last executing test programs: 4m4.733078722s ago: executing program 2 (id=1572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5c, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) 4m4.337782016s ago: executing program 2 (id=1576): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f0000000180)='ecb-serpent-avx\x00', 0x2000, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x4]}, {0x9, 0x2, 0x6ac, 0xa3}}, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x1000}, 0x2, &(0x7f0000000640)=[{0x3, 0x101, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="83dbfbc6ecac5b6f019e0f7700dd9e57a9a5a58aebccfcd0cc3a828841cca4ffbe23f66c15141d", 0x27, 0x10}, {0x3, 0x755, &(0x7f0000000540)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000580)="c32861777e2a9c2dee0e62a0c9be9f7be75c16d63f5fe50f084a6e9e8ffe5e73b978e768cb3b4beabb12728ef3fcd2f4fd3bf5322c71e47332db1e5e76527a68b22059e54f4ab2d27357d5885c6e2cddd3a734a2bac0cea9f4eb6c143306506bf7d8755e422fec1e5b7178a5a78c7259ded0896d80588097a96b", 0x7a, 0xa}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x1f) sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x7, 0x4, 0x101, 0x80, 0x9, 0x2, 0x8}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6, 0x200, 0x3b, 0x100, 0xa12b, 0x4, 0x8243}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x407, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 4m3.725829095s ago: executing program 2 (id=1581): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x400, 0x70bd31, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x448d2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008001f00"], 0x2c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x200000, 0x2, 0x1, 0xc, 0x81, 0x3}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000001840)=""/110, 0x6e}], 0x3, 0x6, 0x7ff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x400c095}, 0x884) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x7, 0x4, 0xb, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x80) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xfffffffffffffcbd, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24d662dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tunnel={{0xb}, @void}}]}], {0x14, 0x10}}, 0x148}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r11, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 4m3.12179675s ago: executing program 2 (id=1586): r0 = socket$kcm(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r1 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8, 0x40e}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x3, 0x2}, &(0x7f0000000180)=0xc) 4m2.523914868s ago: executing program 2 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYRES16=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3m59.491106912s ago: executing program 2 (id=1593): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000540), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @local, 0x2}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x32}, 0xffffffff, 0xff, 0xa, 0xe, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xebd02e52e735ae15, 0x0, 0xff]}}, 0x6, 0x8, 0x5, 0x4, 0x8, 0x5, 'virt_wifi0\x00', 'veth1_to_batadv\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x9}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0x1, @rand_addr=0x64010100, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x34, 0x9, &(0x7f0000000140)="c75ecd004d4accb26c95b5db299844a88c4d9872969eccc216e8a5fa93f63ba17439bd802249cb9f38e6e9844864f38b25cfaa75", &(0x7f00000001c0)=""/9, 0x3, 0x0, 0x1b, 0x58, &(0x7f0000000240)="538f55906ee52222abdc823375c44879a4419e21efa1aa61794757", &(0x7f0000000380)="2ff910fd059272b2bfc04ff917deae91ebef44c40167bf4a5f2f71479331b1b6707ef9ce0ec60c1dd9e477674a3d7647813edaa1cfcea6547bfc71c4bdda2ce73e350cfa2489dd8e255f211a47f32c56eb7be9b8a6c20c12", 0x5, 0x0, 0x7}, 0x50) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth1_macvtap\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x204, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21064711}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b8ed75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x414de1eb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f803148}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4eb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x296f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe499}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e9b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x512d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa35a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d12ea92}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c86d939}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c40}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b368386}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fb36e33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc96b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca813e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a99}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x426ce620}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x923d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5606ce56}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c3a7b94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x647dd76a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b28f5a6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b23028c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x204}}, 0x2004848c) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495ca41e818d4808b18592610bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a76127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb697ab825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cfd5099a59147bcc872fafe7565f98c3c3edb83c96b0aff30779783467d4348d5e28d9afd5e77ce5dabc1c4d5d790339490703d9050ef8d919d5d5f71a26bd9b72ea53933eecb6cd8a09bc67f5a6b0450fbfcce6837ab696975ba8387815bfa1c497f37ed8b9151bb1105d5efbf3b5034e5bdde5fdb60f996c1fcf75201c52d47ab3b31a4112d6cb61c3beaeb97d03744cfb01409dd1b1258e0d5856df535c241017509a193043296e202834cc4eb50417c56f93093ca61a9c1373904faa2564ad469d8329dd1256f9648af69d6007d8bca7b566cee8a263c07021e9f71b82c07ca8fbe3", 0x3f3}, {&(0x7f0000002b40)="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", 0x1be}], 0x2}, 0x8400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1cac048", 0x4}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000540), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @local, 0x2}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x32}, 0xffffffff, 0xff, 0xa, 0xe, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xebd02e52e735ae15, 0x0, 0xff]}}, 0x6, 0x8, 0x5, 0x4, 0x8, 0x5, 'virt_wifi0\x00', 'veth1_to_batadv\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x9}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0x1, @rand_addr=0x64010100, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x34, 0x9, &(0x7f0000000140)="c75ecd004d4accb26c95b5db299844a88c4d9872969eccc216e8a5fa93f63ba17439bd802249cb9f38e6e9844864f38b25cfaa75", &(0x7f00000001c0)=""/9, 0x3, 0x0, 0x1b, 0x58, &(0x7f0000000240)="538f55906ee52222abdc823375c44879a4419e21efa1aa61794757", &(0x7f0000000380)="2ff910fd059272b2bfc04ff917deae91ebef44c40167bf4a5f2f71479331b1b6707ef9ce0ec60c1dd9e477674a3d7647813edaa1cfcea6547bfc71c4bdda2ce73e350cfa2489dd8e255f211a47f32c56eb7be9b8a6c20c12", 0x5, 0x0, 0x7}, 0x50) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth1_macvtap\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x204, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21064711}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b8ed75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x414de1eb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f803148}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4eb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x296f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe499}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e9b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x512d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa35a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d12ea92}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c86d939}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c40}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b368386}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fb36e33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc96b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca813e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a99}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x426ce620}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x923d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5606ce56}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c3a7b94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x647dd76a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b28f5a6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b23028c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x204}}, 0x2004848c) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1be}], 0x2}, 0x8400) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1cac048", 0x4}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) (async) 3m44.400573759s ago: executing program 32 (id=1593): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000540), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @local, 0x2}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x32}, 0xffffffff, 0xff, 0xa, 0xe, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xebd02e52e735ae15, 0x0, 0xff]}}, 0x6, 0x8, 0x5, 0x4, 0x8, 0x5, 'virt_wifi0\x00', 'veth1_to_batadv\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x9}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0x1, @rand_addr=0x64010100, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x34, 0x9, &(0x7f0000000140)="c75ecd004d4accb26c95b5db299844a88c4d9872969eccc216e8a5fa93f63ba17439bd802249cb9f38e6e9844864f38b25cfaa75", &(0x7f00000001c0)=""/9, 0x3, 0x0, 0x1b, 0x58, &(0x7f0000000240)="538f55906ee52222abdc823375c44879a4419e21efa1aa61794757", &(0x7f0000000380)="2ff910fd059272b2bfc04ff917deae91ebef44c40167bf4a5f2f71479331b1b6707ef9ce0ec60c1dd9e477674a3d7647813edaa1cfcea6547bfc71c4bdda2ce73e350cfa2489dd8e255f211a47f32c56eb7be9b8a6c20c12", 0x5, 0x0, 0x7}, 0x50) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth1_macvtap\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x204, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21064711}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b8ed75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x414de1eb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f803148}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4eb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x296f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe499}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e9b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x512d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa35a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d12ea92}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c86d939}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c40}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b368386}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fb36e33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc96b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca813e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a99}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x426ce620}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x923d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5606ce56}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c3a7b94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x647dd76a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b28f5a6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b23028c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x204}}, 0x2004848c) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1be}], 0x2}, 0x8400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1cac048", 0x4}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000540), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @local, 0x2}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x32}, 0xffffffff, 0xff, 0xa, 0xe, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xebd02e52e735ae15, 0x0, 0xff]}}, 0x6, 0x8, 0x5, 0x4, 0x8, 0x5, 'virt_wifi0\x00', 'veth1_to_batadv\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x9}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0x1, @rand_addr=0x64010100, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x34, 0x9, &(0x7f0000000140)="c75ecd004d4accb26c95b5db299844a88c4d9872969eccc216e8a5fa93f63ba17439bd802249cb9f38e6e9844864f38b25cfaa75", &(0x7f00000001c0)=""/9, 0x3, 0x0, 0x1b, 0x58, &(0x7f0000000240)="538f55906ee52222abdc823375c44879a4419e21efa1aa61794757", &(0x7f0000000380)="2ff910fd059272b2bfc04ff917deae91ebef44c40167bf4a5f2f71479331b1b6707ef9ce0ec60c1dd9e477674a3d7647813edaa1cfcea6547bfc71c4bdda2ce73e350cfa2489dd8e255f211a47f32c56eb7be9b8a6c20c12", 0x5, 0x0, 0x7}, 0x50) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth1_macvtap\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x204, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21064711}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b8ed75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x414de1eb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f803148}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4eb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x296f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe499}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e9b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x512d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa35a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d12ea92}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c86d939}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c40}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b368386}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fb36e33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc96b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca813e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a99}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x426ce620}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x923d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5606ce56}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c3a7b94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x647dd76a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b28f5a6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b23028c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x204}}, 0x2004848c) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1be}], 0x2}, 0x8400) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1cac048", 0x4}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) (async) 2m34.563583987s ago: executing program 3 (id=2131): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0x31) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000500)=0xf338cc85023ba7e3) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x17c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x29}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x946}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_LABELS_MASK={0x4}, @CTA_NAT_SRC={0xc8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x54}, 0x20000880) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x381) sendmsg$NFC_CMD_START_POLL(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xe8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x802) 2m33.395708617s ago: executing program 3 (id=2139): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xa6, 0x81, 0xfffff034}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x3c, 0x0, '\x00', [@generic={0x9, 0x5, "c3a077c388"}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000200)='GPL\x00', 0x2b, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x2b, 0x4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e5b, 0x7ffffffe, @mcast1, 0xfffffffe}, 0x1c) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x10000000, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x800) 2m33.080120191s ago: executing program 3 (id=2142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ce", 0x1}], 0x1}], 0x62, 0x4b8fb) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000004) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r7, 0xa09, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "e3b5a072cb53bd08f9c8fef7b3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "76671f83b5"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8bf3fbc502"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0xfff2, 0xc}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xdc}]}, 0xffffffffffffffee}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000140), 0x4) (async) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030212590214000600002fb96dbcf706e10500000086ddffff86ddee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 2m32.252298684s ago: executing program 3 (id=2147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r2, 0x25, 0x8, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r2, 0x25, 0x0, @val=@target_btf_id=r3}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000190001000000000010000000239bcd84c49c45cd9b7cfabf59bca0e00000020000000000000000000000006401010200000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f0001000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x9, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x0, r2, r6}, {0x0, 0x80000001, 0x7, 0x7, 0x5, 0x78c4, 0x42, 0xffffffff}, {0x3, 0x3, 0x5, 0x8}, 0x0, 0x6e6bbf, 0x2, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x34ff, 0x1, 0x1, 0x2, 0xc70, 0x3, 0xb21}}, 0xe8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 2m31.807710938s ago: executing program 3 (id=2149): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000780), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900010062"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="080003004000000005002000010000000500"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'bridge0\x00', 0x200}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m31.363836689s ago: executing program 3 (id=2150): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m16.229006777s ago: executing program 33 (id=2150): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 31.217411428s ago: executing program 1 (id=2774): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x0, 0xec2fa4b81eaeea5e}, {0x6, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54015}, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24001804}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000800)={@local, 0x80, r3}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0xfff3}, {0xfff1, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x2, 0x8b, 0x28, @empty, @dev={0xfe, 0x80, '\x00', 0x39}, 0x80, 0x40, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r10) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x48, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000054}, 0x4804) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x80, 0x20, 0x6, 0x8, {{0x2b, 0x4, 0x2, 0x8, 0xac, 0x66, 0x0, 0xb2, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x27, 0xf0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010100]}, @noop, @timestamp={0x44, 0x10, 0x60, 0x0, 0x6, [0xa, 0x8, 0x5]}, @lsrr={0x83, 0x13, 0x33, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast]}, @ssrr={0x89, 0x17, 0xf2, [@empty, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, @multicast2, @local]}, @rr={0x7, 0x1b, 0x97, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x6, [{@remote, 0x5}, {@remote, 0x1}]}, @lsrr={0x83, 0x7, 0xab, [@multicast1]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000880)={0x818, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6d}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4536}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1a}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8a4000}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2e455bfa}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xce5c, 0x5, 0x0, 0x1}, {0x81, 0x20, 0x6, 0x9}, {0x6, 0x6, 0x8, 0xedc3}, {0x7, 0x4, 0x9, 0x8}, {0xff81, 0x6, 0xb, 0xc00}]}}}]}}, {{0x8, 0x1, r13}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x9, 0xb, 0x80000001}, {0x6, 0x2, 0x7, 0x7}, {0x81, 0x3, 0x0, 0x10001}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x818}}, 0xc0) 30.457259866s ago: executing program 1 (id=2779): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000780), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900010062"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x3, 0x0, 0x0, {0x7}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1000000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r13, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="080003004000000005002000010000000500"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r14 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r14, &(0x7f0000000140), 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'bridge0\x00', 0x200}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 29.508178471s ago: executing program 1 (id=2783): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) (async, rerun: 32) close(0x4) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004540), r2) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10058894) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a40000001801000020"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9, @ANYRES64=r5], 0x1c}}, 0x840) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000000)=0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000f84298ca031f124e3576bc08d3debb2a58a3946b0fb25ac59bcb4668272b4f841045e2be443bd8011d1ebab606994b7a7f7defe9b0eb081a1dfbc9297edb2a952c779a14997f4518f224831d9eee74fa0897f696f5e8c80a9bd38ab2740fc1eaa0d95178dc2ca28141e86b6c056127405afa046d756d93499f9b8f90d9628eab027e3f238f1731d9f8e7f6", @ANYRES16=r14, @ANYBLOB="010028bd7000fedbdf2501000000180001801400020076657468315f746f5f7465616d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20001000) (async) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, r12, 0xfffffffd, 0x2, 0x10, 0x8, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1b}, 0x60) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0xfffffffffffffffc, 0xc0004) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400", @ANYRESOCT, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20000014) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000004580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="99c12abd7000475f00002e00000009e701007770616e3000000005002b00000000000c0005000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x4048040) 28.770653789s ago: executing program 1 (id=2788): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000780), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900010062"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r3, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="080003004000000005002000010000000500"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (fail_nth: 4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'bridge0\x00', 0x200}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 28.167307447s ago: executing program 1 (id=2793): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000780), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900010062"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r4, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="080003004000000005002000010000000500"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x5, 0x3}, &(0x7f0000000080)=0x18) r9 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={r8, 0x2, 0x5800}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'bridge0\x00', 0x200}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x4000000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x10, &(0x7f0000000140)="17000000a1000200008f2ccaa295a2c42f535d32f39fa625ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a68070000000000000000001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47", 