last executing test programs: 3m35.986278288s ago: executing program 4 (id=5051): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @func, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x4, 0x0, 0x1, 0x40, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x79, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x5, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[{0x2, 0x5, 0x4, 0x9}, {0x3, 0x5, 0x1, 0x9}], 0x10, 0xffff}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000380)={0x2, 0x20, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r4, &(0x7f00000003c0)="eb1a89fa710df6b1672926410b78fffea4bc07875b58eb67e3c47284047d59322c346047f0dedb6981d1ecc3eee7977f894fcc179332ca5a10cc11ff9a1a9260c455eb0d5b03da894ff5c601bdf43858c651da6a421301854ed7f7ee9e0e44e36f59ad10e784c3c38eeb75ec932aa3878090cf53b446dbb65992b85b7f87869e0b376c5714f9dcc1ae7b3b94500a8640067174bf2619be590e244ed946fcd2653e4c93cd770b079265766165e4ddf05885bc6b34099d26ed796c3c87e11d1ed9fa47aa991194ea902a25ee78b790d097fead5ece245a894a611ffc657f25d4e4df0354495afbf38fed5d78d8ba1ddc44b94491f191f6", 0xf6, 0x801, &(0x7f00000004c0)={0x23, 0x0, 0xfa, 0x5b}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@deltaction={0x22c, 0x31, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x30000}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9a5}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800000}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x482}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendto$phonet(r4, &(0x7f0000000800)="c12ae4513fd42b22329b7724546da1fbed535a5ece241a2fbafafb19adc4b3b7a6753a20990c2a39fd0cd3385f19d926042b8a0665e485422d927441e96e214985f3af0224", 0x45, 0x4000000, &(0x7f0000000880)={0x23, 0x0, 0x0, 0xf}, 0x10) sendto$phonet(r4, &(0x7f00000008c0)="d8802cd71e07d1dfea0a5aa69bcd6e870501e03ecb519829ded4681f6785f9d91aa396a89e80ddd92fd6a6565cc76b76be1ea365b561420afa3656a86f32a37738de530cafbb70f7ab2fb46f2a5df4fbc9b297276f72b5b45fe79effbf17b15413f237216d31a32ddd22a017fdef71079aeda9b84bd90fd5271007645738f6a0a5e1be86b06c5b200b0eec7e42ed73ee3150c8fb11c044a7eedaf8b6d55b5f4da4fd5f0c3818432cb3511a8657d82687f7779a6f57d4b792e96090f169250c2b2b00ec6fa4a5e93662e0f12439d954e5b03bfc2296dae5aad4c3da3fb88ba6547fca4fb00f3fe1ecdb734684bd67cd9b127e36a74cf7db40c5dba9e1e60c42159158f277e3b0e19b7599c98674f8725933b7328d34ae1994329b53f543ce3c01378b4ebc209014bc2fab94a160827b9f7806e7cbd01c775e8cb96c7ce0aca08426d887be050ddc675e0d76608a84360e6aa1e6b658c3d64fd58e925af69bef3deab5e34b8a0a3b5bb4d432dbb2c8696b3fde74e079fa5608d38d0d91be0def2283f138ee4dda7b22fe3224792ecd98c27ca162abc1a7099a905bb355140cb81bc9020bc6d1abddbfb4529831a0231cff1bfc29986edfc901333865da7be2646d61c0d6a639895848a26df9319b58d5fe99b9275adfba39157834777fb89b4cc807a2aee9d37d330b5a4ecbcde192aa080b40bea18f55000cd02db31bb0e099691237d2a34848e52f9b24a9cefb15c73d10ab06b72a9a5656d69633d6b0adf57e2c6b164c665bb3441f3801377a85fccf767975bddd6916076c32d0246b95b82280bcf6fec2ddd13e75edbf1ee266b77e03360d6001f2c2f3705424d03ff18e0f8e977905be2aa2c0592f342d286523f53ecaf3ae9c22331a2f1df39a61aba1840ed587126157d485de7ae46a582a83ad412757ee508fe5765854da93acd144d0a0d0ae1167319eb4ca44caddb3080781ce61297a38875f3da65252584952772ff2531d97ca110da623d45063caeceaff5a0b782180495f8058aad2516992f87ae05840d7c73bda442364b2b96c2b897d19d09ebfaa172522e55205a02941df4e056a4df7b9d282b45deab30af3d76791e0ada62a7800dacf8f2c1513f30840f23efc1bab5c14d1b937c7bb6caf0593a6ba298dad274b058808f978b9c321d97b9ac62a85fcbf55f17bb2b78d8c3931cba0b76342f69d1e96191fcfa52b247b49d6f6aef011e28d378d39da99c9b14bc1c7c024adb3d7bed55cad2577fc65675b818d86133fb1df63c5c4be541cdc4a1a8af6a1582ed9b5603e4bf6c516f9aea985c8e65cfc2cf74484cfb46418e2e0ae72878606d53d8073425c9fc079a345f136b1acb48473e21412d92e0420b3bdb60e66349791201ae03431650e70b90e6df093f9c6fcfc6b5db27d24011e0254751c4203017ed0d56b9fd7bac6c52446538024966f6a88d7d9747e84a6c34541fb4b2f03bbd682d3b6ecc3c52fed5844c851b754dfb4d1487d3d895db06bc807d9ac6556fb65952a49edae467308fbce9a486812602a5a575fd6d3c7594c6d2ae4bc5867b9dafdcb261e2fcd686d26a24402735bac8bdbccb9bac3edcbbaf2628cf4ddadd98a673963cec0108b46bf30772cdd0c8a09671cdd0d5de5a0fdf934ddd4f64a637c55b94b9596e92aead4fecbd781f56336ff172b4dfe6ad82ccd77b2e09229e74ebe206798a9a0f456a6f26e46ec8c443077fdd9a3778ac7259d9983bb2a6048d7b88d123105738fb0c237cc8c957895ee65a5f95a199bbd39f367509547814956e272c4b28d11d0d263d3f546ca546a321c849fb06ab46ecfcda615b4aa9fcef7cac57e2cc7d6cef83b75334f68c6cdcde329f78a3c26901bd8579fd3cad8d4291351a1270fdac7426443e831ed3c1d363fda4eaea068b39e9178e86ae728bc78507c3cb2dc74f09b2cbc304f0950218b5db22911d23ac13fd5b883f1a89dd3ac65aa5ce5cfd7e1d4fbe5a08910880aed5b20702b892dbf91da65eaa0ba8b33d60eef25d78617a8c1d775cea3fe7b4723d24634fe4c2476631ba09f823bc4eb005496314a1da395fda8164da98e823acadcf6ada1734269a6a168b92f6a9a401cef4d5987c8ef862c8cf81a11423e9ffab61b53d6f05a8f6cfadcc2c32deea76fa4c6e44550deb2b6e79dec187ba47d764d27f69467f229b3b212457cccd129a8b290c7fc4f2a2e1114bfddc6615e2441d9dfd8585bccf681b6f28399830057ede8c45e29ef4b96492a454832cd91d5d09471041e4b10f8c997da5f2a35eebbee0baa7a2569672dd7e5e5f90d015793445029f1ba36823836dc27075f52c527a45f139eecd6012719839e093a458851a4f5e3e7e5438043aadbd49205e00beda018a50e1f71fc35bb5f75ae53b31ab68e2d6ec6f89ee06316ecbc32270bb75645eef86563ccb4929d065fa212dee74fc6cd0e50f538e85e885f340b2b57670da2033fc46db2fe8828d61995973cf4a3a738cc5ab76c69ed80616acc115ca6baf5b302b0e9c01a44646bc6b443b89024a686cf14e2af290a802d9a7d7f4163f33c96b5c09f355b49d0a5215832091101a1a58c333f871750cbaa987b0727aa35dcceec10ddcbeb7cb8b9837e191219efbd93e21e78c5ac8489b07adb8fb417e7b8435923912f1ce35c9d8c202a7fa021d872ab5ae4d9d736fb7dfa9aa3accf4e5e0ace56b890047b74ab0f77702520930ace569ddb12661dff712272d4131ab164f6960af7c00ac3a8edc3067f42fe412d7a6654ae87249bc73448e0957b6f93060a6920a26d8e7b8fd21c0b3c782c43b3f71709389e8ef467558a514bafb194b57029f420cd19bc596e00bd1bb3615569c3746a4e9b7190638ec1ba4f2270cbb1965ea3e0ce142bc4f5300ecb8ca3c98d3be800fd0d367e60040a49ef08a391793cb81a31854527b3977b430c027b2dcf32435633e29e02ea395f51c2cc492ef0eeff14fc2e0e44ddc4c4a9bd45c7a4ecf721c201385a5777957c46ac08b988938377276f5677636c269d935634318d34df39ed8a8459cf966ee209edfba848d4683aa8aa0f08e94abb5ac1fb01d110283de226b185878632662fa9fa707d0e7bcf2d808c27a9b04845ba553f65e9eb46d5fab55607b8d45b834dee3c6efeec4dd7f48bbd15b5fc81ac2d55e1ec0fb4e330fb245625a5c458b7da7b5e019fd1a3c69604e03ac5a877055ec597d301568998580e38a110c4982d00059e26a0016d0fd193dc4bd02cefd83c156d6ad9fef81f5d5641c1322b178127581983e3e9b785a14ccdb29fd385bfa71c27d7576a5e888dad5219e3cd86e7a2a69a740f1d310ef7b108326bc7d904cef68eb76ff167bd49b680651b8ea54790d5056300bc57eea80b821b7dbfc23d4abffe3c2c600e63975ad69961f79106a41dd4ba276e23ea9fd922e6cd2a74b7c61412fffd4aee619c792fc15fd393e23662e9a537addf144ec0f29c013f40b5e548bb13603aa15deda54539ac3361c2214a09564ca12e9ff98ce572eb1571e7a4786edc8fd65ff932d965954cb07a7c47d002b03b6dbeb186b4b45ba01970672e4aa07f94aa9ff96472174757c5199a7733d8b284664c1fa34fce4265b9b25b3480489c67cd7cd463801b01e6976138b8d290ddfde009623fffc4d03cc2fd338c63d046c797e0cf8fd9ea5ba606280f11f2ccd96b0ddb877dae7a6cd63d3b86a5bd5afbca79e1a679454c7ac2ce569abe1d19fe822088c5602a859590e083d6565c62a92c8df83fefa618b99addc4cd8639c8a2cda69dc67ec9e01bc0158e0d4ab01f50e7f6a06740d3bbc1e8b863d30988e05c2dee39ed7599a83d063d97588cf4a7b14a23a501d74ff84df378d5bcfb9251759bf3be19845dfcbc9d195aff55777e3be48181688d83103e41818354f191741725633f99a1dce86d7e966bd53e42d1d3c163aaa1d837393ce2d2809f1129bb1e8d1079cc7af199c0f79f0bd3efb698c29dca3c47d4f9578717c03cff4a70ee4688b5a5715f2196d0fd68448e8d99bfa091e0100587962469959479d8aeeb656f176a5e77d36f14af031e0c87d4a8c5ce2ff4a53396b54f8b306e6b3c8c43e4fbfd3888b23a55911ca7b2a692af2c88f2fd7b3fe51ca2ebb8c0a861ab2e6fdf4692e4139a8bbc59b88c1f9d6beaad111f0d2b2f2a74d0e3c4e946fc31b4e4242f6e1905971849052689c1bc32ca9740504d94ac82a4f5fec3cbac85282e9258a86da1114e0c5a6b760cb6b51f7cface7ed5aa5756735bf65eb42e20fe1c2a31a5a9086b2142b06ade69b63949690390726113c4db12d19e48411279a23727e80980a078f861cad33b7c228866e8cc3c1b592f6d6772bf2b46f459622c1df90de564cb6a35d3ba6b429c88a8e078b84d7e1de7aed74ac4b7e28078e48b5e904afa0d4f9297b93cf2c58305fca7234f6bfa1ab764c2e9ebb76b751db983baad5a4a347c14488365f8b545e3ca9fbdd5df4cc8790cec33555778b408ea5f65400985d207de7fe4e073287abedbee0ffeb6a7dd73b3a3747518ffbfb52eae5db6867c2ce8b3acd9ee3db90124cda2ef0ee0efa94fbf7edd65c4c7f5df5c7b50e396c370d5590dad2a8a8fa44f82db85913b853666e101f425130553d0833b59449d9c247371d51f5376b673433c6aaf3c7a199c4a6facf4fd715296cd8942d24a60be609a003975ba0fa485d96b0696dfd8322c26a14f475a17c7b351df83f83942d80f1749f2c46e7bc85f4e58b8a49c34f266e533f7b9e4f9acc420dc9972eccf72e15c8050b432323679ec4d22cd30630b5eb8f06bcef378d49804a50dd0de6df80a9483deb383acaf0b81f1a93a536ff81571c3e942daec0f7581e31510ac1b68016eea6b0dc92555e0f89778f924e09a66e30c6516094a08bcf3968ada746ecd113bea871388251c1ecb3c03572385b671d21c4961287a6e286c615ae6d309dd273102fad46e826c7a9c720ca8d8d6933eb0ba75af98e24b3705fbb04b65d7ce694a006dbe4ddd9f25f03c6de96a64aac8539ee5a602175ffd7074f04ed46be833a1e188f6f924fb1353ff54da129aad520c1da52f737edb500a029998ef8746d43e74ada9b3d0247e69715b7ec7b71783676ebd4dbacc30f77f4c75e2d641defad20675a823c26262fd69459d035e3185a6389322527a7448f38f8449b639e4acd6b05236a22ff4f7206a8dda0dfac72878fbf59ddec9a0086ead0fa24838d3c37fa696a3ad1d89971d625bce5e2a394fb0463430c4aba6cdc484f508431feeeaf97ac6a208cecd0eb99bb9d9456f888475fed373caf49b39d74ff7b0b26eba32861b9fae5adebf51f30c1e2fc51fd257331d354f2be6367564fbd74cb15ea89a1d309f5623c05c0913f40aae010cb5411ded74e3d64d9d55549f9a246fe791937b0077d4e3bc1984ca1263fe2ec31538f220bfedbbc11ada70cf503770d50a83ac19cacfb903222bd2e5872bd474beacb53f69d2bcb823f501a5cba01b63dc8af43c8d11c470407333eafcb15defde286a7efa731a76592fec403b8ffdc1bfcc86e0ad4e31f7004db4f9266422e8660a4d26f8ac4e6ae245d7a462c71ce60ade716bbf6419a729ee612651abd73b9fb8f777607b9c5ae1a974b7d5489ed00c95d000fa6763fb25931ae752266b4f7ea6db6449b91add67d1b3c76c98473e791c0853b1561f79ff1c2b818a4b1faa832bf56f5d799b69534134091cca4b2e2140419e2bfe7581c62f0cddf5fc2d4cc48ba78346a8a02b7d50a09dce7e1ccf1df12ba501fc09f26b699157f6bda9", 0x1000, 0x40400c4, &(0x7f00000018c0)={0x23, 0x1, 0x3, 0x9}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001900)={r5}, 0x8) bind$xdp(r6, &(0x7f0000001940)={0x2c, 0x4, r1, 0x8, r5}, 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r2, 0x95c17000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001980)={0x7, 0x2, 0x8, 0x7, 0x9, 0xec4, 0x7}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r2, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0], 0x0, 0x69, &(0x7f0000001a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001cc0)={r7}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001d00)={r6}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001d40)={0x6, 0x201, 0x5, 0xc}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001d80)={0x0, 0x1000, "6689aa1572e5e8ce8d65a068eaf182d33e8d5bbf5eaeda3f7ceb71bdd29337886717ccdea0f0bae139fa972fa9204f4a5199669bdc927bb25545e224f711480353f1c75a497b50dae956cb54ac2b9f09bf609dedd85dd7630a384aade3951be7fb0e23ac667a3208b06578cf752879d8754b011a4ed281de32ebcfae69720629508899c312224f27402bde3feefe57f2bf5167c25ce6a1553745f1c158c442d42754af8f4d4eddc70f26d14ed8e1aece9fec771aa4bd8f6eb1a2dbd6a87da721f6754b4246b531851918a15eaeeceaaf4e0116a90ea1f61e0fc770b64389a9893e2475f9086c9240fc1931c78d5ebc8229737f79b80295f85157f2683d76f3a8858f38f06ce3af16acce60185e9e21c47c0967b2c195e39f7fea43b49a5a7fb8d705b98be838916a68a05922a5f6cc08a5ad3a4ce99366ae7a4f84445fea3b9d74fcad338508a29c7f628ded7445a35defbcad6cd9444bfc575b3f180cdf4ec988f3ca0e3a0716519454d7f4e9b99e43d4b143956bd49ab646b02258e2307d517f45a2b4e7b3f5cfc0092fe7d108a30e89a083ef1b40bd3b104e00667b2fa1d285ceb85ada5bd73276f7c75f8b93e815581bc2b260da62e85e342743f269b929c3246a49a11b8c8019cdf0678bab62e03c13ac0948b3db80fd8652d84a0864fe9df455a9990db9c20fb4f3b36fcd9153b5a27c547857e14fbe09bd0a5991b27bd903d79ddd283fb70cf8f4921a623f1c2f3b2e6adb495b9c3abbdcaf348fd053bd35ed63a8e39cb7a3cc9c756766ef7dd56d5f61bc88e659b7ab4892e6f118339dd82b50edb37496642c3f7ec0de62c6c1a92b6e1938036bc16f9aa8de4cbf0ae799d12051c213d861f8c42a098eb28d57e3b328bd1547933c0611aa882041065ba190e48625b6d3b0dddfcc78317aceebe6e07e4662654b14a32e27f9190cf70051fbcd6a6c1ba691dca3ad921b38603222bb90b8b1bee16ac0a4aaf4a77ae3247cc7292c93e2134ed7049d6b6b412f75c53eb91c23f9bf6be97c59da91d4b368d6d6be2c97db1bacdcc640d7a2fa235005b6b28f3a62f10700754b78b2a2b9a76431caa3561ff075905896ec08605268511e7c5a6d97f159e8cf9c10c18336917b7e751f0dcf74b4dc198b9c1f3f1e55d3dffc049f01ac7e1383e0fe11ef2da14b6667ce4fc8e273e972d6f0a27342a71c51e35283abc5ee56957cf5b386e755f9999751c94fb0392287f94700103b134e4c93b6346192c2a5ac5e8488478a92106f9b604f80af339529b7a15429e7b395ed7977ecd4302234223eb6b3cfeecb99196587e9ffe5ada291a36c9c77fcb3aebdd512b6687202d1f4af8ce0e4c154fd31f697ce03533642b48d6493eb4f95671132fdc74928c3712fe6cde9bdc1741779266c12f2b9c89ad04d627ea05e54ecc5f2ffe9d2eb69ad42427079747ff10860900e666dd9e8cf6000de60c8fad46a1792a4063e7d259dd34a00a6312476d39ac097e7edb0be494f5a4873a1c04a3d84c629fa8dccfb07b56493011ddc12aa7c7809bd61106072c7f3ad8f64a5cf1ea0dfbfaf9e87ec31f4cc68a31e4c467eb92e0b923ab8bde2e9b0de34cfb623846374e0ad658a6b16d2bb881754ce7000b1f47652ec055f5e1a14c473061df8f1712b2447a8385b7c280fa8ba88c7bfdee5da2deb82385c62b3e21d18799197f607339e8a54c054484b6fef2ba75e9685ce0e97258fca6bc6fbfd3e3f6d3ba50725ee0cde61405947ed3caea69946f0254c9858b39af906a33da71848b8a9a85596c089d25d075df7c2ca676f75a0af4fb9305e1a9063c80c5ad45da9d9a7a2ad981842cd48d8998d7a55a75944ec779b93442587198d54293a3fb642d5a6e9b58db7e390a659993aa329eb1c270a9721fbb15d04163aa9c2488d068d246de2c95d0cb36caf6911d5be3fa54f480b0a01e84335de9f141744c7e1d4c8f5869d65fa149ca38393a08d7ff972626b6031a1fa8382af221a6685a26fdbc736a9a24ffcb59377fe6a19e33e1825b4a1a8685e593f7bed291b21ce5318b21bfd30e310c1385dd8b1708ff2dea896a400cf8a308e58fcee3a8ee2db4192700067bbade2188543f9b8516f1724808685c9004c14a3863d8c8e95d683ff8e91d88d4ddcde9fc3842ce4bd2e29e1f35be8368342c2bb1da988b70aa9ee9a2e67de6c294e6c24cbe6c78d9234bcbce6b5426a2da4d3a330e646207e1a4e1bdee892a8d95489ce910b6eb0dcff84100828740349bd62dbf9c9d54a6ff46a8706a78c7a7bf65d13fa9b2ff07fe7eb04b8067a0d1675425a6b722045983871d69da06d4a1d7521938d49745bc5b1eb8fc88706ec6c59382592fb895341ddf0e7c76c1422b59eb667237e107c1d221be93570f8a448541fc80673f5885fdde0d6eca8895971c7083e18ee1974164c169abbbcd06843ae9d3fcdca98906f5378a2bddd665a2454eea56e066278a5a5b597caaac4ced8bb5ed78fd72ffe17b08a2be8f48da2c1f1be40c7cde6c4e912fe92a748199f4d2bc2b8ccaf07654120e10cff0cd579cd7a49f559a8fe490b52f45e8a5a0e3d02af1d7bbcf17591f85930bafa25237e0f35c9c2b00f48867ac6088ac98582d998ffa0212645a668b77f3c2b2950e01dac9f532364cc26dca866b634ef761d2c29cbb08d71152b93b88c41c06261df21afc30e5a9d38bbf8df25b2c67ef6e45ac2b80965b9156302b0efec2b460a5dadd622e6ef0822a1e2ed7c811ad3e3931eb9d69967c528944a25e06aa8efc395668712b12b7b73235e99349c207b3cf1956472af4c73f78e2e8c5b14f76f84b25706a9a9b2db704e2b31fcd272152049c78bc64e72281e287ddf2a47247292e06d7028b8146b06d69a18fbefa2519d95360b204bfdbbb5f701e6b7651745c34549835eedfb16a56178f433fe8aa2a30ca403fe08a2f248e28c2ce79487ce8ac2c9eae5c7a2bfb5a9c701107db0417fef23ca24d950ff3c9dde5dfdc5961ca213cfb6769f64a653296496e06130871187645f6e5a71cced8331869601e59bcde2477b96ef7c7438a2bec875482876a5cc0dc683673f41e35939132d4091af109ebeae4b869a7027c5400134fff554ba0ea76b39fde0b8de6d10d6570487c2605e0f1517ea9402f418143111e522ae6ad1abdcc96c1c9e9cb8bb970b0b39c0e9870e0a85063d96e85254e077ebdc7f76711eb13ece3bad65c4900821e499df2942ff65412e72f0389a469ffb147d946b3628c18ff0bf87608f3578f8d1dc4bdaf606fd145f64ecd5290d4efd5221d3162b89f8209dbbc6af36d0cb6dd6bc6809fe31f9f2a477a955c18831e17e5e3193599a8549bc567aeeb4c1788c3b66a5cf22b1158865a11ee60187f15b906cdf354160fb782f6c13adb86a8478ec613d5c8a55dfa964b419ca368f837af58c3faa0be4f69812ac6deaca9b17f82f434e9923dc438f45174e8a6ad3ff1cb80a1732ea37bd4e6cade016907dc03d60284635d8ba46bf5c62acdfbb15778c8cf3fddf8c87dac6a45baa2e88d1a073d247848e8c816feb240955599598e04ad28930a54349c713ebbf52f9ea0343cca331e6dc234741982ed75e4f47b10c893bb87d7348fcd6ffa9f39b8482c0260aa4034029d1bd3b73bb6c32aabf296a14194d183d6f5a79ad60d35b7b03b66862f5c2a5866d3232a2d2792c14da67cd9ee0ebdcb1d08af74864cc95d1d2a0b37905f0f01100cac23d5d285d5089ccbc682f8d043a052ed26086215615e7e83f5773d52f257fc5bfe87346117526ad9e82038f044a018e53e84c57fdfc5762771701c4170273f6cabd3bd16117b1ccab95a971c23dbcee001ce04554ec69c7d1c4b3d4ac2a02a0ad5db31300097a265d226ee73acd993729a1302950301041ac797127c0df26081eca4218934cec5046e99b48ed509c5204d62a66ecae93a9c520db819ace63f2944eae5be61839eb3743c2f7ecf4838e813f79e6b6cc601e091011fd18db835d13c094abe8b498b4d10b2d526e12d4ae87a78f5909eb655634754dd9379f4c7ae07feaf7bbaecfe32d543f743817a51f7101dd80def0a4e388b138c0151fb036cb25ba55043017729cc7f6995b263ac25ab3fde488ec8601c58e447a67fa41024231c573f6802335e5927847eb5baf78e55ca339f54745f21a753f6b98037bfa81f85ff5adbe858944f5753357709df83f8714b5c015d92a58e7fc4e40e5efd27766befe2b55735a236131930aee8bfd19ddc9c7c0b974fe9f4a83ab44c52279e18e554af486c094bca205b1d2ccc41da13076b0025ee80449762ce9e1102de0e24aee78f0578292c57e2af2b38406214101fb8e727695fa29986b082cc4afca4ddda126c671e2d8ab95030fdda5635d23b81b3eda70853927a453b1e1fa934499abb0e5b39e8346a006fe7d7e7be8138ecb3e3df0a5b112b0d18525515b5ee6b79fd93ccf25a1b16dc469b5335d1c8635751956d987f03e7c40cb37c32de47535151f2f8f4715f015dedc5cb8d755baafa30420effa368c98da541ecd598de21ab8d5cf4ecfae1390fb611c1d698d7243e5c4f5c6805f380249e66644583b5f369caf720649e29692877400894513c132fd871414133db3b1973760b889b34ae58c23da3ce7661381a2da88f5455376612de652464be937abbd661cb445c28edbdc02d8c7b42a939af3e7ef279eff2dfdc28f4264591e54577852d71db525b47ef414fc98ed9df31c977fa6d5c6fcd96b7e07f256d6b38f511cbdc4ee04ad822866d1af8bc7c1cc23c3ec40027e4d971ac4129d93464849677c88984ce26d7d613c2725552a91e95573c8721ad5e9df2530868f083044abc17fc18191b6bb3047c921010a723bc24aa993394998db6c1cc56f281bf59e4a6663b713fc045136399a9abfcebede64e0d74e8c367278fee4f839b3c0f2b337c4c8bb763bcea05998fe3ac925def2fb00f9e3418d7f1b95123481385f8c4aa725d602dcfbca4856f2f8717e94374923452ade23bc680299a689c6182281d98188c10e738b7040d46ec1229310cbd52d2c21f1be8c513e0116ef92c2eea1de837a964228d516707694bbc1ba98d8b442b6880b5cc5a8b33e9147bbd5b50cec3d3d9f43c36bf83fdd67c0c8fb79176a6f3156ce8f90b3214fb39f16d40e73cb0b424fadce512f5e2fe1093c02f416d80ec7916f3c1d5304af7e5dca999ceb24ba81c17bf437ca9f37bdc7574c01eb08ef40c58e9f26f514dfe86208fb728fac62669d5b7434dcdc7518cdab22c79e3b3e5164e0368ee517e00277d78b6580d18f3566fda0e894592f9ebd3409d962a421fb2e7eefd45855d6ceb1541450161d6f3bcb30a66f72f451ab3263117f757d5f850132bab35185f8f9f7186079cac4e1fd9a49ac7c4a4b1c527c5814e8d194697ce9dd2bdc18e383ba33b7e9137004d87712873616c8b0759ec562980bd037700aef97cb6de9d8a3741bcfd5ced68c65d9ede8c4e678f298cab422f7bc1b1f6ee018273809be6ea10a4d130e47634e162d987282d55342fc2cb577de88380665ff2a3fd56d505d5bf2714ca15c136a308719688cf2420782a3935a628739de4052016851bb33a30ab5c4b9ad23b47a590cfe897ca3d4773d45ba1293c2335ccf2652de5ef38174f7392a6b3f690fe7a3bbd9fd2d19fc62791c299d2db5f7692702fdd81875d2747e60244d3d391e0d65a0bdb00fa58f889ca0efb25e878bd86719ce05793f4bde11161b5a7e071dbfe3c23d142fbe0587be9293b7e71f572ea5b94c277f1ff4492f14"}, &(0x7f0000002dc0)=0x1008) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000002e00)={r9, 0x7, 0x8, [0x9, 0x2, 0x1, 0x5, 0xf, 0x3, 0xd19, 0x7a7f]}, &(0x7f0000002e40)=0x18) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000002e80)={0x1, 0x76}) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000002ec0), 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000002f00)={r10, 0x6}, 0x8) getsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000002f40)={@multicast2, @empty, @loopback}, &(0x7f0000002f80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002fc0)={0x0, 0x0}, &(0x7f0000003000)=0xc) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000003040)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0xa, 0x4e21, 0x7f, 0x2, 0xa0, 0x80, 0x32, r1, r11}, {0x8, 0x0, 0x0, 0x1, 0x4, 0x401, 0x7db, 0xfff}, {0xffffffffffffffff, 0xb4ac, 0x6}, 0x1, 0x6e6bbb, 0x2, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@broadcast, 0x3502, 0x5, 0x1, 0x0, 0x3, 0x7fffffff, 0x7}}, 0xe8) r12 = openat$cgroup_ro(r6, &(0x7f0000003140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040400}, 0x41) 3m35.502592128s ago: executing program 4 (id=5057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f80)={r1, r0, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) unshare(0x20000400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000dfd03924000000000000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x2003, 0x0, 0x0, 0x40}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x5, 0xfffffa9a, 0x4000000, 0x4, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x5, 0x0, &(0x7f0000000500)) socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000000)=0x5aa, 0x4) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x401, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in=@empty, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x100000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xa5, 0x2, {{0xfd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x1, 0x2, 0xfffe, 0x7, 0x100, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x4, 0x4, 0x0, 0x0, 0x0, 0x6ad, 0x0, 0x0, 0x546, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x0, 0x4, 0x0, 0x1, [{0x0, 0x4, 0x9}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0x5}, {0x0, 0x4, 0x7fffffff}, {0x0, 0x4, 0x20000000000}, {0x0, 0x4, 0x4}]}, @TCA_MQPRIO_MAX_RATE64={0x0, 0x4, 0x0, 0x1, [{0x0, 0x4, 0x8}, {0x0, 0x4, 0x67a}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0x484d}, {0x0, 0x4, 0x2}]}]}}}]}, 0x88}}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000cfe7000000000000ffffffff18110000", @ANYRES32=r11, @ANYBLOB="000000000000004486f5d1dfa27ed648a04f00b70200000000009c850000008600000018680000030000000000000001000000950045b9e692e0b5a13674ef"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r11, r11, r11, r11], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280)}, 0x20) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r12, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) r13 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f00000011c0)={@private2}, 0x14) 3m35.29150126s ago: executing program 4 (id=5059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x410, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x64420802}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "8e77d351d6bdc9d8dd65186ba21b6279527c0d8cc2cf5254f38ed0cbd963033b"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x82}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x84}, 0x1, 0x0, 0x0, 0x45}, 0x20008010) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x885}, 0x80) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008840}, 0x24000054) sendmsg$NFT_BATCH(r3, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0xd0, 0xb, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x43}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, @NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}]}, @NFT_MSG_DELCHAIN={0x108, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fa5157b}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x263b76f}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6b}]}]}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc4}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7f}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x318}}, 0x40890) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000c40)=0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20002844) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000041) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000fc0)={r3}) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x54, r11, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x54, r11, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r12, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001240)="5f1b37248cc7b183df6f7bb926acc6ec871fd98098f4ef61b4a09416e7770c8870219b1fd4a4e54b26b55ed9cdbf16509d892103ac32aba71b7b313079c60d5a135374e09fdee871a7223a7342ac91da84a9028d2bb4cdeb00385f29931e00e8b4b258dc18966e8dcaa7b4041e45881cfee88af53808f4f3354d62bf203692bcefc1d992b6dd658f5c33ee90a550145970cf8d786d134eb6c7976b68c7c5c8c5a4fbe1887def5c81c4fd49e87ef39e8408db2ab9bee9687f5bf21867e73742", 0xbf}, {&(0x7f0000001300)="6e5d8be8e8aab21575f591015d12c4efb290a405f8c3afea68495421277c25b833ae5be462f3693620b932708fd476ac5f0a7cb87afa3ae1bbc313e6fb4bb9ccebc11c", 0x43}, {&(0x7f0000001380)="93c579cc39161df47b38efbc28a41d11e2e3b6e602756d7e06329f781d0bc074146e65b184503469724a9b962647174726964f59d8f9de10d249a8c78bda8f42eff63c385a4876946bbc1f2e73620e6f7e077dabe4207af9809ad607ad520eefc2c63babab1f009d2bd4fdb0f27932646d138d01c09740770152d254ed1c7836d867d088209e540c345bc08d0c21d8feeba0a07d38f9d1b7967b626025c3b04ae751bfa1b02bae8a26fb3056c4a5f8a0a715da25e4f52fb70f5a3e8617bd45fe410e39c183f6e93bf59470b8e74ff382b0b1f3301e22608f9080a70686d94af746afe4ff393107690151d916710f8f92ab9a", 0xf2}, {&(0x7f0000001480)="0f696aa8b4ab140ee9aeaf575f223db8adf389f2b9e6ca2bed", 0x19}, {&(0x7f00000014c0)="9827d9696bcb136a4dcf4cd2960120d9b83bc6f18701782c048da1f949ecdef1b595e682f1af16787f66571cfbbdd47c6d3397d3d30247ff027ea75148f1585caae112593608d5afa3e1abf625e5eedffac1a357ab0c0119591b6ffb9db3c39057dc2223b8a770bec6f4d154d7c45919cced5bc1d6e8de0123567f8698c393b10a984a4f2df86760a83c606bf59280212513e32ac9d3556199088e15f3aeb182467b53bfb113633c7ed748ed", 0xac}, {&(0x7f0000001580)="485b19f86b6c112d9f9a4f768f0bb17b4ba3cd5af815b2d9fdcf2627954cdf4fb69e419980337cd05f1df91519d48f118eb217acc502f6ab64e2d95605ce905390f4824ae9b7937145d36e69fd76680aa16fc60a75fb76b4cd601771b31498a17a218eb8dbc77d90021ddd7351ca59b10b41028fe7190427315fb3e8855c3c5514116fc75611c525c2d78ae30f97f6f8b63730467ecf1ebb14ebc39b75a93b841ed5771a28772b830d9e5f0a501436c8d195e0c319c4291334b9d1397abc11c831f508", 0xc3}, {&(0x7f0000001680)="211abb595d1a196c1febf06926c6549fe7ba28a9eae15916dbb28aee43f292c5c2642480d7b0c2796411889ed0f803a5c354f037a0b6e024e37077bef22672bf4e3f37392fcac21f96a0d6d55dd990abe4138071ee3d92", 0x57}, {&(0x7f0000001700)="e21c2cedf84c22e734be5c33486e4bcaf0571c799251ea124cc17e1ed8ca1e76634e54c8d8738c1da795399dfbfe6f37696a19663f186ea3cc835985274274a918da314a005f376b493d19fec1a69748526e52addb3b560e11a923634d9bc1a060f0413bc1ef8305780a7524f714efe7efe00788d6bf7c6dd96deb98ccbe474d57d875e8f472581074", 0x89}], 0x8, &(0x7f0000001840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf0, [@multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x77}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x24}}], 0xe0}}], 0x1, 0x40010) getsockopt$sock_int(r13, 0x1, 0x0, &(0x7f0000001980), &(0x7f00000019c0)=0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r9, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20040804) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x10, 0x3f2, 0x8, 0x70bd29, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x8855) 3m35.102293613s ago: executing program 4 (id=5061): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000000c0)={0xffffffc0, 0x800}) 3m33.923376701s ago: executing program 4 (id=5066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000033c0)={{r1, 0x0, 0x2, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x5]}, {0x6, 0x2ec4, 0x8000, 0xd4}}, 0x1ff, &(0x7f0000000140), &(0x7f0000000200)=0xfffffffd}, 0x3, &(0x7f0000000540)=[{0x1, 0x3, 0x0, 0x0, 0x0, 0x20}, {0x3, 0xd, &(0x7f00000003c0)=',%&-[/*.