kind [ 654.800706][T20786] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 654.801535][T20783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3340'. [ 654.842549][T20775] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3337'. [ 654.918547][T20790] gretap1: entered allmulticast mode [ 654.943337][T20793] netlink: 'syz.4.3340': attribute type 7 has an invalid length. [ 655.082437][T20800] netlink: 'syz.4.3343': attribute type 10 has an invalid length. [ 655.100143][T20800] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.113450][T20800] bond0: (slave team0): Enslaving as an active interface with an up link [ 655.226760][T14166] Bluetooth: hci0: command 0x0405 tx timeout [ 655.434462][T20809] bridge_slave_1: left allmulticast mode [ 655.434503][T20809] bridge_slave_1: left promiscuous mode [ 655.434790][T20809] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.468624][T20809] bridge_slave_0: left allmulticast mode [ 655.468651][T20809] bridge_slave_0: left promiscuous mode [ 655.470539][T20809] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.599123][T20815] netlink: 'syz.6.3348': attribute type 1 has an invalid length. [ 655.638536][T20815] 8021q: adding VLAN 0 to HW filter on device bond7 [ 655.679073][T20815] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 655.709550][T20818] bridge5: entered promiscuous mode [ 655.720396][T20818] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 655.721654][T20814] bridge0: port 4(veth0) entered blocking state [ 655.721823][T20814] bridge0: port 4(veth0) entered disabled state [ 655.721974][T20814] veth0: entered allmulticast mode [ 655.741917][T20814] veth0: entered promiscuous mode [ 656.017851][T16733] net_ratelimit: 43 callbacks suppressed [ 656.017873][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.263384][T20847] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 656.382198][T20859] netlink: 'syz.3.3357': attribute type 15 has an invalid length. [ 656.526551][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.619917][T20869] hsr_slave_0 (unregistering): left promiscuous mode [ 656.777634][T14166] block nbd2: Receive control failed (result -32) [ 657.046021][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 657.565739][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 658.075909][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 658.588579][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 659.096050][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 659.605982][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.118936][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.626010][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.135994][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.645760][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.155911][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.668586][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.176191][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.686141][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 664.196381][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 664.706900][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.216124][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.386022][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 665.725627][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.235928][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.747390][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.256126][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.765841][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.276855][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.786820][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 669.296309][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 669.805987][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 670.315765][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 670.828313][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 671.335966][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 671.846000][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.356272][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.866021][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.376211][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.886033][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 674.396092][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 674.908581][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 675.416030][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 675.925681][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.435910][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.947278][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.456188][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.966101][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.475914][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.987411][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 679.496059][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 680.006028][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 680.515785][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 681.026011][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 681.535964][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.046413][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.556419][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.067699][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.575891][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 684.085890][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 684.606312][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 685.115805][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 685.626539][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 686.135962][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 686.645691][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.155903][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.665641][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.175943][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.686988][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 689.195805][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 689.710267][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 690.216829][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 690.726803][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 