0xb8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r11) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) sendmmsg(r0, 0x0, 0x0, 0x0) 7.780367415s ago: executing program 0 (id=2883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40804) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x1e, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404801c}, 0x2000e041) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000040000000e00000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 6.769315116s ago: executing program 0 (id=2886): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x29a000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="9eda038785c95dc4596e5c345f8b01f40c8505bf66ea0487c7c4b1b787780e3f931e13e5c06ed69459721ea002d04afd6cdebd312f05400cd8c9c2f489d1f584dd2d4b0bbbd1f35ee4a5534f0e27975e1aef2aa0ba8bd819ea6da5d46fa0edca44bdab50bfaa3114575957e865b5dac4615a0b995c2dcd072bf69847a5977ab4200fecd3af290f9a6399d039ca579078879e8ee6f955437a1a3e3381379728398d92a382410c2413932b50567b5cf8e13845532de3ac53d173b3659e6d624efe799d392f949feec094ccd08c59547157198c041b53131a01fbff54e64e7aaf71f793a870e3f126a9233a14647fcb53da01c2729bb222eb5d5047e1b3efb4340a04b67b6e5e387a996c52395b15269e2b8be81bc1744ac7ff067d1a57f5edd256f8db18a6a626e066f6b5a194f83982eedd12cf509af67f228509385685ad794c5fdb23899166190ef2f196108783521dc7d677f4c0a1fda84557409369e8abc10144be04e8ccd17259c59fde93eb70ac412a63af269db34b27f25768d4efba3be6762ea0b78463e76f7fb3574d28c434a733b1cf45a1d1503e57820f01d1cd193e02c58c21707f2dd8e9b7eb5c0193fa1dacb41c431eca2cb674ccf36b19dcfcb48bf2a237df34fccd64dffe4b4c5ececb6358e1395d3fa445fb9280a87e1cecbd058d5ae32903c380f26899a3358d7f76fdf0c99f5c0005778424cc7aa9423cef40afe7818ea0928916ce679e017bbee921155dd4bea3bd59e93862d6f716ed5dce914f5ad712237427931a771abd71bdd394c383fbeeb65ee2911497354aa8957d21660f6c54fe076cad76f26c4677b4b8ca93da9a4a1bfd04e13ed003bef0f8ca5dfcbd1d665716a18b9f1f6bdcb847070325efec5399370a7d2757a12b04ca550f231efc310dbd469259381eed2719a4a75ea5f7903bb032733d2842ada262f23f6da038ffb6f692a79136982fe70868a28018f98a699b7dbe278c4accd8b8c9fd74c7743321850e5d32a945dd3e57bf254fcf05e760f366ab8595c6007fddb736080b48f8a33d15345cd839f6a38b4ceb87b027a31d02b474a030cb6e1a121a7f31d5c46f9331c7daa028728b7b81436d9293d5601446efb43bc9edfff45b2250a9fdc37e378a2a7691b6484e307a61e9e46274d80e23c90de294268cb504654477b4a9a412f1734610e0ea104c6a0718d388fbcaa446e9209c2b27774a2d302628cb5534b76e365ff7656f2f49d8138cd247851c6dd531f9818df1c1d4935fada94bd0534a4fd99f7560d99008169aa5aa199d1eb716f59d1807b26b4c023c2d39c5bf06832c4743fac17b5f7578d9e7ff0f9ee1440d3626107ae25a302cc76d8b4cea6ce42f3a5c5113fdf60d021b7923117bbf5b13dd7631226481c4b4855fdcd333ec56dfa7bef9ae5afaa8b28f877ba9dd9837fbc024352ea65234a550d90cf82f547c07b9a0d1a1c4c68bc7c637c250a0f02508fdbb46b9056f3f0674e5a572c8d12e7926ed008828bbcb57b40489073c67c4321cab1e10d3350c3508bccd0e663759008b62b01722a603b2f52fe3d3b5af1c96163fc0ba2327ff8c19ee9a62298d53ba1450be9da7e5616c438dfbe76e128da0a69936ee7c5c8c176a62e6a959a89194694b709c4b627fa8272331a43a87b22ce0ed37aaab8125853800b5176d9c2624c36c90844d291f04cccf08d30fdb03880e8613fe806c5840d6d6a41c76f5f7e699d6457b579aa1382fed5c78a083a3efac61b3f33e02c063123e971f43887da1a636ae4f0f8b9a695ce405d4646f9d8853e4e73b5bfc5c9bf2fc27b4a9938fc9a2525bce5d8e5b9d48d1f2068299f0f9c6e12d1b6e9c7f55c43aff3784c276346530648b9743c6ff2cc3b5aa5929c59524ab83c689a799838ebc10d2ffdfa5d9677983580677c059208f6cf4b2843a0d752c927c853cb81d322604a74348e0e371b66733459ea843f9ac826fc33ed4436f5019ac9d9b4184bdec8abe66a69db816384f7e3dacd6ed014ec55a8267cb5aa14be097280067e4ec9fd8db494c792572f1ce22baf7ec2d9e0c88b0e112e20f446098b7fc98574f2bf59a5d07c64a3ae806eb832dca456bcca81d2939e3ca29e01a64373d2c2e01e5d9382dcbebd27c8f21c28d8347195b08bd58343efb9f733fbe3d60ba5b8ed79795a9c5dae79be4cb4da6629bd0753682f10cc595eea1c6f0b3cc3d288eba230ad31ddc7267c82a5618f42a127c9f9acee74b7af7dfd653aa9652c90c5bf74c5e0896e896b0086c531d59ddc0325a280a0a65ee6a36db65fe9da72aaa3b1d11322d879b492e8cf4ae46ce574211047e54f577a5986951de9eb76f6da284a51d289e1f4a41f1b7fa306fd9426869f3f58847f4c7252ad8b964354823b349e1dea9ce5c2c92db6857bd5262023d2cb35c14cf738d8a65e38f6433abf14ab983061c396fb23d35cdf76003fe3f9d5d059add27dd09709567f0d31ef467dfb9e1afceb25277d2cb77337450b6af9abcd45624177e73b57d17b26ac6cc6e0fa9cc515bbed4c6d0651f63dfcf438b8ada605ba69f68b9a0dd6faa6bdf4c26cef3104b0c260e82bb8dd43a9c362f23d8cac6ea10674cbe601556758c090b332dd3dfb2d965078e0375807c8a59e66254a7c4533064dcfb5833395c503a59b5da1dcd4c2432bf0e81fa007db75a6b04b806d966e225330a35392852d5db613cf4c266c8b9532dfb670f9db60f034306b06983d1e0de4879740687dca6b43563e901ec82b19919f4a7ca044033e88e4f9b74a2026e15c30fb0cde9dd8350cee83ff64ae6831877b6d66b495446cc67f08ff3fd7db39ea832f012783c4779b09bdbdee1c38767e643af0d4e7e29239d3114b6a7e3fe940dd4de9d26197e55e8dfb002a1c1f5fdf2c8c02ea38aa338e98665fbd66b5ee46eb5d8b37564c378874024e1298b5041fc7080ea1857b0566379f0135eddf32950476686b6b455006e6d4f06cbacc4499417a93292e6974f978f7a462ee86f329a468aa3e8c03bc7baa1bde27e5ce9da29b6e2f31805aaf79df4864f534f3e30f854fc23c0f131839894937229e33aff01a671fe637e6aca0574b8935d34af05ce25da3e62484d62cc5062a8b5e2d977c7df297d72dafaff91f6954329f78c1787842b823003ddda12398bb885d530f5b10c3d3cc1972351a711f943759fdcfbbe0f1f274ae80cb63909753510251bd2e9ea24a80ca9ac21bc1804ced46a0a7b2e0c6e88c7b2b47146507bf59550b25ac0a0af46f5e36be158260c645fb590688a7c2ea3be07be4f2a3340e902f2a5cd96aceba5aad568c2b7249d297b06b22d4a6d06e7dbeb76a5be4233d2c32d9045a02213deb92b050cb00829235cf0c342bc4994c1e5fcac63bda638479889a644f86baba906c88f7e53447b1d3d25fb5293ca94529e83e5f61e6ce7979a5f764cb3b3e2d15d5d2760a7705e595d394a86be61bbc873f08876fd32479846369ab794d29a5bbbeda133c421f827fce647b6721f1363d9c31553b56c1462904d2a4b26097f2cffe85d49dfca3f641f67fa6300e645668f9772858e9bd3600b2ef20af6261ebddd59eb50bdea73f906f004644c5df0ab84b25de184a519f15185042470d6d772c8fa9a43c0e2c41df80366756a706d9824783339c9981c564be2ce081f60e877f804d4253fba263d66b5914eff87be63e2f24e185d93027fec026e9871fa7a5466040e13d6d3f9dab6c1c19d197fc039f73880eeeb610bcbe452edb50b7c78374b893496ea23a20fb3f66d14fad11e200eca4016be7725a5a98e66f8c214b5acaa4fda48700f7f46748e89c79419399886b35e95cdf67629062182df9d67944eae0b3f1f0578797580b66935fd1e75831bf6b55bd481047683e5c0706d55132c6883bab2473cbb68b2ce7e22a0232c3f1d306cf5dd723d68475967fb0972e4a9e5f96278f9472f3095bb33c12fd16481052abbb8a11f9228dce068cb4375db63867eb2efd819e942e9de9d8ba99b580776a6d4ac7c4c9b4af228f81882a7ad2f3048cadb4bc3db91f527dd8d173f88326005ba0e2fb5ef366382887a38242fca0c8e130a306262d6e9f77d9da4e08241071b76556352c98e2b681c813ec9c6b51c621ad914f8c66a8175ba77323920363f0ad85eca2a0ca40258c304c1e577c9f5768cf83a5ca0a0ab5cbcb165c9fc909820f4998ba3e1427305d32aeaa7f7f3c48cbf0e9ef71ad219c9633f2832287a4a5b6ffdc63ebf11fe27fa62a0a8c77b4bab75089f509f429c7f37543b02a8b1b04e79d91f2fd356c8291a32d582f58a9d459113653ccc9aa292df255dc53a589a6d7060ab41df75672f72c794ca2d1f6fa75e7fda9a478e0e2396daea57d9b4269cd2685bed7c7990132ac39528c758f0d3f0b377bbb0bab1ed8cf9fec80e3cc6a2ce58761f23e7c0e832d4b336fc668c4b5678f9a2aef52767e6d5d829cfb37d6a7097b04a53b35ced1cee737b524b3ca15e3737286fc19191de86f2ab61ea2e509ce371314e114c507edad81bb0183a14301818f068725a93a6c38b7f4959bb448eea8b3ddb8da21af52eabe01e6295a633cb6c847e970334a2eda9aae0ef2c447aab6faac3ff25077f6ebca06a74037ff25920684e72076c3cf433bfc9d5468cc2347fc4f548d00377f968f0af52008a96e9e89e7548e451f0ae4c0f1b7b3efbdb5e0adc65d2bb25717d8cf113e963da8d76d824b6602bd1646fe5094d481624033301de11cb73ce940430fd834137e14f1aa417552f470f35cae7c268e5895cc9cd26b423f81319e8966be372f336291ac8a0a54fb8a3f4a961a518b802904704f8988bcb8bd58f332a4bb38c56322f5948b1998c3c91fa79c589cb83c8f2104eda83d27262ea8aaa602ea0db9133f92be7a74dc243392add9619614d101df52360ce0727cbf4e30edfe7ba4956e8ce4fbf4ced14c58520b79a0e2e22257e0bfc961d3613a90020b6e1b67060fd51461e8ea335144475df7eb2a8dcd7aa7edcdebc832c0d51cbcb70fddaab88bf4cd284fd902065a1a48db4ddc364814772f524228dc9e1e84db87cdb564302df07fd097a5624af7f9b1f649ab0b56b5e45d2d753b49835b58726330518ad8598f48b2ca283a021ad4aab23cf06d8af3390b1ba6e49786d1d5862410a4ddc4d052a1a702f0af24fc68af33e465ba63c0c60a689c6097f1bb7e816bc3d2cd23727aaefc7df92df1ad9ae6c6a1d812468b3f20497b5352d131d4fbbbe0fed5124739ce2c4c596338d244f7683a9293cdca2340152a107ca35832b6bfe91cc16c7da5c746d1c027dfd4e33dbb8e708b76ec7c058660009a0a170b3a10e2a1561795ec7dc4234bf8cf7a43bdea6a98d185b8f4dee2a8fbff1476195f3ba57cd59f511bfaff5f7acec9f68e4718efb7c23054303dbbc103a6cae07bb99bb60bde1c716eea5c091a60b61e51df0a5258537322f2482a979241924d4861a8e213b1b296fdd372cf8bb030a3c21c31a67c5e183cb24b6bfac6779e9f2b0c1a58bc0b52aafbe269ba20cbec0526e49108d1a69588b0006797a0b6fc40bebfb71cb376f909fe6ee1c61eabfdf46884d85a247791b4e4bad22c8bda3aa8ea843709a1b04669f95411e3bcc8b5d5a2c8586a5d15637add065b0ea7aba2ba03d380cef8c9b2f13cb4fc9f2475683d877d5cda4a985185721616c05a8cd08d2dd6605039b950da0f61aa1179a96dd326a2c6798f699296b6f15b7c60732efe12fe53fd44968aa8e8979d6d1dc8234808b7389d3b91b6a1307e20fc4fed3b8944b", @ANYRES32=r3, @ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f00000043c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@initdev, @initdev, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'erspan0\x00', r10, 0x8, 0x8000, 0x0, 0x0, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x6, 0x13, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x13}, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) clock_gettime(0x5, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000340)={r11, r12+60000000}, &(0x7f0000000380)={[0xfff]}, 0x8) socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) 5.314240749s ago: executing program 0 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x9, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(r6, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[@ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x4c, [@private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@end, @rr={0x7, 0xf, 0x78, [@private=0xa010100, @empty, @multicast2]}, @ra={0x94, 0x4, 0x1}, @noop]}}}], 0x48}, 0x8800) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x2, 0x5, 0x84, &(0x7f0000000040)) 5.075829531s ago: executing program 0 (id=2896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 4.917848474s ago: executing program 0 (id=2897): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, 0x13, 0xe23693acb5062f75, 0x70bd29, 0x25dfdbfd, {0x1f, 0xe5, 0x8, 0x7f, {0x4e22, 0x4e20, [0x45e, 0x2, 0x4568d809], [0xfffffff8, 0x0, 0x4, 0x5], r2, [0x3]}, 0x1ba5}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "da8866e3cbbd2e7ff7b1723cf702e528fd8a9e7d6a0bb6e525323384d6e09b8e45366a36e7ba60f660aade24615b1f062569ce7d"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) connect$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x10) (async) connect$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x124, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x124, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000804) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1d}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r10 = accept4(r5, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000280)=0x80, 0x0) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x4f}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x800}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd0}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x416}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) (async) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x4f}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x800}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd0}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x416}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000380)={r11, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) 4.776444774s ago: executing program 0 (id=2898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x61800, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.516770481s ago: executing program 1 (id=2800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a3000"], 0xec}}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0xc}, @window={0x3, 0x4, 0x6}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x101}], 0x6) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0xc}, @window={0x3, 0x4, 0x6}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x101}], 0x6) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x114, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x114, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x794, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x760, 0x2, [@TCA_MATCHALL_ACT={0x75c, 0x2, [@m_vlan={0x10c, 0x10, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x22b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x8, 0x3, 0x2}, 0x1}}]}, {0xb9, 0x6, "39844d4262fca7693483f6dc59f0a77619cb48a9c81506ee9827b069897ed1a950941ec802eb78f578198807e65f48a80e64edb16958280adad3f240e35d710ee74c6f3a5f4fe306a1847a0613198398959d9eda266a8774d6652a89aa6f450a27adb2871328daf0bdf3441f46fe845a2f6290fca8c375498adfbbe8dbbd93c42cf3f4fd2fe03972a0b734689920462c0a7454c1b0cd25c41d086cd6044a90265c8ff1d4f805ee9ba2f3622889a120224b4030ae39"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x1c0, 0x8, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xa, 0x8, 0xfffff9ff, 0xb70a}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xcfff, 0x3, 0xffffffffffffffff, 0x6, 0xfffffff9}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x7, 0x9, 0xb5, 0x6}, {0x4c1, 0x10, 0x6}, {0x3ff, 0x6, 0x81, 0x81}, {0x1, 0x1, 0xfc, 0x80}, {0x6, 0x80, 0x0, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xf0, 0x3, 0x8, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xeb, 0x6, "6f6339f3d6c5d7cd688d53367c5da353b7767c4f64c016aedcb039b2bff69c655d42625b50c8424dea59c902ee44eef4fe1745f4ff8cdbfb04a4ad42ad756c13bfd5009b5ed3f1da34e2d9a180510dd49377fcacb510fb5a50365271af00613d92424bf187d9c11e92918d9163cf1de76dc22a8519bfe08d8c584e5557baa0ceaa2d2f5aef84a6afb5e80df12abc23e939a1def49d52ae0ebda8423fc17b2f836a0e5e855130aa930c9b851de10a9f1bb919dd38b3191babf96b2994b23bc6ac7fbd196733138c685d014795df9a98b139af9614544ffe026026d1e85fbfb1e9c4a93251312684"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x90, 0xb, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x2, 0x2, 0x6, 0x1}}]}, {0x3c, 0x6, "3477f115aeaed79b3cdfb2cf925e6fb45dc014fc73005b0de69af91585ebc08b617c0de6cd8a4486c741c3ef1ca7f67fde14938b568c9ef5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x1f4, 0x0, 0x0, 0x0, {{0x9}, {0xd0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x80000000, 0x6, 0x200, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x31b, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x1598, 0xffffffffffffffff, 0xfffffffc, 0x400}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x1200000, 0x4, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10, 0x2, 0x5, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x80000001, 0xffffffffffffffff, 0x1, 0x8b}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x10000000, 0xb, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x4f3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x5e, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x7, 0x8, 0x4, 0x884}}]}, {0xfa, 0x6, "25666a3723ccb5ec9362df3b5376994f2fb006abe2e02557911a87849f53576cd7e8c576a2865864ca79727a8106ed7becf5973733ae7c1eeb0591c95efb7fa8d4329239eb3d00d4c9e6b24701230bb3f6b30278e68e17ea44dc46ea28747fd51966a74ab68685413be84d284242ebef30b6958329985e9635fef23056b946f595c006ed4f1086ee308f363c30a2e2cf02c9f3d217b81a6cc474aba0dde6241e4fdc61837215c09e9ba1071c0caa02f8ffdd3c48a5e9cb947da5a6e0ee4605a81a8a354913a2bced8fd033a9d221987a4fb5df511da68656c2ebcf360a2eb3f75f5905c56b516721d600620a602ae529556d4cedd991"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0xf4, 0x8, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x8, 0x20000000, 0x8, 0x7fff}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7413, 0x80, 0x10000000, 0x8, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xee, 0x1, 0x1, 0xf, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x4, 0xb, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x1, 0x6, 0x60c0d947}, 0x6}}]}, {0x36, 0x6, "4da1a21e272ed929d11814b4ec8a20437e189b990869e37fa796904cf3c1b704b0afe676f9e3e893b9d7550b9f042c0aca1c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x114, 0x12, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80, 0x3, 0x4, 0x0, 0x6}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, {0x88, 0x6, "13561094eab5774edce9387586de6337eb96dfaa5ee3d43b40c115e0309280121fbbef244f68d3f54452e3a3d8d23bf5eaab49521dcfad54ea901f478d21f2e9d3a2b53b9e6c37a10cb44cf2184b6cac638e003a046559bd8aeba384caafff39d33b6782c7f12e5c37a30bea9bb4409344f29ef34d5699b20b77898e74a71e5ab3ba8e61"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x794}, 0x1, 0x0, 0x0, 0x8815}, 0x8080) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x2d, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r13, 0xee6871e4c6b1b68b, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x61e}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0xb9}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r13, 0xee6871e4c6b1b68b, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x61e}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0xb9}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.577251694s ago: executing program 4 (id=2904): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x7, 0x1, &(0x7f0000000240)='l', 0x7, 0x4, 0x46d, 0x7, 0x3, 0x3, 0x2, 'syz1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x92aa842669e14d00]}}, {@mac=@random="f135419f37d9", {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @empty, 0x0, 0x0, 0x0, 0xd, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000030008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000006000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newqdisc={0x88, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [0x0, 0xd, 0x10, 0x10, 0x81, 0x1d, 0x0, 0x5, 0xa, 0xe, 0x7, 0x10, 0x7, 0x2f, 0xf, 0xf], 0x1, [0x1, 0x6, 0xa47, 0x5, 0x8, 0x9, 0x3, 0x4, 0x400, 0x7, 0xdb2, 0x1, 0x6, 0x6, 0x3, 0x4], [0x7, 0xfcdc, 0x9, 0x7, 0x8000, 0xfff, 0x6a, 0x6, 0xffff, 0x3, 0x9, 0x7f, 0x240, 0xfff7, 0x4, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x368, 0x2a8, 0x0, 0x0, 0x130, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newqdisc={0x14c, 0x24, 0x0, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff4}}, [@TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x9, 0x5, 0x5, 0x2, 0x100, 0x6dcd9259, 0x4}}, {0xc, 0x2, [0x7, 0x7ecb, 0x5d2d, 0xe]}}, {{0x1c, 0x1, {0x4, 0x3, 0x7, 0x5, 0x2, 0x10001, 0xfffffff8, 0x2}}, {0x8, 0x2, [0x5, 0x541]}}, {{0x1c, 0x1, {0x1, 0xf0, 0x44, 0xf5, 0x0, 0x4, 0x84d3}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x2, 0x3ff, 0x200, 0x0, 0x8, 0x9, 0x8}}, {0x14, 0x2, [0x5, 0x1, 0x2, 0x5, 0x1, 0xd, 0x7, 0x4]}}, {{0x1c, 0x1, {0x5, 0x1, 0x4b0, 0x1, 0x0, 0xfffff908, 0x7fff, 0x6}}, {0x10, 0x2, [0xd, 0x101, 0x3ff, 0x1, 0x4ada, 0xdc]}}, {{0x1c, 0x1, {0x0, 0x5, 0x0, 0x2, 0x2, 0x6, 0xfffffffa, 0x3}}, {0xa, 0x2, [0x5c, 0xfffe, 0x2]}}, {{0x1c, 0x1, {0x78, 0x81, 0xc, 0x4, 0x1, 0x6, 0x400, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x14c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) socket(0xa, 0x803, 0x0) 2.718304855s ago: executing program 4 (id=2907): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @loopback, 0xfff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xffffff0d, 0x3) syz_emit_ethernet(0x152, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@mpls_mc={0x8848, {[{0x80000}, {0x0, 0x0, 0x1}, {0xf8, 0x0, 0x1}], @ipv6=@tcp={0x9, 0x6, "814587", 0x110, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, {[@hopopts={0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0xff, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x7, [0xff, 0xfffffffffffff801, 0x10000]}}]}], {{0x4e23, 0x4e20, 0x41424344, r5, 0x1, 0x0, 0x14, 0x40, 0x8, 0x0, 0xb0e0, {[@mptcp=@capable={0x1e, 0xc, 0x7, 0x8, 0x6, 0x7fff}, @generic={0x2, 0x10, "659ec50a6fe8f9f97b11a0daef4c"}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x5, 0x8}, @fastopen={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0x9, "d87f847b8eabb5"}, @sack_perm={0x4, 0x2}, @eol]}}, {"64772e6651e54e125b80eb4a34617c077de73da24e7643f022c14af3d56b592a3da546aa6b90ada0f6ce8ceb730aa5abed55fb0c9475408e688eac4087f203b74cb09d83305143da0bd066a481af9fc6bcf9125a3b4ce17b71de7ae8321c9a88d88d5fa80aa65c2e03e0b9394fe4d19b103eaff387c10dfd7bbe0740237806de"}}}}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0x72b, 0x5ef, 0x20, 0xba3]}) syz_emit_ethernet(0x1bc, &(0x7f0000000200)={@multicast, @multicast, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x2}, {0xffdcd, 0x0, 0x1}, {0x4}, {0x8}], @ipv4=@tcp={{0x40, 0x4, 0x3, 0x7, 0x19a, 0x66, 0x0, 0x81, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xf9, 0x3, 0x2, [{@rand_addr=0x64010100, 0x3}, {@multicast2}]}, @timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0x3, [{@local}]}, @timestamp={0x44, 0x20, 0x47, 0x0, 0x8, [0x7fffffff, 0xf, 0x81, 0xff000000, 0x80, 0x0, 0x7]}, @timestamp={0x44, 0x24, 0x13, 0x0, 0x6, [0x80000000, 0xd734, 0x80000000, 0x7fffffff, 0xdf70, 0xf, 0x2, 0x5c5]}, @timestamp_prespec={0x44, 0x44, 0x1b, 0x3, 0xe, [{@remote, 0x4000000}, {@broadcast, 0x7f}, {@remote, 0x1}, {@multicast1, 0x1ff}, {@empty, 0xfffffffe}, {@multicast2, 0x7}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0xce, 0x3, 0x5, [{@private=0xa010100, 0x5}, {@loopback, 0x80}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x7}, {@rand_addr=0x64010101}]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x3}]}]}}, {{0x4e21, 0x4e23, r4, r5, 0x0, 0x0, 0x8, 0xa0, 0x6, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}, {"605092afd43bb55e2a72215afd196861e3857384b3767c054c51e62a137425492674450d68a3478d2208e5de06389d8abab0ffcd18846df9869b8d67b4ca5bbc0285b94bdd45bbe25cfb9a8940caa0383fc848a03a01817c73084f72485032648da42c74422688d1e6cbb13291e839b1eb1c3bcbc4e46bc871c7"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) 2.419322098s ago: executing program 6 (id=2909): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f0000000180)='ecb-serpent-avx\x00', 0x2000, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x4]}, {0x9, 0x2, 0x6ac, 0xa3}}, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x1000}, 0x2, &(0x7f0000000640)=[{0x3, 0x101, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="83dbfbc6ecac5b6f019e0f7700dd9e57a9a5a58aebccfcd0cc3a828841cca4ffbe23f66c15141d", 0x27, 0x10}, {0x3, 0x755, &(0x7f0000000540)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000580)="c32861777e2a9c2dee0e62a0c9be9f7be75c16d63f5fe50f084a6e9e8ffe5e73b978e768cb3b4beabb12728ef3fcd2f4fd3bf5322c71e47332db1e5e76527a68b22059e54f4ab2d27357d5885c6e2cddd3a734a2bac0cea9f4eb6c143306506bf7d8755e422fec1e5b7178a5a78c7259ded0896d80588097a96b12bea30e1564c7c29e101bf8c8f8ce5baf9e7eb3434894d916ea0c0aab7deda7631a38a68c11d01e", 0xa2, 0xa}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x1f) sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x7, 0x4, 0x101, 0x80, 0x9, 0x2, 0x8}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6, 0x200, 0x3b, 0x100, 0xa12b, 0x4, 0x8243}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x407, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 2.319065749s ago: executing program 6 (id=2910): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x45, &(0x7f00000007c0)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@llc_tr={0x11, {@llc={0x42, 0x42, "db", "6e84f69197a58724159e396023aa86e57374454acbfe69f628c12be0efd63ad56d0858fb19ecf0b997d90c63c918032d"}}}}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRESDEC=r0, @ANYRESHEX=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) 2.039542513s ago: executing program 6 (id=2911): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x6d062}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x880) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000700)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000740)='GPL\x00', 0x7, 0x93, &(0x7f0000000780)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, r6, 0x8, &(0x7f0000000840)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0xa, 0x0, &(0x7f0000000880)=[{0x5, 0x3, 0xe, 0x3}, {0x5, 0x2, 0x5, 0x1}, {0x1, 0x3, 0x4, 0x1}, {0x2, 0x3, 0x2, 0x9}, {0x4, 0x3, 0x0, 0xb}, {0x0, 0x4, 0x0, 0x8}, {0x5, 0x1, 0x4}, {0x5, 0x3, 0xb, 0xa}, {0x1, 0x2, 0x3, 0x3}, {0x5, 