\x00', 0x0, 0x0, 0x1a}, {0x2, 0x3, 0x0, 0x0, 0x0, 0x20}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0xe, &(0x7f0000000280)=@raw=[@alu={0x7, 0x0, 0x3, 0x0, 0xa, 0x80, 0xffffffffffffffff}, @generic={0x8, 0xf, 0x5, 0x5, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb34}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 3m33.688580705s ago: executing program 4 (id=5068): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}], 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 3m18.586644363s ago: executing program 32 (id=5068): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}], 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m44.535380655s ago: executing program 0 (id=5337): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000938000480340001800b00010065787468647200002400028008000740000000170800064000000002050002000000000008000340fffffffd0900010073797a30000000000900020073797a320000"], 0x8c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003904faffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="152de88a97aee9940c30603a9940180200002000002c001280080001004c726500200002800500130000000000040010004e210000"], 0x4c}, 0x1, 0x0, 0x0, 0x64008004}, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000938000480340001800b00010065787468647200002400028008000740000000170800064000000002050002000000000008000340fffffffd0900010073797a30000000000900020073797a320000"], 0x8c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1], 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003904faffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="152de88a97aee9940c30603a9940180200002000002c001280080001004c726500200002800500130000000000040010004e210000"], 0x4c}, 0x1, 0x0, 0x0, 0x64008004}, 0x0) (async) 2m43.696949684s ago: executing program 0 (id=5344): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x5, 0xf, 0x2, 0x6, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 2m43.34659679s ago: executing program 0 (id=5348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) write(0xca, &(0x7f0000000040)="0404e70000000004de92050000", 0xd) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, 0x0}, 0x296) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r9 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r9, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000009440)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f00000008c0)=""/253, 0xfd}, {&(0x7f00000009c0)=""/216, 0xd8}, {&(0x7f0000000ac0)}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/42, 0x2a}, {&(0x7f0000001dc0)=""/49, 0x31}, {&(0x7f0000001e00)=""/40, 0x28}, {&(0x7f0000001e40)=""/197, 0xc5}], 0x8}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000001fc0)}, {&(0x7f0000002000)=""/169, 0xa9}, {&(0x7f00000020c0)=""/177, 0xb1}, {&(0x7f0000002180)=""/244, 0xf4}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/233, 0xe9}, {&(0x7f0000004380)=""/125, 0x7d}], 0x8}}, {{&(0x7f0000004480), 0x6e, &(0x7f0000004680)=[{&(0x7f0000004500)=""/50, 0x32}, {&(0x7f0000004540)=""/165, 0xa5}, {&(0x7f0000004600)=""/72, 0x48}], 0x3, &(0x7f00000046c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f0000005bc0)=[{&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/129, 0x81}, {&(0x7f0000005980)=""/230, 0xe6}, {&(0x7f0000005a80)=""/241, 0xf1}, {&(0x7f0000005b80)=""/37, 0x25}], 0x5, &(0x7f0000005c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000005c80)=@abs, 0x6e, &(0x7f0000005e00)=[{&(0x7f0000005d00)=""/217, 0xd9}], 0x1, &(0x7f0000005e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000007380)=[{&(0x7f0000005f80)=""/244, 0xf4}, {&(0x7f0000006080)=""/200, 0xc8}, {&(0x7f0000006180)=""/25, 0x19}, {&(0x7f00000061c0)=""/69, 0x45}, {&(0x7f0000006240)=""/117, 0x75}, {&(0x7f00000062c0)=""/82, 0x52}, {&(0x7f0000006340)=""/4, 0x4}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x8, &(0x7f0000007400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000007580)=[{&(0x7f00000074c0)=""/77, 0x4d}, {&(0x7f0000007540)=""/3, 0x3}], 0x2, &(0x7f00000075c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000007940)=[{&(0x7f00000076c0)=""/254, 0xfe}, {&(0x7f00000077c0)=""/175, 0xaf}, {&(0x7f0000007880)=""/13, 0xd}, {&(0x7f00000078c0)=""/128, 0x80}], 0x4}}, {{&(0x7f0000007980), 0x6e, &(0x7f0000008ac0)=[{&(0x7f0000007a00)}, {&(0x7f0000007a40)=""/114, 0x72}, {&(0x7f0000007ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000008b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000008b80)=@abs, 0x6e, &(0x7f0000009280)=[{&(0x7f0000008c00)=""/181, 0xb5}, {&(0x7f0000008cc0)=""/43, 0x2b}, {&(0x7f0000008d00)=""/129, 0x81}, {&(0x7f0000008dc0)=""/236, 0xec}, {&(0x7f0000008ec0)=""/228, 0xe4}, {&(0x7f0000008fc0)=""/101, 0x65}, {&(0x7f0000009040)=""/62, 0x3e}, {&(0x7f0000009080)=""/106, 0x6a}, {&(0x7f0000009100)=""/130, 0x82}, {&(0x7f00000091c0)=""/158, 0x9e}], 0xa, &(0x7f0000009340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0xa, 0x12000, &(0x7f00000096c0)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="8bac7168aaeae3e901e6e4e9e608309c", 0x10) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/358], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m42.148489002s ago: executing program 0 (id=5355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x6, 0x10, 0xffff0001, 0xff000, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x67, 0x0, 0x6, 0x4, 0x0, @empty, @empty, {[@ssrr={0x89, 0x17, 0x55, [@local, @remote, @empty, @local, @multicast2]}, @cipso={0x86, 0x16, 0xfffffffffffffffe, [{0x6, 0x10, "c0e2790528ccc10e8246f5f991a3"}]}, @timestamp={0x44, 0x10, 0xde, 0x0, 0x3, [0xfffffffc, 0xffff, 0x10]}, @generic={0x17, 0x2}, @rr={0x7, 0x7, 0xdb, [@remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x1, 0x4, {{0x13, 0x4, 0x1, 0x4, 0x4c, 0x66, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010102, {[@cipso={0x86, 0x27, 0x1, [{0x0, 0xa, "26bf80a2c7422159"}, {0x7, 0x9, "bedab12221bf66"}, {0x6, 0xe, "376df620b897afd8d5721b53"}]}, @end, @end, @noop, @timestamp={0x44, 0xc, 0xc, 0x0, 0x6, [0xb2d, 0xe]}, @noop]}}}}}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x40, 0x7, 0x1, 0x5, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x23, 0xa0, [@multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x5, 0x4, 0x76, @loopback, @private1, 0x7f47, 0x8, 0x22c000, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2f8, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r8}, {0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x7, 0xaf, 0xffffff79}, {0xc87, 0x5, 0x1, 0x2}, {0xd4e3, 0x6, 0xff}, {0xffff, 0x7, 0x9, 0x1}, {0x100, 0x9, 0x3, 0x7}]}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x2, 0xff, 0xfd4}, {0xc8, 0x2, 0x9, 0xfffffff7}, {0x9, 0xf9, 0x10, 0x2ed}, {0x2, 0x9, 0xfa, 0x5}, {0x8, 0x3, 0x2, 0x7}, {0xb, 0xf9, 0x3, 0x7}, {0x2, 0x9, 0x3, 0xbd}, {0x7, 0x0, 0xf, 0x9}, {0x9, 0x9, 0x4, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f}}, {0x8, 0x6, r11}}}]}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x90}, 0x4800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 2m39.070511542s ago: executing program 0 (id=5357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'batadv_slave_0\x00', 0x600}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0xa449, {0x19, 0x1, 0x5, 0x5, 0x1}}) 2m38.902155791s ago: executing program 0 (id=5359): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000040024000280040001001c0003800c00018008000180"], 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000a0000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000071000100000000000000000007000000", @ANYBLOB="14000180"], 0x2c}}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x20000002, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, 0x0, 0x0) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r10, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) 2m23.261530427s ago: executing program 33 (id=5359): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000040024000280040001001c0003800c00018008000180"], 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000a0000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000071000100000000000000000007000000", @ANYBLOB="14000180"], 0x2c}}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x20000002, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, 0x0, 0x0) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r10, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) 1m27.546300959s ago: executing program 2 (id=5648): ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x1000, 0x1, 0x8, 0xfd8e, 0x10, 0x3]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'net'}]}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @local}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x604c000}, 0x4894) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000480)) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x800) sendmsg$inet(r5, &(0x7f0000001bc0)={&(0x7f0000000540)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000580)="07251f1d0feed311685c75b2063ddc8fbd45c9f1a8", 0x15}, {&(0x7f00000005c0)="2e131c1ba36022aabc74ff3c66e1c49fa2935da9ee93388569c03534d1f8", 0x1e}, {&(0x7f0000000600)="c1ed71a470204caf2f7aa0e3aac4f04bddf09e4d1c137deb12475e384fddd67246680fcfcfedef228c32488f33af15b88a96158e3c13d553dedb16c99ae9e89e590bed58ed47dafab00d2bbd92d87bef", 0x50}, {&(0x7f0000000680)="bfaffb08133391bae92a592f217094ff2df02f2b459f35f836a0de284d96c9fde3636101d821a97fee7ed0f7c14fb9a5a71cae011d84214d6d560c2a4edb7d8b435bb42e2a3fabb03f26a452bf8607b7a40893b48f1e0dd84efb24126103ab", 0x5f}, {&(0x7f0000000700)="4ff745e92fbec690ae3d7f66b0a24334f20cca1fa3bade2b3c730cd94327a19b0d95f6e5692b8fda12fd0a2fd3a46e0a0430ededdfe49ead3f3e42f6f5ec9e52f9644eb489406ccd3c928314a8e27e96f0b9ff77e0bfa21425d440590ff1129abd2f700f0587ffdbc5061dd46404a688a0fecc5d78c00c788ff04ef73b2e510cfd22a5ddfbeb47ad346ecf9bce75a990fc802034625a87c1316deb89402a5e11ab0c0d8ef4163be2198d9140afee926958c5b4a1e28537644de9174629b6783f7614a5bf1f06566cdbcb51e0652458ab7ccd7d080111652188454a2bf7b3", 0xde}, {&(0x7f0000000800)="0d75f0a54c4cb1413becf2080e0109e5d192a9e3c2b4c7365c758779b8b24215541ced5683762a87f440ad4c1bf72c2836d3b4059b6f5cb9ce448b1c32a857dae7ed8bd3685c3dd1ecc53eb3f3abbc0ee880df8322bea8c5d44956719bf017a090d30c2e3f4a1cdb54ba8a134146551192290bcc2c355584f62da9600382f26aba0b21fd8b4806e11c897c7637e569b0c454", 0x92}, {&(0x7f00000008c0)="75d2ed2d6293876b4183175d44964f21cfa197be", 0x14}, {&(0x7f0000000900)="de8f73b6b996a51a62cc0b4cd7022d45bd09e1", 0x13}, {&(0x7f0000000940)="566834537a9c822ed9fae49b7f5d5a3b872ed7c0ffd3656b81defc0ba5e643d7fbff1bd5153bc02f8055f985652e99a0d708af3906829455e8f6f3616b80d0ac", 0x40}, {&(0x7f0000000980)="ac4e0a269f56184fa1d0f48dbd821b63df242c31ea3052c8befd11f9052463cdec0ef758cd0987a6a8e26d5bf452e58c235453d58b09ab2f7e582e01577d33f41a3f547a1efe30c34f5759f86c0ed940bf69671fc843caf64e60ea38272c8fc34863fb845a510d16a384cb30afe1e57d3a6e2f3d5866ca7220964c577c59c992bce392035cdd4ba43775ff34d9aedbdcb7857aedf6cda418d3f2fea6a9bdbbbcef87d0f75d3638f67545b3054b237aedcf0edfd9b4f958b23188d8046d20e5862f099ed0ebab10c354fa9a15dd21160b48784edcdb3ecb0d7e58aece69410e2eb38505f139cf868585aba3b3a150bc0b9365058ab76aafa7068288d3769cc3505c6e745230245d9f845deca1040eb4a68bddbcf6afdf8176604cdc021bb2985646f8b2bd71991ee43116c2c69be8a99b323af70f9ff7c0ffe61ff6121b13593cf9ff20a4b5f02e04dbfb26ac09588e9815a2859fa615b2b9dde164cee8115b25f200a45412d052cbff34317de10bee448b7fc0710cd409c058b8d9e81d05645ba7c1626feba482c29e48cc200b82f438ef75b2d78e7910f3fc125cecbfad17381a8872402ca9c04fd4e2db7f862de07a65b55b194dced1290d15d687117a62c50aab639a64c83a9f07431b02103a4c1bdcb400cb794caf93b6beb4a536dbad5f122a95d8595176b1762f1c035e96558400a0b36885c13ac8089d09e749f0728bad2b2309f5cb493e1bbc3c1f7990fe8f5ba946778075e2678099c42df76d4207212760eacfaac31cf5bea718894a8a5955195d1d3f50962a89185a9ac29a037fb06dfa2790f4f1466514b896ea23c293427b93768dabe48f705bcbd20628223ae720c924f5be65548ad16e215104743a491f318f84649810c9112e36a145d8db5383d88d7a947bb2a2c514cd3a029187affa96ee7996d3001acd4a249d3e760e7844f0d0d5bf3c604a550bc9fb98eed6a182a83a83f6a00eb0bf1a02ac16f128de6139b66a5be575add9458568f6f79d3339e8bc012f3a5a35549a985cd9cc08fe6fb75da9c4f1e708b5f28d5412b764e58c178ba5fd6a49a475d5c6c11952450bd097109fbdb7af0dbca2550bc4de419a8c05d8024e7d7ac7f3c1aa3f5f172e99f9793222903936611baea14f0d788b7f6f043c299bb74275a48d105998783dde5b0a97ecc5d51bd52dcbfceb7ea697e4b6f8b2913f9bf7c9ede82f33ad731f02b7cec39beb4b68ed5cfdcfe0baceae18a31678037635c6a166d38ad4ea5abb32fcdca328a348c9278bd7c91f4ae10b154b9277853b9461d198d82fe1943e8a86d09f4cdea79baefc4179537d2cd78cb1fde496e588781941ae24f3da56bde0d646d6ba0ad5c2a043e13cfc0e9b5a7ca89ed2468a741c3d2e86c1628bcc519f5e96a9d36083f1d9a30275a61a5112bc7db04646d6bab8eefa65a1b23b6b4ad2ed57cc4435654d3e2b7ff55cf3a194b8fa67e9e5df71e6c5c5e443b3cf6d89e8ecfe2669a13ded85bee2f5d1e48b7af4e29ac5f27ed224eff415c0e57dfc6c8bb514485e8d9f4c2e7192a8eba6af1c78de91c48f58278ddeb8df1514ec5d0a53c208c0ed7ddb7eb6b4050d61c0313dcfc8482e4e387d52cb02b189f43c23c2efd6798ee622c7932b85487f5dd45e43b0d48f191cf3bfcdd2e18226996422c991780f72226c7681f9768a2fc253a327810619462cf8c2360b0ac713807ca067beac7a22da544adc03ebb0d076f84f9107ff08d55a1fa2e68bb27118dd42e776ae00802b4ddb0626be034254fc651c530199f584226a34840ca7ed2613e490608b006d801c05121a0243052e9d4b2941ec549591503ad574fdfe4682a172e5ca7219341d5441c4e6949e0b6aaba9c60abd21d5ba2798dc9822da597a51abb19379639af76fb770b92ca4e7a315f734615117cda0ee5cf8e9f0a447586904f9f4284876a2644d10d69b9a5a3420d8cb9fa5e0c8e1c23cfb5545aa76b04cc0d760d6c9427a51df72b3b3e7b053d802b5af425fdab5b781da0a09cf1258d9f64c9c220cde2706e2c9daa3ffac7e11180ab9ae4870c20462086d4be75eb9636fc7c32a38d4dce117432b24670897f43b4a4e8062c3f326518a107d6abe3aa460520ac303dcacfefd676c0e178a3b372823f28bf992f7b1886f67f757db723590a4a7dad2394263c905e3804d2141a33fbc1c1188e40366a47e2c5cb168f909f4090918322a509b25fd76b8df3b43903ccc627211eb7aa8c85d01141b5f6ef577fb666953cba81bab8ab63c244fff95a2be6d1129a9e0cd2a6f5eb391469ade8041074ea9e412d554a937146f99a34c0b99b1ef8f325c81d634d69c80de0d048d61b38ca406318200298014289f4895d83bcb42708f35f9230361a8c9a795d0d56f406556a7384357ce097b9b77fdff8813c57ab3d16e802e70a7928214c06b6f235e7cb6085e40dfe0bf2151f5c07995ad968c726723155f6a0f2dd6f1fcd317fd3a24f9f0aa16ede4b595c5e91c0e03a303df531df9a0bdcb394d903d239f5af2b56b9b6cb564270a69dd82879ec5d9b825adf318663a260010ee4760a1bd43a77bc98cabbe58b18181170c82def1598511092007856f3e0c882829f8198577b37b62f33d3855aeef1c04576f5bd312cbfd005fd8ed134f2f965d2a4b62e42502496d7eaac6e6df4471a2b9c0e3e507c22d5be43a344cabc8a7355bf23b1531d50cca23ac869d45bdc874a7ea89b7cb981fd5615e2eca5f994b5a6da3f1f3466cb42fdc68feec69dc2f05906cbd8d0536c15833f796953b40beadc3f3e102f97d3b0df05636bb90040b42ecb73599360ec93e4497cb9a3b3526699801418150f58360ceecb80287131df6de29caff89c73f9afeaea82cf0f7ed85a71ec2125b9fc510be7b24db69976e39fa0e4f3caa14a0fddb5e70176c9555513c3bea0e8c9ce25e81d0fa7e7e512478f6de54dc089127dd8d7fd10fe3c1ffecd647273e44644915e6cc0683d7aa1aa0b2653042a86a3f74f4ebeec0c516e773e0c9a4ec77b9a5cf39a13bb61833afe37e6beea2a04214d25282116a640ba1230ab2cad7ef11da5f8534d55a49218087719e8378e293481db69e554ffa47d2e3d415e001b3310172a10a7ad95415d570aa6c3894b2b37dded9bc35295bc890c14c2a4a3dce0c846a3d45ccea3e72552e466740ec9bab6cca404dd70def66a18c20fabbc3fbea9b6d45761acbc4bc494e09e0961abc1c37f4ef03e6dc05e9bbe69e74fa9f6fca2c964237f1fffaf97389fda51e4b25201979e22cfb524b112af14ebb79be60099057053a9e50f82bb6a646fdb47fbb232855c6a5e659e88d7efa6af3b26cda43b620cd3795bef49957c4d5f2552ae248439d33df6cc34e11f7abddd6058a345ed5dae1a94f15cb2ef469fa7e8f7ea59d6699e89fdc61b62921f644202932491b0ba07d10dbc2ece623ada5e8a4235d001bfb670ba41367d24aaa7f8a24fb2b5df53c5aeef3033e164c29532fe9f2cdb131614b8e1dc908ea72ffbb0c505d96fc21fc899fa2156ecc6a49822f105200fc6868a4719177b2e6a7b121817c71c2a8768f77c7ea1dcab8db4877aab2865b1ac0fccc734079640f16b6f1fad4dd86714b145deeef50b935ef4c535b0100d530235f8dd8cc2c40b9a6367cdfa718c8612e0acf18e88c57575417a98354b0cd2a47d4efd0d5da851e954ea8887f05743e83f7427ea76e6c06845c2434f23b3419ddb4cf766386b6e21effe39805b1c9a858021857bad65bbd4af1b92d13af9ed55bb13851c1bbaa207f31a4e58c1b1b88fce86ae31d5ab2dba217d599fd31c470f8981f4f20bf84ebd2f9f5cc27e988a61501c76d8e7cbe8272fd10afcdcd656ad2ea2749afb91a258a2cf3f81c60ab72806a02874436fdb7cef16baaaef1a0abcf737f9a0a07210ff074fc4c07ff63da5cee9d7accdb99336d194fa4f95f050bc62c2dcc16e5649c9caf5e57ac66b75d8d6107464d948e3a80c0222a8f8690034f25d092174a1849f73b779d99cf0d5a9b60a45ac20b9f95e7ed9ebdcc43c3352b6e57a725d8f3f9e3751265464f9a69978d4b099c9a96cf6d9e2f3ea23c22ac3372fb285bad5728ec23d01fd4610661af1fecc1765e80296b1ca402e42bd1e3223b2e13aa05e885af99ac33ec74b92f2d61ecd7a2b9e761c7c52e5964473f44ddc28d503d05e831d60c0a8706d7747a91c6d0b50e1458dbb0a8ec4af70931cc4348e03431dd8db52d50d4153a012b3a45b393775e7ae70e8e85aa8376c2fe120c690adfe9fb601eae121294dcf70cab4b4d845a5cf6ed44bd965ca17064ff7ed5c3f9428e33aee4deeda4739f24bdfa48211a21d055fcb0c6efdf474a7917e9bfd8ef2510567f01393bcd73882583b2ffd8c473a785178293796a87ef99cc75c340d236d175f24746096e1a2e8eeb39c4a33542c5f090ce415a20c4eba26a5b6564008b8301aaad855e99031c28ad6ec09161ea7814e24675407ed120a99229c03df7b9eeb6172760e8fb4b1aac8cffeef253179f025d3c9d581c01e3ba9e00041c31c1b128d77cb06f4dae5fd986c23b1f4134bfaa0b6d8dfb41fdc33af0512f613d343cc4f677db9341f1fcc0b28ace5ca09b0b8c9ad8a7e67ee8c5d9d786eb7e055533099b663f336a379f914afafa764c273a9cd7033683ac0fc5a06805446b9ca419e0e1c03db263838af80b15809d3187be4cb521e1ee9d7141048f8fe46f6acadaeb7a87ddbae7fca8f5ec9853c25f345c0d0e4ef3a4e57c6428d052257f72ce7bc99408f790c672875373286360bb9e126ba85f6096ad687a349ab165f2704c27298c2d7da0b1cc2ba300f7bc6daa4e20123b2a6ea8892889ad2cfc9391237835905eda82ecdd18a12d042d896597b9c48d4cff14fea5c78edde1b86e459979ef92fb40b1afbd63507e23368d4f26ce5c47f7441bdfaeefea8185ba3536479ce216d2f8905d1a155fc99ba0711b22b392bcee61937f96251dcda4d4c5fc6f4aa1f3124a72541a6a5c7e0804e7d755a70e1a6b622c6e8ccf7eded527bd88c7892d23cdad0f410bb2e63a1bfacc1520aab872bc92692afd5a8dbcc44f5e60d262654c02e371b504d7736c3fd44278e7c944c2f9090c873d5dbea707f8015ea14930bd2cbc610539c27471d41c9faad9cfc5690d529e543137d787d249eb5da349d2c14f874d040a4c8d372ee2d2801440a124da531c5de7fc45428cbfcfac92baa4a01375653b1c114e0c5f2bd45705cbfe4d13f254ed74cdb16da2c76d5c9c692eb6d493088319d4567a17a65ba3885e6980603c9ad174a906bad9899a8edaa9cf06f47da3b4e2ca1897f0464b9621c0b1c45d48380f2f3abff1f35cdd68d41069aae44f4a8fcbb0d2a9cd92c619140f4cfe30b0a38e55fd24fb7e0c20199906d0e6971cd2791ceba904a01147febd863339915aa9503fceedd78c4a5b09495c6eafe99826aa1bf91b3f4692abfefcddef0025a9c9ef9dc9b04af32a5247ce1ad3e029393c76bedcef08a2026f4d86dbe507c063400d15ff63dc7618873b4ef3b0a7294b0401d7bc2fe29d52e61de5629688e23076ea764b511cc613523d4aef2b1cabb80d035990f132dae0812fe1efc8b3ee071a4bb780391f5e85ab4726809493550a831a5ffb212595062728faafd5d7163429b5ec9408f12b7c99cbefaf88f6addedd4c9e9f4d06b295f645ddfbbb0a3062262cdc6c77449383d76e0e5751109fe0341628d068c31f7dc27522999db5a9f94eef565a8eb3623bd8609304a1473ee15f61f2a67b47310c5b47", 0x1000}], 0xa, &(0x7f0000001a40)=[@ip_retopts={{0x84, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x1a, 0x0, 0x0, [0x4, 0xa, 0x1000, 0x4, 0x0, 0x7ff, 0x5]}, @timestamp_addr={0x44, 0x54, 0x0, 0x1, 0x4, [{@multicast2, 0x101}, {@multicast2, 0x3}, {@remote, 0xe421}, {@multicast1}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x52}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x43ac}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}, {@local, 0xfffffff7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x1c, 0xcd, 0x0, 0x0, [0x5, 0x4, 0x10, 0x0, 0x1000, 0x7]}, @lsrr={0x83, 0x13, 0x29, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x90, [@loopback, @empty, @private=0xa010100, @multicast2]}, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x1, 0x9, "e7ff25908be655"}, {0x0, 0xf, "5b0ce36ca1e29452db26a32a95"}, {0x0, 0xb, "7ef5c6c66ff59bafc0"}, {0x2, 0x2}, {0x1, 0x7, "bd0bee900c"}, {0x2, 0xc, "c8324c770454b74f055f"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}], 0x160}, 0x14) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001c00), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000001c40)={[{0x2b, 'net_prio'}, {0x2b, 'memory'}, {0x6, 'memory'}, {0x2d, 'hugetlb'}, {0x2d, 'io'}, {0x0, 'rdma'}, {0x38, 'rlimit'}, {0x2d, 'net'}]}, 0x3a) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r7, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c80)="48f432e16226527358fe13eac7117831", 0x10}, {&(0x7f0000001cc0)="a66cfc434bc2c631e14c797ac1a05d03db838259b767e8b009a8cb88d42bdb2ff6fa4a633dfb5544cf2a3c", 0x2b}, {&(0x7f0000001d00)="dddae2114f18fa5dc627d321b6dc91fd88ef7d569539cb221e01311f07fae65a1120b2c5228682b2374bc32faf09531eb2c8cc1d1b0dcac137b9cc16f8424d6771956c41199d7f8b2c8287bdec41388818b230062c753ce216513987d00179fe10cf3cfcfb1e1d8cefdfab546b1f85df34cca662eb529ce9754a1bfa0e1e93dca2c1a63c50109938e4889bd76042d64e5ed3375ba32fad8d344198fa6a2a3525bca4dae3edf082b48485d68ca0c6ee467185efce3a606228f96e55747d29a17fd888cbe0a66ae3c70272ff1f", 0xcc}, {&(0x7f0000001e00)="e4ac3efc1d276f365632c4952d5011facd7c42c244af3a6ec49a3699bd29b387660560f6a82c6633f572733de208aada259d24e173620e1012a0b002ae8bfbb72cce62b496e65a115bb297f46e58a7938c40cebee434e0bb6980930b9c8a5647", 0x60}], 0x4, &(0x7f0000001ec0)=[@rthdrdstopts={{0x78, 0x29, 0x37, {0x21, 0xb, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x3000, [0x0, 0x8, 0x1, 0x0]}}, @padn={0x1, 0x1, [0x0]}, @jumbo, @jumbo={0xc2, 0x4, 