691.235871][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 691.745740][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 692.267309][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 692.775656][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 693.065892][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 693.285946][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 693.796413][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 694.307388][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 694.816828][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 695.325932][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 695.835803][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 696.346423][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 696.855748][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.366571][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.875693][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.385835][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.895725][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.406062][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.917245][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 700.426386][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 700.935933][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 701.447057][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 701.955785][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 702.466406][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 702.975603][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.240646][T20936] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 703.377586][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 703.392938][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 703.395220][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 703.414327][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 703.414967][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 703.492177][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.752136][T20963] __nla_validate_parse: 10 callbacks suppressed [ 703.752157][T20963] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3370'. [ 703.752190][T20963] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3370'. [ 704.008472][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 704.209125][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.209163][T20980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.210078][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.210286][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.210477][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.263299][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.301461][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.301685][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 704.400733][T20989] xt_hashlimit: size too large, truncated to 1048576 [ 704.516826][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 704.580047][T20940] wg0 speed is unknown, defaulting to 1000 [ 704.867566][T20997] netlink: 'syz.3.3382': attribute type 2 has an invalid length. [ 704.886220][T20997] netlink: 'syz.3.3382': attribute type 2 has an invalid length. [ 704.897180][T20997] x_tables: duplicate underflow at hook 1 [ 705.026757][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 705.234552][T21005] bond3: entered promiscuous mode [ 705.234575][T21005] bond3: entered allmulticast mode [ 705.368964][T21016] netlink: 'syz.6.3388': attribute type 7 has an invalid length. [ 705.537093][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 705.546962][T14166] Bluetooth: hci2: command tx timeout [ 705.847461][T21029] bridge_slave_1: invalid flags given to default FDB implementation [ 706.048311][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 706.153408][T21036] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 706.450933][T21036] bond8 (unregistering): Released all slaves [ 706.556921][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 706.841793][T20940] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.841909][T20940] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.842041][T20940] bridge_slave_0: entered allmulticast mode [ 706.869098][T20940] bridge_slave_0: entered promiscuous mode [ 706.883353][T20940] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.885043][T20940] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.885199][T20940] bridge_slave_1: entered allmulticast mode [ 706.909808][T20940] bridge_slave_1: entered promiscuous mode [ 706.921488][T21057] netlink: 'syz.6.3398': attribute type 7 has an invalid length. [ 706.969591][T20940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.972821][T20940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.049118][T20940] team0: Port device team_slave_0 added [ 707.062319][T20940] team0: Port device team_slave_1 added [ 707.091661][T16727] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.199740][T20940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.199758][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.199786][T20940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.204523][T20940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.204539][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.204565][T20940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.469366][T20940] hsr_slave_0: entered promiscuous mode [ 707.470366][T20940] hsr_slave_1: entered promiscuous mode [ 707.474248][T20940] debugfs: 'hsr0' already exists in 'hsr' [ 707.474269][T20940] Cannot create hsr debugfs directory [ 707.596185][T16726] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.625917][T14166] Bluetooth: hci2: command tx timeout [ 708.003793][T20940] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 708.021666][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.024592][T20940] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 708.048294][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.049884][T20940] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 708.076791][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.078333][T20940] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 708.101447][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.113238][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.269180][T20940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.311341][T20940] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.354170][T16726] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.354276][T16726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.428237][T14166] Bluetooth: hci0: command 0x0405 tx timeout [ 708.477483][T16724] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.477594][T16724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.618877][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.636741][T21120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 709.023804][T21139] sctp: [Deprecated]: syz.6.3418 (pid 21139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 709.023804][T21139] Use struct sctp_sack_info instead [ 709.130620][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.272511][T21151] batman_adv: batadv0: Adding interface: veth0 [ 709.272531][T21151] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.272564][T21151] batman_adv: batadv0: Interface activated: veth0 [ 709.373983][T21151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.374008][T21151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.374844][T21151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.374876][T21151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.402130][T21151] batman_adv: batadv0: Interface deactivated: veth0 [ 709.402184][T21151] batman_adv: batadv0: Removing interface: veth0 [ 709.579744][T20940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.643165][T16731] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.705627][ T53] Bluetooth: hci2: command tx timeout [ 709.880790][T21182] netlink: 'syz.3.3429': attribute type 4 has an invalid length. [ 710.145967][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 710.368126][T20940] veth0_vlan: entered promiscuous mode [ 710.372807][T21202] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 710.403237][T20940] veth1_vlan: entered promiscuous mode [ 710.535287][T20940] veth0_macvtap: entered promiscuous mode [ 710.563073][T20940] veth1_macvtap: entered promiscuous mode [ 710.653519][T20940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.663147][T16717] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 710.721060][T20940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.817404][T16731] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.877518][T16722] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.877571][T16722] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.877602][T16722] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.970187][T16727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.970206][T16727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.075209][T21220] netlink: 'syz.4.3438': attribute type 32 has an invalid length. [ 711.089047][T16724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.089066][T16724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.124253][T21220] tipc: Enabling of bearer rejected, failed to enable media [ 711.387079][T21234] __nla_validate_parse: 66 callbacks suppressed [ 711.387100][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3441'. [ 711.387123][T21234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3441'. [ 711.437041][T21239] x_tables: duplicate underflow at hook 3 [ 711.437116][T21239] x_tables: duplicate underflow at hook 3 [ 711.437209][T21239] x_tables: duplicate underflow at hook 3 [ 711.437302][T21239] x_tables: duplicate underflow at hook 3 [ 711.437366][T21239] x_tables: duplicate underflow at hook 3 [ 711.437430][T21239] x_tables: duplicate underflow at hook 3 [ 711.437493][T21239] x_tables: duplicate underflow at hook 3 [ 711.437557][T21239] x_tables: duplicate underflow at hook 3 [ 711.437620][T21239] x_tables: duplicate underflow at hook 3 [ 711.437683][T21239] x_tables: duplicate underflow at hook 3 [ 711.574853][T21244] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3444'. [ 711.589576][T21233] bond8: entered promiscuous mode [ 711.589593][T21233] bond8: entered allmulticast mode [ 711.637338][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 711.728183][T21252] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3445'. [ 711.759771][T21253] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3443'. [ 711.785845][ T53] Bluetooth: hci2: command tx timeout [ 711.880735][T21261] netlink: 'syz.4.3446': attribute type 12 has an invalid length. [ 711.881604][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 711.972816][T21263] block nbd3: shutting down sockets [ 712.197443][T16724] net_ratelimit: 2 callbacks suppressed [ 712.197464][T16724] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 712.250135][T21271] nla_validate_range_unsigned: 25 callbacks suppressed [ 712.250188][T21271] netlink: 'syz.6.3449': attribute type 11 has an invalid length. [ 712.558774][T21282] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20000 [ 712.630044][T21282] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 712.692959][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3453'. [ 712.706233][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 712.932854][T21298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.069944][T21306] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 713.221446][T16733] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.289896][ T9823] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 713.290089][T21310] macsec1: entered promiscuous mode [ 713.290279][T21310] macsec1: entered allmulticast mode [ 713.290299][T21310] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 713.291424][T21310] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 713.293028][T21310] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 713.354166][ T9823] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 713.594594][T21327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 713.612939][T21336] netlink: 'syz.7.3473': attribute type 1 has an invalid length. [ 713.641806][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 713.704440][T21336] bond4: entered promiscuous mode [ 713.704909][T21336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.726731][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.765218][T21337] vlan1: entered allmulticast mode [ 713.961019][T21352] netlink: 'syz.7.3477': attribute type 21 has an invalid length. [ 713.961637][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b9a400: rx timeout, send abort [ 713.969767][T21352] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3477'. [ 714.026563][T21358] netlink: 'syz.7.3477': attribute type 21 has an invalid length. [ 