0x4, 0x0, 0xc}], 0x10, 0xc}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x439, 0x70bd26, 0xfffeffea, {0x0, 0x0, 0xe403, r3, 0x42093, 0x60004}, [@IFLA_XDP={0x4e, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008014}, 0x4040) ppoll(&(0x7f0000000080)=[{r6, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) close(r5) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = accept$alg(r6, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000006c0)={r6, 0x6, 0x8001, 0xc1db}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x2) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f0000000680)={0xfffffffffffffffa, 0x48, [0x4, 0x81, 0x7, 0x100000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.611171202s ago: executing program 6 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x4) read(r0, &(0x7f0000000200)=""/161, 0xa1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/pid_for_children\x00') r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001040)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$FOU_CMD_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x3, 0x4000855}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/105, 0x69}], 0x1}, 0x0) close(0x4) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xfffffffe}]}]}}, 0x0, 0x2e, 0x0, 0x8}, 0x28) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)={'security\x00'}, 0x28) 1.183869192s ago: executing program 5 (id=2916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x33, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bind$rds(r1, &(0x7f00000000c0)={0xa}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 1.095838938s ago: executing program 5 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 958.807107ms ago: executing program 5 (id=2918): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040)=0xfffffffe, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp=r3, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e23, 0xdcf5, @empty, 0x9}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0xe, 0xf9}, &(0x7f0000000000)=0x9c) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f0000005280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005240)={&(0x7f0000002400)=@newchain={0x2e3c, 0x64, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x5, 0xffff}, {0x6, 0x2}, {0x2, 0x1f}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x76bf}]}}, @f_tcindex={{0xc}, {0xc58, 0x2, [@TCA_TCINDEX_POLICE={0xc24, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x8, 0x7, 0x80000001, 0x3f52, 0xed44, 0xf2, 0xde, 0xc04, 0x3, 0x6, 0x3, 0x3, 0x7fff, 0x8, 0x2, 0x7, 0x2, 0x43f, 0x6, 0x5f5, 0x10000, 0xfffffffe, 0x7423b8e5, 0x3, 0x80000001, 0x2, 0x6, 0x3, 0x6, 0x9, 0x5, 0x7fff, 0x10001, 0x8, 0x1, 0x1, 0x63bc0000, 0x100000, 0x8000, 0x9, 0x3, 0x2, 0x3ff, 0x1, 0x40, 0x826a, 0x0, 0x9, 0x8, 0x3, 0x2, 0x5, 0x4df, 0xfffffff9, 0xf875, 0xfffffffe, 0x5, 0x7f, 0x2, 0x1000, 0x6c, 0x9, 0x8, 0xdd7, 0x5, 0x862, 0x73, 0x7, 0x10000, 0x7, 0x1, 0xec10, 0x9, 0x3, 0x400, 0x7f, 0x3dbc, 0xff, 0x3, 0x10e, 0x7, 0x9e, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x3, 0x4, 0x5e, 0x9, 0x3, 0x4, 0x4, 0x1, 0x5, 0x4, 0x7, 0x38, 0x1, 0xc57, 0x8, 0x2, 0x80000000, 0x3ab, 0x101, 0x9, 0xf711, 0x2, 0x8, 0xc5c, 0x1, 0x6295, 0x5, 0xfffffff7, 0xffffffff, 0x800, 0x80000001, 0x10001, 0xcd3, 0xfffffff7, 0x400, 0x7, 0x5, 0x10000, 0x9, 0x1, 0x1c000000, 0x9, 0x6, 0xe9, 0x4b, 0x7f, 0x6, 0x21e, 0x2da, 0xf, 0x7, 0x4, 0xffffff81, 0x7, 0x1, 0x8, 0x8, 0x7, 0x1, 0x10000, 0xbb, 0x3, 0x45ea, 0x30000, 0x101, 0x2, 0x5, 0x1, 0x7fffffff, 0x7fffffff, 0x5, 0x9, 0x65d, 0xfffff801, 0x9, 0x5, 0x7, 0x6, 0xa9df, 0x3, 0x4, 0x2, 0x8001, 0x2, 0x9, 0x80, 0x5, 0x5, 0x8, 0xc8, 0x100, 0xf, 0x100, 0x4, 0x4, 0x8, 0x1ff, 0x0, 0x3ff, 0xd, 0xabe, 0x5, 0xfff, 0x2, 0x401, 0x7, 0x5, 0x6, 0x6, 0x6, 0xa, 0x401, 0x1, 0xb, 0x2, 0x6, 0x1, 0x7ff, 0x7fffffff, 0x96e4, 0x66e0, 0x6, 0x4, 0x80000001, 0x7, 0x9, 0x7, 0x200, 0x7, 0x101, 0x71, 0x800, 0x2, 0x9, 0x7, 0x1, 0x5, 0xff, 0xe, 0x8, 0x0, 0xa, 0x400, 0x800, 0x2, 0x94, 0x5, 0xfffffff9, 0x0, 0x9, 0x9, 0x1, 0x4, 0x8001, 0x3, 0x7, 0x1, 0x85c4, 0x7, 0x9, 0x20000000, 0xb5, 0x6bdbd9eb, 0x61faafe6, 0x9, 0x3, 0x7fff, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x1, 0x2, 0x80000000, 0x5, 0x5, 0x1, 0x5, 0x0, 0xffffffe6, 0x3, 0x1, 0x3ff, 0x7fffffff, 0x3, 0xb129, 0x1, 0x7f, 0xffff, 0x8, 0x6, 0x7ff, 0x7b, 0x1, 0xc6f, 0x0, 0x9, 0xe75, 0xffff0000, 0x17b, 0x5, 0x5d56000, 0x8042, 0x1, 0x4, 0x4, 0x7ff, 0x4, 0x7855, 0xffff3c22, 0x2, 0xfff, 0x1, 0xde6, 0x4, 0x78a1, 0xe47, 0x0, 0x1, 0x1, 0x7, 0x10, 0x81, 0x9, 0x5, 0x7, 0x8, 0x4, 0xfffff182, 0x4, 0xf, 0x4, 0x4, 0x73c, 0xfffffff9, 0xa, 0x7, 0x4, 0x0, 0x2, 0xe, 0xfffffff9, 0x1, 0x10000, 0x8, 0xaf7d, 0x6, 0x0, 0xfffffc00, 0x5b, 0x105, 0xe, 0x2be, 0x7, 0x2, 0xfffffffe, 0x8, 0xffffffdd, 0x7fff, 0x0, 0x6, 0x7, 0x33a6, 0x4, 0x5, 0x8, 0x5, 0x1ff, 0xdf9, 0x3, 0x9ec, 0xa80, 0x80, 0x2, 0x6, 0x401, 0x10, 0x5e, 0x8, 0x7, 0x3, 0x5, 0xfffffff8, 0x3, 0x32ca15d3, 0x5, 0x8, 0x4, 0x2, 0x1, 0x0, 0x1, 0x3, 0x7fffffff, 0x2, 0x29, 0x28, 0x8a, 0x1, 0x3, 0x80, 0x621e, 0x7, 0x5, 0x1, 0x719, 0x101, 0xf120, 0xfaa, 0x7, 0x7, 0x1ff, 0xffffffff, 0x9, 0x7f, 0x3ff, 0x7a, 0x1, 0x6, 0x3, 0x5, 0x86, 0x9, 0x8, 0xfffffe01, 0x3, 0x7, 0x77, 0x7ff, 0x101, 0x2, 0xffffffff, 0x8, 0x5, 0x7fffffff, 0x9, 0x6, 0x6, 0x0, 0xc, 0xa3, 0x3, 0x7, 0x7699be5b, 0x1000, 0x100, 0x2, 0xb, 0x9, 0x0, 0xfff, 0x7f, 0xacd6, 0xfffffff7, 0x8, 0x6df, 0xff, 0xa, 0x7, 0x6, 0x5, 0x101, 0x0, 0x3, 0x0, 0x5, 0x8, 0x4, 0x4000, 0xfffffffd, 0x7, 0xd, 0x8000, 0x6, 0x7eef, 0xffffffff, 0xc69, 0xd8, 0x7, 0x59d1, 0x0, 0xc3, 0x10, 0xce21, 0x400, 0x2, 0x0, 0x4, 0x48, 0x8, 0x9, 0x4ea, 0x100, 0x7, 0x80000000, 0x101, 0x8, 0x2, 0x4, 0x2be3836c, 0x10, 0x100, 0x5, 0x9, 0x6, 0x7, 0xdb, 0x2, 0x8, 0x7fffffff, 0x6000, 0x8e, 0x8, 0xa7, 0x8000, 0x400, 0xfffffffd, 0x8, 0x1, 0x8, 0x3, 0x2d, 0x5, 0x7ff, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x80000001, 0x2, 0x5, 0xca49, 0x0, 0x4, 0x101, 0x62f, 0x1, 0x8, 0x3, 0xc9, 0x7, 0x80000000, 0x7, 0x80000000, 0x7ff, 0x2f1, 0x8, 0x1, 0x8, 0x0, 0x7, 0x80000001, 0xff, 0xb17, 0x9, 0x5, 0x6fc2, 0x8000, 0x50e0c8f7, 0x3fa1d389, 0x9, 0x4, 0x5, 0x7, 0x6, 0xc, 0x5, 0x97ce, 0x0, 0xc, 0x1, 0x5, 0x8000, 0x8e, 0x8, 0x5, 0x3aa2, 0x7, 0x7, 0xd, 0x7, 0x2, 0x4, 0x4, 0x9, 0x6, 0x24, 0x100, 0xfff, 0x17, 0x7, 0xf, 0xd, 0x401, 0x0, 0x9, 0xffff, 0x8001, 0xe513ce5, 0xc174d3e5, 0x4, 0x9, 0x1000, 0x5, 0x7, 0x7, 0x6, 0x4, 0x7, 0x1, 0x3, 0x194, 0xffffffff, 0xffff, 0x8, 0x2fe, 0x7, 0xf, 0xbab, 0xb, 0x7, 0x7f, 0xa, 0x2, 0x8, 0x9, 0xffffff06, 0x9c, 0xa, 0x400, 0x8, 0x8, 0x95c2, 0x80000001, 0x401, 0x1ffe0000, 0x0, 0x1, 0xfffffffb, 0x8, 0x2, 0x820, 0x3, 0x8, 0x6, 0x83c, 0x4, 0x1, 0x1, 0x8001, 0x3545, 0x8, 0x4, 0x3, 0x1, 0x8, 0x5, 0x4, 0x1, 0x1ff, 0x9, 0x7, 0x5, 0x7, 0x7, 0x5, 0x400, 0xd, 0x6, 0x800, 0x3, 0x3, 0x5, 0x1, 0x8, 0xf, 0x0, 0x3, 0x9, 0x1b, 0xa50, 0x80000000, 0xffff0e22, 0xe, 0x5, 0x9, 0xd, 0xffff, 0x8, 0x7, 0x4, 0xbb, 0xfff, 0x9, 0x8e7, 0x6, 0x6, 0x9, 0x5, 0x6, 0x401, 0x7, 0x8, 0x7, 0x3, 0x7, 0x0, 0x1, 0x100, 0x6, 0x5, 0x1, 0x40, 0xff, 0x7, 0x9, 0x5, 0x9, 0xa, 0x80000001, 0x0, 0x8001, 0x1, 0x3, 0x5, 0x56f0, 0xdfcf, 0xffffffff, 0x2, 0xb, 0x1, 0x9, 0x7, 0x1e7a, 0x10000, 0xc, 0x1000, 0xfffffff8, 0x6, 0x6, 0x0, 0x101, 0x0, 0x4a4, 0x7, 0xb5, 0x0, 0x98, 0x0, 0x9, 0x7, 0x6, 0x6, 0x0, 0xd, 0x77df, 0xfffffff7, 0xffff, 0x9, 0x7fffffff, 0x7, 0x9, 0x5b0, 0x81, 0x4, 0x3df4, 0x57, 0x2400, 0x3, 0x5, 0x0, 0xa087, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0x4, 0x4, 0x2, 0x7fff, 0xb, 0x7fff]}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10, 0xfff4}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0xffff}}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xb}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10, 0xfff7}}]}}, @f_rsvp={{0x9}, {0x20e8, 0x2, [@TCA_RSVP_POLICE={0x1030, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x7, 0x6, 0x7, 0x3e, 0x2, 0xf6, 0x7, 0x4, 0xa, 0x5, 0xd, 0x4, 0x4, 0x7, 0x0, 0x9a7, 0x1, 0x81, 0x3, 0x9, 0xffffffff, 0x7, 0x4, 0xfffffff8, 0x1, 0x9, 0x3, 0x8, 0x3ade5379, 0x4, 0x7708, 0x7, 0x100, 0xe278, 0x3, 0xd0a, 0x10000, 0x8, 0x800, 0x1, 0x2, 0x9, 0x5, 0x6e06, 0xa634, 0x5, 0x8, 0x8, 0x1, 0xc, 0x0, 0xfffff801, 0x2, 0x4, 0x1749d0d1, 0x1000, 0x7, 0x5, 0x5, 0x7, 0xdf2, 0x3, 0xa1, 0x3, 0x0, 0xfffffffe, 0x7fffffff, 0xffff, 0x0, 0x1, 0x9, 0x106e52c9, 0xb, 0x28, 0x4, 0x5, 0x0, 0x8, 0xfffff8dc, 0x200, 0xffff8001, 0xd0, 0x0, 0x14221e51, 0x8, 0x6, 0x1, 0x4, 0x72e, 0x3, 0x4, 0x8, 0x2, 0x7, 0x7, 0xde, 0x0, 0x9, 0x8000, 0x8d9, 0x1e00000, 0x100, 0x7fffffff, 0xfffffff8, 0x9, 0x7fffffff, 0x6, 0x6, 0x2, 0x1a1, 0xd9, 0x0, 0xfffffff7, 0x5, 0x1000, 0x9, 0x8, 0x9, 0xb06, 0xf, 0x4, 0xfffffffa, 0x2, 0x1ff, 0x9, 0x8, 0x4, 0x8000, 0x2, 0x1, 0x1000, 0x1c27, 0x6, 0x8, 0x756, 0x0, 0x5, 0x7, 0x9, 0x5, 0x0, 0x6, 0xd, 0x80000000, 0x7, 0x9, 0x6, 0x401, 0x5, 0xf4, 0x6, 0xffffffff, 0xfffffffa, 0xfffffff9, 0xffff0000, 0x9, 0x1, 0x4509, 0x0, 0x68, 0x3, 0x4, 0x7fffffff, 0x2, 0x9, 0x80000000, 0x4, 0xfffffffd, 0x200, 0x1000, 0x100, 0x3, 0x0, 0x5, 0x7ad, 0x0, 0x1, 0x7, 0x8, 0x6, 0x2, 0x80, 0x0, 0x9, 0x2, 0x0, 0x7f, 0xf, 0x24ce, 0x1ff, 0x9, 0x3, 0x7ff, 0x0, 0x8001, 0x105dd46f, 0x8, 0x2, 0xff59, 0x5, 0x8, 0xfffffffb, 0x401, 0x0, 0x8, 0x4, 0x70c6, 0x6, 0xfffffffc, 0x5, 0x3, 0x0, 0x7f, 0x1, 0x1, 0xb3cb, 0x8, 0x4000, 0x2, 0xd9, 0x50, 0x7, 0x5f2, 0xeb2, 0x7, 0xc00, 0xa, 0xfffffffd, 0x0, 0x8, 0x800, 0x8, 0x5, 0x100, 0x3, 0x6, 0x16e1, 0x8c, 0xfffffffd, 0x5, 0x8, 0x8001, 0x3, 0x10001, 0x4, 0x7ff, 0x101, 0x9, 0x0, 0x2, 0x6, 0x6, 0x7, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0xfff, 0x9, 0x6, 0x114, 0x4, 0x3, 0x6, 0x8, 0xba, 0x1, 0x3, 0x4, 0x80, 0x3ff, 0x2, 0x7, 0x7, 0x4, 0x4, 0x7, 0x9, 0x6, 0x9, 0xa113, 0x1000, 0x1, 0x9, 0xa3, 0x7, 0x86e, 0x1, 0x6, 0x0, 0x0, 0xe684, 0x8, 0x8a19, 0x8, 0x9, 0x4, 0x5e, 0x5, 0x1, 0x1, 0x9, 0x8e8, 0x8, 0xad62, 0xeb0, 0x64, 0x6b35, 0xfffffc00, 0x2, 0x8, 0xfffffe01, 0x5, 0x1, 0xfffffff9, 0xffffffff, 0x0, 0x8, 0x0, 0x7fffffff, 0x40, 0x2, 0x3, 0x3, 0x46e, 0x9, 0x4, 0x63e, 0x9, 0x1, 0xfffffff8, 0x9, 0x5, 0x34, 0xff, 0x7, 0x8, 0x80000000, 0x84, 0x10, 0x0, 0x8, 0x7e5eec90, 0x4000, 0xc50a, 0x1, 0x4, 0x5, 0x7, 0x1, 0x4, 0x94, 0x3ff, 0x8, 0x10001, 0xe, 0x7, 0x4, 0xa, 0x1000000, 0x8, 0x2, 0x2, 0xd1, 0x9b, 0x80000001, 0x6, 0x9, 0x9, 0xf, 0x5, 0x4, 0x3ff, 0x7, 0x1000, 0x2, 0x8, 0x3ff, 0x80000001, 0x9, 0x9, 0x10000, 0x1, 0x7, 0xe, 0x8, 0x9, 0x2, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0xe, 0x80000000, 0x8000, 0x1000, 0x6, 0x0, 0x0, 0x6, 0x2e, 0x5, 0xeb, 0x6cd, 0x8, 0x2, 0x86b2, 0x6d, 0x40, 0x5, 0x4, 0x7, 0x70000, 0x2, 0x7, 0x80000000, 0x4, 0xfff, 0x7fffffff, 0xcc83, 0x6, 0x2, 0x10, 0xfffffa7b, 0x5, 0x3, 0x2, 0xfffffff7, 0x1, 0xca3, 0x3, 0x2400, 0x5, 0x7f, 0x6, 0x9, 0x7fff, 0x8, 0xfffeffff, 0x9, 0x9, 0x5, 0x81, 0x54b98709, 0x3a6, 0xfffff800, 0xe4, 0x5, 0xc, 0xf8, 0x10, 0x1, 0x0, 0x6, 0x0, 0x8000, 0x401, 0x6ef, 0xd6fb, 0x80000000, 0x0, 0x5, 0x1, 0x7fff, 0x0, 0x1ff, 0xee3e, 0x3, 0x2, 0x0, 0x3, 0x1ff, 0x6, 0x8, 0x71dc, 0x5, 0x80, 0x4, 0x5, 0x80000000, 0x8, 0x81, 0x400, 0xfb, 0x8, 0x7, 0x6, 0x3, 0xffff039f, 0x101, 0x3f9d, 0x5, 0x3, 0x8001, 0x8, 0x4, 0x3, 0xe, 0x4f1, 0x0, 0xc9b, 0x3, 0x1, 0xa29b, 0x3, 0x400, 0x7, 0x1, 0x401]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0xd, 0x0, 0x1, 0x1ff, 0x4, 0x401, 0xffff, 0xca6, 0x10000, 0x9, 0xf5d, 0x2, 0x800, 0x3ff, 0x10000, 0x3, 0x0, 0xee3, 0x4, 0x6, 0x80000000, 0x4, 0x1, 0x48, 0x3, 0x0, 0xae8, 0xcd6, 0xd, 0x4, 0x7, 0x4, 0x1ff, 0x8fe6, 0xc, 0x5, 0xfffffff7, 0x6f8d, 0x0, 0x10000, 0xf3, 0x5, 0x7, 0x328, 0x1, 0x9, 0x6, 0x6, 0x7, 0x7f, 0x6, 0x0, 0x7edfd0f9, 0x1, 0x7ff, 0x4, 0x80000000, 0x1ff, 0x9, 0x7, 0x0, 0xffffffff, 0x2, 0x644a735, 0x9, 0x800, 0xf, 0x6d, 0x6, 0x6, 0x9, 0x8, 0x5, 0x9, 0xff, 0x8, 0x5f, 0xfffff000, 0x800, 0x8, 0xffff, 0x7fff, 0x5, 0x9, 0xe, 0x3, 0x9edc, 0x1, 0x7, 0x1, 0x0, 0x616, 0x5, 0x61e, 0x9000000, 0xfffffffc, 0x8bb, 0x4, 0x8, 0xfffffffb, 0x86, 0x7513, 0xf, 0x9, 0xffff0001, 0x1, 0x8, 0x9, 0x0, 0x5, 0x4, 0x4eb, 0x7, 0x29, 0x9, 0x9, 0x0, 0x6, 0x2, 0x3760, 0x1ff, 0x1, 0x5, 0x0, 0x0, 0x7fff, 0x3, 0x10001, 0x7, 0xc, 0xffffff7f, 0x0, 0x9, 0x7, 0x7, 0x2, 0x0, 0x1, 0x1, 0x7f, 0x2, 0x344, 0x9d6b, 0x6, 0xffffd49b, 0xfffffffd, 0xcd, 0x400, 0x5, 0x1, 0x0, 0x7fff, 0x1, 0x8000, 0x8000, 0x3, 0x2, 0x4, 0x0, 0xfffffc00, 0x0, 0x6a7, 0x401, 0xb, 0x10001, 0x3, 0x8, 0x6, 0x1, 0xa, 0xcd2, 0xf, 0x8, 0x7fff, 0x9, 0xb, 0x1ff, 0x0, 0x2, 0x7, 0x8, 0x0, 0x4, 0x4, 0x9, 0x2, 0x4, 0x3, 0x9, 0x7, 0xe, 0x5, 0x7, 0x5, 0x2, 0x9, 0x401, 0x400000, 0x4, 0x1, 0x5, 0x0, 0x8, 0x3, 0x4, 0x2, 0x400, 0xf53, 0x0, 0x1e1422ad, 0x9, 0x81, 0x7ff, 0x3, 0x9, 0xa4, 0x1, 0x0, 0x6, 0x101, 0x7fff, 0x101, 0x5, 0x80000001, 0x8, 0x9, 0xfffffffa, 0x3ff, 0x81, 0x9, 0x3, 0x380000, 0x723, 0x4, 0x9, 0x7, 0x6, 0xfffffff9, 0x5, 0x6, 0x81, 0x4c528bff, 0x46c, 0x4, 0x9, 0xe0e, 0x62, 0x48000000, 0x0, 0x0, 0x8001, 0x9, 0x2, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x860, 0x2, 0x4, 0xa58, 0x5, 0x0, 0xd689, 0x4, 0x7, 0x0, 0x2, 0x0, 0x20a, 0x8, 0x7, 0x2, 0x3, 0x5a, 0x100, 0x7fff, 0x9, 0x4, 0x6, 0x8, 0xfffffffc, 0x7, 0x1, 0x498, 0x5, 0x8, 0x2, 0xfffffff7, 0x47, 0x5bd, 0x2e2, 0xffffffff, 0x1, 0xa, 0xffff, 0xffff, 0x10000, 0x200, 0x7, 0xa50, 0x3, 0x50, 0xc58d, 0x8, 0x4, 0x2, 0xfffffffb, 0xfb, 0x18, 0x2, 0x0, 0x5, 0x100, 0x1ff, 0x7, 0x7f, 0x80000000, 0xd, 0x2, 0x8, 0x3, 0x8, 0xf, 0x1, 0x23511b63, 0x9, 0x1, 0x0, 0x6, 0x444, 0x2aa3, 0xff, 0x4, 0xd1, 0x5, 0x0, 0x80, 0x34, 0x15, 0x92, 0x80, 0x8, 0x2, 0x8, 0x2, 0xbb, 0x7, 0x3, 0x7, 0x8, 0x40, 0xfffffffb, 0xc1a8, 0x5, 0x0, 0x80000001, 0x3, 0x80000001, 0x8, 0x2e, 0x7, 0x97, 0xffffff80, 0x86e3, 0x80000000, 0x8001, 0xfffffffc, 0x1, 0x5, 0x7fff, 0xfb4d, 0x1, 0x7, 0xffffff5f, 0x0, 0x3, 0x3, 0x9, 0x80000001, 0x1, 0xf5, 0x9da, 0x7ff, 0x66e, 0x1, 0x7, 0x0, 0x7, 0x10000, 0x7, 0xb72f, 0x8, 0x9, 0x2, 0x4000000, 0xe11f, 0x4, 0xffffffff, 0x302, 0x6575344f, 0x3, 0x8, 0x2, 0x5, 0x7, 0x9, 0x7, 0x9, 0xfffffff9, 0x3, 0x6, 0x3ff, 0xffffecc7, 0x8, 0x7fff, 0x2, 0x0, 0xfffffe00, 0xeb, 0x7, 0x7f, 0x7fff, 0x0, 0x7, 0x9, 0x0, 0xd, 0x0, 0x7, 0x9, 0xb, 0x9, 0x17, 0x6, 0x8, 0x4, 0x6, 0x60, 0x5, 0x6, 0x60, 0xa310, 0xd, 0x80000001, 0x4b, 0x9, 0x9, 0x4, 0x400, 0x1d4000, 0x19a, 0x2, 0x1, 0xc7e, 0x5, 0x5b09, 0xc8, 0x40, 0x0, 0xffffff2f, 0x3, 0x7, 0x46a, 0xb, 0x1, 0x81, 0xb, 0x6, 0x400, 0x7fffffff, 0x8, 0x7fff, 0x400, 0x4, 0x1, 0x92, 0xfa, 0x9, 0x0, 0xf, 0x3, 0x7fff, 0x10000, 0x10, 0xd, 0x55acfd18, 0x6, 0x4, 0x7, 0x5, 0x101, 0x9, 0xfff, 0x101, 0x0, 0x0, 0x81, 0xb6, 0x9, 0x3, 0x7, 0x9, 0x5, 0x2, 0xffffffff, 0x1, 0x3, 0x7, 0x6, 0x9, 0x57a4544b]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb921}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x5, 0x4}, {0x9, 0x1}, 0x88, 0xd, 0x2}}, @TCA_RSVP_POLICE={0x106c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xc6, 0x80000001, 0x4, 0xa, 0x8, 0x8, 0x6, 0x7fffffff, 0xfffff001, 0xf, 0x6, 0x7ff, 0x0, 0x6, 0xce, 0xb, 0x4, 0x2, 0x3, 0x4, 0x6f3, 0x0, 0xc51, 0x6dd8, 0xa, 0xa0, 0x3, 0x4, 0x0, 0xe0000, 0x0, 0x2, 0x2, 0xff, 0x16da, 0x1, 0x18c, 0x4, 0x2, 0x0, 0x3, 0x2, 0x6, 0x5, 0x5, 0x67, 0x2, 0x5, 0x5, 0x8, 0x1, 0x8, 0x0, 0x0, 0xaf7, 0x0, 0x1ff, 0xfffffffe, 0x8, 0x7, 0xec, 0x40, 0x62d, 0x3, 0xb1d, 0xb2, 0x60, 0xfffffffe, 0x3, 0xfffffffd, 0xaaf0, 0x4, 0x5, 0x7, 0x2, 0x2, 0x3, 0x1, 0xf, 0x4, 0x2f, 0x2, 0x7, 0x0, 0x3, 0x828, 0x2, 0x7fff, 0x3, 0x7, 0x65, 0xff, 0xbf, 0x46fe, 0x2, 0x0, 0x1, 0x10, 0x3e, 0x41c, 0x10001, 0xfff, 0x4, 0x80000000, 0x2e929ea5, 0x8, 0x0, 0x8, 0x7feeba8d, 0x81, 0x9, 0xe6e, 0x6, 0x3, 0xe, 0x6, 0x1, 0x97d, 0xd2a, 0x5, 0x8, 0x2, 0x3, 0x800, 0xffffe9db, 0x0, 0x4, 0x81, 0x6, 0x2, 0xfffffffd, 0x0, 0x6, 0xae5, 0x64, 0x9, 0x80000001, 0x8, 0x1ce, 0x9, 0x180, 0x2, 0x8, 0x8c, 0x4, 0x9, 0x45b, 0x7, 0x7, 0x8, 0x400, 0x9, 0x6249, 0x2, 0x40, 0x0, 0x6, 0x9, 0x101, 0xfffffff7, 0x1, 0x5686, 0x3, 0x6, 0x9, 0x1, 0x5, 0x5, 0x7, 0x8020000, 0x4, 0xfffffff7, 0x3, 0x6, 0xfffffff7, 0xd0d, 0x7, 0x1, 0x2, 0x80, 0x1cb9, 0x6, 0x0, 0x1000, 0x9, 0x7ff, 0x82, 0x2, 0x9, 0x800, 0x2, 0x9, 0x8419, 0x8, 0x5, 0x4000, 0x5, 0x7, 0x5, 0x1, 0xd, 0x101, 0x800, 0xfffffff9, 0x101, 0x3, 0xa04a, 0x6f0fecb7, 0x9972, 0x8, 0x3, 0x689905cb, 0x5, 0x0, 0x958, 0xb, 0x0, 0x4, 0x0, 0x7, 0x5, 0x0, 0x8, 0x5, 0x101, 0x5, 0x1, 0x5, 0x7, 0x10000, 0x8, 0xffff, 0x8, 0x8000, 0x7, 0xc, 0x1, 0xfffffff3, 0x2, 0x9, 0x8, 0x6, 0x5, 0x4, 0x5, 0xd7c, 0x7, 0x3, 0x9, 0x7, 0x64c1d348, 0x6c2, 0x4, 0x3, 0x4, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x3c6, 0x5, 0x9, 0x401, 0x9, 0xa1, 0x4, 0x7, 0x0, 0x3, 0xe, 0x4, 0x8001, 0x1000000, 0xf78, 0x2, 0x15fd, 0x9, 0x8, 0x2, 0x98, 0x10000, 0x5301d441, 0x3, 0x0, 0x2, 0x7, 0x6, 0x4, 0x5, 0x6, 0x7, 0x7, 0x80000001, 0x6, 0xfffffff9, 0x4, 0xe89, 0x6, 0x9, 0x10001, 0x1, 0x8, 0x2, 0xb, 0x200, 0x3, 0x6, 0x0, 0x100, 0x800, 0x0, 0x4000000, 0x2, 0x8, 0x8048, 0x9, 0x1, 0xfffffffd, 0xfffffff8, 0x1800, 0x10, 0x9, 0x80000000, 0x5, 0x3ff, 0x0, 0x1, 0x6, 0x3, 0xa, 0xbf6, 0x2, 0x2, 0x4, 0x3, 0x7, 0x4, 0x401, 0xfffff001, 0xfffffffd, 0x27, 0x8, 0xa, 0x1, 0x6ad, 0x2, 0xfffffff9, 0x8, 0x9, 0x800, 0x5, 0x3, 0x9, 0x4, 0xffff80a3, 0x5, 0x19, 0x4, 0xff8, 0x9, 0x4, 0x1, 0x2a, 0x1, 0x3, 0x1, 0x9, 0xa1, 0x6, 0xd09, 0x3, 0x1, 0x9, 0xbef, 0x5, 0x8, 0x2, 0x0, 0x70, 0x6, 0x2, 0x9, 0x5, 0x8, 0xcab9, 0x4, 0x9, 0x1, 0xfffffff8, 0x6, 0x4, 0x6, 0x1, 0x71, 0x4, 0x80000000, 0x1, 0x200, 0x93b, 0x100, 0x3, 0xeae8, 0x11, 0x3, 0x7ff, 0x9, 0xffffffff, 0xfffffffc, 0x6, 0x10000, 0x6, 0x9, 0x10, 0x1488, 0xff, 0x5, 0x100, 0x0, 0x7, 0x7, 0xd, 0xfffffffb, 0x4, 0xfff, 0x4, 0x81, 0x9, 0x4, 0x80000000, 0x1, 0x6, 0x1ff, 0x254, 0x4, 0x5, 0x5, 0x9, 0x3, 0xe, 0xb, 0x0, 0x28000, 0x9, 0x400, 0x8, 0x0, 0x7, 0x4, 0x1, 0x14000, 0x2, 0x820102c8, 0x8000, 0x0, 0x8, 0xffff7096, 0x2, 0xf4000000, 0xfffffff7, 0x9, 0x0, 0x40, 0x0, 0x400, 0x1, 0x70a, 0x9, 0xeee, 0x789, 0x6, 0xd, 0x3, 0xa5c, 0x800, 0x5, 0xfffffffa, 0x81, 0xc, 0x2, 0x5, 0x6d4, 0x1, 0x9, 0x9, 0x9, 0x6, 0x40, 0x800, 0x5, 0x5, 0x400, 0x8, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x9, 0x1, 0xa, 0x2958, 0x2, 0x2, 0xbd, 0xaea5, 0xc8b, 0x1ff, 0x3ae4]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x4, 0x8, 0x1, 0xd, 0x0, 0x4, 0x5dd, 0x5, 0x16e, 0xfffffff7, 0x87, 0x3, 0x1, 0x5, 0x7, 0x1, 0x7ec, 0x7c, 0x80000001, 0x6, 0xfffffff9, 0xd, 0x5, 0x3, 0x10001, 0x1, 0xfff, 0x3, 0x7f, 0x82, 0x1000, 0x81, 0x1, 0x91, 0x7, 0xfffffc00, 0x0, 0x7, 0xb3, 0x4, 0x7, 0x1000, 0x1, 0x3, 0x1, 0x44, 0x7, 0xfffffffc, 0x9, 0x8, 0x7ff, 0x2f, 0x7, 0xba76, 0xf1b, 0x1, 0xa342, 0x959, 0xb30c, 0x9, 0x43, 0x8001, 0x7, 0x3, 0x8001, 0xa42, 0x1ff, 0x0, 0x7, 0x8001, 0x5, 0xe605, 0x471c, 0x7ff, 0x2c3, 0x5, 0x8, 0x0, 0x80000000, 0x7fffffff, 0x2, 0x1, 0x3, 0x1, 0x2, 0x4, 0x965, 0x9, 0xa, 0x10000, 0x2, 0x1, 0x80000001, 0x9, 0x10000, 0xad1, 0xc, 0x4, 0x8001, 0x6, 0x1a3, 0x8e, 0x46a2ef32, 0x2fb, 0xd, 0x9, 0x800, 0x3, 0x8, 0x6, 0xb5b9, 0x401, 0x100, 0xc, 0x2, 0x7, 0x8001, 0x6, 0x1, 0xe2, 0x0, 0x3, 0x2, 0x0, 0x8, 0x0, 0x3, 0x5, 0x4, 0x1804, 0x0, 0x2800, 0x6, 0xfffffff7, 0x16, 0x5, 0x200, 0x6, 0x7, 0x6, 0xff, 0xa6, 0x3c2, 0x3, 0x3, 0xa, 0xf30, 0xf, 0x5, 0xce, 0xa, 0x1ff, 0x1, 0x3, 0x9, 0x8, 0x3, 0xf4, 0x2, 0x0, 0xf, 0xe000, 0x1, 0xb3, 0x9, 0x2, 0x0, 0x16c, 0x1000, 0x9aa8, 0x8, 0x142, 0x4, 0x7, 0x8, 0x0, 0x7f, 0x0, 0xfffffff7, 0x0, 0x6, 0x7, 0x6, 0x401, 0x0, 0x6, 0x9, 0x0, 0x59, 0x10, 0x6, 0x7fff, 0x0, 0x4, 0x9, 0x1fb, 0xb, 0x4, 0x1, 0x2, 0x4, 0x3, 0xc3, 0x7, 0xfffffeff, 0x200, 0x0, 0x2, 0x1, 0x4, 0x1ff, 0xa31c, 0x3, 0x4, 0x8, 0x1f0, 0xe, 0xfff, 0x3, 0x4000, 0x0, 0x8, 0x6, 0x3, 0xb8, 0xfffffc01, 0x5, 0x5, 0x7, 0x7, 0xffff, 0x10, 0x0, 0xfffffff7, 0x1, 0x2, 0x10, 0x8, 0x1, 0x200, 0x8d6, 0x5, 0x2, 0xb81, 0x8, 0x8, 0x1, 0x7, 0x5, 0x5, 0x8, 0xfffff2a5, 0x9, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x8, 0xa9d, 0x0, 0xbe, 0x1, 0x1, 0x2, 0x8, 0xa, 0x7f, 0xd, 0x6, 0x0, 0x4a76, 0x5, 0xffffffff, 0x2, 0x8, 0x9c, 0x9, 0xc019, 0x43, 0x400, 0x5, 0x10, 0x9, 0x1, 0x100, 0x7, 0xf153, 0x6, 0x6, 0x4b0, 0x1, 0x1568c287, 0x9, 0x13941d9e, 0x15, 0xdd, 0xba9, 0x2, 0x1, 0x5, 0x8331, 0xfffffff8, 0x3, 0x6, 0x8, 0x3, 0x38, 0x0, 0x4, 0x4, 0x924, 0xd, 0x4, 0x40000, 0x1, 0x8, 0x40, 0x0, 0x381f, 0x7, 0x81, 0x401, 0x4, 0x2, 0x40, 0x3, 0x9, 0x8, 0x112, 0x62, 0x2, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x8, 0x1400, 0x7, 0x2, 0x3, 0x6, 0x5, 0x6, 0x6, 0x2, 0xff, 0x6, 0x7, 0x3ff, 0x35bc1bb7, 0xffff, 0x0, 0x1, 0x72, 0x100, 0xf361, 0xc, 0x41a, 0x7, 0xb9b, 0x5, 0x3, 0x2, 0x42, 0x2, 0x200, 0x3, 0x51, 0x3, 0x80000001, 0x7fff, 0x7f, 0x7, 0xf, 0x4, 0x6, 0x3, 0x7, 0x4, 0x8fe7, 0x9, 0x37b0000, 0x4, 0x2a, 0xfffffff9, 0x3, 0xbe2, 0x80, 0x8, 0x0, 0x3, 0x5, 0x6b3, 0xfffffffc, 0x32f6, 0x7, 0xfffff001, 0x5, 0x37, 0x6, 0xce, 0x3ff, 0x7, 0x881b, 0x1000, 0x10000, 0x7, 0x2, 0x7, 0x5, 0x3b4, 0x28, 0xc, 0x7f, 0x742a, 0x20, 0x80000000, 0x5, 0xffff2939, 0x7, 0x7fffffff, 0x100, 0x3, 0x8, 0x7, 0x7, 0x1, 0xf0b0, 0x8, 0x7, 0x8, 0xb, 0x61d, 0x54e, 0x9, 0x5, 0xf057, 0x0, 0x80000001, 0x6, 0x4, 0x2, 0xb, 0x7, 0x8, 0x0, 0x3, 0x8, 0x9, 0x2, 0xfffffc00, 0x800, 0x2a8, 0x7fff, 0x1000, 0x6, 0x797e34ad, 0x72, 0x2, 0xf48, 0x8, 0x0, 0x6, 0x1000, 0x3, 0x10000, 0x6, 0x3, 0x1000, 0x8000800, 0x5, 0xd, 0x5, 0x4, 0x8144, 0x8, 0x6, 0x10000, 0x0, 0x8, 0x1, 0x81, 0xc7, 0x5, 0x72, 0x2, 0xac55, 0xba, 0x4, 0x3, 0x10000, 0xfc99, 0x5, 0x7, 0xf6a, 0x78, 0xf, 0x7, 0x0, 0x9, 0xb, 0x9, 0x9, 0x8000, 0x7fffffff, 0x5, 0xfffffff8, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x7, 0x4, 0x9, {0x22, 0x2, 0x6, 0xe, 0xc87, 0x3}, {0x5, 0x1, 0x2, 0x1, 0x5, 0x10}, 0x8001, 0x6, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x269}]}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x5235c4ec92a74202}}]}}, @f_rsvp6={{0xa}, {0x9c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x81, 0x2, 0x9}, {0x6, 0x35ea, 0x1000}, 0x32, 0xd1, 0xfc}}, @TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_DST={0x14, 0x2, @private1}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00'}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0xfff2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x401, 0x101}, {0x8, 0x2, 0x80}, 0x29, 0xea, 0x1}}]}}]}, 0x2e3c}}, 0x2000800) socket$netlink(0x10, 0x3, 0x8) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 739.530531ms ago: executing program 5 (id=2919): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f0000000180)='ecb-serpent-avx\x00', 0x2000, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x4]}, {0x9, 0x2, 0x6ac, 0xa3}}, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x1000}, 0x2, &(0x7f0000000640)=[{0x3, 0x101, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="83dbfbc6ecac5b6f019e0f7700dd9e57a9a5a58aebccfcd0cc3a828841cca4ffbe23f66c15141d", 0x27, 0x10}, {0x3, 0x755, &(0x7f0000000540)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000580)="c32861777e2a9c2dee0e62a0c9be9f7be75c16d63f5fe50f084a6e9e8ffe5e73b978e768cb3b4beabb12728ef3fcd2f4fd3bf5322c71e47332db1e5e76527a68b22059e54f4ab2d27357d5885c6e2cddd3a734a2bac0cea9f4eb6c143306506bf7d8755e422fec1e5b7178a5a78c7259ded0896d80588097a96b12bea30e1564c7c29e101bf8c8f8ce5baf9e7eb3434894d916ea0c0aab7deda7631a38a68c11d01e", 0xa2, 0xa}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x1f) sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x7, 0x4, 0x101, 0x80, 0x9, 0x2, 0x8}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6, 0x200, 0x3b, 0x100, 0xa12b, 0x4, 0x8243}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x407, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 691.69439ms ago: executing program 4 (id=2920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x147}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x14515f53}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xfc}}, 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 603.732656ms ago: executing program 4 (id=2921): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000026bd4675cc8ba8e9d79bee3889cf80e23242c5aaf54cfb69599b84788bc130b7805e077c1669b643a145c00035bef3d93f3945be1fe5d6a52ee1000000001d00"/100, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r5, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r6}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x4, 0xff, 0x8002, 0x3, 0x80, 0xffffffff, 0x5, 0x80000001, r5}, &(0x7f00000000c0)=0x20) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)="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", 0x102}, {&(0x7f0000000580)="ea67e29b70f495", 0x7}, {&(0x7f0000000980)="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", 0xff}, {&(0x7f0000000640)="584d60b8ecebec7d90921286c848832486eb7d4f7883798dc514d3bdd203c6df9f3ed44acce28fc9c94fd2b4e1e1974b9f83ec319adbd5a2628c1d63869e677a981168f655c60ecbecf7c7426143e3fca120603743d6aa4cbb08", 