0x3ff}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x3a, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0xffa}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x1}, @generic, @calipso={0x7, 0x10, {0x2, 0x2, 0x7, 0x2, [0x7fffffff]}}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @broadcast}, r3}}}, @hoplimit={{0x14, 0x29, 0x34, 0xd151}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x0, 0x0, [@private0, @local]}}}], 0x178}, 0x4) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f0000002340)={&(0x7f0000002080)=0x3, 0x7, &(0x7f00000020c0)=[{}, {}, {}], &(0x7f0000002300)}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000002380)={'batadv_slave_1\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000023c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@base={0x3, 0x179, 0x0, 0x9, 0x0, 0x1, 0x7ff, '\x00', r9, r10, 0x3, 0x0, 0x4}, 0x50) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000024c0)={0x269, 0x80, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000005ec0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000005fc0)=0xe8) r12 = getgid() setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000006000)={0xffffffffffffffff, r11, r12}, 0xc) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r13, 0x40089416, &(0x7f0000006040)) bind$unix(r10, &(0x7f0000006080)=@file={0x1, './file0\x00'}, 0x6e) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f00000062c0)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006280)={&(0x7f0000006140)={0x138, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1f, 0x7}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f, 0x2}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9b9e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) 1m27.314007959s ago: executing program 2 (id=5652): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r3 = socket(0x8, 0x3, 0x3) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x42000004, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="24002d800500040000000000080003000d000000050001000c000000080002000300000008000300", @ANYRES8=r4], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r9, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) 1m25.084268862s ago: executing program 2 (id=5663): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffe, 0x0, 0x0, 0x8, 0xb, 0x5, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf723}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000000001000000000000000900000000000000020080ffffffffffffff000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x209, 0x0, 0x3dc], [0x0, 0x4, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) 1m24.493734105s ago: executing program 2 (id=5668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20920", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000440)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$kcm(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0x3) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x75b}], 0x1, 0x161, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010017fb00000000000040000000400000ab6f000c0000000400000001000084010000000a0000000300000006000000000000000000000105000000200000000000000000000003000000000200000002000000000000000061002e2e61610061005f00ad0cca61672ab0092005b083b38e4d2ad94854c5c2f381c658ec99a651b08677e264295184c0f2aa8bea6c7f81eaff74a82a5d4ef901960959ebcc0a98e6faed6e999e6c8bb1e904ca573972367126c3f2e4f9b12c87e3c195afdc3d7d561771"], 0x0, 0x64}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1m23.588895369s ago: executing program 2 (id=5671): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026c170000400000006000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) r4 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x20, 0x1401, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000045) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0xc8, 0x44, 0x1, 0x70bd28, 0x4, {0x2}, [@typed={0x7, 0xed, 0x0, 0x0, @str='\x87(\x00'}, @nested={0xac, 0x1, 0x0, 0x1, [@nested={0xa8, 0x13f, 0x0, 0x1, [@nested={0x50, 0x127, 0x0, 0x1, [@nested={0x41, 0xdb, 0x0, 0x1, [@typed={0x8, 0x15c, 0x0, 0x0, @fd=r5}, @generic="03fe807b568f6c3d5e601539eb84881dd2ebaa46528bbfd27c6f809ce744a00d6a2a498e228c5994794d66b8bc582fb67c1c630923"]}, @typed={0x8, 0x48, 0x0, 0x0, @pid}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0x8, 0x2d, 0x0, 0x1, [@typed={0x4, 0x17, 0x0, 0x0, @binary}]}, @generic="a49f8b54fedfc06956527c094a8796a3e791a636c488b13b7359f3e6b03f68dd", @nested={0x10, 0xa6, 0x0, 0x1, [@nested={0x4, 0xe1}, @typed={0x8, 0x42, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x14, 0xa2, 0x0, 0x1, [@typed={0xe, 0xd3, 0x0, 0x0, @str='n\xb7\x92\x8e=\x90\xff\xa0\xe7\x00'}]}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) accept4$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000029f88e7e02fedc0fafb8fb94e7dd05830000003f00004000128008000100677265003400028008000100c46fd9e98e30f987b24008b8bca3876bb1af2f8a36a7371122388b69e0e7d2419230cc9fabcb766da76bc13dca6ed9273c0b5aabd8f2ddf35b6d70a2bac0ffe0ae49c16bb7c415", @ANYRES32=r6, @ANYBLOB="08000600ac1414aa080004000200000005000a000000000008000700e0000001060010004e21000008000a00", @ANYRES32=r6, @ANYBLOB], 0x68}}, 0x0) 1m23.121376424s ago: executing program 2 (id=5675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b000200"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800200000000000080012000307ff0008001100ff070000080010000000200008000f"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000000000)) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 1m7.182015126s ago: executing program 34 (id=5675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b000200"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800200000000000080012000307ff0008001100ff070000080010000000200008000f"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000000000)) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 6.082671336s ago: executing program 5 (id=6003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5dda974614690250}]}, 0x3c}}, 0x4000004) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 'syzkaller0\x00'}) 5.66842266s ago: executing program 7 (id=6005): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001900)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0xfffffffb, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast2, @rand_addr=0x64010101}}}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720a00fef8ffffff71a401fe000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$netlink(r2, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001400)=ANY=[], 0x131c}, {0x0}], 0x2, 0x0, 0x0, 0x80}, 0x4040000) 5.074532245s ago: executing program 3 (id=6010): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000400)="b4a2cb5b30c6803429262be55debc53cf74816a0afc845a0bdd49d8b9271a48fcbaf4ff2c29a2164e11665356cd192504f97d257db7b6550740bb941d778791c", 0x8, 0x1, 0x4}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b000100627269646765000014000280080008008100"], 0x44}}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xf, 0x4, 0x5}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x7ff, @private0, 0x518}, @in6={0xa, 0x4e24, 0x1ff, @empty, 0x46}, @in6={0xa, 0x4e21, 0x6, @local, 0x666}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @private=0xa010102}], 0x74) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000400)="b4a2cb5b30c6803429262be55debc53cf74816a0afc845a0bdd49d8b9271a48fcbaf4ff2c29a2164e11665356cd192504f97d257db7b6550740bb941d778791c", 0x8, 0x1, 0x4}, 0x38) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b000100627269646765000014000280080008008100"], 0x44}}, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xf, 0x4, 0x5}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x7ff, @private0, 0x518}, @in6={0xa, 0x4e24, 0x1ff, @empty, 0x46}, @in6={0xa, 0x4e21, 0x6, @local, 0x666}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @private=0xa010102}], 0x74) (async) 4.965082662s ago: executing program 5 (id=6012): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="2482000000000000180012800e00810077697265677561726400000004"], 0x38}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a001000000000000000000008001f0000000000"], 0xd4}}, 0x0) 4.726005658s ago: executing program 3 (id=6014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0"], 0x120}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) 4.698258716s ago: executing program 7 (id=6015): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001340)={@dev, @multicast2, 0x0}, &(0x7f0000001380)=0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001540)={r0, &(0x7f0000001440)='%$-(\x00', 0xa040, &(0x7f0000001040)={@align=0x8, {0x8, 0xf, 0x9c5, 0x1}}, 0x0, &(0x7f00000014c0)={@_ha_fsid}, &(0x7f0000001500)=0x3ff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@generic={&(0x7f0000001600)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001700)={0x0, 0x4, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x19, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @alu={0x7, 0x1, 0xb, 0x3, 0x9, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x7, 0x2, 0x4, 0xfffffffffffffffc, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x6, 0xa, 0x8, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x481df77c6bf2d37e, 0x9, 0x8, 0xc, 0xfffffffffffffffc}, @ldst={0x1, 0x1, 0x0, 0x5, 0xb, 0xffffffffffffffe0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @ldst={0x1, 0x3, 0x6, 0xa, 0xb, 0x80, 0x10}]}, &(0x7f0000001240)='GPL\x00', 0x2, 0x9f, &(0x7f0000001280)=""/159, 0xc0e80, 0x43, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xc, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001740)=[r2, r3, r4, r5, r6, r7], &(0x7f0000001780)=[{0x3, 0x4, 0xf, 0x3}], 0x10, 0x9}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) recvfrom$unix(r0, &(0x7f00000010c0)=""/125, 0x7d, 0x2, 0x0, 0x0) 4.642461916s ago: executing program 5 (id=6016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xa8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010773797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b54000000060a010400000000000000000500000008000b40000000002c0004802800018008000100666962001c0002800800024000000001080001400000000308000340000000020900010073797a3000000000140000001100010000000000000000000000000a000000000000"], 0xdc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r5, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r9, 0x215eb000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r10, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x4000) 4.498451369s ago: executing program 7 (id=6017): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x24004000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff}}, 0x18}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0x1200000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x40000001}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000240)={0x8002008}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x40000020, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.498077744s ago: executing program 3 (id=6018): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000380)=0xffffffff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000003c0)=@req3={0xbb9b, 0x2, 0x8, 0x8, 0x10, 0x3, 0x9}, 0x1c) syz_emit_ethernet(0x9e, &(0x7f0000001f80)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d84b01", 0x68, 0x2f, 0x0, @private1, @mcast2, {[@srh={0x2c, 0x4, 0x4, 0x2, 0x2, 0x20, 0xfffa, [@remote, @private2]}, @srh={0x33, 0x6, 0x4, 0x3, 0x9, 0x0, 0x0, [@local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}]}, @fragment={0x32, 0x0, 0x7d, 0x0, 0x0, 0x1c, 0x65}]}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r2, 0xfffffffd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r3, &(0x7f00000002c0)="abc7153306", 0x75f32760, 0x4000805, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002040)=""/14, 0xe}, {&(0x7f00000004c0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/184, 0xb8}, {0x0}, {&(0x7f0000000880)=""/119, 0x77}], 0x6, &(0x7f0000000980)=""/73, 0x49}, 0x8}, {{&(0x7f0000000a00)=@ieee802154, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000a80)=""/83, 0x53}, {&(0x7f0000000b00)=""/212, 0xd4}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001d80)=""/124, 0x7c}, {&(0x7f0000001e00)=""/63, 0x3f}], 0x7, &(0x7f0000001ec0)=""/180, 0xb4}, 0x4}], 0x3, 0x22, 0x0) r4 = epoll_create(0x7f) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="e1400f00", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf25100000001400028008000600faffffff05000d0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3e, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000740)={0x40000004}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd606ff1af00302f00fc000000000000000000000040000000fee54b"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x80, 0x0, 0x0, 0x1, 0x0, @local, @local}, @dest_unreach={0x3, 0xf, 0x0, 0x0, 0xf, 0x3cc, {0x5, 0x4, 0x0, 0x1f, 0x900, 0x66, 0x0, 0x2, 0x5c, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}, @remote}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) 4.00107742s ago: executing program 6 (id=6019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r2 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x9, 0x8) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2404c853}, 0x20060000) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r8, 0x30a, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x1004c000) 3.788516287s ago: executing program 1 (id=6020): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYRES16], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x1, 0x2}, 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x40088d4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4040004) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) socket(0x11, 0x3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) 2.325819565s ago: executing program 7 (id=6021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000005ac14142e00000000000000000000000000000000000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f00000100000000000000000000000020010000000000000000000000000000ff0200000000000000000000000000013c030000000000100a0002000a0101010000000000000000000000007f000001"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0xfb4}) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000089024565001c006800000f0290780a010101ac1414aa131c907800000000a9e1ca690f59f12e36d04e16dbc89cb622b8e9b4cc62d9f7e7cdf692d7e3bb28c437ae9e74d5448d03d32674b058571102a1beee61a284fb02fb86071b0dc5b33bb26387c85d18d86143fd63cd968a7904e6092fd58264910d8c04d846fd763dad4d03b6c9ad429cae38f388e19a932df1579081d60e32d23038db271aa86617270e5ff1fd0fc84ccab42c1e534099430744a08024fde1ee4e418320def63608815ab988ffd970e33ce96ec28c5c1c0e4f5200"/230], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r3}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016800c0001"], 0x4c}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x2000) socket(0x10, 0x3, 0xf1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x800, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xfff3}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x9}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x7}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 2.325062949s ago: executing program 3 (id=6022): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31a00ffa1000000bfa10000000000000701000007000000b702000008000000b703000000000000850000002200000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0400000400"/20, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="0100000003"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd, &(0x7f0000000300)=""/13, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd, &(0x7f0000000300)=""/13, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f4}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r10}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="07002bbd700001dcdf2508000000080001003700000008002300", @ANYRES32=0x0, @ANYBLOB="0c0099"], 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', r5, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x3, 0xe23a}, 0x10, 0x1cd3b, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000300)=[{0x1, 0x4, 0xa, 0xa}, {0x5, 0x4, 0xd, 0xf}, {0x4, 0x5, 0x1}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xf21, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x43000, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0xe2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40680c5}, 0x844) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xf21, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x43000, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0xe2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40680c5}, 0x844) 2.308855227s ago: executing program 1 (id=6023): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000efd4bb00"/20], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x400001, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x7fffffff]}, {0x10, 0x9, 0x1, 0x3}}, 0x4, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000010000"], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18, 0x20000010}}], 0x1, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x5e, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000020000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000002300000000000000480002006563622863"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r7, &(0x7f0000000140)="0e0412b60f82bb714a766118ff5aa329fa94da4900", 0x15) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 1.922761644s ago: executing program 6 (id=6024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 1.687779385s ago: executing program 1 (id=6025): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) 1.450758637s ago: executing program 6 (id=6026): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) 1.45024531s ago: executing program 7 (id=6027): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000019900000000000000000000000a60000000060a0b160000000000000000020000083400048018000180080001006f7366000c00028008000140000000041800018008"], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.383727572s ago: executing program 1 (id=6028): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14) 1.305195842s ago: executing program 3 (id=6029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) 1.194398269s ago: executing program 5 (id=6030): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r0, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9ea}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x0) 1.060823713s ago: executing program 6 (id=6031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x7, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x20000000, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x20, 0xa000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x88a8}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x40805) 1.048237432s ago: executing program 1 (id=6032): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="9100000000000000611150000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000520b5a98e804a84b2a0df255031c00deff0e0000000000000edd0007000000004b8750c90ed43dae85e0bc45cff219076e6daaba72714e763388bf738e208278d8518ba40c05f498a1b808ba96b8d764735ee1d4a8fa69b9a87b767cf907656b32d497cf6bb6e47c7159ec048c3f"], 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@local, @remote, @rand_addr=' \x01\x00', 0x5, 0x5, 0x4, 0x0, 0x3, 0x210004a, r3}) connect$packet(r0, &(0x7f0000000040)={0x11, 0x1c, 0x0, 0x1, 0x20, 0x6, @remote}, 0x14) 861.193432ms ago: executing program 3 (id=6033): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000080000cd4f8f8d1b861aae74107e0a84c2000000000008000000911171000000000095d7b2fe4c873cd9"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0xb7148a345ea44e67, 0x70bd28, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x4, 0xfd, 0x3, 0xfe, 0x0, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32], &(0x7f0000000440)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="e30b82b6", @ANYRES32=0x0, @ANYRES64=r3], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) bind$vsock_stream(r4, &(0x7f0000000540)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast}, {@broadcast, 0xfa9}]}, @lsrr={0x83, 0xb, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @fwd={0xa}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x5, 0x401}, {0xa, 0xfffffff7}, {0x1, 0x10000}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000f40)=""/4079, 0x82, 0xfef, 0x1, 0x410}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000019ed8d7578e2c677cc7b959d4c300000000000050"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 717.593309ms ago: executing program 7 (id=6034): syz_emit_ethernet(0x103, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) sendmsg$sock(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1c0000005e0001000000000000000000000000000200000008000000", 0x1c}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x20000400) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600180f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0500000000000000"], 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r4, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000001c0)=0x4, 0x4) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe, 0x9, 0x100, 0x7b, @private1, @loopback, 0x10, 0x20, 0x1, 0xf9}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES16=r5, @ANYRES32=r9, @ANYRES32=r6, @ANYRES64, @ANYRES64=r3, @ANYRES64=r6, @ANYRES8=r7], 0x50) connect$inet(r8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x9) sendmmsg$sock(r8, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002c00)="b5", 0x1}], 0x1, &(0x7f0000005f00)=[@mark={{0x14, 0x1, 0x24, 0xff}}], 0x18}}], 0x1, 0x4000000) 717.063211ms ago: executing program 5 (id=6035): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000efd4bb00"/20], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x400001, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x7fffffff]}, {0x10, 0x9, 0x1, 0x3}}, 0x4, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000010000"], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18, 0x20000010}}], 0x1, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x5e, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000020000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000002300000000000000480002006563622863"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r7, &(0x7f0000000140)="0e0412b60f82bb714a766118ff5aa329fa94da4900", 0x15) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 678.955945ms ago: executing program 6 (id=6036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000000400fc020000000000000000000000000000ff020000000000000000000000000001103b9684a5a20ae01cc2e727c31912166265d61f99505831cce6bbebb246d73afe02676f39a23eb6dbc471cc72a67e3d6106fe53bd96a4d8e259ea743b144510247236e13948f40dc8371a0facb534ffd3cb6d553bbf5a8ff2de7977c0d116cbf3bb8bbe90d3d92daf12ab930c2ceda0cb0b80e1ca6dbeda196c03b87f6e6f630340097a5be0413897b49d5f3fe74a749b966be079b0320d69287b32ebb0f7339bad27a32f2da137d21e4bd97cd82cdb5c9dd37f17f8c537425817a4e33dfce37fdcbb47837668"], 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}}, 0x4000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 477.84595ms ago: executing program 1 (id=6037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x170, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x14112}, [@IFLA_LINKINFO={0x148, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x138, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffc01}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xcc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x14}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x51, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2b33}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x3ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc0, 