714.235640][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.237691][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237710][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237722][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237733][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237745][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237755][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237771][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237779][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237787][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237795][T21365] tc action pedit offset must be on 32 bit boundaries [ 714.237811][T21365] 0: reclassify loop, rule prio 0, protocol 800 [ 714.461789][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b9a400: abort rx timeout. Force session deactivation [ 714.757812][T16729] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 715.130300][T21401] syzkaller0: left allmulticast mode [ 715.743457][T21436] netlink: 'syz.7.3501': attribute type 30 has an invalid length. [ 716.566993][T21467] __nla_validate_parse: 76 callbacks suppressed [ 716.567018][T21467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3506'. [ 716.567038][T21467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3506'. [ 716.567057][T21467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3506'. [ 716.899597][T21476] netlink: 964 bytes leftover after parsing attributes in process `syz.6.3509'. [ 717.074801][T21484] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3508'. [ 717.088179][T21478] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3508'. [ 717.111292][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3511'. [ 717.226637][ T33] INFO: task syz.5.2812:18134 blocked for more than 143 seconds. [ 717.226802][ T33] Not tainted syzkaller # ** replaying previous printk message ** [ 717.226802][ T33] Not tainted syzkaller #0 [ 717.226817][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.226830][ T33] task:syz.5.2812 state:D stack:27168 pid:18134 tgid:18128 ppid:13519 task_flags:0x400140 flags:0x00080002 [ 717.226904][ T33] Call Trace: [ 717.226913][ T33] [ 717.226939][ T33] __schedule+0x17dd/0x5820 [ 717.227107][ T33] ? __pfx___schedule+0x10/0x10 [ 717.227155][ T33] ? schedule+0x90/0x2b0 [ 717.227194][ T33] schedule+0x164/0x2b0 [ 717.227232][ T33] schedule_preempt_disabled+0x13/0x30 [ 717.227266][ T33] __mutex_lock+0x7c4/0x15a0 [ 717.227296][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 717.227326][ T33] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 717.227439][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 717.227474][ T33] ? __kasan_kmalloc+0x93/0xb0 [ 717.227515][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 717.227540][ T33] ? do_syscall_64+0x166/0x520 [ 717.227561][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.227596][ T33] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 717.227629][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 717.227671][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 717.227696][ T33] ? trace_kmalloc+0x2a/0xf0 [ 717.227727][ T33] ? __kmalloc_noprof+0x387/0x710 [ 717.227758][ T33] ? __nla_parse+0x40/0x60 [ 717.227785][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 717.227874][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 717.227906][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 717.228007][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 717.228059][ T33] ? bpf_lsm_capable+0x9/0x20 [ 717.228086][ T33] ? security_capable+0x7e/0x2c0 [ 717.228171][ T33] genl_rcv_msg+0x614/0x7a0 [ 717.228213][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.228247][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 717.228290][ T33] netlink_rcv_skb+0x226/0x4a0 [ 717.228319][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.228356][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.228402][ T33] ? down_read+0x2b9/0x320 [ 717.228432][ T33] genl_rcv+0x28/0x40 [ 717.228463][ T33] netlink_unicast+0x8ef/0xa80 [ 717.228509][ T33] netlink_sendmsg+0x7f0/0xb20 [ 717.228545][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.228579][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 717.228683][ T33] ? apparmor_socket_sendmsg+0x18b/0x360 [ 717.228710][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.228738][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 717.228815][ T33] ____sys_sendmsg+0x54e/0x850 [ 717.228878][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.228923][ T33] ? import_iovec+0x73/0xa0 [ 717.229016][ T33] ___sys_sendmsg+0x2a5/0x360 [ 717.229050][ T33] ? __lock_acquire+0x747/0x2de0 [ 717.229084][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.229125][ T33] ? futex_wait+0x2a2/0x390 [ 717.229224][ T33] ? __fget_files+0x3a2/0x420 [ 717.229251][ T33] ? __fget_files+0x2a/0x420 [ 717.229290][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 717.229317][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.229381][ T33] do_syscall_64+0x166/0x520 [ 717.229404][ T33] ? trace_irq_disable+0x3b/0x140 [ 717.229432][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.229457][ T33] ? clear_bhb_loop+0x70/0xc0 [ 717.229486][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.229510][ T33] RIP: 0033:0x7f292599f559 [ 717.229533][ T33] RSP: 002b:00007f292685f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.229558][ T33] RAX: ffffffffffffffda RBX: 00007f2925c26090 RCX: 00007f292599f559 [ 717.229577][ T33] RDX: 0000000020040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 717.229593][ T33] RBP: 00007f2925a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 717.229609][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.229623][ T33] R13: 00007f2925c26128 R14: 00007f2925c26090 R15: 00007fff1ad579c8 [ 717.229662][ T33] [ 717.229724][ T33] [ 717.229724][ T33] Showing all locks held in the system: [ 717.229738][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 717.229817][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 717.229950][ T33] locks held by getty/5393: 2, on CPU#1: [ 717.229968][ T33] #0: ffff8880365770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 717.230098][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 717.230161][ T33] locks held by kworker/1:23/9818: 3, last CPU#1: [ 717.230179][ T33] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 717.230255][ T33] #1: ffffc90004affc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 717.230324][ T33] #2: ffffffff912eaf20 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3a/0x4f0 [ 717.230413][ T33] locks held by syz.2.1736/13159: 2, on CPU#0: [ 717.230431][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 717.230507][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 717.230566][ T33] locks held by kworker/u8:34/16731: 3, on CPU#1: [ 717.230582][ T33] #0: ffff88801d78f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 717.230641][ T33] #1: ffffc90007adfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 717.230700][ T33] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 717.230907][ T33] locks held by kworker/u8:35/16733: 4, last CPU#1: [ 717.230931][ T33] #0: ffff88807b2e4148 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 717.230996][ T33] #1: ffffc90004e6fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 717.231061][ T33] #2: ffff888056a8d280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 717.231204][ T33] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 717.231337][ T33] locks held by syz.5.2812/18134: 2, on CPU#1: [ 717.231354][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 717.231418][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 717.231481][ T33] locks held by syz.1.3322/20685: 2, on CPU#0: [ 717.231498][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 717.231561][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 717.231620][ T33] locks held by syz.4.3506/21459: 2, on CPU#1: [ 717.231637][ T33] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 717.231788][ T33] #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 717.231856][ T33] locks held by syz.3.3508/21484: 2, last CPU#1: [ 717.231872][ T33] #0: ffff88807e4b5900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 717.231934][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 717.231991][ T33] locks held by syz.8.3511/21480: 1, last CPU#1: [ 717.232008][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 717.232078][ T33] locks held by syz.6.3513/21490: 1, last CPU#1: [ 717.232095][ T33] #0: ffffffff8fd9a4d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2958/0x44b0 [ 717.232164][ T33] [ 717.232171][ T33] ============================================= [ 717.232171][ T33] [ 717.232193][ T33] NMI backtrace for cpu 1 [ 717.232209][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 717.232234][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 717.232248][ T33] Call Trace: [ 717.232259][ T33] [ 717.232268][ T33] dump_stack_lvl+0xe8/0x150 [ 717.232309][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 717.232373][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 717.232409][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 717.232446][ T33] sys_info+0x135/0x170 [ 717.232500][ T33] watchdog+0xfd2/0x1030 [ 717.232544][ T33] ? watchdog+0x1c7/0x1030 [ 717.232580][ T33] kthread+0x38b/0x480 [ 717.232604][ T33] ? __pfx_watchdog+0x10/0x10 [ 717.232629][ T33] ? __pfx_kthread+0x10/0x10 [ 717.232654][ T33] ret_from_fork+0x514/0xb70 [ 717.232695][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 717.232720][ T33] ? __switch_to+0xc78/0x1410 [ 717.232758][ T33] ? __pfx_kthread+0x10/0x10 [ 717.232783][ T33] ret_from_fork_asm+0x1a/0x30 [ 717.232825][ T33] [ 717.232852][ T33] Sending NMI from CPU 1 to CPUs 0: [ 717.232911][ C0] NMI backtrace for cpu 0 [ 717.232925][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 717.232945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 717.232961][ C0] RIP: 0010:gate_timer_func+0x1a/0x450 [ 717.233052][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb e8 e6 57 de f7 <48> 8d bb 48 ff ff ff 48 89 7c 24 10 e8 05 f1 0c 02 e8 a0 3d 0a 02 [ 717.233068][ C0] RSP: 0018:ffffc90000147b80 EFLAGS: 00000246 [ 717.233084][ C0] RAX: ffffffff89ea0e3a RBX: ffff888055b08138 RCX: ffff88801f2b1f40 [ 717.233114][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: ffff888055b08138 [ 717.233136][ C0] RBP: ffff888055b08138 R08: 0000000000000100 R09: 1ffffffff22f8257 [ 717.233150][ C0] R10: dffffc0000000000 R11: ffffffff89ea0e20 R12: ffff88801f2b2ad0 [ 717.233164][ C0] R13: ffffffff89ea0e20 R14: dffffc0000000000 R15: 1ffff1101708511a [ 717.233179][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 717.233195][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.233208][ C0] CR2: 00007f1c374b6ff8 CR3: 0000000084624000 CR4: 00000000003526f0 [ 717.233225][ C0] Call Trace: [ 717.233232][ C0] [ 717.233239][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 717.233301][ C0] ? __pfx_gate_timer_func+0x10/0x10 [ 717.233323][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 717.233377][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 717.233400][ C0] handle_softirqs+0x265/0x8d0 [ 717.233439][ C0] run_ksoftirqd+0x36/0x60 [ 717.233465][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 717.233496][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 717.233531][ C0] kthread+0x38b/0x480 [ 717.233550][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 717.233578][ C0] ? __pfx_kthread+0x10/0x10 [ 717.233597][ C0] ret_from_fork+0x514/0xb70 [ 717.233618][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 717.233638][ C0] ? __switch_to+0xc78/0x1410 [ 717.233668][ C0] ? __pfx_kthread+0x10/0x10 [ 717.233688][ C0] ret_from_fork_asm+0x1a/0x30 [ 717.233716][ C0] [ 717.247895][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 718.294299][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 718.303431][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 718.313525][ T33] Call Trace: [ 718.316827][ T33] [ 718.319784][ T33] vpanic+0x56d/0xa60 [ 718.323806][ T33] ? __pfx___schedule+0x10/0x10 [ 718.328688][ T33] ? __pfx_vpanic+0x10/0x10 [ 718.333236][ T33] panic+0xc5/0xd0 [ 718.336997][ T33] ? __pfx_panic+0x10/0x10 [ 718.341447][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 718.346962][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 718.352367][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 718.358556][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 718.364753][ T33] watchdog+0x102b/0x1030 [ 718.369144][ T33] ? watchdog+0x1c7/0x1030 [ 718.373599][ T33] kthread+0x38b/0x480 [ 718.377693][ T33] ? __pfx_watchdog+0x10/0x10 [ 718.382396][ T33] ? __pfx_kthread+0x10/0x10 [ 718.387036][ T33] ret_from_fork+0x514/0xb70 [ 718.391670][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 718.396806][ T33] ? __switch_to+0xc78/0x1410 [ 718.401529][ T33] ? __pfx_kthread+0x10/0x10 [ 718.406155][ T33] ret_from_fork_asm+0x1a/0x30 [ 718.411000][ T33] [ 718.414552][ T33] Kernel Offset: disabled [ 718.418925][ T33] Rebooting in 86400 seconds..