0x5a}, {&(0x7f00000004c0)="22bb27f4b954476c1059d0a82f1bbc272cc1a0157a7fb8413300620a48aee64e51536dcb2101143cf86fecfdd708e0bcae99e77dfbb95c91ef88e8da0d4b911f91a34de5ad9acb7e5009ce56d1935fd08bbfeec2525dc2474c67076dd18917da550da17a655dd4129100811e64f45530c2", 0x71}], 0x5}, 0x0) 520.533525ms ago: executing program 5 (id=2922): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001130500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe8000000000000000000000000000311400040020010000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(r0) 454.512316ms ago: executing program 5 (id=2923): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540)={r2, 0x2}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x6}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x309) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, 0xff7f}}, 0x20}}, 0x0) 429.508233ms ago: executing program 6 (id=2924): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="440000002c00010000000000fcdbdf253400f2800c0027"], 0x44}], 0x1, 0x0, 0x0, 0x804}, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdfe0000010200010008000600fe7f000008000e0000000000b1f2c75eb8fd115cfee9e8244e69eab20a31a3d9bfe22d69f815015d0b65"], 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010429bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001190051690400240012800b00010067656e657665000014000280080001000100000005000c00000000001400030067656e65766531"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000000) 331.903421ms ago: executing program 4 (id=2925): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000340)=""/211, 0xd3}, {0x0}, {&(0x7f0000001b80)=""/16, 0x10}, {&(0x7f0000001bc0)=""/93, 0x5d}], 0x6, &(0x7f0000001cc0)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/102, 0x66}], 0x2, &(0x7f0000003d80)=""/199, 0xc7}, 0x87f3}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003e80)=""/136, 0x88}, {&(0x7f0000003f40)=""/31, 0x1f}, {&(0x7f0000003f80)=""/35, 0x23}, {&(0x7f0000003fc0)=""/178, 0xb2}], 0x4}, 0xfffffff8}], 0x3, 0x40000021, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 256.032099ms ago: executing program 6 (id=2926): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'netpci0\x00', 'vcan0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @multicast2, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x1160, 0x1188, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x2, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@string={{0xc0}, {0x4a, 0xfff, 'fsm\x00', "bb306f1a10bd0ba5fc36156ddf3c07659aa78b676a6d24da2c2e72ebc70f03e8fc2a67ed8594a958e8857370ea75ec62940b08c939231d5f7b091abb9155d934d0c3647ab48351a4419075c76b38a28c62d4f8479aea58be8d5f986f780cffb042d909156e4389330510cf49bcfc2aa48d8c9406a773b7d93b72967ae6d1caa9", 0x31, 0x1, {0x8}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000030101c2"], 0x38}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000007000000b70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) close(0x4) 0s ago: executing program 4 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0xfffffffffffffc9c, 0x8, 0x1ab7c}, @TCA_FLOWER_KEY_IP_TOS_MASK]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) kernel console output (not intermixed with test programs): tlink: 44 bytes leftover after parsing attributes in process `syz.1.1531'. [ 464.532618][T12073] syzkaller1: entered promiscuous mode [ 464.561906][T12073] syzkaller1: entered allmulticast mode [ 464.711583][T12075] bridge0: port 1(batadv1) entered blocking state [ 464.744014][T12075] bridge0: port 1(batadv1) entered disabled state [ 464.760373][T12075] batadv1: entered allmulticast mode [ 464.776645][T12075] batadv1: entered promiscuous mode [ 464.986687][T12080] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 465.142370][ T9076] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 465.160705][ T9076] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 465.170513][T12095] netlink: 'syz.2.1534': attribute type 49 has an invalid length. [ 465.400536][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.715039][T12113] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1539'. [ 465.967537][T12117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.974896][T12117] IPv6: NLM_F_CREATE should be set when creating new route [ 466.067248][T12103] xfrm0 speed is unknown, defaulting to 1000 [ 466.414501][T12115] xt_CT: No such helper "syz0" [ 466.593457][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.741631][ T1029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.023407][T12103] lo speed is unknown, defaulting to 1000 [ 468.407197][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 468.957642][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1553'. [ 469.044940][T12175] netlink: 'syz.2.1556': attribute type 1 has an invalid length. [ 469.056399][T12175] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1556'. [ 470.212871][T12199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1563'. [ 470.404546][T12202] netlink: 'syz.2.1562': attribute type 30 has an invalid length. [ 470.441131][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1562'. [ 470.487405][T12204] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1564'. [ 470.742007][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 470.870370][T12202] bond11: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 470.948704][T12202] bond11 (unregistering): Released all slaves [ 471.047721][T12210] batman_adv: batadv0: Adding interface: vlan3 [ 471.072288][T12210] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.166598][T12210] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 471.676086][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1573'. [ 471.694106][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 471.730722][T12232] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1573'. [ 471.762284][T12232] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1573'. [ 471.797103][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1573'. [ 471.826706][T12237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.865396][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 472.294726][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 472.335690][T12247] gtp0: entered allmulticast mode [ 472.770504][T12254] block nbd2: server does not support multiple connections per device. [ 472.817071][T12254] block nbd2: shutting down sockets [ 472.872881][T12249] syzkaller0: entered promiscuous mode [ 472.901949][T12249] syzkaller0: entered allmulticast mode [ 472.919219][T12273] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 473.090760][T12273] block nbd2: server does not support multiple connections per device. [ 473.125522][T12273] block nbd2: shutting down sockets [ 473.241789][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 473.310373][T12283] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1585'. [ 476.558936][T12305] netlink: 'syz.2.1588': attribute type 1 has an invalid length. [ 476.666974][T12312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 476.804991][T12323] x_tables: duplicate underflow at hook 1 [ 477.177907][T12338] __nla_validate_parse: 4 callbacks suppressed [ 477.177928][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 477.243929][T12338] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.269790][T12343] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 477.797624][T12366] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 477.797624][T12366] Please contact the netfilter-devel mailing list or update your nftables rules. [ 477.948429][T12361] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1602'. [ 477.991229][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 478.395097][T12388] netlink: 'syz.3.1609': attribute type 1 has an invalid length. [ 478.433637][T12388] bond7: entered promiscuous mode [ 478.440078][T12388] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.484792][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1609'. [ 478.495574][T12388] bond7: entered allmulticast mode [ 478.589362][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1607'. [ 478.640616][T12388] bond7: (slave bridge7): making interface the new active one [ 478.651691][T12388] bridge7: entered promiscuous mode [ 478.657220][T12388] bridge7: entered allmulticast mode [ 478.670880][T12388] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 478.922154][T12399] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 478.951785][T12399] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1613'. [ 479.133248][T12413] syzkaller0: entered promiscuous mode [ 479.159358][T12413] syzkaller0: entered allmulticast mode [ 480.161144][T12440] netlink: 'syz.4.1619': attribute type 11 has an invalid length. [ 480.291443][T12432] netlink: 'syz.4.1619': attribute type 11 has an invalid length. [ 480.555435][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 480.648616][T12454] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 480.692978][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.700287][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.723423][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 481.874983][T12503] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 481.915909][T12499] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 481.930720][T12499] bond9 (unregistering): Released all slaves [ 482.253314][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 482.456172][T12518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1639'. [ 482.771938][T12524] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1642'. [ 482.976176][T12528] netlink: 'syz.1.1643': attribute type 10 has an invalid length. [ 483.020487][T12528] team0: left promiscuous mode [ 483.035202][T12528] team_slave_1: left promiscuous mode [ 483.060032][T12528] team0: left allmulticast mode [ 483.081409][T12528] team_slave_1: left allmulticast mode [ 483.116475][T12528] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.156478][T12528] bond0: (slave team0): Enslaving as an active interface with an up link [ 483.251450][T12540] sctp: [Deprecated]: syz.3.1645 (pid 12540) Use of int in maxseg socket option. [ 483.251450][T12540] Use struct sctp_assoc_value instead [ 483.553851][T12545] syzkaller0: entered promiscuous mode [ 483.570071][T12545] syzkaller0: entered allmulticast mode [ 483.596722][T12545] tipc: Enabled bearer , priority 0 [ 483.730567][T12549] tipc: Resetting bearer [ 483.752614][T12550] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1647'. [ 483.785223][T12544] tipc: Resetting bearer [ 484.033526][T12544] tipc: Disabling bearer [ 484.042815][T12552] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 484.524142][T12563] bridge6: entered allmulticast mode [ 484.675224][T12577] netlink: 'syz.0.1653': attribute type 2 has an invalid length. [ 484.706907][T12577] netlink: 'syz.0.1653': attribute type 2 has an invalid length. [ 484.740036][T12577] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1653'. [ 484.773346][T12577] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 485.158846][T12588] sctp: [Deprecated]: syz.4.1656 (pid 12588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.158846][T12588] Use struct sctp_sack_info instead [ 485.939027][T12609] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1661'. [ 486.068938][T12614] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 486.270435][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.458019][T12622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1665'. [ 488.000018][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 488.039828][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 488.095008][T12648] tipc: Can't bind to reserved service type 0 [ 488.332156][T12661] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 488.372895][T12661] netlink: 'syz.0.1677': attribute type 2 has an invalid length. [ 488.387835][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1674'. [ 488.448108][T12667] netlink: 'syz.1.1678': attribute type 4 has an invalid length. [ 488.928875][T12678] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1681'. [ 488.955115][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'. [ 488.996439][T12678] bond0 (unregistering): Released all slaves [ 489.327883][T12688] Bluetooth: MGMT ver 1.23 [ 490.068430][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 490.088603][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 490.298934][T12713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1689'. [ 490.864368][T12740] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1697'. [ 490.875203][T12739] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1697'. [ 490.924959][ T24] bridge0: entered promiscuous mode [ 492.025204][ T4937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.049308][ T4937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.074831][ T4937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.112308][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.122110][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.684775][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.694647][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.705524][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.718895][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.729472][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.436167][T12794] bond0: option min_links: invalid value (18446744073709551612) [ 493.446486][T12794] bond0: option min_links: allowed values 0 - 2147483647 [ 493.468426][T12794] bond0 (unregistering): Released all slaves [ 494.114394][T12812] __nla_validate_parse: 3 callbacks suppressed [ 494.114453][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 494.175502][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 494.230615][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 494.690603][T12827] syzkaller0: entered promiscuous mode [ 494.718001][T12827] syzkaller0: entered allmulticast mode [ 494.751849][ T5629] Bluetooth: hci5: command tx timeout [ 494.817583][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 494.921098][T12774] xfrm0 speed is unknown, defaulting to 1000 [ 495.550404][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 495.579557][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 496.847635][ T5629] Bluetooth: hci5: command tx timeout [ 498.761496][T12852] syzkaller0: entered promiscuous mode [ 498.767072][T12852] syzkaller0: entered allmulticast mode [ 498.820242][T12774] lo speed is unknown, defaulting to 1000 [ 498.909756][ T5629] Bluetooth: hci5: command tx timeout [ 499.391281][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 500.094787][T12911] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 500.343109][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 500.561965][T12917] fb: renamed from bridge0 (while UP) [ 500.729263][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.751450][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.780455][T12774] bridge_slave_0: entered allmulticast mode [ 500.807648][T12774] bridge_slave_0: entered promiscuous mode [ 500.871223][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.899706][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.924011][T12774] bridge_slave_1: entered allmulticast mode [ 500.960387][T12774] bridge_slave_1: entered promiscuous mode [ 500.989713][ T5629] Bluetooth: hci5: command tx timeout [ 501.050132][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 501.131423][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.204583][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.418237][T12774] team0: Port device team_slave_0 added [ 501.442225][T12774] team0: Port device team_slave_1 added [ 501.568274][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.595453][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.646828][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.659828][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.725613][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.733407][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.761899][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.797492][T12951] ip6gre1: entered promiscuous mode [ 501.803028][T12951] ip6gre1: entered allmulticast mode [ 501.811919][ T260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.822651][T12953] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 501.832233][T12955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.845641][ T260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.856479][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.918713][T12949] smc: removing ib device syz0 [ 502.014309][T12949] smbdirect: ib_dev[syz0] removed [ 502.095261][T12961] block nbd3: Unsupported socket: should be TCP or UNIX. [ 502.141626][T12953] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.239831][T12954] bond4: (slave veth0_to_bond): Releasing backup interface [ 502.303756][T12954] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 502.314701][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.378803][T12957] macvlan3: entered promiscuous mode [ 502.384877][T12957] macvlan3: entered allmulticast mode [ 502.391552][T12957] bond7: entered promiscuous mode [ 502.396975][T12957] veth0_to_bond: entered promiscuous mode [ 502.404138][T12957] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 502.413755][T12957] bond7: left promiscuous mode [ 502.418725][T12957] veth0_to_bond: left promiscuous mode [ 502.590252][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.003685][T12774] hsr_slave_0: entered promiscuous mode [ 503.018509][T12774] hsr_slave_1: entered promiscuous mode [ 503.278158][T12979] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1751'. [ 503.429014][T12979] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.437397][T12979] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.744047][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 503.985556][T12992] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 504.026914][T12992] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1754'. [ 504.088325][T12992] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 504.435763][T13001] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1756'. [ 504.702311][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1757'. [ 504.900258][T13004] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1758'. [ 504.954572][T13004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'. [ 505.709897][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 505.877273][T13028] syzkaller0: entered promiscuous mode [ 505.911454][T13028] syzkaller0: entered allmulticast mode [ 506.981858][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 509.428841][T13032] syzkaller1: entered promiscuous mode [ 509.434555][T13032] syzkaller1: entered allmulticast mode [ 509.558295][T12774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 509.593154][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.716328][T12774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 509.775225][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.832694][T12774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 509.882666][T13053] netlink: 524 bytes leftover after parsing attributes in process `syz.3.1765'. [ 509.890134][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.945648][T12774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 510.711558][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.751640][T13067] veth1_to_hsr: entered promiscuous mode [ 510.773687][T13067] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1770'. [ 510.804450][T13067] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 510.947834][T13077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.145101][T13086] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 511.178562][T13084] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 511.203842][T13094] Cannot find add_set index 0 as target [ 511.518496][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.637114][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.723882][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.731219][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.848536][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.856815][ T260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.974254][T13110] syzkaller0: entered promiscuous mode [ 511.981211][T13110] syzkaller0: entered allmulticast mode [ 512.072706][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 512.212872][T13115] ip6erspan1: entered allmulticast mode [ 512.602947][T13129] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1785'. [ 512.664563][T13129] 0·: renamed from hsr0 (while UP) [ 512.724573][T13129] 0·: entered allmulticast mode [ 512.744274][T13129] hsr_slave_0: entered allmulticast mode [ 512.781737][T13129] hsr_slave_1: entered allmulticast mode [ 512.803459][T13129] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 513.149888][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.267989][T13153] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1790'. [ 513.443197][T12560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.487511][T12560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.376460][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1799'. [ 514.553189][T13202] lo speed is unknown, defaulting to 1000 [ 515.266687][T13233] --map-set only usable from mangle table [ 515.413346][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.580859][T13240] bond4: entered promiscuous mode [ 515.600044][T13240] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.753315][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1811'. [ 516.541807][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 516.556499][T12774] veth0_vlan: entered promiscuous mode [ 517.069308][T13289] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1819'. [ 517.100712][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 517.118007][T13289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1819'. [ 517.188645][T12774] veth1_vlan: entered promiscuous mode [ 517.190370][T13289] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 517.747450][T13315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1821'. [ 517.846119][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1821'. [ 517.885077][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 517.934127][T13296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.279259][T12557] netdevsim netdevsim1 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.299308][T12557] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.330606][T12557] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.362212][T12557] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.544331][T13322] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1823'. [ 518.580267][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 518.598962][T13325] netlink: 'syz.0.1824': attribute type 19 has an invalid length. [ 518.617759][T13325] netlink: 'syz.0.1824': attribute type 20 has an invalid length. [ 518.857640][T13322] vlan5: entered allmulticast mode [ 518.863168][T13322] gretap0: entered allmulticast mode [ 518.953866][ T260] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.014239][ T260] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.049068][ T260] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.087430][T12774] veth0_macvtap: entered promiscuous mode [ 519.167098][T12774] veth1_macvtap: entered promiscuous mode [ 519.226778][T13341] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 519.277005][T13339] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 519.298477][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.308264][T13339] netlink: 'syz.3.1828': attribute type 4 has an invalid length. [ 519.336493][T13341] netlink: 'syz.3.1828': attribute type 4 has an invalid length. [ 519.352796][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.500783][ T6175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.517499][ T6175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.559705][ T6175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.646609][ T6175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.821685][T13356] siw: device registration error -23 [ 520.062093][T13360] netlink: 'syz.0.1833': attribute type 1 has an invalid length. [ 520.379824][T13368] ipvlan2: entered allmulticast mode [ 520.390268][T13368] bond8: entered allmulticast mode [ 