0x3ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x155d}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2da, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x359f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x4}}]}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa9a0}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x170, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x14112}, [@IFLA_LINKINFO={0x148, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x138, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffc01}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xcc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x14}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x51, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2b33}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x3ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc0, 0x3ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x155d}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2da, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x359f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x4}}]}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa9a0}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r4, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="e3013080e80001804000038006000300a3aa0000060001000300000006000100000000000c000400000100000000000006000300feff000006000300a2aa0000060001000200000008000100020000000c00050000000000000000000c000500ebfd00000000000058000380080002000100000006000100020000000800020003000000060001000000000006000300a2aa00000800020002000000060003000000000006000100000000000c00040000000000"], 0x264}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r4, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="e3013080e80001804000038006000300a3aa0000060001000300000006000100000000000c000400000100000000000006000300feff000006000300a2aa0000060001000200000008000100020000000c00050000000000000000000c000500ebfd00000000000058000380080002000100000006000100020000000800020003000000060001000000000006000300a2aa00000800020002000000060003000000000006000100000000000c00040000000000"], 0x264}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000f80)={r6, 0x401, 0x8}) socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002030000000000000000000009000000000000000000000009"], 0x0, 0x3e}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002030000000000000000000009000000000000000000000009"], 0x0, 0x3e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) 149.201871ms ago: executing program 5 (id=6038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ff007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 6 (id=6039): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400030000000900020073797a32000000000500010007000000070005000a000000140007800800114000000000080012400000ffff15000300686173683a69702c706f72742c6e65"], 0x64}}, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x4}, 0xe) socket$netlink(0x10, 0x3, 0x12) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf10000000050037000100000008003900000000000a000900bbbbbbbbbbbb0000080034000000000008003c0009000000003498dddad3e71275619b2b95939a23238a3acf9fd68c2bc940d086fa751d1c745c41e453739803fbacc6b45b153481f9c15545cdf26b7fa23dc18e74"], 0x40}, 0x1, 0x0, 0x0, 0x8000005}, 0x80) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x2794, @any, 0x0, 0x2}, 0xe) r5 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x20, 0x4, 0x4, 0x2, 0x0, 0x1, 0x7f, '\x00', 0x0, r6}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000031600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r7, &(0x7f00000002c0)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$packet(r0, &(0x7f0000000200)=""/162, 0xa2, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): ticast mode [ 733.458652][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 733.458677][T25971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 733.458702][T25971] netlink: 'syz.2.4868': attribute type 19 has an invalid length. [ 733.458716][T25971] netlink: 'syz.2.4868': attribute type 20 has an invalid length. [ 733.502079][T25974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 733.502103][T25974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 733.502129][T25974] netlink: 'syz.2.4868': attribute type 19 has an invalid length. [ 733.502144][T25974] netlink: 'syz.2.4868': attribute type 20 has an invalid length. [ 733.602449][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4867'. [ 733.809372][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 734.016623][T25996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4872'. [ 734.016664][T25996] netlink: 'syz.1.4872': attribute type 7 has an invalid length. [ 734.016689][T25996] netlink: 'syz.1.4872': attribute type 8 has an invalid length. [ 734.167442][T25996] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 734.193862][T25996] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 734.217154][T25996] erspan0: entered promiscuous mode [ 734.295940][T25996] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 734.701332][T26012] syzkaller0: entered promiscuous mode [ 734.701359][T26012] syzkaller0: entered allmulticast mode [ 735.108841][T26025] netlink: zone id is out of range [ 735.108860][T26025] netlink: zone id is out of range [ 735.108870][T26025] netlink: zone id is out of range [ 735.108880][T26025] netlink: zone id is out of range [ 735.108890][T26025] netlink: zone id is out of range [ 735.108900][T26025] netlink: zone id is out of range [ 735.108910][T26025] netlink: zone id is out of range [ 735.108920][T26025] netlink: zone id is out of range [ 735.108930][T26025] netlink: zone id is out of range [ 735.109044][T26025] netlink: zone id is out of range [ 735.259214][T26035] x_tables: duplicate entry at hook 3 [ 735.700308][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 736.249286][T26058] netlink: 'syz.1.4895': attribute type 21 has an invalid length. [ 736.609093][T26076] netlink: 'syz.0.4897': attribute type 21 has an invalid length. [ 736.868550][T26076] netlink: 'syz.0.4897': attribute type 4 has an invalid length. [ 736.868575][T26076] netlink: 'syz.0.4897': attribute type 5 has an invalid length. [ 737.311703][T26112] lo speed is unknown, defaulting to 1000 [ 738.595544][T26162] FAULT_INJECTION: forcing a failure. [ 738.595544][T26162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.595578][T26162] CPU: 0 UID: 0 PID: 26162 Comm: syz.0.4917 Not tainted syzkaller #0 PREEMPT(full) [ 738.595600][T26162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.595613][T26162] Call Trace: [ 738.595621][T26162] [ 738.595631][T26162] dump_stack_lvl+0xe8/0x150 [ 738.595696][T26162] should_fail_ex+0x410/0x560 [ 738.595728][T26162] _copy_from_user+0x2d/0xb0 [ 738.595759][T26162] __sys_bpf+0x2e7/0xd90 [ 738.595796][T26162] ? __pfx___sys_bpf+0x10/0x10 [ 738.595835][T26162] ? __fget_files+0x2a/0x420 [ 738.595886][T26162] ? ksys_write+0x242/0x270 [ 738.595923][T26162] ? __pfx_ksys_write+0x10/0x10 [ 738.595964][T26162] __x64_sys_bpf+0xba/0xd0 [ 738.595991][T26162] do_syscall_64+0x166/0x520 [ 738.596019][T26162] ? trace_irq_disable+0x3b/0x140 [ 738.596043][T26162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.596067][T26162] ? clear_bhb_loop+0x70/0xc0 [ 738.596096][T26162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.596119][T26162] RIP: 0033:0x7fbfe499e159 [ 738.596141][T26162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.596161][T26162] RSP: 002b:00007fbfe5872028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 738.596187][T26162] RAX: ffffffffffffffda RBX: 00007fbfe4c25fa0 RCX: 00007fbfe499e159 [ 738.596203][T26162] RDX: 0000000000000038 RSI: 0000200000000700 RDI: 0000000000000018 [ 738.596219][T26162] RBP: 00007fbfe5872090 R08: 0000000000000000 R09: 0000000000000000 [ 738.596233][T26162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.596247][T26162] R13: 00007fbfe4c26038 R14: 00007fbfe4c25fa0 R15: 00007fffca57e678 [ 738.596282][T26162] [ 739.332961][ T6089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.332997][ T6089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.385741][T22971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.385764][T22971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.493000][T26189] __nla_validate_parse: 7 callbacks suppressed [ 739.493022][T26189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4923'. [ 739.836635][T26196] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4927'. [ 739.948243][T26198] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 740.001011][T26198] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4928'. [ 740.088952][T26207] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20004 [ 740.152466][T26209] FAULT_INJECTION: forcing a failure. [ 740.152466][T26209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.152498][T26209] CPU: 0 UID: 0 PID: 26209 Comm: syz.4.4931 Not tainted syzkaller #0 PREEMPT(full) [ 740.152520][T26209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.152533][T26209] Call Trace: [ 740.152541][T26209] [ 740.152550][T26209] dump_stack_lvl+0xe8/0x150 [ 740.152583][T26209] should_fail_ex+0x410/0x560 [ 740.152611][T26209] _copy_to_user+0x31/0xb0 [ 740.152638][T26209] simple_read_from_buffer+0xe1/0x170 [ 740.152671][T26209] proc_fail_nth_read+0x1bb/0x230 [ 740.152701][T26209] ? common_file_perm+0x20e/0x2b0 [ 740.152728][T26209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.152789][T26209] ? rw_verify_area+0x24a/0x4c0 [ 740.152822][T26209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.152854][T26209] vfs_read+0x213/0xa80 [ 740.152890][T26209] ? __pfx___mutex_lock+0x10/0x10 [ 740.152918][T26209] ? __pfx_vfs_read+0x10/0x10 [ 740.152950][T26209] ? __fget_files+0x2a/0x420 [ 740.152984][T26209] ? __fget_files+0x3a2/0x420 [ 740.153011][T26209] ? __fget_files+0x2a/0x420 [ 740.153048][T26209] ksys_read+0x150/0x270 [ 740.153081][T26209] ? __pfx_ksys_read+0x10/0x10 [ 740.153125][T26209] do_syscall_64+0x166/0x520 [ 740.153148][T26209] ? trace_irq_disable+0x3b/0x140 [ 740.153169][T26209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.153191][T26209] ? clear_bhb_loop+0x70/0xc0 [ 740.153218][T26209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.153239][T26209] RIP: 0033:0x7f3c7435e98e [ 740.153258][T26209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 740.153275][T26209] RSP: 002b:00007f3c752a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.153296][T26209] RAX: ffffffffffffffda RBX: 00007f3c752a46c0 RCX: 00007f3c7435e98e [ 740.153312][T26209] RDX: 000000000000000f RSI: 00007f3c752a40a0 RDI: 0000000000000005 [ 740.153326][T26209] RBP: 00007f3c752a4090 R08: 0000000000000000 R09: 0000000000000000 [ 740.153339][T26209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.153351][T26209] R13: 00007f3c74626038 R14: 00007f3c74625fa0 R15: 00007ffc224d9168 [ 740.153386][T26209] [ 740.724855][T26222] netlink: 'syz.1.4934': attribute type 3 has an invalid length. [ 740.776006][T26222] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.4934'. [ 740.776034][T26222] netlink: 'syz.1.4934': attribute type 2 has an invalid length. [ 740.929880][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4939'. [ 741.167747][T26243] gre0: left allmulticast mode [ 741.332980][T26251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4942'. [ 741.706466][T26243] tipc: Resetting bearer [ 741.997235][T26266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4943'. [ 742.183956][T26243] ip6tnl1: left allmulticast mode [ 742.206332][T26243] geneve3: left allmulticast mode [ 742.236326][T26243] ip6gretap1: left allmulticast mode [ 742.238637][T26243] syzkaller0: left promiscuous mode [ 742.238654][T26243] syzkaller0: left allmulticast mode [ 742.259237][T26243] geneve0: left promiscuous mode [ 742.259255][T26243] geneve0: left allmulticast mode [ 742.278992][T26243] geneve4: left promiscuous mode [ 742.279011][T26243] geneve4: left allmulticast mode [ 742.279452][T26243] veth5: left promiscuous mode [ 742.279467][T26243] veth5: left allmulticast mode [ 742.302584][ T6089] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.302617][ T6089] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.302657][ T6089] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.302693][ T6089] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.302729][ T6089] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.302754][ T6089] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.302788][ T6089] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.302814][ T6089] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.959485][T26277] netlink: 'syz.4.4946': attribute type 3 has an invalid length. [ 742.959647][T26277] netlink: 'syz.4.4946': attribute type 3 has an invalid length. [ 743.062173][T26282] netlink: 'syz.4.4946': attribute type 3 has an invalid length. [ 743.062343][T26282] netlink: 'syz.4.4946': attribute type 3 has an invalid length. [ 743.349122][T26280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4949'. [ 743.349161][T26280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4949'. [ 743.626419][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4953'. [ 743.695966][T26291] lo speed is unknown, defaulting to 1000 [ 743.749052][T26290] lo speed is unknown, defaulting to 1000 [ 743.761864][T26290] lo speed is unknown, defaulting to 1000 [ 743.790806][T26294] net_ratelimit: 15 callbacks suppressed [ 743.790825][T26294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.907805][T26291] lo speed is unknown, defaulting to 1000 [ 744.756790][T26333] __nla_validate_parse: 1 callbacks suppressed [ 744.756811][T26333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4961'. [ 744.789803][T26333] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 745.708650][T26361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4970'. [ 745.929696][T26369] bond0: (slave gretap0): Opening slave failed [ 746.411812][T26387] netlink: 'syz.3.4977': attribute type 2 has an invalid length. [ 746.411841][T26387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4977'. [ 746.434640][T26386] netlink: 'syz.3.4977': attribute type 2 has an invalid length. [ 746.434663][T26386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4977'. [ 746.634016][T26401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4981'. [ 746.661428][T26402] syzkaller1: entered promiscuous mode [ 746.661608][T26402] syzkaller1: entered allmulticast mode [ 746.890764][T26415] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4983'. [ 746.959451][T26415] lo speed is unknown, defaulting to 1000 [ 747.082950][T26428] sctp: [Deprecated]: syz.1.4985 (pid 26428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.082950][T26428] Use struct sctp_sack_info instead [ 747.158975][T26415] lo speed is unknown, defaulting to 1000 [ 747.226037][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.307791][T26423] lo speed is unknown, defaulting to 1000 [ 747.330324][T26423] lo speed is unknown, defaulting to 1000 [ 747.985788][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4990'. [ 748.350366][T26437] syzkaller0: entered promiscuous mode [ 748.350561][T26437] syzkaller0: entered allmulticast mode [ 748.514476][T26464] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4995'. [ 748.570276][T26466] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4995'. [ 748.821445][T26448] sit0: left promiscuous mode [ 749.996240][T26448] batadv_slave_1: left allmulticast mode [ 750.991583][T26448] ip6gre1: left allmulticast mode [ 751.383552][T26448] bridge4: port 2(veth7) entered disabled state [ 751.384010][T26448] bridge4: port 1(veth5) entered disabled state [ 751.662833][T26448] veth9: left allmulticast mode [ 751.763078][T26448] bond5: left allmulticast mode [ 752.998974][T26492] TCP: TCP_TX_DELAY enabled [ 755.251344][ T8999] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.251380][ T8999] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.251699][ T8999] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.251728][ T8999] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.251772][ T8999] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.251799][ T8999] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.251837][ T8999] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.251863][ T8999] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.507137][T26483] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 755.507185][T26483] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 755.507207][T26483] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 755.544923][T26491] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 756.404778][T26524] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 756.601515][T26530] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5010'. [ 756.754936][ T9004] tipc: Subscription rejected, illegal request [ 756.800614][T26539] vlan2: entered promiscuous mode [ 756.800645][T26539] syz_tun: entered promiscuous mode [ 756.913848][T26545] bridge_slave_0: left allmulticast mode [ 756.913877][T26545] bridge_slave_0: left promiscuous mode [ 756.914111][T26545] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.947721][T26545] bridge_slave_1: left allmulticast mode [ 756.947746][T26545] bridge_slave_1: left promiscuous mode [ 756.947982][T26545] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.007939][T26545] bond0: (slave bond_slave_0): Releasing backup interface [ 757.065230][T26545] bond0: (slave bond_slave_1): Releasing backup interface [ 757.081000][T26549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5013'. [ 757.152001][T26545] team0: Port device team_slave_0 removed [ 757.201486][T26554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5013'. [ 757.314499][T26545] team0: Port device team_slave_1 removed [ 757.316143][T26545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.349629][T26545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.389397][T26557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5015'. [ 757.389420][T26557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 758.309666][T26588] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 758.394344][T26591] tipc: Enabling of bearer rejected, failed to enable media [ 759.554102][T26642] lo speed is unknown, defaulting to 1000 [ 759.556064][T26642] lo speed is unknown, defaulting to 1000 [ 760.140311][T26656] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5040'. [ 760.299566][T26662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5042'. [ 761.279009][T26701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5049'. [ 761.383890][T26696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5048'. [ 761.383913][T26696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5048'. [ 761.786471][T26716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5053'. [ 761.786512][T26716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5053'. [ 761.840476][T12731] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.840517][T12731] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.840549][T12731] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.840581][T12731] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.028636][T26724] ip_tables: iptables: counters copy to user failed while replacing table [ 762.091438][T26729] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5057'. [ 762.097265][T26724] netlink: 'syz.3.5058': attribute type 16 has an invalid length. [ 762.097285][T26724] netlink: 'syz.3.5058': attribute type 17 has an invalid length. [ 762.097365][T26724] lo: left promiscuous mode [ 762.097405][T26724] lo: left allmulticast mode [ 762.281942][T26724] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.317218][T26724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.432815][T26724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.435194][T26724] batadv_slave_1: left promiscuous mode [ 762.437480][T26724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.482612][T26724] veth1_vlan: left promiscuous mode [ 762.484636][T26724] veth0_vlan: left promiscuous mode [ 762.489436][T26724] veth0_vlan: entered promiscuous mode [ 762.513365][T26724] veth1_vlan: entered promiscuous mode [ 762.530029][T26724] geneve0: left promiscuous mode [ 762.555679][T26724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.557187][T26724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.558985][T26724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.606488][T26724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.610021][T26724] bridge2: port 1(erspan0) entered blocking state [ 762.610177][T26724] bridge2: port 1(erspan0) entered forwarding state [ 762.710411][T26724] vlan4: left allmulticast mode [ 762.710431][T26724] bridge2: left allmulticast mode [ 762.997163][T26724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.009834][T26724] bond3: left promiscuous mode [ 763.016279][T26724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 763.096763][T26724] geneve0: entered promiscuous mode [ 763.109622][T26724] batman_adv: batadv0: Interface activated: gretap1 [ 763.118319][T26724] vlan5: left promiscuous mode [ 763.118338][T26724] bridge0: left promiscuous mode [ 763.134063][T26724] ip6gre1: left promiscuous mode [ 763.134081][T26724] ip6gre1: left allmulticast mode [ 763.139558][T26724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.202208][T26724] batadv_slave_1: entered promiscuous mode [ 763.209157][T26724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.231550][ T8997] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.231584][ T8997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.231663][ T8997] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.231708][ T8997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.231764][ T8997] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.231791][ T8997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.416861][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.416968][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.419181][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.419288][ T9004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.765307][T12731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 763.767478][T12731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 763.832439][ T7962] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 763.942761][ T7962] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 764.145298][ T1571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 764.394187][T12731] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 764.732150][T26792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.735744][T26792] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.736515][T26792] tipc: Resetting bearer [ 764.784158][T26792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.820059][T26792] tipc: Resetting bearer [ 764.847448][T26792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 764.847473][T26792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 764.849111][T26792] veth1_vlan: left promiscuous mode [ 764.881260][T26792] veth0_vlan: left promiscuous mode [ 764.885148][T26792] veth0_vlan: entered promiscuous mode [ 764.888111][T26792] veth1_vlan: entered promiscuous mode [ 764.914051][T26792] geneve0: left promiscuous mode [ 764.925813][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.927074][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.928604][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.930050][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.962596][T26792] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 764.963318][ T8997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.963436][ T9004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.080502][ T9004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.110161][T12732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.947510][T26801] syzkaller0: entered promiscuous mode [ 765.947534][T26801] syzkaller0: entered allmulticast mode [ 765.968183][T26801] syzkaller0: left promiscuous mode [ 765.968203][T26801] syzkaller0: left allmulticast mode [ 766.390438][T26807] netlink: 'syz.1.5076': attribute type 16 has an invalid length. [ 766.390460][T26807] netlink: 'syz.1.5076': attribute type 17 has an invalid length. [ 766.457114][T26811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5076'. [ 766.507645][T26807] bond2: left allmulticast mode [ 766.523443][T26807] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 767.279458][T26781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.837242][T26827] gretap0: entered