520.568136][T13371] bond8: (slave bridge0): making interface the new active one [ 520.607293][T13371] bridge0: entered allmulticast mode [ 520.645567][T13371] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 521.061274][T13375] syzkaller0: entered promiscuous mode [ 521.068123][T13375] syzkaller0: entered allmulticast mode [ 521.082734][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.095001][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.378475][T13385] lo speed is unknown, defaulting to 1000 [ 524.435266][T13393] syzkaller0: entered promiscuous mode [ 524.442792][T13393] syzkaller0: entered allmulticast mode [ 524.566336][ T9082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.575833][ T9082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.622232][T13399] __nla_validate_parse: 4 callbacks suppressed [ 524.622280][T13399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1839'. [ 526.993523][T13469] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1855'. [ 527.034350][T13469] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 527.560688][T13490] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1860'. [ 527.895037][T13505] netlink: 'syz.5.1863': attribute type 1 has an invalid length. [ 527.927251][T13505] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1863'. [ 528.276642][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 528.301829][T13522] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1867'. [ 528.311500][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 528.345664][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 528.378070][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 528.412615][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 528.509799][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.747489][T13528] syzkaller0: entered promiscuous mode [ 528.777369][T13528] syzkaller0: entered allmulticast mode [ 528.986657][T13535] netlink: 'syz.4.1871': attribute type 5 has an invalid length. [ 529.205512][T13547] netlink: 'syz.5.1875': attribute type 1 has an invalid length. [ 530.103002][T13571] syzkaller0: entered promiscuous mode [ 530.110014][T13571] syzkaller0: entered allmulticast mode [ 530.331315][T13573] bond4: (slave lo): Releasing backup interface [ 530.346339][T13573] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 530.479085][T13573] bridge_slave_0: left promiscuous mode [ 530.516663][T13573] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.557792][T13573] bridge_slave_1: left promiscuous mode [ 530.594576][T13573] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.643814][T13573] bond0: (slave bond_slave_0): Releasing backup interface [ 530.672604][T13573] bond0: (slave bond_slave_1): Releasing backup interface [ 530.747101][T13573] team0: Port device team_slave_0 removed [ 530.793671][T13573] team0: Port device team_slave_1 removed [ 530.823819][T13573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.832630][T13573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.854973][T13573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.864464][T13573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.956463][T13573] bond3: (slave gretap1): Releasing active interface [ 531.027780][T13587] batadv0: entered promiscuous mode [ 531.041331][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.042305][T13587] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 531.431452][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.738329][T13621] netlink: 'syz.3.1895': attribute type 4 has an invalid length. [ 531.795049][T13621] __nla_validate_parse: 62 callbacks suppressed [ 531.795068][T13621] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1895'. [ 532.639547][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 532.655647][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 532.713865][T13661] tipc: Enabled bearer , priority 0 [ 532.763361][T13661] syzkaller0: entered promiscuous mode [ 532.782682][T13661] syzkaller0: entered allmulticast mode [ 532.873544][T13669] netlink: 34 bytes leftover after parsing attributes in process `syz.5.1906'. [ 532.896393][T13665] tipc: Resetting bearer [ 532.935675][T13660] tipc: Resetting bearer [ 532.953862][T13669] netlink: 'syz.5.1906': attribute type 9 has an invalid length. [ 532.973691][T13660] tipc: Disabling bearer [ 532.981198][T13669] netlink: 'syz.5.1906': attribute type 6 has an invalid length. [ 533.014238][T13671] lo speed is unknown, defaulting to 1000 [ 533.021629][T13669] netlink: 'syz.5.1906': attribute type 7 has an invalid length. [ 533.039692][T13669] netlink: 'syz.5.1906': attribute type 8 has an invalid length. [ 533.656235][T13687] xt_hashlimit: size too large, truncated to 1048576 [ 534.683486][T13710] IPVS: persistence engine module ip_vs_pe_ not found [ 534.701928][T13716] bond0: (slave ip6tnl0): refused to change device type [ 535.524259][T13731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1922'. [ 535.575360][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1922'. [ 535.792317][T13736] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 535.824643][T13738] netlink: 'syz.3.1925': attribute type 1 has an invalid length. [ 536.158255][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.341804][T13749] syzkaller1: entered promiscuous mode [ 536.368082][T13749] syzkaller1: entered allmulticast mode [ 537.012568][T13772] pimreg: entered allmulticast mode [ 537.993010][T13793] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1938'. [ 538.408582][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1942'. [ 538.929090][T13807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1944'. [ 538.940383][T13807] netlink: 'syz.1.1944': attribute type 7 has an invalid length. [ 538.949869][T13807] netlink: 'syz.1.1944': attribute type 8 has an invalid length. [ 538.958910][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 539.098546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f1a8400: rx timeout, send abort [ 539.544397][T13805] bridge0: entered promiscuous mode [ 539.587641][T13805] bridge0: entered allmulticast mode [ 539.606867][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f1a8400: abort rx timeout. Force session deactivation [ 540.127164][T13852] netlink: 'syz.0.1952': attribute type 2 has an invalid length. [ 541.053201][T13890] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 541.084882][T13889] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 541.357229][T13899] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 541.403170][T13899] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1967'. [ 541.423426][T13899] nbd: must specify at least one socket [ 542.119487][T13934] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1969'. [ 542.236597][T13910] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 542.280475][T13910] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 542.352723][T13941] nbd: nbd0 already in use [ 542.385602][T13941] block nbd0: NBD_DISCONNECT [ 542.406962][T13939] netlink: 'syz.4.1973': attribute type 3 has an invalid length. [ 542.456314][T13941] block nbd0: Send disconnect failed -32 [ 542.465007][T13941] block nbd0: shutting down sockets [ 542.476865][T13939] netlink: 646 bytes leftover after parsing attributes in process `syz.4.1973'. [ 542.561036][T13948] netlink: zone id is out of range [ 542.584663][T13948] netlink: zone id is out of range [ 542.613972][T13948] netlink: zone id is out of range [ 542.623471][T13948] netlink: zone id is out of range [ 542.630132][T13948] netlink: zone id is out of range [ 542.635295][T13948] netlink: zone id is out of range [ 542.656779][T13948] netlink: zone id is out of range [ 542.680680][T13948] netlink: zone id is out of range [ 543.033709][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 543.318836][ T29] audit: type=1800 audit(1784370165.148:9): pid=13964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1982" name="memory.events" dev="tmpfs" ino=1963 res=0 errno=0 [ 543.321122][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 543.404843][T13965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1982'. [ 543.425243][ T29] audit: type=1804 audit(1784370165.178:10): pid=13964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1982" name="/newroot/380/memory.events" dev="tmpfs" ino=1963 res=1 errno=0 [ 543.501216][T13970] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 543.573032][T13973] pimreg: entered allmulticast mode [ 543.585470][T13980] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1985'. [ 543.608901][T13981] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1985'. [ 543.650013][T13973] pimreg: left allmulticast mode [ 543.941044][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1987'. [ 544.266367][T13988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.436744][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 544.660766][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 544.962699][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 545.196857][T14033] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 546.036067][T14066] ipt_REJECT: TCP_RESET invalid for non-tcp [ 546.145273][T14064] syzkaller0: entered promiscuous mode [ 546.171596][T14064] syzkaller0: entered allmulticast mode [ 546.580980][T14079] netlink: 'syz.4.2011': attribute type 1 has an invalid length. [ 546.609575][T14079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2011'. [ 547.825737][T14114] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.833244][ T24] IPVS: starting estimator thread 0... [ 547.940642][T14125] IPVS: using max 33 ests per chain, 79200 per kthread [ 548.187944][T14136] __nla_validate_parse: 5 callbacks suppressed [ 548.187965][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 548.216089][T14136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2027'. [ 548.270289][T14141] netlink: 'syz.0.2028': attribute type 11 has an invalid length. [ 548.312047][T14141] netlink: 'syz.0.2028': attribute type 4 has an invalid length. [ 548.359059][T14141] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2028'. [ 548.671284][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 548.946731][T14160] netlink: 'syz.4.2036': attribute type 8 has an invalid length. [ 549.218696][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2040'. [ 549.247754][T14177] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 549.376480][T14187] netlink: 'syz.0.2042': attribute type 22 has an invalid length. [ 549.385873][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 549.444067][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2038'. [ 549.505028][T14177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.665754][T14183] bond6: (slave veth5): Enslaving as an active interface with a down link [ 549.705961][T14187] netlink: 'syz.0.2042': attribute type 22 has an invalid length. [ 549.731649][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 549.891055][T14196] syz_tun: entered allmulticast mode [ 550.032736][T14198] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 550.073898][T14196] openvswitch: netlink: IP tunnel dst address not specified [ 550.136650][T14195] syz_tun: left allmulticast mode [ 550.431829][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2051'. [ 550.745296][T14225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2056'. [ 551.248555][T14242] netlink: 'syz.3.2059': attribute type 83 has an invalid length. [ 552.068998][T14264] netlink: 'syz.1.2067': attribute type 21 has an invalid length. [ 552.098772][T14264] netlink: 'syz.1.2067': attribute type 22 has an invalid length. [ 552.135063][T14264] netlink: 'syz.1.2067': attribute type 23 has an invalid length. [ 552.178771][T14264] netlink: 'syz.1.2067': attribute type 25 has an invalid length. [ 552.221971][T14264] netlink: 'syz.1.2067': attribute type 26 has an invalid length. [ 552.542002][T14274] vcan0: tx drop: invalid da for name 0x0000000200000000 [ 552.769320][ T29] audit: type=1804 audit(1784370174.598:11): pid=14282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2068" name="/newroot/50/cgroup.controllers" dev="tmpfs" ino=274 res=1 errno=0 [ 552.867327][ T29] audit: type=1800 audit(1784370174.598:12): pid=14282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2068" name="cgroup.controllers" dev="tmpfs" ino=274 res=0 errno=0 [ 553.948861][T14300] bridge_slave_1: left promiscuous mode [ 553.961858][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.974092][T14308] __nla_validate_parse: 6 callbacks suppressed [ 553.974113][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 553.999951][T14300] bridge_slave_0: left allmulticast mode [ 554.006074][T14300] bridge_slave_0: left promiscuous mode [ 554.013019][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.311250][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.345894][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.368430][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.396259][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.427768][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.499940][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.579232][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.613472][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.630095][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.784883][T14301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.168724][T14301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.191493][T14343] xt_hashlimit: size too large, truncated to 1048576 [ 555.225357][T14344] xt_hashlimit: size too large, truncated to 1048576 [ 555.572829][T14301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.859874][T14301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.005172][T14360] bridge0: port 3(vlan2) entered blocking state [ 556.032440][T14360] bridge0: port 3(vlan2) entered disabled state [ 556.049319][T14360] vlan2: entered allmulticast mode [ 556.062387][T14360] dummy0: entered allmulticast mode [ 556.088546][T14360] vlan2: entered promiscuous mode [ 556.101141][T14360] dummy0: entered promiscuous mode [ 556.739864][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.778215][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.818025][T14386] nftables ruleset with unbound set [ 556.913526][T12557] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.050784][ T9082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.063774][T14395] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 557.096987][T14395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.254261][T14400] openvswitch: netlink: Missing key (keys=40, expected=100) [ 557.685276][T14410] ip6erspan2: entered allmulticast mode [ 557.912815][T14426] ipip0: entered promiscuous mode [ 558.094753][T14431] Cannot find del_set index 0 as target [ 558.124024][T14434] netlink: 'syz.4.2107': attribute type 11 has an invalid length. [ 558.847385][T14452] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 559.229999][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.834888][T14472] syzkaller1: entered promiscuous mode [ 559.867560][T14472] syzkaller1: entered allmulticast mode [ 561.445847][T14525] tipc: Enabling of bearer rejected, failed to enable media [ 562.224295][T14554] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 562.302471][T14554] x_tables: duplicate underflow at hook 2 [ 562.793784][T14567] __nla_validate_parse: 26 callbacks suppressed [ 562.793803][T14567] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2136'. [ 562.934892][T14567] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2136'. [ 563.033224][T14574] lo speed is unknown, defaulting to 1000 [ 563.081738][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.335612][T14589] syzkaller0: entered promiscuous mode [ 563.386415][T14589] syzkaller0: entered allmulticast mode [ 563.440953][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 563.465875][T14596] syzkaller0: entered promiscuous mode [ 563.478975][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 563.490569][T14596] syzkaller0: entered allmulticast mode [ 563.769245][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 563.828781][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 563.866156][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.877557][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.917835][T14609] xt_hashlimit: size too large, truncated to 1048576 [ 564.004473][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.039750][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 564.050282][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.158495][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2147'. [ 564.348847][T14625] netlink: 'syz.4.2148': attribute type 4 has an invalid length. [ 564.623158][T14636] netlink: 'syz.3.2149': attribute type 5 has an invalid length. [ 564.657332][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 564.948424][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 567.047613][T14697] netlink: 'syz.5.2167': attribute type 3 has an invalid length. [ 568.044261][T14717] sctp: [Deprecated]: syz.4.2173 (pid 14717) Use of int in max_burst socket option. [ 568.044261][T14717] Use struct sctp_assoc_value instead [ 568.076846][T14717] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 568.085905][T14717] __nla_validate_parse: 5 callbacks suppressed [ 568.085924][T14717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2173'. [ 568.181418][T14719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2174'. [ 568.604457][T14737] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2176'. [ 568.841040][T14743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2178'. [ 568.978531][T14744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.077163][T14748] bond9: option mode: invalid value (254) [ 569.252927][T14748] bond9 (unregistering): Released all slaves [ 569.629195][T14750] batadv_slave_0: entered allmulticast mode [ 569.655573][T14751] batadv_slave_0: left allmulticast mode [ 569.831011][T14754] netlink: 180568 bytes leftover after parsing attributes in process `syz.4.2182'. [ 569.985975][T14759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2183'. [ 570.170666][T14763] netlink: 'syz.4.2184': attribute type 1 has an invalid length. [ 570.313587][T14769] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2184'. [ 570.444443][T14763] 8021q: adding VLAN 0 to HW filter on device bond9 [ 570.616442][T13917] udevd[13917]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 570.762759][T13833] udevd[13833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 570.786442][T14768] lo speed is unknown, defaulting to 1000 [ 571.243582][T14788] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2188'. [ 571.288869][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2188'. [ 571.366864][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 573.681365][T14842] netlink: 'syz.0.2203': attribute type 3 has an invalid length. [ 573.693252][T14842] x_tables: duplicate underflow at hook 2 [ 573.898606][T14855] netlink: 'syz.5.2207': attribute type 1 has an invalid length. [ 573.958298][T14857] __nla_validate_parse: 4 callbacks suppressed [ 573.958319][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2207'. [ 574.165552][T14861] bond1: (slave geneve2): making interface the new active one [ 574.175621][T14861] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 574.188241][T12537] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 574.219750][T12537] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 574.230679][T12537] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 574.242159][T12537] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 574.252811][T14866] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2209'. [ 574.263401][T14866] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2209'. [ 574.864640][T14874] syzkaller0: entered promiscuous mode [ 574.889881][T14874] syzkaller0: entered allmulticast mode [ 575.480824][T14878] lo speed is unknown, defaulting to 1000 [ 575.978374][T14894] fb: port 2(bridge_slave_1) entered disabled state [ 575.986166][T14894] fb: port 1(bridge_slave_0) entered disabled state [ 576.347805][T14894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.396517][T14894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.248689][T12537] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.275396][T12537] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.307713][T12537] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.332677][ T29] audit: type=1804 audit(1784370200.168:13): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2226" name="/newroot/87/cgroup.controllers" dev="tmpfs" ino=464 res=1 errno=0 [ 578.401080][ T29] audit: type=1800 audit(1784370200.168:14): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2226" name="cgroup.controllers" dev="tmpfs" ino=464 res=0 errno=0 [ 578.492387][ T29] audit: type=1800 audit(1784370200.198:15): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2226" name="cgroup.controllers" dev="tmpfs" ino=464 res=0 errno=0 [ 580.111747][T14976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2235'. [ 580.621265][T13943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.636948][T13943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.650810][T13943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.667353][T13943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.678808][T13943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 580.789575][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.802729][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.813652][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.828624][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.842040][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 582.394858][T15026] macvlan0: entered promiscuous mode [ 582.470262][T15026] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2241'. [ 582.911041][ T5629] Bluetooth: hci6: command tx timeout [ 582.983344][T15037] netlink: 'syz.5.2244': attribute type 23 has an invalid length. [ 583.524469][T15035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.543005][T15035] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.571992][T15035] : left promiscuous mode [ 583.612437][T15035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.828973][T15035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.882739][T15035] veth1_to_hsr: left promiscuous mode [ 583.893956][T15035] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 583.929762][T15035] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.992936][T15035] veth0_vlan: left promiscuous mode [ 584.005623][T15035] veth0_vlan: entered promiscuous mode [ 584.027807][T15035] macvlan0: left promiscuous mode [ 584.081155][T15035] veth1_macvtap: left promiscuous mode [ 584.093260][T15035] veth0_macvtap: left promiscuous mode [ 584.122845][T15035] veth0_macvtap: entered promiscuous mode [ 584.160327][T15035] veth1_macvtap: entered promiscuous mode [ 584.197961][T15035] 8021q: adding VLAN 0 to HW filter on device €Â [ 584.224111][T15035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.241563][T15035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.264217][T15035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.332306][T15035] bond1: left promiscuous mode [ 584.337324][T15035] bridge2: left promiscuous mode [ 584.344117][T15035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.359133][T15035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.556359][T15035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.620646][T15035] bond4: left promiscuous mode [ 584.626628][T15035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.666664][T14984] lo speed is unknown, defaulting to 1000 [ 584.877086][ T1175] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.935870][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.970540][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.000090][ T5629] Bluetooth: hci6: command tx timeout [ 585.042884][T15067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2249'. [ 585.081865][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.293045][ T24] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 585.502370][T13305] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 585.958687][ T1175] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 