promiscuous mode [ 767.860268][T26829] Bluetooth: hci0: unsupported parameter 5135 [ 767.860286][T26829] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 767.940311][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 768.164060][T26833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5084'. [ 768.282123][T26834] team0: No ports can be present during mode change [ 768.284690][T26834] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5084'. [ 768.492681][T26838] netlink: 'syz.3.5086': attribute type 5 has an invalid length. [ 768.715407][T26836] ip_tables: iptables: counters copy to user failed while replacing table [ 768.894042][T26844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5088'. [ 768.896029][T26857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5088'. [ 768.968702][T26861] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 769.012601][T26857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5088'. [ 769.428730][T26874] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 769.428832][T26875] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 771.702770][T26845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.165254][T26882] bond5: Removing last ns target with arp_interval on [ 772.252228][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5098'. [ 772.498058][T26896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5097'. [ 772.702302][T26898] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5101'. [ 772.702629][T26898] 0·: renamed from hsr0 (while UP) [ 772.730309][T26898] 0·: entered allmulticast mode [ 772.731295][T26898] hsr_slave_0: entered allmulticast mode [ 772.731627][T26898] hsr_slave_1: entered allmulticast mode [ 772.739776][T26898] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 772.921141][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'. [ 772.921165][T26912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5106'. [ 772.967916][T26917] pimreg9: entered allmulticast mode [ 773.595298][T26937] netlink: 'syz.1.5111': attribute type 1 has an invalid length. [ 773.724138][T26943] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5113'. [ 774.710484][T26962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5116'. [ 775.187259][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5119'. [ 775.447479][T26982] netlink: 'syz.2.5123': attribute type 4 has an invalid length. [ 775.498635][T26982] netlink: 'syz.2.5123': attribute type 4 has an invalid length. [ 775.904012][T26993] syzkaller1: entered promiscuous mode [ 775.904038][T26993] syzkaller1: entered allmulticast mode [ 775.996118][T26996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5129'. [ 775.996152][T26996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 776.006257][T26995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5129'. [ 776.006335][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 776.273897][T27007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 776.292487][T27006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5132'. [ 776.320295][T27000] xt_CT: No such helper "netbios-ns" [ 776.379113][T27007] ip6gre2: entered promiscuous mode [ 776.379336][T27007] ip6gre2: entered allmulticast mode [ 776.452986][T27015] vlan0: entered promiscuous mode [ 776.453008][T27015] bond0: entered promiscuous mode [ 776.453023][T27015] bond_slave_1: entered promiscuous mode [ 776.453224][T27015] syz_tun: entered promiscuous mode [ 776.511855][T27007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.589408][T27018] veth1_to_bond: entered allmulticast mode [ 776.589728][T27018] veth1_to_bond: entered promiscuous mode [ 776.603986][T27018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'. [ 776.659310][T27018] veth1_to_bond (unregistering): left allmulticast mode [ 776.659351][T27018] veth1_to_bond (unregistering): left promiscuous mode [ 776.660827][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.315199][T27032] syzkaller0: entered promiscuous mode [ 777.315221][T27032] syzkaller0: entered allmulticast mode [ 777.338811][T27032] netlink: 'syz.3.5138': attribute type 62 has an invalid length. [ 777.710786][T27047] netlink: 'syz.3.5142': attribute type 1 has an invalid length. [ 777.799265][T27047] 8021q: adding VLAN 0 to HW filter on device bond6 [ 777.935873][T27048] bond6: (slave veth7): Enslaving as an active interface with a down link [ 778.007762][T27052] bond6: (slave veth9): Enslaving as an active interface with a down link [ 778.998994][T27082] syzkaller0: entered promiscuous mode [ 778.999019][T27082] syzkaller0: entered allmulticast mode [ 779.161534][T27086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.335881][T27084] rdma_rxe: rxe_newlink: failed to add bond0 [ 779.417618][T27084] __nla_validate_parse: 3 callbacks suppressed [ 779.417638][T27084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5153'. [ 779.488316][T17646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.504427][T17646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.505576][T17646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.507241][T17646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.508254][T17646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 780.061253][T27116] netlink: zone id is out of range [ 780.061271][T27116] netlink: zone id is out of range [ 780.061281][T27116] netlink: zone id is out of range [ 780.061290][T27116] netlink: zone id is out of range [ 780.061300][T27116] netlink: zone id is out of range [ 780.061309][T27116] netlink: zone id is out of range [ 780.061319][T27116] netlink: zone id is out of range [ 780.061329][T27116] netlink: zone id is out of range [ 780.768333][T27133] syzkaller1: entered allmulticast mode [ 780.869754][T27094] lo speed is unknown, defaulting to 1000 [ 780.883797][T27094] lo speed is unknown, defaulting to 1000 [ 780.933871][T27132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.620192][T18637] Bluetooth: hci3: command tx timeout [ 781.646940][T27158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5174'. [ 781.730750][T27163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5173'. [ 781.934713][T27159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5173'. [ 782.015030][T27159] syzkaller1: entered promiscuous mode [ 782.015052][T27159] syzkaller1: entered allmulticast mode [ 782.037733][T27094] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.038174][T27094] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.038299][T27094] bridge_slave_0: entered allmulticast mode [ 782.067159][T27094] bridge_slave_0: entered promiscuous mode [ 782.078220][T27094] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.079496][T27094] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.079626][T27094] bridge_slave_1: entered allmulticast mode [ 782.121159][T27094] bridge_slave_1: entered promiscuous mode [ 782.260810][T27094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.264538][T27094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.351192][T27094] team0: Port device team_slave_0 added [ 782.354771][T27094] team0: Port device team_slave_1 added [ 782.414801][T27094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.414817][T27094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.414843][T27094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.417083][T27094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.417097][T27094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.417122][T27094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.682941][T27185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5179'. [ 782.745436][T27185] net_ratelimit: 72 callbacks suppressed [ 782.745457][T27185] openvswitch: netlink: IPv4 tunnel dst address is zero [ 782.745481][T27185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.853434][T27094] hsr_slave_0: entered promiscuous mode [ 782.858433][T27094] hsr_slave_1: entered promiscuous mode [ 782.873737][T27094] debugfs: 'hsr0' already exists in 'hsr' [ 782.873759][T27094] Cannot create hsr debugfs directory [ 782.874856][T27182] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5179'. [ 782.992447][T27190] netlink: 'syz.2.5182': attribute type 10 has an invalid length. [ 783.267402][T27198] ip_tables: iptables: counters copy to user failed while replacing table [ 783.694807][T27220] sctp: [Deprecated]: syz.3.5189 (pid 27220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 783.694807][T27220] Use struct sctp_sack_info instead [ 783.701116][T18637] Bluetooth: hci3: command tx timeout [ 783.733895][T27215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5188'. [ 783.917853][T27094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 783.947567][T27094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.954717][T27094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 783.985329][T27094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.001485][T27094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 784.064832][T27094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.066984][T27094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 784.143362][T27238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5194'. [ 784.149048][T27094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 784.255273][T27238] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 784.270486][T27238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5194'. [ 784.325424][T27238] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 784.329702][T27249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5194'. [ 784.815194][T27094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.846106][T27266] netlink: 'syz.0.5198': attribute type 10 has an invalid length. [ 784.846130][T27266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5198'. [ 784.884199][T27266] team0: Port device dummy0 removed [ 784.888201][T27266] bridge0: port 1(dummy0) entered blocking state [ 784.888750][T27266] bridge0: port 1(dummy0) entered disabled state [ 784.891613][T27266] dummy0: entered allmulticast mode [ 784.968981][T27094] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.082176][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.082279][ T8996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.176997][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.177097][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.325640][T27281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5201'. [ 785.377960][T27281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 785.780365][T18637] Bluetooth: hci3: command tx timeout [ 785.798070][T27296] dummy0: left allmulticast mode [ 785.799337][T27296] bridge0: port 1(dummy0) entered disabled state [ 785.953463][T27296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 786.185425][T27315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5206'. [ 786.397215][T27319] pim6reg0: tun_chr_ioctl cmd 35111 [ 786.633207][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'. [ 786.734395][T27325] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5208'. [ 786.797408][T27094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.892547][T27325] vlan3: entered allmulticast mode [ 786.896812][T27325] bridge0: port 3(vlan3) entered blocking state [ 786.897384][T27325] bridge0: port 3(vlan3) entered disabled state [ 786.906236][T27325] vlan3: entered promiscuous mode [ 786.998644][T27337] syzkaller0: entered promiscuous mode [ 786.998832][T27337] syzkaller0: entered allmulticast mode [ 787.508983][T27354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 787.860477][T18637] Bluetooth: hci3: command tx timeout [ 788.027577][T27367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5218'. [ 788.062485][T27367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5218'. [ 788.068573][T27373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5216'. [ 788.084196][T27094] veth0_vlan: entered promiscuous mode [ 788.615918][T27094] veth1_vlan: entered promiscuous mode [ 788.708940][T27094] veth0_macvtap: entered promiscuous mode [ 788.723731][T27094] veth1_macvtap: entered promiscuous mode [ 788.789582][T27389] macvtap1: entered allmulticast mode [ 788.789621][T27389] veth0_to_bridge: entered allmulticast mode [ 788.862345][T27389] veth0_to_bridge: left allmulticast mode [ 789.039889][T27094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.386334][T27094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.437975][T27409] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 789.572725][T12732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.573631][T12732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.573669][T12732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.573702][T12732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.894319][T27417] sock: sock_timestamping_bind_phc: sock not bind to device [ 789.937540][ T8996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.937562][ T8996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.983669][T27425] netlink: 'syz.0.5228': attribute type 9 has an invalid length. [ 789.986854][T27425] __nla_validate_parse: 5 callbacks suppressed [ 789.986881][T27425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5228'. [ 790.396367][ T9004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.396392][ T9004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.986885][T27442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5231'. [ 791.237093][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'. [ 791.237149][T27452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5232'. [ 791.237806][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'. [ 791.237830][T27452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5232'. [ 791.989404][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'. [ 791.989441][T27466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5235'. [ 792.138101][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5238'. [ 792.138135][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5238'. [ 792.138159][T27478] netlink: 'syz.1.5238': attribute type 18 has an invalid length. [ 792.322556][T27487] netlink: 'syz.1.5238': attribute type 18 has an invalid length. [ 792.374347][T27477] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.374699][T27477] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.402631][T27482] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.402775][T27482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.403113][T27482] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.403228][T27482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.513211][T27491] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20265 [ 792.553091][T12731] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 792.553409][T12731] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 792.553531][T12731] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 792.564767][T12732] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 792.787994][T27451] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 792.819884][T27497] netlink: 'syz.1.5242': attribute type 1 has an invalid length. [ 792.829533][T27499] netlink: 'syz.3.5244': attribute type 1 has an invalid length. [ 792.829562][T27499] netlink: 'syz.3.5244': attribute type 4 has an invalid length. [ 792.829979][T27500] netlink: 'syz.3.5244': attribute type 1 has an invalid length. [ 792.854696][T27500] netlink: 'syz.3.5244': attribute type 4 has an invalid length. [ 792.855054][T27499] netlink: 'syz.3.5244': attribute type 1 has an invalid length. [ 792.855071][T27499] netlink: 'syz.3.5244': attribute type 4 has an invalid length. [ 793.113329][T27497] 8021q: adding VLAN 0 to HW filter on device bond8 [ 793.399321][T27522] ip_tables: iptables: counters copy to user failed while replacing table [ 793.941112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 794.231994][T27532] sctp: [Deprecated]: syz.1.5247 (pid 27532) Use of int in max_burst socket option. [ 794.231994][T27532] Use struct sctp_assoc_value instead [ 794.284972][T27532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.319231][T27535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.699288][T27543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 794.699307][T27543] IPv6: NLM_F_CREATE should be set when creating new route [ 794.699350][T27543] IPv6: NLM_F_CREATE should be set when creating new route [ 794.699397][T27543] IPv6: NLM_F_CREATE should be set when creating new route [ 794.738324][T27543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 794.854686][T27538] bond9: option mode: invalid value (222) [ 794.859421][T27538] bond9 (unregistering): Released all slaves [ 795.021780][T27555] validate_nla: 1 callbacks suppressed [ 795.021802][T27555] netlink: 'syz.1.5252': attribute type 10 has an invalid length. [ 795.021818][T27555] __nla_validate_parse: 13 callbacks suppressed [ 795.021832][T27555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5252'. [ 795.093276][T27560] netlink: 'syz.2.5257': attribute type 62 has an invalid length. [ 795.114659][T27555] dummy0: entered promiscuous mode [ 795.126780][T27555] bond5: (slave dummy0): Releasing active interface [ 795.589280][T27574] 8021q: VLANs not supported on sit0 [ 795.774550][T27583] xt_limit: Overflow, try lower: 0/0 [ 795.904748][T27583] tun0: tun_chr_ioctl cmd 1074025677 [ 795.904896][T27583] tun0: linktype set to 776 [ 796.493353][T27592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5265'. [ 796.555711][T27598] smbdirect: ib_dev[sys] removed [ 797.532913][T27622] xt_ecn: cannot match TCP bits for non-tcp packets [ 797.623777][T27617] netlink: 'syz.1.5273': attribute type 2 has an invalid length. [ 797.992594][T27642] xt_hashlimit: size too large, truncated to 1048576 [ 798.025755][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5277'. [ 798.403618][T27637] bond0 (unregistering): Released all slaves [ 798.852266][T27669] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5283'. [ 799.462240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.462742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.463131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.463522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.463900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.644847][T27703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5283'. [ 800.451420][T27710] x_tables: duplicate underflow at hook 2 [ 800.619851][T27718] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5290'. [ 800.791923][T27727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5291'. [ 800.936219][T27729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 800.936603][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 801.236267][T27737] netlink: 'syz.5.5293': attribute type 8 has an invalid length. [ 801.236292][T27737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5293'. [ 802.233123][T27756] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 802.557445][T27763] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 802.684569][T27774] netlink: 'syz.5.5302': attribute type 1 has an invalid length. [ 802.863790][T27763] bond1: entered promiscuous mode [ 802.879556][T27763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.923124][T27779] netlink: 'syz.3.5305': attribute type 3 has an invalid length. [ 802.923878][T27779] netlink: 'syz.3.5305': attribute type 3 has an invalid length. [ 802.981897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.982373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.982782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.983200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.983637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.486963][T27802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5311'. [ 803.602225][T27793] lo speed is unknown, defaulting to 1000 [ 803.604764][T27802] netlink: 'syz.5.5311': attribute type 61 has an invalid length. [ 803.604787][T27802] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5311'. [ 803.605261][T27808] syzkaller0: entered promiscuous mode [ 803.605282][T27808] syzkaller0: entered allmulticast mode [ 803.751627][T27810] netlink: 'syz.0.5313': attribute type 1 has an invalid length. [ 803.911652][T27809] xt_CT: No such helper "snmp_trap" [ 804.037928][T27803] bond9 (unregistering): Released all slaves [ 805.070462][ C0] net_ratelimit: 2 callbacks suppressed [ 805.070484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.070753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.071000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.407677][T27858] ip_tables: iptables: counters copy to user failed while replacing table [ 805.593240][T27861] netlink: 'syz.3.5319': attribute type 16 has an invalid length. [ 805.593267][T27861] netlink: 'syz.3.5319': attribute type 17 has an invalid length. [ 806.340545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.341000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.341414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.341795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.564618][T27860] bridge2: port 1(erspan0) entered disabled state [ 809.602920][T27860] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.607992][T27860] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.700788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.701354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.806716][T27861] bridge2: port 1(erspan0) entered blocking state [ 809.806851][T27861] bridge2: port 1(erspan0) entered forwarding state [ 809.849530][T27861] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.849655][T27861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.874301][T27861] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.874430][T27861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.996075][T27861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.002008][T26474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.030175][T27861] bridge0: port 3(vlan3) entered blocking state [ 810.030303][T27861] bridge0: port 3(vlan3) entered forwarding state [ 810.111928][T27889] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5323'. [ 810.153045][ T6089] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 810.153248][ T6089] bond6: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 810.153582][ T6089] bond6: (slave veth7): making interface the new active one [ 810.201416][ T6089] bond6: active interface up! [ 810.381298][T27892] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5323'. [ 810.904550][ T5741] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 811.847391][T27928] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 811.847713][T27928] syzkaller1: linktype set to 769 [ 812.037732][T27941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5334'. [ 813.060720][ C1] net_ratelimit: 4 callbacks suppressed [ 813.060742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.061161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.061187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.061599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.061662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.062023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.062406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.062803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.063245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.346966][T27973] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5337'. [ 813.447232][T27978] netlink: 'syz.3.5338': attribute type 1 has an invalid length. [ 813.471064][T27975] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5337'. [ 813.493596][T27976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5337'. [ 813.511892][T27982] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5337'. [ 813.577865][T27987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5340'. [ 813.577985][T27979] macvtap0: entered allmulticast mode [ 813.612453][T27980] macvtap1: entered allmulticast mode [ 813.816849][T27978] bond7: (slave bridge3): making interface the new active one [ 813.926522][T27978] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 814.309482][T28006] netdevsim0: mtu greater than device maximum [ 814.380821][T28005] wg2 speed is unknown, defaulting to 1000 [ 814.380984][T28005] wg2 speed is unknown, defaulting to 1000 [ 814.381855][T28005] wg2 speed is unknown, defaulting to 1000 [ 814.441256][T28005] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 814.441299][T28005] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 814.441344][T28005] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 814.612037][T18637] Bluetooth: hci5: connection err: -111 [ 814.686585][T28005] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 814.854591][T28005] wg2 speed is unknown, defaulting to 1000 [ 814.879598][T28005] wg2 speed is unknown, defaulting to 1000 [ 814.913429][T28005] wg2 speed is unknown, defaulting to 1000 [ 814.975069][T28005] wg2 speed is unknown, defaulting to 1000 [ 814.994769][T28005] wg2 speed is unknown, defaulting to 1000 [ 815.016600][T28005] wg2 speed is unknown, defaulting to 1000 [ 815.041660][T28005] wg2 speed is unknown, defaulting to 1000 [ 815.071385][T28005] wg2 speed is unknown, defaulting to 1000 [ 815.207578][T28005] wg2 speed is unknown, defaulting to 1000 [ 815.231804][T28005] wg2 speed is unknown, defaulting to 1000 [ 815.575995][T28031] syzkaller0: entered promiscuous mode [ 815.576025][T28031] syzkaller0: entered allmulticast mode [ 818.766386][T28043] tap0: tun_chr_ioctl cmd 1074025677 [ 818.766500][T28043] tap0: linktype set to 774 [ 818.768472][T28041] tap0: tun_chr_ioctl cmd 1074025680 [ 819.461795][ C0] net_ratelimit: 6 callbacks suppressed [ 819.461822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.462352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.462843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.463295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.463737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.464150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.464578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.229232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.229731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.230228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.617573][T28080] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5361'. [ 823.856704][T28068] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 823.913992][T28068] syzkaller0: entered promiscuous mode [ 823.916071][T28068] syzkaller0: entered allmulticast mode [ 824.446544][T28109] SET target dimension over the limit! [ 824.570146][T28106] xt_CT: No such helper "syz1" [ 824.609846][T28112] netlink: 'syz.2.5367': attribute type 1 has an invalid length. [ 824.834025][T28112] bond0: entered promiscuous mode [ 824.834055][T28112] bond0: entered allmulticast mode [ 824.857486][T28112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.191858][T28122] veth1_to_batadv: entered promiscuous mode [ 825.191885][T28122] veth1_to_batadv: entered allmulticast mode [ 825.459005][T28128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5371'. [ 825.476704][T28128] netlink: 'syz.5.5371': attribute type 10 has an invalid length. [ 825.604209][T28128] team0 (unregistering): Port device team_slave_0 removed [ 825.641663][T28128] team0 (unregistering): Port device team_slave_1 removed [ 825.999291][T28145] dvmrp0: entered allmulticast mode [ 826.063906][T28145] dvmrp0: left allmulticast mode [ 826.500586][ C0] net_ratelimit: 2 callbacks suppressed [ 826.500611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.501175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.501654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.502088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.502552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.503233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.611049][T28160] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5377'. [ 827.621713][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5384'. [ 827.693278][T28190] tipc: Resetting bearer [ 827.872477][T28190] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 827.875767][T28196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5384'. [ 827.969672][T28170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5379'. [ 828.472856][T28212] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 828.643278][T28217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5390'. [ 828.717263][T28217] bridge0: port 3(vlan3) entered disabled state [ 828.717464][T28217] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.717904][T28217] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.757642][T28217] netlink: 'syz.3.5390': attribute type 4 has an invalid length. [ 828.813832][T28221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 828.813857][T28221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5392'. [ 828.879444][T28227] netlink: 'syz.2.5392': attribute type 10 has an invalid length. [ 828.879469][T28227] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5392'. [ 829.006707][T28227] team0: Port device wg2 added [ 829.326548][T28234] netlink: 'syz.5.5393': attribute type 1 has an invalid length. [ 829.429415][T28242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5393'. [ 829.780633][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.941030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.941516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.941964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.078192][T28257] netlink: 'syz.1.5398': attribute type 11 has an invalid length. [ 830.238186][T28256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5398'. [ 830.388750][T28271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5400'. [ 830.672545][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5402'. [ 830.673996][T28279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5402'. [ 831.228152][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5404'. [ 831.343691][T28287] bridge2: port 1(erspan0) entered disabled state [ 831.793359][T28306] net_ratelimit: 4 callbacks suppressed [ 831.793384][T28306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.461024][T28287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.507472][T28287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.757195][T28287] batman_adv: batadv0: Interface deactivated: gretap1 [ 834.676566][T17646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 834.688490][T17646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 834.705454][T17646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 834.707821][T17646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 834.708514][T17646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 834.811590][T28287] macvtap0: left allmulticast mode [ 834.811766][T28287] macvtap1: left allmulticast mode [ 834.840635][ T9004] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.840672][ T9004] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.840716][ T9004] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.840745][ T9004] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.840784][ T9004] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.840811][ T9004] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.224066][T28321] netlink: 'syz.1.5411': attribute type 1 has an invalid length. [ 835.412382][T28321] 8021q: adding VLAN 0 to HW filter on device bond9 [ 835.840933][T28310] lo speed is unknown, defaulting to 1000 [ 835.848979][T28310] wg2 speed is unknown, defaulting to 1000 [ 836.719293][T28362] x_tables: duplicate underflow at hook 2 [ 836.823707][T17646] Bluetooth: hci6: command tx timeout [ 836.915274][T28354] tipc: Resetting bearer [ 837.144199][T28354] tipc: Resetting bearer [ 837.362624][T28354] veth1_to_batadv: left promiscuous mode [ 837.362665][T28354] veth1_to_batadv: left allmulticast mode [ 837.547805][T28354] 0·: left allmulticast mode [ 837.547844][T28354] hsr_slave_0: left allmulticast mode [ 837.547860][T28354] hsr_slave_1: left allmulticast mode [ 838.003132][T28354] bond0: left promiscuous mode [ 838.003159][T28354] bond0: left allmulticast mode [ 838.177991][T28356] gtp1: entered promiscuous mode [ 838.178016][T28356] gtp1: entered allmulticast mode [ 838.396207][T28368] siw: device registration error -23 [ 838.412245][T22971] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.412281][T22971] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.412318][T22971] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.412347][T22971] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.412383][T22971] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.412411][T22971] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.412447][T22971] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.412474][T22971] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.630846][T28381] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 838.900629][T17646] Bluetooth: hci6: command tx timeout [ 839.133424][T28398] __nla_validate_parse: 2 callbacks suppressed [ 839.133448][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 839.313238][T28405] ipt_REJECT: TCP_RESET invalid for non-tcp [ 839.486732][T28310] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.486924][T28310] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.487328][T28310] bridge_slave_0: entered allmulticast mode [ 839.489431][T28310] bridge_slave_0: entered promiscuous mode [ 839.522240][T28310] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.522457][T28310] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.522604][T28310] bridge_slave_1: entered allmulticast mode [ 839.525001][T28310] bridge_slave_1: entered promiscuous mode [ 839.602095][T28310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.606256][T28310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.679078][T28310] team0: Port device team_slave_0 added [ 839.689876][T28310] team0: Port device team_slave_1 added [ 839.732980][T28310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.733000][T28310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.733030][T28310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.735515][T28310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.735531][T28310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.735561][T28310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.069273][T28310] hsr_slave_0: entered promiscuous mode [ 840.094448][T28310] hsr_slave_1: entered promiscuous mode [ 840.106924][T28310] debugfs: 'hsr0' already exists in 'hsr' [ 840.106959][T28310] Cannot create hsr debugfs directory [ 840.980709][T18637] Bluetooth: hci6: command tx timeout [ 841.098799][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5442'. [ 841.151609][T28444] netlink: 'syz.2.5443': attribute type 7 has an invalid length. [ 841.228453][T28453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5442'. [ 841.259639][T28310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 841.322180][T28310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.326179][T28310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 841.366810][T28310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.379679][T28310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 841.422660][T28310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.426733][T28310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 841.476899][T28310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.008551][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.008973][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.009374][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.009770][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.010098][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.010762][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.011151][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.011533][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.011920][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.012307][T28484] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 842.627189][T28490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5449'. [ 842.661242][T17646] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 842.688589][T28310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.733827][T28310] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.806345][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.806457][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.923935][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.924041][ T9004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.060933][T17646] Bluetooth: hci6: command tx timeout [ 843.471791][T28518] netlink: 5408 bytes leftover after parsing attributes in process `syz.1.5454'. [ 843.471845][T28518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.598280][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5455'. [ 843.984814][T28535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5457'. [ 845.302330][T28568] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5461'. [ 845.784536][T28585] netlink: 'syz.2.5464': attribute type 1 has an invalid length. [ 846.269063][T28600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5468'. [ 846.327122][T28598] syzkaller0: entered promiscuous mode [ 846.327146][T28598] syzkaller0: entered allmulticast mode [ 846.659061][T28310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.676697][T28605] netlink: 'syz.3.5469': attribute type 6 has an invalid length. [ 846.676720][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5469'. [ 847.424215][T28638] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 847.636361][T28310] veth0_vlan: entered promiscuous mode [ 847.733166][T28310] veth1_vlan: entered promiscuous mode [ 847.945938][T28310] veth0_macvtap: entered promiscuous mode [ 847.997094][T28310] veth1_macvtap: entered promiscuous mode [ 848.062004][T28310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.128934][T28310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.251742][ T8999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.251784][ T8999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.251816][ T8999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.251848][ T8999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.304373][T28661] netlink: 'syz.3.5482': attribute type 1 has an invalid length. [ 848.419815][T28661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 848.469781][T28662] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 851.193376][T28661] bridge4: entered promiscuous mode [ 851.196416][T28666] netlink: 'syz.5.5483': attribute type 14 has an invalid length. [ 851.608764][T28670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5485'. [ 851.698285][T12730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.698307][T12730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.797866][T28676] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 851.798052][T28676] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 851.857721][T28676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.946739][T28684] sctp: [Deprecated]: syz.3.5488 (pid 28684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 851.946739][T28684] Use struct sctp_sack_info instead [ 851.973325][T28680] dvmrp0: entered allmulticast mode [ 852.061153][T28682] dvmrp0: left allmulticast mode [ 852.061262][T28682] dvmrp8: left allmulticast mode [ 852.168265][ T8999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.168286][ T8999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.860579][T28704] syzkaller0: entered promiscuous mode [ 852.860602][T28704] syzkaller0: entered allmulticast mode [ 853.309157][T28722] ref_ctr_offset mismatch. inode: 0x1e0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 853.321723][T28733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5500'. [ 853.344661][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5501'. [ 853.384300][T28735] ovs-system: entered promiscuous mode [ 853.763777][T28752] sctp: [Deprecated]: syz.1.5505 (pid 28752) Use of int in maxseg socket option. [ 853.763777][T28752] Use struct sctp_assoc_value instead [ 853.986004][T28756] Bluetooth: hci0: unsupported parameter 5134 [ 853.986030][T28756] Bluetooth: hci0: unsupported parameter 8192 [ 853.986045][T28756] Bluetooth: hci0: unsupported parameter 5134 [ 853.986060][T28756] Bluetooth: hci0: unsupported parameter 8192 [ 854.360859][T28776] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5508'. [ 854.981857][T28791] openvswitch: netlink: Message has 8 unknown bytes. [ 854.984860][T28791] IPv6: addrconf: prefix option has invalid lifetime [ 855.062670][T28797] openvswitch: netlink: Duplicate or invalid key (type 0). [ 855.717792][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5518'. [ 855.728637][T28814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5517'. [ 855.749290][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5517'. [ 855.749321][T28814] netlink: 'syz.5.5517': attribute type 26 has an invalid length. [ 855.749335][T28814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5517'. [ 855.754800][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5517'. [ 855.754868][T28814] netlink: 'syz.5.5517': attribute type 26 has an invalid length. [ 855.754898][T28814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5517'. [ 856.731122][T28841] syzkaller1: entered promiscuous mode [ 856.731147][T28841] syzkaller1: entered allmulticast mode [ 858.399090][T28874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 858.440512][ T7953] wg2 speed is unknown, defaulting to 1000 [ 858.440556][T12731] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 858.505093][T12732] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 858.514471][T12731] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 858.520124][T12731] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 858.639995][T28816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.676648][T28857] netlink: 'syz.3.5528': attribute type 2 has an invalid length. [ 859.268611][T28888] __nla_validate_parse: 2 callbacks suppressed [ 859.268638][T28888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5531'. [ 859.316898][T28893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5532'. [ 859.352953][T28893] vlan2: entered promiscuous mode [ 859.352978][T28893] syz_tun: entered promiscuous mode [ 860.430602][T28915] netlink: 'syz.1.5536': attribute type 1 has an invalid length. [ 860.496647][T28915] bond10: entered promiscuous mode [ 860.498708][T28915] bond10: entered allmulticast mode [ 860.504893][T28915] 8021q: adding VLAN 0 to HW filter on device bond10 [ 860.618454][T28923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5539'. [ 860.866030][T28930] sctp: [Deprecated]: syz.3.5542 (pid 28930) Use of int in max_burst socket option deprecated. [ 860.866030][T28930] Use struct sctp_assoc_value instead [ 861.594396][T28945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.636310][T28955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5549'. [ 862.083813][T28972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 862.343114][T28979] tap0: tun_chr_ioctl cmd 35108 [ 863.507111][T29004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5560'. [ 863.509569][T29007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5560'. [ 863.509610][T29007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5560'. [ 864.252430][T29042] netlink: 'syz.1.5568': attribute type 1 has an invalid length. [ 864.323577][T29043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5568'. [ 864.761613][T29055] ip_tables: iptables: counters copy to user failed while replacing table [ 864.818597][T29045] bond11: (slave veth0_to_bond): making interface the new active one [ 864.829908][T29045] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 864.829996][T29047] netlink: 95 bytes leftover after parsing attributes in process `syz.3.5566'. [ 864.980611][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 865.359214][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.359352][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.359470][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.359574][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.359675][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.359786][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.359890][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.359993][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5574'. [ 865.745885][T29069] netlink: 'syz.5.5573': attribute type 23 has an invalid length. [ 866.652991][T29102] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 867.208912][T29121] netlink: 'syz.2.5582': attribute type 1 has an invalid length. [ 868.768583][T29180] netlink: 'syz.1.5591': attribute type 2 has an invalid length. [ 868.905597][T29178] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 868.930844][T29178] bond3 (unregistering): Released all slaves [ 869.183429][T29183] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 869.285366][T29188] syzkaller1: entered promiscuous mode [ 869.285395][T29188] syzkaller1: entered allmulticast mode [ 869.595156][T29202] openvswitch: netlink: IP tunnel dst address not specified [ 869.595196][T29202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.201074][T29218] __nla_validate_parse: 36 callbacks suppressed [ 870.201098][T29218] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5600'. [ 870.201132][T29218] netlink: 'syz.6.5600': attribute type 7 has an invalid length. [ 870.201149][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5600'. [ 870.597047][T29230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5602'. [ 870.615704][T17646] block nbd6: Receive control failed (result -1) [ 870.711823][T29232] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5602'. [ 870.951355][T29220] syzkaller0: entered promiscuous mode [ 870.951386][T29220] syzkaller0: entered allmulticast mode [ 870.984960][T29225] : left promiscuous mode [ 871.039740][T29217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5601'. [ 871.202752][T29217] virt_wifi0: mtu less than device minimum [ 871.468529][T29246] netlink: 'syz.6.5607': attribute type 16 has an invalid length. [ 871.468556][T29246] netlink: 'syz.6.5607': attribute type 17 has an invalid length. [ 871.540886][T29253] netlink: 'syz.6.5607': attribute type 16 has an invalid length. [ 871.540912][T29253] netlink: 'syz.6.5607': attribute type 17 has an invalid length. [ 872.114307][T29268] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5609'. [ 872.143915][T29266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5610'. [ 873.220488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.136058][T29292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5615'. [ 876.899523][T29246] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.900501][T29246] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.177676][T29246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.214166][T29246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.244003][T29297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 877.244644][T29297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5617'. [ 877.406784][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 877.406821][T29300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5617'. [ 877.722410][T29268] hsr_slave_0 (unregistering): left promiscuous mode [ 877.925137][T29263] syzkaller0: entered promiscuous mode [ 877.925165][T29263] syzkaller0: entered allmulticast mode [ 877.926823][T29291] veth0: entered promiscuous mode [ 878.070487][ T60] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.070835][T22971] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.070882][T22971] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.070924][T22971] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.564466][T29314] syzkaller0: entered promiscuous mode [ 878.564496][T29314] syzkaller0: entered allmulticast mode [ 886.353271][T29359] syzkaller0: entered promiscuous mode [ 886.353295][T29359] syzkaller0: entered allmulticast mode [ 886.357069][T29375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5624'. [ 886.412231][T29376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5624'. [ 