586.038508][ T1175] bond6: (slave veth5): making interface the new active one [ 586.131265][ T1175] bond6: active interface up! [ 586.196942][T12557] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 586.437413][T15108] lo speed is unknown, defaulting to 1000 [ 586.606985][T15126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2261'. [ 586.795611][T15126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2261'. [ 586.884475][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2262'. [ 586.973756][T13305] IPVS: starting estimator thread 0... [ 586.976395][T15133] IPVS: sed: FWM 3 0x00000003 - no destination available [ 587.073208][ T5629] Bluetooth: hci6: command tx timeout [ 587.099636][T15135] IPVS: using max 27 ests per chain, 64800 per kthread [ 587.180746][T14984] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.190072][T14984] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.198717][T14984] bridge_slave_0: entered allmulticast mode [ 587.231009][T14984] bridge_slave_0: entered promiscuous mode [ 587.260950][T15142] netlink: 'syz.0.2264': attribute type 12 has an invalid length. [ 587.281848][T15142] netlink: 'syz.0.2264': attribute type 29 has an invalid length. [ 587.291913][T15142] netlink: 'syz.0.2264': attribute type 7 has an invalid length. [ 587.300992][T15142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2264'. [ 587.316785][T14984] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.338187][T14984] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.347290][T14984] bridge_slave_1: entered allmulticast mode [ 587.356659][T14984] bridge_slave_1: entered promiscuous mode [ 587.703137][T15151] bond10: entered allmulticast mode [ 587.721269][T15152] macvlan2: entered promiscuous mode [ 587.734439][T15152] macvlan2: entered allmulticast mode [ 587.745724][T15152] bond10: (slave macvlan2): Opening slave failed [ 587.778084][T14984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.815391][T14984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.928634][T14984] team0: Port device team_slave_0 added [ 587.952127][T14984] team0: Port device team_slave_1 added [ 588.026021][T15159] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2269'. [ 588.045732][T12537] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 588.057427][T12537] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 588.126914][T14984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.135791][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.169029][T14984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.278854][T14984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.308653][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.384149][T14984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.698773][T14984] hsr_slave_0: entered promiscuous mode [ 588.738453][T14984] hsr_slave_1: entered promiscuous mode [ 588.785283][T14984] debugfs: 'hsr0' already exists in 'hsr' [ 588.817847][T14984] Cannot create hsr debugfs directory [ 588.876865][T15173] bond0: (slave team0): Releasing backup interface [ 588.968527][T15173] bond0: (slave bond_slave_0): Releasing backup interface [ 589.003439][ T3111] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 589.037384][T15173] bond0: (slave bond_slave_1): Releasing backup interface [ 589.143813][T15173] team0: Port device team_slave_1 removed [ 589.151186][ T5629] Bluetooth: hci6: command tx timeout [ 589.172692][T15173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.180819][T15173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.196552][T15173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 589.243384][T15174] syzkaller1: entered promiscuous mode [ 589.251140][T15174] syzkaller1: entered allmulticast mode [ 589.259933][T15177] team0: Mode changed to "activebackup" [ 589.292528][T15182] tipc: Enabled bearer , priority 0 [ 589.773547][T15183] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.782451][T15183] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.270962][T15183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.339956][T15183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.018112][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2275'. [ 591.100813][T15209] vlan3: entered allmulticast mode [ 591.108925][T15209] bridge0: port 4(vlan3) entered blocking state [ 591.146960][T15209] bridge0: port 4(vlan3) entered disabled state [ 591.178750][T15209] vlan3: entered promiscuous mode [ 591.195587][ T5353] tipc: Node number set to 1298714869 [ 591.214269][ T6174] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.267787][ T6174] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 591.311884][ T6174] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.354462][ T6174] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 591.439144][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2279'. [ 591.497230][ T6174] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.535648][ T6174] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 591.602176][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 591.667033][ T6174] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.692033][ T6174] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 592.078081][T15212] ipip0: entered promiscuous mode [ 592.109539][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 592.205001][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 592.214380][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2286'. [ 592.273802][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2286'. [ 593.162739][T14984] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.229794][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.272987][T14984] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 593.323557][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.345325][T14984] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.388471][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.595719][T15264] bond7 (unregistering): Released all slaves [ 593.666787][T14984] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.720862][T15255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2290'. [ 593.734212][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 594.040009][T15283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2294'. [ 594.145486][T14984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.228083][T14984] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.288308][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.295710][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.417977][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.425454][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.161495][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2304'. [ 595.202379][T15316] 0·: left allmulticast mode [ 595.223381][T15316] hsr_slave_0: left allmulticast mode [ 595.236634][T15316] hsr_slave_1: left allmulticast mode [ 595.522055][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 596.185534][T15321] tipc: Failed to remove unknown binding: 66,0,0/0:2729754050/2729754052 [ 596.236852][T15321] tipc: Failed to remove unknown binding: 66,0,0/0:2729754050/2729754051 [ 596.278243][T15321] tipc: Failed to remove unknown binding: 66,0,0/0:2729754050/2729754052 [ 596.315925][T15321] tipc: Failed to remove unknown binding: 66,0,0/0:2729754050/2729754051 [ 596.484536][T15358] netlink: 'syz.5.2312': attribute type 3 has an invalid length. [ 596.508973][T15358] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2312'. [ 597.974046][T14984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.210822][T15395] syzkaller0: entered promiscuous mode [ 598.229069][T15395] syzkaller0: entered allmulticast mode [ 598.593852][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 598.642382][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2320'. [ 599.245198][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 599.444734][T15427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2326'. [ 599.514285][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2326'. [ 599.641618][T15433] netlink: 'syz.1.2328': attribute type 3 has an invalid length. [ 599.702674][T15427] netlink: 'syz.5.2326': attribute type 1 has an invalid length. [ 600.297634][T14984] veth0_vlan: entered promiscuous mode [ 600.308481][T15453] netlink: 'syz.5.2332': attribute type 1 has an invalid length. [ 600.484376][T15458] netlink: 'syz.1.2333': attribute type 39 has an invalid length. [ 600.518752][T15453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.607041][T15454] bond2: (slave geneve3): making interface the new active one [ 600.631768][T15454] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 600.725347][T12557] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.747983][T12557] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.819417][T12557] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.833237][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 601.041104][T12557] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.089990][T14984] veth1_vlan: entered promiscuous mode [ 601.287900][T14984] veth0_macvtap: entered promiscuous mode [ 601.338193][T14984] veth1_macvtap: entered promiscuous mode [ 601.450448][T15477] netlink: 'syz.1.2337': attribute type 1 has an invalid length. [ 601.450698][T15476] netlink: 'syz.0.2339': attribute type 13 has an invalid length. [ 601.506969][T14984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.563005][T14984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.627466][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 601.632874][ T9082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.686932][ T9082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.695857][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 601.711901][ T9082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.742414][ T9082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.819207][T15486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.999634][ T9077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.017662][ T9077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.243024][T15494] netlink: 'syz.0.2342': attribute type 1 has an invalid length. [ 602.252162][T12537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.271437][T12537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.708697][T15505] netlink: 'syz.5.2345': attribute type 4 has an invalid length. [ 602.737502][T15505] netlink: 'syz.5.2345': attribute type 4 has an invalid length. [ 603.061442][T15516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2346'. [ 603.100056][T12537] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.147317][T12537] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.203337][T12537] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.222384][T12537] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.242507][T15522] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 603.290033][T15520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.506703][T15556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2357'. [ 604.557869][T15556] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 604.664328][T15558] bridge1: entered promiscuous mode [ 604.683935][T15558] bridge1: entered allmulticast mode [ 604.712577][T15558] team0: Port device bridge1 added [ 604.748266][T15562] bridge0: port 5(team0) entered blocking state [ 604.788779][T15562] bridge0: port 5(team0) entered disabled state [ 604.812605][T15562] team0: entered allmulticast mode [ 604.821162][T15562] team_slave_0: entered allmulticast mode [ 604.847658][T15562] team_slave_1: entered allmulticast mode [ 604.889799][T15562] team0: entered promiscuous mode [ 604.906570][T15562] team_slave_0: entered promiscuous mode [ 604.914377][T15562] team_slave_1: entered promiscuous mode [ 604.935895][T15561] syzkaller0: entered promiscuous mode [ 604.949700][T15561] syzkaller0: entered allmulticast mode [ 605.210318][T15576] netlink: 'syz.5.2364': attribute type 1 has an invalid length. [ 605.378246][T15576] bond3: entered promiscuous mode [ 605.394362][T15576] bond3: entered allmulticast mode [ 605.417293][T15576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.434624][T15581] erspan1: entered allmulticast mode [ 605.445862][T15581] bond3: (slave erspan1): making interface the new active one [ 605.455598][T15581] erspan1: entered promiscuous mode [ 605.483204][T15581] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 605.650870][T15586] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2364'. [ 605.699826][T15576] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2364'. [ 606.313420][T15606] netlink: 'syz.6.2372': attribute type 1 has an invalid length. [ 606.468284][T15606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2372'. [ 606.536424][T15604] lo speed is unknown, defaulting to 1000 [ 606.777019][T15617] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2375'. [ 606.781088][T15622] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 607.084431][T15626] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 607.138934][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 607.284452][T15626] 8021q: adding VLAN 0 to HW filter on device bond11 [ 607.533779][T15639] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 608.251189][T15656] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2385'. [ 608.393107][T15656] bridge_slave_1 (unregistering): left allmulticast mode [ 608.410846][T15656] bridge_slave_1 (unregistering): left promiscuous mode [ 608.444524][T15656] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.561716][T15658] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 609.104456][T15685] netlink: 'syz.6.2391': attribute type 1 has an invalid length. [ 609.165219][T15686] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2391'. [ 609.435250][T15633] vlan6: entered allmulticast mode [ 609.442636][T15633] bond11: entered allmulticast mode [ 609.590181][T15664] bond11: (slave geneve3): making interface the new active one [ 609.598014][T15664] geneve3: entered allmulticast mode [ 609.610631][T15664] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 609.820371][T15698] netlink: 'syz.1.2394': attribute type 9 has an invalid length. [ 609.883324][T15690] hsr_slave_0: entered allmulticast mode [ 610.245060][T15708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2400'. [ 610.288546][T15708] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2400'. [ 610.357799][T15710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2398'. [ 610.382390][T15710] openvswitch: netlink: Flow key attr not present in new flow. [ 610.455539][T15708] : entered allmulticast mode [ 610.512728][T15712] bridge2: entered promiscuous mode [ 610.527163][T15707] : left allmulticast mode [ 610.569071][T15716] geneve1: entered promiscuous mode [ 610.789749][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2404'. [ 610.958155][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2404'. [ 610.967693][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2404'. [ 611.181124][T15720] veth3: entered allmulticast mode [ 611.237388][T15728] bond4 (unregistering): Released all slaves [ 611.875522][T15748] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2410'. [ 611.931843][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 612.244310][T15765] netlink: 'syz.5.2412': attribute type 1 has an invalid length. [ 612.317304][T15768] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2412'. [ 612.549887][T15774] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2415'. [ 612.603273][T15765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.631738][ T29] audit: type=1804 audit(1784370234.468:16): pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2416" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=96 res=1 errno=0 [ 612.726244][ T29] audit: type=1800 audit(1784370234.468:17): pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2416" name="cgroup.controllers" dev="tmpfs" ino=96 res=0 errno=0 [ 612.835479][T15773] bond4: (slave geneve4): making interface the new active one [ 612.923767][T15773] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 613.024780][ T1175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.084549][ T1175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.124334][ T1175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.160522][ T1175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.246495][T15793] IPVS: Scheduler module ip_vs_sip not found [ 614.363823][T15840] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 614.506371][T15840] bond12: entered promiscuous mode [ 614.513650][T15840] 8021q: adding VLAN 0 to HW filter on device bond12 [ 614.618024][T15846] 8021q: adding VLAN 0 to HW filter on device bond12 [ 614.633013][T15846] bond12: (slave xfrm0): The slave device specified does not support setting the MAC address [ 614.646434][T15846] bond12: (slave xfrm0): Setting fail_over_mac to active for active-backup mode [ 614.716718][T15846] bond12: (slave xfrm0): making interface the new active one [ 614.740865][T15846] xfrm0: entered promiscuous mode [ 614.756854][T15846] bond12: (slave xfrm0): Enslaving as an active interface with an up link [ 615.013243][T15862] veth0: entered promiscuous mode [ 615.616867][T15879] __nla_validate_parse: 6 callbacks suppressed [ 615.616961][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2440'. [ 616.689166][T15909] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2453'. [ 616.726665][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 616.791305][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2452'. [ 616.830251][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 617.214400][T15924] netlink: 880 bytes leftover after parsing attributes in process `syz.4.2453'. [ 617.238620][T15915] lo speed is unknown, defaulting to 1000 [ 617.422245][T15928] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2457'. [ 617.799073][ T29] audit: type=1107 audit(1784370239.628:18): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 618.261912][T15949] syzkaller0: entered promiscuous mode [ 618.270001][T15949] syzkaller0: entered allmulticast mode [ 618.271954][T15951] FAULT_INJECTION: forcing a failure. [ 618.271954][T15951] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 618.359642][T15951] CPU: 1 UID: 0 PID: 15951 Comm: syz.0.2463 Not tainted syzkaller #0 PREEMPT(full) [ 618.359672][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 618.359683][T15951] Call Trace: [ 618.359691][T15951] [ 618.359700][T15951] dump_stack_lvl+0xe8/0x150 [ 618.359736][T15951] should_fail_ex+0x40c/0x560 [ 618.359765][T15951] _copy_from_user+0x2d/0xb0 [ 618.359794][T15951] __sys_sendto+0x2a9/0x5a0 [ 618.359823][T15951] ? ksys_write+0x1e6/0x270 [ 618.359856][T15951] ? __pfx___sys_sendto+0x10/0x10 [ 618.359881][T15951] ? __mutex_unlock_slowpath+0x731/0x900 [ 618.359943][T15951] ? __pfx_ksys_write+0x10/0x10 [ 618.359976][T15951] __x64_sys_sendto+0xde/0x100 [ 618.360005][T15951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.360026][T15951] do_syscall_64+0x174/0x580 [ 618.360055][T15951] ? clear_bhb_loop+0x40/0x90 [ 618.360081][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.360100][T15951] RIP: 0033:0x7f392639de99 [ 618.360119][T15951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.360135][T15951] RSP: 002b:00007f3927205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 618.360157][T15951] RAX: ffffffffffffffda RBX: 00007f3926626090 RCX: 00007f392639de99 [ 618.360180][T15951] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000007 [ 618.360193][T15951] RBP: 00007f3927205090 R08: 0000200000000140 R09: 0000000000000014 [ 618.360206][T15951] R10: 0000000020000005 R11: 0000000000000246 R12: 0000000000000001 [ 618.360218][T15951] R13: 00007f3926626128 R14: 00007f3926626090 R15: 00007ffc42474448 [ 618.360250][T15951] [ 618.640921][T15947] syzkaller0: entered promiscuous mode [ 618.646724][T15947] syzkaller0: entered allmulticast mode [ 618.855933][T15920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.871008][T15920] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.906877][T15920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.480995][T15920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.558212][T15920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.662520][T15920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.677364][T15920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.697713][T15920] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 620.364905][T15999] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 624.030317][T16051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.515040][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.515199][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.868242][T16078] netlink: 'syz.0.2478': attribute type 1 has an invalid length. [ 629.480628][T15193] bridge0: port 3(vlan2) entered blocking state [ 629.487514][T15193] bridge0: port 3(vlan2) entered forwarding state [ 629.682831][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.690378][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.721031][ T1029] bridge0: port 4(vlan3) entered blocking state [ 629.727488][ T1029] bridge0: port 4(vlan3) entered forwarding state [ 629.881138][T16078] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 629.944458][ T1029] bridge0: port 5(team0) entered blocking state [ 629.959463][ T1029] bridge0: port 5(team0) entered forwarding state [ 631.000534][T16119] block nbd0: server does not support multiple connections per device. [ 631.025217][T16119] block nbd0: shutting down sockets [ 631.224993][T16126] syzkaller0: entered promiscuous mode [ 631.256458][T16126] syzkaller0: entered allmulticast mode [ 631.926604][T16151] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 631.942436][T16151] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 631.951969][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2499'. [ 632.256926][T16157] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2500'. [ 632.386897][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'. [ 632.463510][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 632.551359][T16166] bond13: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 632.680612][T16166] bond13 (unregistering): Released all slaves [ 632.918986][T16178] sctp: [Deprecated]: syz.6.2505 (pid 16178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.918986][T16178] Use struct sctp_sack_info instead [ 633.156837][T16188] sctp: [Deprecated]: syz.5.2507 (pid 16188) Use of int in maxseg socket option. [ 633.156837][T16188] Use struct sctp_assoc_value instead [ 633.425315][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 633.468240][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 633.515400][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 633.623391][T16204] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2511'. [ 633.800655][T16205] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2512'. [ 633.877031][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2512'. [ 633.926875][T16205] bridge0: port 5(team0) entered disabled state [ 633.933885][T16205] bridge0: port 4(vlan3) entered disabled state [ 633.941130][T16205] bridge0: port 3(vlan2) entered disabled state [ 633.947713][T16205] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.168002][T16221] netlink: 'syz.6.2515': attribute type 83 has an invalid length. [ 634.446757][T16213] bond7: invalid ARP target 0.0.0.0 specified for addition [ 634.467512][T16213] bond7: option arp_ip_target: invalid value (0) [ 634.512069][T16213] bond7 (unregistering): Released all slaves [ 634.623685][T16230] netlink: 'syz.4.2518': attribute type 11 has an invalid length. [ 634.754261][T16215] lo speed is unknown, defaulting to 1000 [ 634.795018][T16194] infiniband syz0: set down [ 634.800744][T16194] infiniband syz0: added xfrm0 [ 634.808058][T16194] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 634.815434][T16194] infiniband syz0: Couldn't open port 1 [ 634.833401][T16194] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 634.851014][T16194] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 634.874002][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2519'. [ 634.930985][T16194] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 