886.758244][T29390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5628'. [ 886.770440][T29390] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5628'. [ 886.771893][T29390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5628'. [ 886.771914][T29390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5628'. [ 886.771928][T29390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5628'. [ 887.272129][T29416] syzkaller1: entered promiscuous mode [ 887.272152][T29416] syzkaller1: entered allmulticast mode [ 888.094446][T29449] lo: entered allmulticast mode [ 888.371912][T29457] netlink: 'syz.6.5638': attribute type 6 has an invalid length. [ 888.393664][T29446] lo: left allmulticast mode [ 888.464343][T29460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5639'. [ 888.477794][T29459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5639'. [ 888.611058][T29461] can: request_module (can-proto-0) failed. [ 888.656285][T29459] erspan0: left allmulticast mode [ 888.656311][T29459] erspan0: left promiscuous mode [ 888.656616][T29459] bridge2: port 1(erspan0) entered disabled state [ 888.733560][T29459] bridge5: port 1(erspan0) entered blocking state [ 888.736019][T29459] bridge5: port 1(erspan0) entered disabled state [ 888.745292][T29459] erspan0: entered allmulticast mode [ 888.764485][T29459] erspan0: entered promiscuous mode [ 888.836658][T12731] IPVS: starting estimator thread 0... [ 888.851250][T29475] netlink: 'syz.6.5642': attribute type 3 has an invalid length. [ 888.851492][T29475] netlink: 'syz.6.5642': attribute type 3 has an invalid length. [ 888.909788][T29475] IPVS: Error connecting to the multicast addr [ 888.920251][T29478] IPVS: using max 29 ests per chain, 69600 per kthread [ 889.093649][T29469] lo speed is unknown, defaulting to 1000 [ 889.137939][T29469] wg2 speed is unknown, defaulting to 1000 [ 890.309608][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5651'. [ 892.671554][T29591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5663'. [ 892.939384][T29599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5666'. [ 892.939406][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5666'. [ 893.031479][T29599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5666'. [ 893.031501][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5666'. [ 893.367716][T29603] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 893.369419][T29603] bond3 (unregistering): Released all slaves [ 893.655401][T29596] lo speed is unknown, defaulting to 1000 [ 893.692103][T29596] wg2 speed is unknown, defaulting to 1000 [ 894.065254][T29630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5669'. [ 894.196804][T29628] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5671'. [ 894.221185][T29628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5671'. [ 894.284034][T29635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5672'. [ 894.487944][T29640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5675'. [ 895.538177][T29669] netlink: 'syz.5.5681': attribute type 34 has an invalid length. [ 895.721582][T29669] bond3: option lacp_strict: invalid value (64) [ 895.744369][T29669] bond3 (unregistering): Released all slaves [ 896.003183][T29680] syzkaller0: entered promiscuous mode [ 896.003207][T29680] syzkaller0: entered allmulticast mode [ 896.120908][T29684] TC_ACT_REPEAT abuse ? [ 896.292879][T29688] Bluetooth: MGMT ver 1.23 [ 896.566465][T29703] No such timeout policy "s" [ 896.566484][T29703] netlink: Failed to associated timeout policy 's' [ 897.241699][T29716] IPVS: Unknown mcast interface: vcan0 [ 897.681506][T29731] __nla_validate_parse: 11 callbacks suppressed [ 897.681526][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.682542][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.683785][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.687375][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.688360][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.689320][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.690452][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.713866][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.781028][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.784060][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 897.936422][T29737] syzkaller1: entered promiscuous mode [ 897.936636][T29737] syzkaller1: entered allmulticast mode [ 898.507056][T29757] netlink: 'syz.6.5705': attribute type 1 has an invalid length. [ 898.624931][T29757] bond1: entered promiscuous mode [ 898.629255][T29757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 898.675573][T29756] batman_adv: batadv0: Adding interface: macvtap1 [ 898.675588][T29756] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.675615][T29756] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 899.553479][T17646] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 900.658454][T29808] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 900.694433][T29808] bond9 (unregistering): Released all slaves [ 901.222268][T29807] syzkaller0: entered promiscuous mode [ 901.222293][T29807] syzkaller0: entered allmulticast mode [ 905.988006][T29847] __nla_validate_parse: 23 callbacks suppressed [ 905.988027][T29847] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5723'. [ 907.190678][T29893] syzkaller0: entered promiscuous mode [ 907.190705][T29893] syzkaller0: entered allmulticast mode [ 910.711379][T18637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 910.745682][T18637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 910.747573][T18637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 910.757852][T18637] Bluetooth: hci6: link tx timeout [ 910.758529][T18637] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 910.759781][T18637] Bluetooth: hci6: link tx timeout [ 910.759823][T18637] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 910.794846][T29943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 910.836151][T29943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 912.313631][T29926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.824406][T17646] Bluetooth: hci6: command 0x0406 tx timeout [ 912.904862][T17646] Bluetooth: hci7: command tx timeout [ 913.581152][T29951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5739'. [ 913.655051][T29955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5740'. [ 913.730438][T29956] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5739'. [ 913.730885][T29954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5741'. [ 913.839785][T29959] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5742'. [ 914.037240][T29971] netlink: 'syz.1.5743': attribute type 11 has an invalid length. [ 914.170798][T29972] netlink: 'syz.1.5743': attribute type 12 has an invalid length. [ 914.170826][T29972] netlink: 'syz.1.5743': attribute type 29 has an invalid length. [ 914.170842][T29972] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5743'. [ 914.366550][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5744'. [ 914.911917][T17646] Bluetooth: hci6: command 0x0406 tx timeout [ 914.945084][T29941] lo speed is unknown, defaulting to 1000 [ 914.978811][T29941] wg2 speed is unknown, defaulting to 1000 [ 914.980295][T18637] Bluetooth: hci7: command tx timeout [ 915.456653][T30008] netlink: 'syz.3.5750': attribute type 10 has an invalid length. [ 916.098078][T30016] syzkaller1: entered promiscuous mode [ 916.098105][T30016] syzkaller1: entered allmulticast mode [ 916.126196][T30021] syzkaller0: entered promiscuous mode [ 916.126240][T30021] syzkaller0: entered allmulticast mode [ 916.276845][T30032] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.5755'. [ 916.499787][T30012] tipc: Enabled bearer , priority 0 [ 916.541518][T30033] netlink: 'syz.6.5755': attribute type 29 has an invalid length. [ 916.541547][T30033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5755'. [ 916.591771][T30009] tipc: Resetting bearer [ 916.915768][T30009] tipc: Disabling bearer [ 917.012148][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5757'. [ 917.060343][T18637] Bluetooth: hci7: command tx timeout [ 917.331771][T29941] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.331987][T29941] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.332544][T29941] bridge_slave_0: entered allmulticast mode [ 917.335119][T29941] bridge_slave_0: entered promiscuous mode [ 917.356726][T29941] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.357767][T29941] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.358790][T29941] bridge_slave_1: entered allmulticast mode [ 917.388944][T29941] bridge_slave_1: entered promiscuous mode [ 917.749814][T29941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.778163][T29941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.149941][T29941] team0: Port device team_slave_0 added [ 918.172491][T29941] team0: Port device team_slave_1 added [ 918.397898][T29941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.397933][T29941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.397964][T29941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.534474][T29941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.534494][T29941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.534539][T29941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.794355][T30078] syzkaller1: entered promiscuous mode [ 918.794562][T30078] syzkaller1: entered allmulticast mode [ 919.147455][T29941] hsr_slave_0: entered promiscuous mode [ 919.151120][T18637] Bluetooth: hci7: command tx timeout [ 919.158076][T29941] hsr_slave_1: entered promiscuous mode [ 919.171365][T29941] debugfs: 'hsr0' already exists in 'hsr' [ 919.171388][T29941] Cannot create hsr debugfs directory [ 919.450556][T30111] __nla_validate_parse: 3 callbacks suppressed [ 919.450575][T30111] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5771'. [ 919.685884][T30113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5769'. [ 920.277252][T30102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5768'. [ 920.596363][T30150] ip6gretap0: entered promiscuous mode [ 920.596550][T30150] macsec1: entered allmulticast mode [ 920.596568][T30150] ip6gretap0: entered allmulticast mode [ 920.602518][T30143] syzkaller0: entered promiscuous mode [ 920.602572][T30143] syzkaller0: entered allmulticast mode [ 921.096696][T30163] netlink: 'syz.3.5778': attribute type 11 has an invalid length. [ 921.525065][T30175] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 921.713413][T30178] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 922.179655][T29941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 922.238641][T29941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.247589][T29941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 922.316056][T29941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.331152][T29941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 922.434065][T29941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 922.466405][T29941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 922.567898][T29941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 922.864626][T30203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5781'. [ 922.895520][T30201] syzkaller0: entered promiscuous mode [ 922.895750][T30201] syzkaller0: entered allmulticast mode [ 923.137811][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5785'. [ 923.589466][T30225] netlink: 'syz.6.5789': attribute type 11 has an invalid length. [ 923.609523][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5788'. [ 923.620646][T30213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.917258][T29941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.002460][T29941] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.052864][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.052960][T12732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.079034][T30239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.103372][T30239] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 924.113993][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.114262][T12732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.413937][T12732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.413960][T12732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.757639][T30255] syzkaller0: entered promiscuous mode [ 924.757825][T30255] syzkaller0: entered allmulticast mode [ 924.902428][T30255] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5795'. [ 925.211194][T30277] netlink: 332 bytes leftover after parsing attributes in process `syz.6.5797'. [ 926.139044][T30306] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20004 [ 926.156383][T30310] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 926.205102][T30310] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 926.314819][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5801'. [ 926.478753][T30307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 926.544804][T30322] netlink: 'syz.6.5803': attribute type 3 has an invalid length. [ 926.963539][T29941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.980726][T30350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5807'. [ 928.484093][T29941] veth0_vlan: entered promiscuous mode [ 928.543335][T29941] veth1_vlan: entered promiscuous mode [ 928.765580][T29941] veth0_macvtap: entered promiscuous mode [ 928.815639][T29941] veth1_macvtap: entered promiscuous mode [ 928.975915][T29941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.054433][T29941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.221317][ T8999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.223012][ T8999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.224721][ T8999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.224779][ T9004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.078809][T22971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.078833][T22971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.213229][T30416] netlink: 'syz.5.5817': attribute type 1 has an invalid length. [ 930.310576][T30406] netlink: 'syz.5.5817': attribute type 2 has an invalid length. [ 930.367975][T30406] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5817'. [ 930.371917][T22974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.371964][T22974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.203297][ T8997] IPVS: starting estimator thread 0... [ 931.239852][T30447] netlink: 'syz.7.5738': attribute type 39 has an invalid length. [ 931.290530][T30448] IPVS: using max 28 ests per chain, 67200 per kthread [ 932.233188][T30476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5824'. [ 932.278335][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5824'. [ 933.019067][T30507] tc_dump_action: action bad kind [ 933.809546][T30495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5829'. [ 934.369418][T30557] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 934.796193][T30565] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5838'. [ 935.039713][T30576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5841'. [ 935.338398][T30573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5841'. [ 935.902950][T30594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5843'. [ 936.145400][T30594] bond9: entered allmulticast mode [ 936.275478][T30590] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 936.964537][T30622] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5848'. [ 936.964567][T30622] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5848'. [ 936.964595][T30622] netlink: 'syz.7.5848': attribute type 6 has an invalid length. [ 936.964609][T30622] netlink: 'syz.7.5848': attribute type 5 has an invalid length. [ 936.964621][T30622] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5848'. [ 937.017533][T22974] IPVS: starting estimator thread 0... [ 937.067556][T30620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5847'. [ 937.110119][T30626] IPVS: using max 26 ests per chain, 62400 per kthread [ 937.409780][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5852'. [ 937.409808][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5852'. [ 938.051414][T30646] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5855'. [ 938.188218][T30649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5856'. [ 938.274180][T30653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5854'. [ 938.686701][T30661] gretap1: entered allmulticast mode [ 938.725571][T30666] netlink: 'syz.6.5861': attribute type 1 has an invalid length. [ 939.021017][T30674] netlink: zone id is out of range [ 939.021038][T30674] netlink: zone id is out of range [ 939.021048][T30674] netlink: zone id is out of range [ 939.021122][T30674] netlink: zone id is out of range [ 939.021133][T30674] netlink: zone id is out of range [ 939.021323][T30673] netlink: 'syz.1.5862': attribute type 16 has an invalid length. [ 939.114373][T30675] sctp: [Deprecated]: syz.7.5864 (pid 30675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.114373][T30675] Use struct sctp_sack_info instead [ 939.394341][T30679] openvswitch: netlink: IP tunnel dst address not specified [ 939.394379][T30679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.163952][T30705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.338789][T17646] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 940.358235][T17646] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 940.372373][T17646] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 940.387973][T17646] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 940.392605][T17646] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 940.996861][T30729] __nla_validate_parse: 7 callbacks suppressed [ 940.996881][T30729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 941.089661][T18635] bond0: (slave syz_tun): Releasing backup interface [ 941.102072][T18635] syz_tun (unregistering): left promiscuous mode [ 941.378636][T30735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5877'. [ 941.646058][T30713] lo speed is unknown, defaulting to 1000 [ 941.670160][T30713] wg2 speed is unknown, defaulting to 1000 [ 941.853390][T30751] bond1: left promiscuous mode [ 941.959391][T30764] netlink: 'syz.3.5880': attribute type 1 has an invalid length. [ 942.011215][T30753] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 942.011524][T30756] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 942.077630][T30764] 8021q: adding VLAN 0 to HW filter on device bond10 [ 942.620100][T18637] Bluetooth: hci8: command tx timeout [ 942.807217][T30762] bond8: (slave veth0_to_bond): Releasing backup interface [ 942.855633][T30762] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 943.128956][T30765] macvlan2: entered promiscuous mode [ 943.132290][T30765] macvlan2: entered allmulticast mode [ 943.141289][T30765] bond10: entered promiscuous mode [ 943.150019][T30765] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 943.157466][T30765] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 943.195979][T30765] bond10: left promiscuous mode [ 943.595070][T30793] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5886'. [ 943.597208][T30793] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5886'. [ 943.759169][T30799] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5888'. [ 943.833747][T30796] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5888'. [ 943.985659][T30807] xt_connbytes: Forcing CT accounting to be enabled [ 944.677766][T18637] Bluetooth: hci8: command tx timeout [ 944.745597][T30827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5892'. [ 944.745632][T30827] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 944.795383][T30822] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.796060][T30822] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.966968][T30822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.985400][T30822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.383535][T30713] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.383712][T30713] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.383858][T30713] bridge_slave_0: entered allmulticast mode [ 945.385765][T30713] bridge_slave_0: entered promiscuous mode [ 945.416872][T30713] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.417067][T30713] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.417244][T30713] bridge_slave_1: entered allmulticast mode [ 945.419152][T30713] bridge_slave_1: entered promiscuous mode [ 945.618455][T30713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.665526][T30713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.755271][T30713] team0: Port device team_slave_0 added [ 945.771802][T30713] team0: Port device team_slave_1 added [ 945.838421][T30713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.838440][T30713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.838467][T30713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.841027][T12730] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.841339][T12730] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.841430][T12730] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.841466][T12730] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.916435][T30713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.916455][T30713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.916483][T30713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.987377][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5896'. [ 945.987401][T30851] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5896'. [ 945.987417][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5896'. [ 945.987432][T30851] netlink: 'syz.6.5896': attribute type 5 has an invalid length. [ 946.080184][T30713] hsr_slave_0: entered promiscuous mode [ 946.081389][T30713] hsr_slave_1: entered promiscuous mode [ 946.082352][T30713] debugfs: 'hsr0' already exists in 'hsr' [ 946.082375][T30713] Cannot create hsr debugfs directory [ 946.329207][T30857] netlink: 'syz.5.5899': attribute type 5 has an invalid length. [ 946.750239][T18637] Bluetooth: hci8: command tx timeout [ 947.144652][T30865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5902'. [ 947.144687][T30865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5902'. [ 947.478001][T30713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.478039][T30713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 947.478067][T30713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.669444][T30887] x_tables: duplicate underflow at hook 1 [ 947.826100][T30890] syzkaller0: entered promiscuous mode [ 947.826329][T30890] syzkaller0: entered allmulticast mode [ 948.135392][T30713] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 948.137616][T30713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.137649][T30713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 948.137678][T30713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.544204][T30900] netlink: 'syz.5.5907': attribute type 19 has an invalid length. [ 948.544226][T30900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5907'. [ 948.581847][T30713] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 948.582727][T30713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.582763][T30713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 948.582792][T30713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.722049][T30907] netlink: 'syz.5.5907': attribute type 19 has an invalid length. [ 948.722073][T30907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5907'. [ 948.805950][T30900] netlink: 'syz.5.5907': attribute type 19 has an invalid length. [ 948.805970][T30900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5907'. [ 948.829209][T18637] Bluetooth: hci8: command tx timeout [ 949.073794][T30910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5908'. [ 949.131583][T30912] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5908'. [ 949.305590][T30907] netlink: 'syz.5.5907': attribute type 19 has an invalid length. [ 949.305615][T30907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5907'. [ 