635.035283][T16194] RDS/IB: syz0: added [ 635.052718][T16194] smc: adding ib device syz0 with port count 1 [ 635.064263][T16194] smc: ib device syz0 port 1 has no pnetid [ 635.992925][ T5738] xfrm0 speed is unknown, defaulting to 1000 [ 636.066160][T12557] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.113613][T12557] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.143594][ T68] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.163258][ T68] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.213920][T13363] xfrm0 speed is unknown, defaulting to 1000 [ 636.227725][ T68] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.256267][ T68] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.287645][ T68] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.310550][ T68] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.356069][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 636.544898][T16263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2524'. [ 636.657654][T16256] syzkaller0: entered promiscuous mode [ 636.687190][T16256] syzkaller0: entered allmulticast mode [ 637.446575][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 637.744162][T16281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2531'. [ 638.148213][T16285] bond1: Unable to set down delay as MII monitoring is disabled [ 638.168744][T16285] bond1 (unregistering): Released all slaves [ 638.257003][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 639.207436][T16304] netlink: 'syz.6.2539': attribute type 1 has an invalid length. [ 639.668342][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 640.604685][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 641.274499][T16334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2547'. [ 641.311842][T16334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'. [ 641.362493][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 641.643603][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 641.875942][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 642.130934][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 642.406820][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 642.454054][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 642.528393][T16343] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2550'. [ 642.598038][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 642.704902][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 642.717796][T16350] netlink: 'syz.1.2552': attribute type 30 has an invalid length. [ 642.726625][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'. [ 642.810083][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 643.305188][T16314] lo speed is unknown, defaulting to 1000 [ 643.328640][T16306] lo speed is unknown, defaulting to 1000 [ 643.615289][T16366] Cannot find set identified by id 65535 to match [ 643.850299][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 645.628846][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2572'. [ 645.642046][ T5629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 645.686838][T16418] batman_adv: batadv0: Adding interface: dummy0 [ 645.695623][T16418] batman_adv: batadv0: Interface activated: dummy0 [ 645.717463][T16418] batadv0: mtu less than device minimum [ 645.733972][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.751482][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.765488][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.780669][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.797875][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.815234][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.828182][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.841021][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.853578][T16418] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 645.900389][T16423] netlink: 'syz.1.2573': attribute type 4 has an invalid length. [ 645.957421][T16424] netlink: 'syz.1.2573': attribute type 4 has an invalid length. [ 646.647879][T16434] tipc: Enabled bearer , priority 0 [ 646.774941][T16447] netlink: 'syz.5.2579': attribute type 1 has an invalid length. [ 646.857613][T16434] syzkaller0: entered promiscuous mode [ 646.867253][T16434] syzkaller0: entered allmulticast mode [ 646.878618][T16434] tipc: Resetting bearer [ 647.020775][ T1029] tipc: Resetting bearer [ 647.093942][T16447] bond5: entered promiscuous mode [ 647.105123][T16447] 8021q: adding VLAN 0 to HW filter on device bond5 [ 647.116313][T16448] syzkaller0: entered promiscuous mode [ 647.139646][T16448] syzkaller0: entered allmulticast mode [ 647.165412][T16451] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 647.178438][T16451] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 647.189977][T16451] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 647.236151][T16433] tipc: Resetting bearer [ 647.560208][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 651.120932][T16433] tipc: Disabling bearer [ 651.157701][T16443] lo speed is unknown, defaulting to 1000 [ 651.157786][ T5353] tipc: Node number set to 3605389559 [ 651.174011][T16443] xfrm0 speed is unknown, defaulting to 1000 [ 651.546460][T16474] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2584'. [ 652.377653][ T68] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 652.413242][T16500] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2589'. [ 652.807247][T16494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 652.895791][T16510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2590'. [ 653.222900][T16513] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2592'. [ 653.245400][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2591'. [ 653.310321][ C1] net_ratelimit: 10 callbacks suppressed [ 653.310344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.688251][T16527] batadv0: mtu less than device minimum [ 653.701272][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 653.714902][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 653.726730][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 653.738441][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 653.750351][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 653.762100][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 653.773954][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 653.786031][T16527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 654.222608][T16540] lo speed is unknown, defaulting to 1000 [ 654.276088][T16540] xfrm0 speed is unknown, defaulting to 1000 [ 654.304068][T16546] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2602'. [ 654.585618][T16544] bond12: entered promiscuous mode [ 654.617287][T16544] bond12: entered allmulticast mode [ 654.633373][T16544] 8021q: adding VLAN 0 to HW filter on device bond12 [ 655.067314][T16564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2606'. [ 655.123204][T16568] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2606'. [ 655.153315][T16568] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2606'. [ 655.199098][T16575] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2608'. [ 655.816497][T16562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 656.735430][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2617'. [ 656.771988][T16613] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2615'. [ 656.786469][T16615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2617'. [ 656.808417][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2617'. [ 656.998725][T16620] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2618'. [ 657.116073][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 657.353541][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 658.140634][T16656] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2629'. [ 663.266500][T16662] syzkaller1: entered promiscuous mode [ 663.272724][T16662] syzkaller1: entered allmulticast mode [ 663.284479][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2633'. [ 663.388528][T16690] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 663.571113][T16690] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 663.765791][T16698] ±ÿ: renamed from lo [ 663.834475][T16703] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2636'. [ 663.978442][T16703] netlink: 1440 bytes leftover after parsing attributes in process `syz.4.2636'. [ 664.042654][T16703] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 664.157686][T16715] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2641'. [ 664.218073][T16715] net_ratelimit: 12 callbacks suppressed [ 664.218096][T16715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.324394][T16720] bond0: Error: Cannot enslave bond to itself. [ 664.569090][T16715] bond7: entered promiscuous mode [ 664.740139][T16729] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2645'. [ 664.824137][T16727] bridge0: port 5(team0) entered blocking state [ 664.831174][T16727] bridge0: port 5(team0) entered forwarding state [ 664.840798][T16727] bridge0: port 4(vlan3) entered blocking state [ 664.847256][T16727] bridge0: port 4(vlan3) entered forwarding state [ 664.856209][T16727] bridge0: port 3(vlan2) entered blocking state [ 664.863775][T16727] bridge0: port 3(vlan2) entered forwarding state [ 664.872129][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.880501][T16727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.146809][T16727] batadv0: left promiscuous mode [ 665.825027][T16727] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 667.157508][T16782] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2658'. [ 667.659462][T16793] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2660'. [ 667.713990][T16798] netlink: 'syz.5.2661': attribute type 1 has an invalid length. [ 667.746894][T16798] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2661'. [ 668.298905][T16818] netlink: 'syz.0.2666': attribute type 1 has an invalid length. [ 668.367894][T16818] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2666'. [ 668.947125][T16838] netlink: 'syz.4.2670': attribute type 1 has an invalid length. [ 668.991382][T16838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2670'. [ 669.090981][T16828] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 669.218268][ T68] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.245175][ T68] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.281961][ T68] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.003675][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 670.079670][T16872] netlink: 10460 bytes leftover after parsing attributes in process `syz.6.2679'. [ 670.215873][T16874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2680'. [ 670.250499][T16870] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 670.369732][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2682'. [ 670.437077][T16882] sch_tbf: burst 0 is lower than device veth3 mtu (1514) ! [ 670.831389][T16896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2686'. [ 670.853957][T16896] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2686'. [ 670.883144][T16896] bond0 (unregistering): Released all slaves [ 671.043107][T16901] x_tables: duplicate underflow at hook 1 [ 671.057651][T16902] syzkaller0: entered promiscuous mode [ 671.081532][T16902] syzkaller0: entered allmulticast mode [ 671.189428][T16899] tipc: Started in network mode [ 671.208684][T16899] tipc: Node identity , cluster identity 4711 [ 671.232376][T16899] tipc: Failed to obtain node identity [ 671.253933][T16899] tipc: Enabling of bearer rejected, failed to enable media [ 672.044774][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 672.122520][T16924] syzkaller0: entered promiscuous mode [ 672.153514][T16924] syzkaller0: entered allmulticast mode [ 672.422125][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'. [ 672.614800][T16949] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 672.637742][T16951] netlink: 'syz.6.2703': attribute type 1 has an invalid length. [ 672.696254][T16954] FAULT_INJECTION: forcing a failure. [ 672.696254][T16954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.742365][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.6.2703 Not tainted syzkaller #0 PREEMPT(full) [ 672.742398][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 672.742409][T16954] Call Trace: [ 672.742416][T16954] [ 672.742425][T16954] dump_stack_lvl+0xe8/0x150 [ 672.742460][T16954] should_fail_ex+0x40c/0x560 [ 672.742489][T16954] _copy_from_user+0x2d/0xb0 [ 672.742519][T16954] ___sys_sendmsg+0x1c6/0x360 [ 672.742548][T16954] ? __lock_acquire+0x683/0x2cf0 [ 672.742581][T16954] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.742654][T16954] ? __fget_files+0x2a/0x420 [ 672.742676][T16954] ? __fget_files+0x3a2/0x420 [ 672.742705][T16954] __x64_sys_sendmsg+0x1b1/0x290 [ 672.742731][T16954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.742771][T16954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.742789][T16954] do_syscall_64+0x174/0x580 [ 672.742811][T16954] ? trace_irq_disable+0x3b/0x140 [ 672.742831][T16954] ? clear_bhb_loop+0x40/0x90 [ 672.742851][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.742867][T16954] RIP: 0033:0x7f8af6b9de99 [ 672.742883][T16954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.742897][T16954] RSP: 002b:00007f8af7acb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.742915][T16954] RAX: ffffffffffffffda RBX: 00007f8af6e26090 RCX: 00007f8af6b9de99 [ 672.742927][T16954] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000005 [ 672.742937][T16954] RBP: 00007f8af7acb090 R08: 0000000000000000 R09: 0000000000000000 [ 672.742948][T16954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.742958][T16954] R13: 00007f8af6e26128 R14: 00007f8af6e26090 R15: 00007fffd0ab2738 [ 672.742987][T16954] [ 672.751067][T16940] tipc: Started in network mode [ 672.940605][T16940] tipc: Node identity , cluster identity 4711 [ 672.946822][T16940] tipc: Failed to obtain node identity [ 672.953250][T16940] tipc: Enabling of bearer rejected, failed to enable media [ 673.503661][T16982] __nla_validate_parse: 2 callbacks suppressed [ 673.503683][T16982] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2710'. [ 673.577641][T16984] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2711'. [ 673.736543][T16992] netlink: 766 bytes leftover after parsing attributes in process `syz.6.2710'. [ 673.763861][T16984] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 673.880786][T16990] bridge5: entered allmulticast mode [ 674.286163][ T29] audit: type=1800 audit(1784370296.118:19): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2719" name="memory.events" dev="tmpfs" ino=381 res=0 errno=0 [ 674.353242][ T29] audit: type=1804 audit(1784370296.148:20): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2719" name="/newroot/70/memory.events" dev="tmpfs" ino=381 res=1 errno=0 [ 674.551662][T17024] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20003 [ 674.949662][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 675.004462][T17034] netlink: 179624 bytes leftover after parsing attributes in process `syz.1.2723'. [ 675.147140][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2724'. [ 675.244182][T17042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2724'. [ 675.905360][T17049] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 675.930652][T17049] batadv1: entered promiscuous mode [ 675.946395][T17049] batadv1: entered allmulticast mode [ 675.977164][T17049] team0: Port device batadv1 added [ 676.264129][T17057] syzkaller0: entered promiscuous mode [ 676.279581][T17057] syzkaller0: entered allmulticast mode [ 676.295341][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2728'. [ 676.380273][ T1029] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 676.389712][ T1029] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 679.388964][T17086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2736'. [ 679.471892][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2738'. [ 679.613820][T17096] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 679.712613][T17078] lo speed is unknown, defaulting to 1000 [ 679.729090][T17090] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2739'. [ 679.840768][T17101] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2741'. [ 679.952815][T17078] xfrm0 speed is unknown, defaulting to 1000 [ 680.552315][T17115] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2746'. [ 681.049593][T17082] netlink: 'syz.1.2737': attribute type 1 has an invalid length. [ 681.101421][T17082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2737'. [ 681.158457][T17082] NCSI netlink: No device for ifindex 0 [ 681.991938][T17141] netlink: 'syz.4.2750': attribute type 3 has an invalid length. [ 682.016870][T17141] netlink: 514 bytes leftover after parsing attributes in process `syz.4.2750'. [ 683.198507][T17186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 683.932479][T17198] netlink: 'syz.0.2764': attribute type 1 has an invalid length. [ 683.971275][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'. [ 684.214453][T17203] netlink: 'syz.6.2765': attribute type 1 has an invalid length. [ 684.229170][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2765'. [ 684.722300][T17219] lo speed is unknown, defaulting to 1000 [ 684.777428][T17219] xfrm0 speed is unknown, defaulting to 1000 [ 685.593149][T17252] netlink: 'syz.5.2778': attribute type 10 has an invalid length. [ 685.670773][T17252] __nla_validate_parse: 1 callbacks suppressed [ 685.670835][T17252] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2778'. [ 685.970714][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.093754][T17245] bridge0: left promiscuous mode [ 686.158316][T17245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.299114][T17245] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 686.338363][T17241] netlink: 'syz.0.2776': attribute type 1 has an invalid length. [ 686.348222][T17241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 686.707190][T17261] netlink: 'syz.0.2781': attribute type 1 has an invalid length. [ 686.733798][T17261] netlink: 184092 bytes leftover after parsing attributes in process `syz.0.2781'. [ 686.769524][T17261] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.2781'. [ 687.247525][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 687.288337][T17277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 687.366242][T17283] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.734643][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2791'. [ 687.748944][T17290] bond6: option packets_per_slave: invalid value (18446744073323061554) [ 687.782779][T17290] bond6: option packets_per_slave: allowed values 0 - 65535 [ 687.808038][T17290] bond6 (unregistering): Released all slaves [ 687.980470][T17304] sctp: [Deprecated]: syz.0.2790 (pid 17304) Use of int in max_burst socket option deprecated. [ 687.980470][T17304] Use struct sctp_assoc_value instead [ 688.207017][T17303] syzkaller0: entered promiscuous mode [ 688.225693][T17303] syzkaller0: entered allmulticast mode [ 688.258799][T17310] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2793'. [ 688.375462][T17317] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 688.419085][T17307] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 688.515184][T17307] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 688.553966][T17307] bond2: entered allmulticast mode [ 692.752643][T17329] bond0: entered promiscuous mode [ 692.757763][T17329] bond_slave_0: entered promiscuous mode [ 692.764210][T17329] bond_slave_1: entered promiscuous mode [ 692.781651][T17329] bond0: left promiscuous mode [ 692.786481][T17329] bond_slave_0: left promiscuous mode [ 692.792792][T17329] bond_slave_1: left promiscuous mode [ 692.842006][T17331] bond0: entered promiscuous mode [ 692.848294][T17331] bond_slave_0: entered promiscuous mode [ 692.869800][T17331] bond_slave_1: entered promiscuous mode [ 692.880160][T17331] bond0: left promiscuous mode [ 692.893942][T17331] bond_slave_0: left promiscuous mode [ 692.906819][T17331] bond_slave_1: left promiscuous mode [ 693.107235][T17338] lo speed is unknown, defaulting to 1000 [ 693.151644][T17338] xfrm0 speed is unknown, defaulting to 1000 [ 693.368887][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2802'. [ 693.472878][T17348] ipvlan5: entered allmulticast mode [ 693.501096][T17348] : entered allmulticast mode [ 693.783718][T17355] FAULT_INJECTION: forcing a failure. [ 693.783718][T17355] name failslab, interval 1, probability 0, space 0, times 0 [ 693.806822][T17355] CPU: 0 UID: 0 PID: 17355 Comm: syz.4.2804 Not tainted syzkaller #0 PREEMPT(full) [ 693.806851][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 693.806862][T17355] Call Trace: [ 693.806869][T17355] [ 693.806876][T17355] dump_stack_lvl+0xe8/0x150 [ 693.806911][T17355] should_fail_ex+0x40c/0x560 [ 693.806936][T17355] should_failslab+0xa8/0x100 [ 693.806960][T17355] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 693.806980][T17355] ? skb_clone+0x212/0x3a0 [ 693.806995][T17355] ? skb_clone+0x212/0x3a0 [ 693.807029][T17355] skb_clone+0x212/0x3a0 [ 693.807049][T17355] __netlink_deliver_tap+0x413/0x860 [ 693.807076][T17355] ? netlink_deliver_tap+0x2e/0x1b0 [ 693.807094][T17355] netlink_deliver_tap+0x19c/0x1b0 [ 693.807112][T17355] netlink_unicast+0x77f/0x940 [ 693.807147][T17355] netlink_sendmsg+0x813/0xb40 [ 693.807173][T17355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.807194][T17355] ? aa_sock_msg_perm+0xf1/0x1b0 [ 693.807216][T17355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.807231][T17355] sock_sendmsg_nosec+0x13a/0x180 [ 693.807255][T17355] ____sys_sendmsg+0x54e/0x850 [ 693.807287][T17355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.807319][T17355] ? import_iovec+0x73/0xa0 [ 693.807347][T17355] ___sys_sendmsg+0x2a5/0x360 [ 693.807370][T17355] ? __lock_acquire+0x683/0x2cf0 [ 693.807397][T17355] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.807457][T17355] ? __fget_files+0x2a/0x420 [ 693.807477][T17355] ? __fget_files+0x3a2/0x420 [ 693.807507][T17355] __x64_sys_sendmsg+0x1b1/0x290 [ 693.807537][T17355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.807579][T17355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.807597][T17355] do_syscall_64+0x174/0x580 [ 693.807622][T17355] ? clear_bhb_loop+0x40/0x90 [ 693.807643][T17355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.807659][T17355] RIP: 0033:0x7f3f02f9de99 [ 693.807677][T17355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.807692][T17355] RSP: 002b:00007f3f03da9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.807712][T17355] RAX: ffffffffffffffda RBX: 00007f3f03225fa0 RCX: 00007f3f02f9de99 [ 693.807724][T17355] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 693.807734][T17355] RBP: 00007f3f03da9090 R08: 0000000000000000 R09: 0000000000000000 [ 693.807744][T17355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.807754][T17355] R13: 00007f3f03226038 R14: 00007f3f03225fa0 R15: 00007ffebc8aa478 [ 693.807782][T17355] [ 694.122298][T13943] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 694.225566][T13943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 694.235213][T13943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 694.250425][T13943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 694.266281][T13943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 694.610891][T17371] netlink: 'syz.4.2808': attribute type 1 has an invalid length. [ 694.652701][T17365] bond3: entered promiscuous mode [ 694.778992][T17374] ipip0: entered promiscuous mode [ 694.942552][T17386] gretap0: entered promiscuous mode [ 695.087760][T17385] gretap0: left promiscuous mode [ 695.218561][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.403000][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.729853][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.832224][T17353] lo speed is unknown, defaulting to 1000 [ 695.839943][T17353] xfrm0 speed is unknown, defaulting to 1000 [ 695.897580][T17414] netlink: 'syz.6.2820': attribute type 1 has an invalid length. [ 696.047127][T17417] bond4: entered promiscuous mode [ 696.070376][T17417] bond4: entered allmulticast mode [ 696.076010][T17417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 696.226861][ T35] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.475981][T13943] Bluetooth: hci7: command tx timeout [ 696.833083][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2823'. [ 697.080767][T17445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2828'. [ 697.427794][T17467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2834'. [ 697.515306][T17451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.009089][T17489] netlink: 712 bytes leftover after parsing attributes in process `syz.4.2840'. [ 698.023440][ T35] pimreg: left allmulticast mode [ 698.035946][T17489] netlink: 5504 bytes leftover after parsing attributes in process `syz.4.2840'. [ 698.056908][T17489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2840'. [ 698.511335][T13943] Bluetooth: hci7: command tx timeout [ 698.990618][ T35] bond3 (unregistering): (slave geneve3): Releasing active interface [ 699.023109][ T35] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 699.031409][ T35] bridge2 (unregistering): left allmulticast mode [ 699.106028][ T35] bond0 (unregistering): Released all slaves [ 699.117370][ T35] bond1 (unregistering): Released all slaves [ 699.132239][ T35] bond2 (unregistering): Released all slaves [ 699.146761][ T35] bond3 (unregistering): Released all slaves [ 699.161803][ T35] bond4 (unregistering): Released all slaves [ 699.184025][ T35] bond5 (unregistering): Released all slaves [ 699.220995][ T35] bond6 (unregistering): (slave veth5): Releasing active interface [ 699.231217][ T35] bond6 (unregistering): Released all slaves [ 699.245691][ T35] bond7 (unregistering): Released all slaves [ 699.361326][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 699.765344][T17534] netlink: 'syz.5.2843': attribute type 1 has an invalid length. [ 699.788999][T17353] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.796914][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.804748][T17353] bridge_slave_0: entered allmulticast mode [ 699.821813][T17353] bridge_slave_0: entered promiscuous mode [ 699.842633][T17353] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.860119][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.888360][T17353] bridge_slave_1: entered allmulticast mode [ 699.918277][T17353] bridge_slave_1: entered promiscuous mode [ 699.951898][ T35] : left promiscuous mode [ 699.991629][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2841'. [ 700.144616][T17536] bond6: entered promiscuous mode [ 700.204897][T17536] bond6: entered allmulticast mode [ 700.211049][T17536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 700.218260][T17520] netlink: 'syz.6.2841': attribute type 5 has an invalid length. [ 700.471207][T17544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2844'. [ 700.483454][T17353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.503418][T17353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.511108][T17555] netlink: 'syz.5.2846': attribute type 4 has an invalid length. [ 700.589769][T13943] Bluetooth: hci7: command tx timeout [ 700.724729][ T35] : left promiscuous mode [ 700.806092][T17564] tipc: Trying to set illegal importance in message [ 700.819571][T17353] team0: Port device team_slave_0 added [ 700.846678][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 700.921744][T17353] team0: Port device team_slave_1 added [ 700.942161][ T35] tipc: Disabling bearer [ 700.954843][ T35] tipc: Left network mode [ 700.958338][T17569] syzkaller0: entered promiscuous mode [ 700.981997][T17569] syzkaller0: entered allmulticast mode [ 701.049252][T17353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.056257][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.103405][T17353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.287822][T17353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.306996][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.377372][T17353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.401037][T17571] lo speed is unknown, defaulting to 1000 [ 701.420864][T17571] xfrm0 speed is unknown, defaulting to 1000 [ 701.672617][T17588] syzkaller0: entered promiscuous mode [ 701.713150][T17588] syzkaller0: entered allmulticast mode [ 701.792873][T17589] tipc: Started in network mode [ 701.804939][T17589] tipc: Node identity , cluster identity 4711 [ 701.820258][T17589] tipc: Failed to obtain node identity [ 701.832095][T17589] tipc: Enabling of bearer rejected, failed to enable media [ 701.987151][T17353] hsr_slave_0: entered promiscuous mode [ 702.010956][T17353] hsr_slave_1: entered promiscuous mode [ 702.033989][T17353] debugfs: 'hsr0' already exists in 'hsr' [ 702.047052][T17353] Cannot create hsr debugfs directory [ 702.496881][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 702.671346][T13943] Bluetooth: hci7: command tx timeout [ 703.276405][T17626] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.519774][ T9] bridge0: entered promiscuous mode [ 703.594400][T17635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2861'. [ 703.859250][T17630] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.274272][T17655] netlink: 'syz.0.2863': attribute type 13 has an invalid length. [ 704.840110][T17669] netlink: 'syz.4.2864': attribute type 83 has an invalid length. [ 704.843022][T17630] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.223722][T17630] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.841747][ T35] hsr_slave_0: left promiscuous mode [ 705.848119][ T35] hsr_slave_1: left promiscuous mode [ 705.860713][ T35] veth1_macvtap: left promiscuous mode [ 705.866790][ T35] veth0_macvtap: left promiscuous mode [ 705.876292][ T35] veth1_vlan: left promiscuous mode [ 705.881678][ T35] veth0_vlan: left promiscuous mode [ 706.399268][T17712] netlink: 'syz.5.2871': attribute type 1 has an invalid length. [ 706.874877][T17713] bond7: entered promiscuous mode [ 706.881067][T17713] bond7: entered allmulticast mode [ 706.886788][T17713] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.103753][T12537] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.247885][T12537] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.413998][T17735] tls_set_device_offload: netdev not found [ 707.423099][T17353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.468705][T17353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.490525][ T68] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.507676][T17353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.524557][T17353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.584387][T17353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.727734][T17353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 707.741188][T17353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 707.755684][T17353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.845084][T12557] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.982354][T17745] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 707.990197][T17745] netlink: 'syz.0.2878': attribute type 2 has an invalid length. [ 708.005038][T17763] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 708.376078][T17353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.407948][T17771] lo speed is unknown, defaulting to 1000 [ 708.457696][T17771] xfrm0 speed is unknown, defaulting to 1000 [ 708.475515][T17353] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.532660][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.540027][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.631092][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.638367][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.771335][T17785] bridge_slave_0 (unregistering): left allmulticast mode [ 708.781140][T17785] bridge_slave_0 (unregistering): left promiscuous mode [ 708.796647][T17785] fb: port 1(bridge_slave_0) entered disabled state [ 709.078949][ T35] IPVS: stop unused estimator thread 0... [ 709.147558][T17800] veth0: entered promiscuous mode [ 709.217788][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'. [ 709.604850][T17799] veth0: left promiscuous mode [ 709.744962][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2887'. [ 710.194593][T17353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.310922][T17353] veth0_vlan: entered promiscuous mode [ 710.326011][T17353] veth1_vlan: entered promiscuous mode [ 710.415019][T17353] veth0_macvtap: entered promiscuous mode [ 710.472300][T17353] veth1_macvtap: entered promiscuous mode [ 710.558394][T17353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.657412][T17353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.710824][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.746203][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.787249][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.860586][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.181692][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.211014][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.282703][ T9082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.290646][ T9082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.343456][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 711.571977][T17854] syzkaller0: entered promiscuous mode [ 711.590227][T17854] syzkaller0: entered allmulticast mode [ 711.815361][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.824988][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.835483][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 711.855808][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 711.871841][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.326366][ T5623] team0: Port device syz_tun removed [ 712.521795][T17876] netlink: 'syz.4.2903': attribute type 1 has an invalid length. [ 712.530745][T17876] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2903'. [ 712.547733][T17861] lo speed is unknown, defaulting to 1000 [ 712.610268][T17861] xfrm0 speed is unknown, defaulting to 1000 [ 712.700645][T17879] netlink: 'syz.6.2902': attribute type 1 has an invalid length. [ 712.781823][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 712.892375][T17881] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 712.986505][ T5353] hid-generic 0005:046D:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 713.371448][T13361] page_pool_release_retry() stalled pool shutdown: id 154, 1 inflight 60 sec [ 713.804661][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2909'. [ 713.962405][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.971310][ T5629] Bluetooth: hci0: command tx timeout [ 713.986860][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.990392][T17914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2910'. [ 713.994123][T17861] bridge_slave_0: entered allmulticast mode [ 713.996126][T17861] bridge_slave_0: entered promiscuous mode [ 714.018621][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.026013][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.033246][T17861] bridge_slave_1: entered allmulticast mode [ 714.059003][T17861] bridge_slave_1: entered promiscuous mode [ 714.092826][T17861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.112998][T17861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.194389][T17861] team0: Port device team_slave_0 added [ 714.203424][T17861] team0: Port device team_slave_1 added [ 714.242008][T17918] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 714.266559][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2911'. [ 714.267360][T17861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.306192][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.332306][T17861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.344918][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2911'. [ 714.380162][T17861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.387175][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.427956][T17922] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 714.443983][T17861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.558541][T17861] hsr_slave_0: entered promiscuous mode [ 714.566436][T17861] hsr_slave_1: entered promiscuous mode [ 714.581892][T17861] debugfs: 'hsr0' already exists in 'hsr' [ 714.588027][T17861] Cannot create hsr debugfs directory [ 714.907534][T17861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.166081][T17861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.187042][T17936] vlan5: entered promiscuous mode [ 715.192858][T17936] gretap0: entered promiscuous mode [ 715.506847][T17861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.573108][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 715.865929][T17955] netlink: 'syz.6.2924': attribute type 39 has an invalid length. [ 715.876621][T17955] geneve1: entered promiscuous mode [ 716.010633][T17959] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2926'. [ 716.144489][ T5629] Bluetooth: hci0: command tx timeout [ 716.188362][ T30] INFO: task syz.3.2150:14642 blocked for more than 143 seconds. [ 716.200428][ T30] Not tainted syzkaller #0 [ 716.205447][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.215241][ T30] task:syz.3.2150 state:D stack:26672 pid:14642 tgid:14638 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 716.227597][ T30] Call Trace: [ 716.231005][ T30] [ 716.234051][ T30] __schedule+0x17d9/0x56c0 [ 716.238629][ T30] ? __lock_acquire+0x683/0x2cf0 [ 716.247010][ T30] ? __lock_acquire+0x683/0x2cf0 [ 716.252708][ T30] ? __pfx___schedule+0x10/0x10 [ 716.257736][ T30] ? schedule+0x90/0x2b0 [ 716.262736][ T30] schedule+0x164/0x2b0 [ 716.267047][ T30] schedule_preempt_disabled+0x13/0x30 [ 716.275185][ T30] __mutex_lock+0x7bf/0x1550 [ 716.280546][ T30] ? __mutex_lock+0x5d4/0x1550 [ 716.285453][ T30] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 716.292189][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 716.309928][ T30] ? net_generic+0x1e/0x240 [ 716.314529][ T30] ? net_generic+0x1e/0x240 [ 716.319092][ T30] ? net_generic+0x1e/0x240 [ 716.323655][ T30] ? net_generic+0x1e/0x240 [ 716.328213][ T30] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 716.360617][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 716.366785][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 716.373421][ T30] ? bpf_lsm_capable+0x9/0x20 [ 716.378151][ T30] ? security_capable+0x7e/0x2c0 [ 716.383150][ T30] genl_rcv_msg+0x614/0x7a0 [ 716.387708][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 716.392781][ T30] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 716.398893][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 716.404380][ T30] netlink_rcv_skb+0x226/0x4a0 [ 716.409234][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 716.414304][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 716.419663][ T30] ? down_read+0x2be/0x330 [ 716.424211][ T30] genl_rcv+0x28/0x40 [ 716.428241][ T30] netlink_unicast+0x7bb/0x940 [ 716.433417][ T30] netlink_sendmsg+0x813/0xb40 [ 716.438233][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.443569][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 716.490930][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.496307][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 716.501395][ T30] ____sys_sendmsg+0x54e/0x850 [ 716.506225][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.511671][ T30] ? import_iovec+0x73/0xa0 [ 716.516317][ T30] ___sys_sendmsg+0x2a5/0x360 [ 716.521058][ T30] ? __lock_acquire+0x683/0x2cf0 [ 716.526169][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.531573][ T30] ? futex_wait+0x2a2/0x390 [ 716.536337][ T30] ? __fget_files+0x2a/0x420 [ 716.541066][ T30] ? __fget_files+0x3a2/0x420 [ 716.545826][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 716.551090][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.556719][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.572975][ T30] do_syscall_64+0x174/0x580 [ 716.577648][ T30] ? trace_irq_disable+0x3b/0x140 [ 716.582709][ T30] ? clear_bhb_loop+0x40/0x90 [ 716.587457][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.593418][ T30] RIP: 0033:0x7f1c7659de99 [ 716.597877][ T30] RSP: 002b:00007f1c773fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.606332][ T30] RAX: ffffffffffffffda RBX: 00007f1c76826180 RCX: 00007f1c7659de99 [ 716.614583][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 716.622570][ T30] RBP: 00007f1c76633eaf R08: 0000000000000000 R09: 0000000000000000 [ 716.630578][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.638589][ T30] R13: 00007f1c76826218 R14: 00007f1c76826180 R15: 00007ffe4d05a9b8 [ 716.646599][ T30] [ 716.672948][ T30] [ 716.672948][ T30] Showing all locks held in the system: [ 716.690772][ T30] 3 locks held by kworker/0:0/9: [ 716.697291][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 716.721963][ T30] #1: ffffc900000e7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 716.735539][ T30] #2: ffff888058caa250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 716.746598][ T30] 1 lock held by khungtaskd/30: [ 716.752969][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 716.764143][ T30] 5 locks held by kworker/u8:2/35: [ 716.769971][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 716.781250][ T30] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 716.791294][ T30] #2: ffff8880833807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 716.801903][ T30] #3: ffffffff9a9db268 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0xb0/0x380 [ 716.813348][ T30] #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 716.823555][ T30] 2 locks held by getty/5377: [ 716.828337][ T30] #0: ffff88803269c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 716.838849][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 716.850608][ T30] 3 locks held by kworker/0:3/5738: [ 716.855953][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 716.868031][ T30] #1: ffffc90004ea7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 716.882574][ T30] #2: ffff88807aaf8250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 716.893380][ T30] 3 locks held by kworker/u8:17/6175: [ 716.898785][ T30] #0: ffff888031fc8940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 716.912102][ T30] #1: ffffc900061afc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 716.926437][ T30] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 716.936471][ T30] 2 locks held by syz.2.1593/12323: [ 716.942435][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 716.951314][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 716.962370][ T30] 2 locks held by syz.3.2150/14642: [ 716.967617][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 716.976708][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 716.987198][ T30] 1 lock held by syz.1.2800/17852: [ 716.992927][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x6e4/0x1060 [ 717.003153][ T30] 8 locks held by syz-executor/17861: [ 717.008647][ T30] #0: ffff888034a12450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 717.018403][ T30] #1: ffff88807b59d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 717.028614][ T30] #2: ffff88802a01ea58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 717.040374][ T30] #3: ffffffff8f8a8d80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 717.051103][ T30] #4: ffff88807ebbe128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 717.062181][ T30] #5: ffff88807cdea258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 717.073217][ T30] #6: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 717.082809][ T30] #7: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 717.094342][ T30] 4 locks held by syz.6.2926/17958: [ 717.100402][ T30] #0: ffff888057201f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 717.111073][ T30] #1: ffffffff9009abc8 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 717.122631][ T30] #2: ffff88807acdc0d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 717.133668][ T30] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 717.144808][ T30] 2 locks held by syz.6.2926/17959: [ 717.150796][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 717.159014][ T30] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 717.169570][ T30] 1 lock held by syz.4.2927/17963: [ 717.174796][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 717.184145][ T30] 1 lock held by syz.4.2927/17967: [ 717.189378][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 717.199000][ T30] [ 717.203310][ T30] ============================================= [ 717.203310][ T30] [ 717.212316][ T30] NMI backtrace for cpu 1 [ 717.212334][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 717.212357][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.212368][ T30] Call Trace: [ 717.212375][ T30] [ 717.212383][ T30] dump_stack_lvl+0xe8/0x150 [ 717.212419][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 717.212444][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 717.212474][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 717.212502][ T30] sys_info+0x135/0x170 [ 717.212522][ T30] watchdog+0xfd7/0x1030 [ 717.212561][ T30] ? watchdog+0x1c7/0x1030 [ 717.212591][ T30] kthread+0x388/0x470 [ 717.212611][ T30] ? __pfx_watchdog+0x10/0x10 [ 717.212623][ T30] ? __pfx_kthread+0x10/0x10 [ 717.212639][ T30] ret_from_fork+0x514/0xb70 [ 717.212657][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 717.212673][ T30] ? __switch_to+0xc89/0x1420 [ 717.212688][ T30] ? __pfx_kthread+0x10/0x10 [ 717.212704][ T30] ret_from_fork_asm+0x1a/0x30 [ 717.212724][ T30] [ 717.212735][ T30] Sending NMI from CPU 1 to CPUs 0: [ 717.331670][ C0] NMI backtrace for cpu 0 [ 717.331689][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 717.331707][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.331717][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 717.331754][ C0] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 717.331767][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 717.331783][ C0] RAX: 0000000002775811 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 717.331795][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380 [ 717.331806][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 717.331818][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 717.331829][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 717.331841][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 717.331855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.331867][ C0] CR2: 00007f488e1ed2f8 CR3: 000000007fa80000 CR4: 00000000003526f0 [ 717.331883][ C0] Call Trace: [ 717.331890][ C0] [ 717.331896][ C0] default_idle+0x9/0x20 [ 717.331912][ C0] default_idle_call+0x72/0xb0 [ 717.331928][ C0] do_idle+0x2e0/0x540 [ 717.331950][ C0] ? __pfx_do_idle+0x10/0x10 [ 717.331974][ C0] cpu_startup_entry+0x43/0x60 [ 717.331993][ C0] rest_init+0x2de/0x300 [ 717.332011][ C0] start_kernel+0x392/0x3e0 [ 717.332067][ C0] x86_64_start_reservations+0x24/0x30 [ 717.332125][ C0] x86_64_start_kernel+0x137/0x1b0 [ 717.332142][ C0] common_startup_64+0x13e/0x157 [ 717.332167][ C0] [ 717.518302][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 717.525271][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 717.534393][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.544647][ T30] Call Trace: [ 717.548125][ T30] [ 717.551068][ T30] vpanic+0x56c/0xa60 [ 717.555163][ T30] ? __pfx___schedule+0x10/0x10 [ 717.560026][ T30] ? __pfx_vpanic+0x10/0x10 [ 717.564604][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 717.571228][ T30] panic+0xc5/0xd0 [ 717.575180][ T30] ? __pfx_panic+0x10/0x10 [ 717.579814][ T30] ? preempt_schedule_common+0x82/0xd0 [ 717.585291][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 717.590674][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 717.596838][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 717.603004][ T30] watchdog+0x1030/0x1030 [ 717.607353][ T30] ? watchdog+0x1c7/0x1030 [ 717.611788][ T30] kthread+0x388/0x470 [ 717.615869][ T30] ? __pfx_watchdog+0x10/0x10 [ 717.620562][ T30] ? __pfx_kthread+0x10/0x10 [ 717.625258][ T30] ret_from_fork+0x514/0xb70 [ 717.629968][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 717.635146][ T30] ? __switch_to+0xc89/0x1420 [ 717.639866][ T30] ? __pfx_kthread+0x10/0x10 [ 717.644516][ T30] ret_from_fork_asm+0x1a/0x30 [ 717.649409][ T30] [ 717.652800][ T30] Kernel Offset: disabled [ 717.657144][ T30] Rebooting in 86400 seconds..