949.361004][T12730] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.361072][T12730] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.361113][T12730] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.361153][T12730] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.676564][T30912] erspan0: left allmulticast mode [ 949.676972][T30912] erspan0: left promiscuous mode [ 949.677873][T30912] bridge5: port 1(erspan0) entered disabled state [ 949.737419][T30912] bridge6: port 1(erspan0) entered blocking state [ 949.753653][T30912] bridge6: port 1(erspan0) entered disabled state [ 949.754012][T30912] erspan0: entered allmulticast mode [ 949.765578][T30912] erspan0: entered promiscuous mode [ 949.914733][T30713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.914773][T30713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 949.914802][T30713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.132727][T30916] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5910'. [ 950.156451][T30916] netlink: 'syz.6.5910': attribute type 1 has an invalid length. [ 950.268206][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5912'. [ 950.551828][T30927] syzkaller0: entered promiscuous mode [ 950.552030][T30927] syzkaller0: entered allmulticast mode [ 950.912023][T30951] netlink: 'syz.7.5915': attribute type 9 has an invalid length. [ 950.913592][T30952] netlink: 'syz.7.5915': attribute type 9 has an invalid length. [ 951.814374][T30957] netlink: 'syz.7.5916': attribute type 13 has an invalid length. [ 954.108035][T18637] Bluetooth: hci3: command 0x0406 tx timeout [ 954.910913][T30963] __nla_validate_parse: 3 callbacks suppressed [ 954.910934][T30963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5917'. [ 955.512498][T30968] syzkaller0: entered promiscuous mode [ 955.512544][T30968] syzkaller0: entered allmulticast mode [ 956.083910][T30713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 956.105879][T30713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.108025][T30713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 956.192711][T30713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.212459][T30713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 956.269337][T30713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 956.300787][T30713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 956.344105][T30713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 956.738472][T30713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.825471][T30713] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.876715][T12731] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.876879][T12731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.935901][T12731] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.936013][T12731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.509784][T31037] lo speed is unknown, defaulting to 1000 [ 957.530260][T31037] wg2 speed is unknown, defaulting to 1000 [ 957.675672][T31047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5932'. [ 958.107321][T31060] netlink: 'syz.6.5934': attribute type 1 has an invalid length. [ 958.107790][T31059] netlink: 'syz.6.5934': attribute type 1 has an invalid length. [ 958.170258][T31061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5934'. [ 958.215777][T31062] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5934'. [ 958.318001][T31076] veth5: entered promiscuous mode [ 958.345166][T31076] bond2: (slave veth5): Enslaving as an active interface with a down link [ 958.759877][T31091] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 958.792197][T31085] syzkaller0: entered promiscuous mode [ 958.792222][T31085] syzkaller0: entered allmulticast mode [ 958.832548][T31085] netlink: 'syz.3.5938': attribute type 96 has an invalid length. [ 958.854380][T31085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5938'. [ 959.306155][T31101] FAULT_INJECTION: forcing a failure. [ 959.306155][T31101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.306195][T31101] CPU: 0 UID: 0 PID: 31101 Comm: syz.6.5940 Not tainted syzkaller #0 PREEMPT(full) [ 959.306222][T31101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.306237][T31101] Call Trace: [ 959.306247][T31101] [ 959.306258][T31101] dump_stack_lvl+0xe8/0x150 [ 959.306301][T31101] should_fail_ex+0x410/0x560 [ 959.306334][T31101] _copy_to_user+0x31/0xb0 [ 959.306368][T31101] copy_siginfo_to_user+0x22/0xc0 [ 959.306403][T31101] x64_setup_rt_frame+0x764/0xc50 [ 959.306464][T31101] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 959.306512][T31101] arch_do_signal_or_restart+0x456/0x860 [ 959.306551][T31101] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 959.306585][T31101] ? __x64_sys_recvmsg+0x25a/0x290 [ 959.306641][T31101] exit_to_user_mode_loop+0x10e/0x770 [ 959.306667][T31101] ? rcu_is_watching+0x16/0xb0 [ 959.306701][T31101] do_syscall_64+0x328/0x520 [ 959.306730][T31101] ? trace_irq_disable+0x3b/0x140 [ 959.306755][T31101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.306780][T31101] ? clear_bhb_loop+0x70/0xc0 [ 959.306817][T31101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.306841][T31101] RIP: 0033:0x7f304df9e157 [ 959.306863][T31101] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 959.306895][T31101] RSP: 002b:00007f304ef06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 959.306932][T31101] RAX: 000000000000002f RBX: 00007f304e225fa0 RCX: 00007f304df9e159 [ 959.306947][T31101] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 959.306970][T31101] RBP: 00007f304ef06090 R08: 0000000000000000 R09: 0000000000000000 [ 959.306982][T31101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.306994][T31101] R13: 00007f304e226038 R14: 00007f304e225fa0 R15: 00007ffeb7aac398 [ 959.307027][T31101] [ 959.972097][T31122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5944'. [ 960.241145][T31117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5945'. [ 960.380205][T30713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.599533][T30713] veth0_vlan: entered promiscuous mode [ 960.700760][T30713] veth1_vlan: entered promiscuous mode [ 960.947404][T30713] veth0_macvtap: entered promiscuous mode [ 960.995233][T31151] No such timeout policy "syz1" [ 960.997274][T30713] veth1_macvtap: entered promiscuous mode [ 961.174567][T30713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.221441][T30713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.252559][ T9004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.253083][T22971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.354500][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5952'. [ 962.106773][T31182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 962.180760][T31159] FAULT_INJECTION: forcing a failure. [ 962.180760][T31159] name fail_futex, interval 1, probability 0, space 0, times 1 [ 962.180800][T31159] CPU: 0 UID: 0 PID: 31159 Comm: syz.6.5953 Not tainted syzkaller #0 PREEMPT(full) [ 962.180826][T31159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.180841][T31159] Call Trace: [ 962.180850][T31159] [ 962.180861][T31159] dump_stack_lvl+0xe8/0x150 [ 962.180900][T31159] should_fail_ex+0x410/0x560 [ 962.180933][T31159] get_futex_key+0x1b4/0x1580 [ 962.180974][T31159] ? __pfx_get_futex_key+0x10/0x10 [ 962.181016][T31159] futex_wake+0x119/0x5f0 [ 962.181058][T31159] ? __pfx_futex_wake+0x10/0x10 [ 962.181103][T31159] ? mm_exit_exec_release+0x20/0x290 [ 962.181139][T31159] do_futex+0x458/0x4e0 [ 962.181176][T31159] ? __pfx_do_futex+0x10/0x10 [ 962.181219][T31159] ? __might_fault+0xaf/0x130 [ 962.181257][T31159] mm_exit_exec_release+0x10d/0x290 [ 962.181294][T31159] exit_mm+0x4d/0x2d0 [ 962.181321][T31159] do_exit+0x6cd/0x2360 [ 962.181354][T31159] ? __pfx_do_exit+0x10/0x10 [ 962.181378][T31159] ? cgroup1_freezing+0x20/0x350 [ 962.181411][T31159] ? cgroup1_freezing+0x20/0x350 [ 962.181454][T31159] do_group_exit+0x22d/0x2f0 [ 962.181476][T31159] ? _raw_spin_unlock_irq+0x23/0x50 [ 962.181507][T31159] get_signal+0x121b/0x12c0 [ 962.181562][T31159] arch_do_signal_or_restart+0xbb/0x860 [ 962.181601][T31159] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 962.181633][T31159] ? __x64_sys_recvmsg+0x25a/0x290 [ 962.181688][T31159] exit_to_user_mode_loop+0x10e/0x770 [ 962.181712][T31159] ? rcu_is_watching+0x16/0xb0 [ 962.181746][T31159] do_syscall_64+0x328/0x520 [ 962.181773][T31159] ? trace_irq_disable+0x3b/0x140 [ 962.181796][T31159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.181821][T31159] ? clear_bhb_loop+0x70/0xc0 [ 962.181849][T31159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.181872][T31159] RIP: 0033:0x7f304df9e159 [ 962.181895][T31159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.181914][T31159] RSP: 002b:00007f304ef06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 962.181938][T31159] RAX: fffffffffffffe00 RBX: 00007f304e225fa0 RCX: 00007f304df9e159 [ 962.181956][T31159] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 962.181984][T31159] RBP: 00007f304ef06090 R08: 0000000000000000 R09: 0000000000000000 [ 962.181999][T31159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.182012][T31159] R13: 00007f304e226038 R14: 00007f304e225fa0 R15: 00007ffeb7aac398 [ 962.182048][T31159] [ 962.502704][T31183] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5955'. [ 962.818493][T31190] bond1: entered allmulticast mode [ 962.972216][T22971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.976115][ T9004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.409744][T31212] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5959'. [ 963.922060][T31188] bond1: left allmulticast mode [ 963.923799][T12730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.923820][T12730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.266484][T31224] syzkaller0: entered promiscuous mode [ 964.266510][T31224] syzkaller0: entered allmulticast mode [ 964.267729][T12730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.267748][T12730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.585792][T31235] netlink: 'syz.7.5966': attribute type 1 has an invalid length. [ 965.266546][T31235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.314821][T31237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.316830][T31237] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.339630][T31237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.683208][T31237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.686277][T31237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.712123][T31237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 965.712151][T31237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 965.718568][T31237] veth1_vlan: left promiscuous mode [ 965.719894][T31237] veth0_vlan: left promiscuous mode [ 965.757948][T31237] veth0_vlan: entered promiscuous mode [ 965.770407][T31237] veth1_vlan: entered promiscuous mode [ 965.777346][T31237] veth1_macvtap: left promiscuous mode [ 965.778869][T31237] veth0_macvtap: left promiscuous mode [ 965.793936][T31237] veth0_macvtap: entered promiscuous mode [ 965.808425][T31237] veth1_macvtap: entered promiscuous mode [ 965.824471][T31237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 965.826564][T31237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 965.828205][T31237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 965.829941][T31237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.877047][T31239] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 965.879928][T31239] bond1: (slave batadv1): making interface the new active one [ 965.899095][T31239] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 965.932612][T12730] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.938252][T12730] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.938382][T12730] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.938425][T12730] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.961061][T31231] tipc: Started in network mode [ 965.961200][T31231] tipc: Node identity 5a70d75e412e, cluster identity 4711 [ 965.962355][T31231] tipc: Enabled bearer , priority 0 [ 966.103514][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.103631][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.126150][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.126268][ T9004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.309068][T31246] syzkaller0: entered promiscuous mode [ 966.309094][T31246] syzkaller0: entered allmulticast mode [ 966.334464][T31230] tipc: Resetting bearer [ 966.354138][T31273] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5970'. [ 966.438632][T31277] openvswitch: netlink: Duplicate or invalid key (type 0). [ 966.487609][T31230] tipc: Disabling bearer [ 966.538645][T31269] bridge8: entered allmulticast mode [ 966.912121][T31291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5973'. [ 967.063390][T31299] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5976'. [ 967.137656][T31285] pimreg29: entered allmulticast mode [ 967.833952][T31318] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5982'. [ 967.838510][T31314] ip6tnl3: entered promiscuous mode [ 967.838542][T31314] ip6tnl3: entered allmulticast mode [ 968.091461][T31324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.642161][T31338] tipc: Enabled bearer , priority 10 [ 968.781056][T31346] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5988'. [ 968.781086][T31346] openvswitch: netlink: Flow key attr not present in new flow. [ 969.979001][ T9004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.979026][ T9004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.122136][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5992'. [ 970.134369][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5992'. [ 970.139403][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5992'. [ 970.173089][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5992'. [ 970.173346][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5992'. [ 970.938934][T31398] openvswitch: netlink: IPv6 tunnel dst address is zero [ 971.155153][T18637] block nbd7: Receive control failed (result -32) [ 971.162967][T17646] block nbd7: Receive control failed (result -32) [ 972.487114][T31444] __nla_validate_parse: 6 callbacks suppressed [ 972.487136][T31444] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6009'. [ 972.559592][T31447] netlink: 'syz.3.6010': attribute type 8 has an invalid length. [ 972.559615][T31447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6010'. [ 972.594061][T31448] netlink: 'syz.3.6010': attribute type 8 has an invalid length. [ 972.594085][T31448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6010'. [ 973.167251][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.167456][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.167620][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.167800][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.167958][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.168121][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.168272][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.168460][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.168626][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 973.168773][T31472] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 976.379164][T31528] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6029'. [ 976.487724][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6027'. [ 976.487752][T31529] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6027'. [ 977.423564][T31564] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6037'. [ 977.622307][ T32] INFO: task syz.0.5359:28055 blocked for more than 143 seconds. [ 977.622336][ T32] Not tainted syzkaller #0 [ 977.622347][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 977.622358][ T32] task:syz.0.5359 state:D stack:26272 pid:28055 tgid:28051 ppid:17642 task_flags:0x400040 flags:0x00080002 [ 977.622422][ T32] Call Trace: [ 977.622431][ T32] [ 977.622446][ T32] __schedule+0x17db/0x58f0 [ 977.622507][ T32] ? __pfx___schedule+0x10/0x10 [ 977.622538][ T32] ? schedule+0x90/0x2b0 [ 977.622566][ T32] schedule+0x164/0x2b0 [ 977.622594][ T32] schedule_preempt_disabled+0x13/0x30 [ 977.622619][ T32] __mutex_lock+0x7c1/0x1550 [ 977.622651][ T32] ? __mutex_lock+0x5d4/0x1550 [ 977.622684][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 977.622717][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 977.622757][ T32] ? kernel_text_address+0xa5/0xe0 [ 977.622784][ T32] ? __kernel_text_address+0xd/0x30 [ 977.622808][ T32] ? unwind_get_return_address+0x4d/0x90 [ 977.622837][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 977.622878][ T32] ? stack_trace_save+0xa9/0x100 [ 977.622901][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 977.622928][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 977.622961][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 977.622991][ T32] ? kasan_save_track+0x4f/0x80 [ 977.623015][ T32] ? kasan_save_track+0x3e/0x80 [ 977.623047][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 977.623070][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 977.623093][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 977.623117][ T32] ? netlink_dump+0x1e7/0xee0 [ 977.623146][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 977.623177][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 977.623203][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 977.623226][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 977.623256][ T32] ? genl_rcv+0x28/0x40 [ 977.623278][ T32] ? netlink_unicast+0x7bd/0x940 [ 977.623308][ T32] ? netlink_sendmsg+0x813/0xb40 [ 977.623343][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 977.623366][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 977.623395][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 977.623425][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 977.623454][ T32] ? do_syscall_64+0x166/0x520 [ 977.623482][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.623547][ T32] ? rcu_is_watching+0x16/0xb0 [ 977.623577][ T32] ? trace_kmalloc+0x2a/0xf0 [ 977.623604][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 977.623630][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 977.623654][ T32] ? netlink_dump+0x1e7/0xee0 [ 977.623683][ T32] ? netlink_dump+0x1e7/0xee0 [ 977.623724][ T32] genl_dumpit+0x10b/0x1b0 [ 977.623754][ T32] netlink_dump+0x711/0xee0 [ 977.623803][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 977.623851][ T32] ? genl_s ** replaying previous printk message ** [ 977.623851][ T32] ? genl_start+0x497/0x6d0 [ 977.623886][ T32] __netlink_dump_start+0x589/0x7b0 [ 977.623927][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 977.624885][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 977.624921][ T32] ? genl_get_cmd+0x523/0x960 [ 977.624956][ T32] ? __pfx_genl_start+0x10/0x10 [ 977.624981][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 977.625007][ T32] ? __pfx_genl_done+0x10/0x10 [ 977.625044][ T32] ? __lock_acquire+0x747/0x2de0 [ 977.625081][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 977.625116][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 977.625144][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 977.625192][ T32] netlink_rcv_skb+0x226/0x4a0 [ 977.625229][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 977.625258][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 977.625311][ T32] ? down_read+0x2be/0x330 [ 977.625349][ T32] genl_rcv+0x28/0x40 [ 977.625374][ T32] netlink_unicast+0x7bd/0x940 [ 977.625419][ T32] netlink_sendmsg+0x813/0xb40 [ 977.625465][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.625509][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 977.625540][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.625575][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 977.625604][ T32] ____sys_sendmsg+0x54e/0x850 [ 977.625642][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.625685][ T32] ? import_iovec+0x73/0xa0 [ 977.625718][ T32] ___sys_sendmsg+0x2a5/0x360 [ 977.625749][ T32] ? __lock_acquire+0x747/0x2de0 [ 977.625778][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.625847][ T32] ? __fget_files+0x2a/0x420 [ 977.625879][ T32] ? __fget_files+0x3a2/0x420 [ 977.625923][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 977.625954][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 977.625981][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 977.626023][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 977.626070][ T32] do_syscall_64+0x166/0x520 [ 977.626097][ T32] ? trace_irq_disable+0x3b/0x140 [ 977.626121][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.626145][ T32] ? clear_bhb_loop+0x70/0xc0 [ 977.626173][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.626196][ T32] RIP: 0033:0x7fbfe499e159 [ 977.626217][ T32] RSP: 002b:00007fbfe5830028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.626243][ T32] RAX: ffffffffffffffda RBX: 00007fbfe4c26180 RCX: 00007fbfe499e159 [ 977.626260][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 977.626275][ T32] RBP: 00007fbfe4a3506b R08: 0000000000000000 R09: 0000000000000000 [ 977.626290][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.626304][ T32] R13: 00007fbfe4c26218 R14: 00007fbfe4c26180 R15: 00007fffca57e678 [ 977.626543][ T32] [ 977.626619][ T32] [ 977.626619][ T32] Showing all locks held in the system: [ 977.626634][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 977.626652][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 977.626741][ T32] locks held by udevd/4982: 1, last CPU#0: [ 977.626757][ T32] #0: ffff88807f45a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 977.658648][ T32] locks held by getty/5369: 2, on CPU#0: [ 977.658668][ T32] #0: ffff888035f230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 977.658739][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 977.658814][ T32] locks held by kworker/u8:29/12730: 3, last CPU#0: [ 977.658832][ T32] #0: ffff88807aeac140 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 977.658899][ T32] #1: ffffc9000353fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 977.658964][ T32] #2: ffff888053759280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 977.659032][ T32] locks held by kworker/u8:31/12732: 2, on CPU#0: [ 977.659050][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 977.659129][ T32] #1: ffffc90005967c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 977.659212][ T32] locks held by syz.4.5068/26776: 2, on CPU#0: [ 977.659229][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.659313][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 977.659382][ T32] locks held by syz.0.5359/28055: 3, on CPU#0: [ 977.659399][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.659458][ T32] #1: ffff88801b1c26e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 977.659526][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 977.659600][ T32] locks held by syz-executor/28310: 4, last CPU#0: [ 977.659618][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 977.659681][ T32] #1: ffff88807eca69b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 977.659750][ T32] #2: ffff88807ebf69b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 977.659823][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 977.659891][ T32] locks held by syz.2.5675/29639: 2, on CPU#0: [ 977.659908][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.679322][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 977.679406][ T32] locks held by kworker/0:17/31199: 4, last CPU#0: [ 977.679423][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 977.679487][ T32] #1: ffffc9000333fc40 (reg_regdb_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 977.679555][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: reg_regdb_apply+0x19/0x180 [ 977.679612][ T32] #3: ffffffff904aae80 (reg_regdb_apply_mutex){+.+.}-{4:4}, at: reg_regdb_apply+0x27/0x180 [ 977.679671][ T32] locks held by syz.3.6033/31540: 1, last CPU#0: [ 977.679688][ T32] #0: ffff88804b7ff540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 977.679755][ T32] locks held by syz.3.6033/31542: 1, last CPU#1: [ 977.679768][ T32] #0: ffff888049fa3da8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x174/0xb00 [ 977.763338][ T32] locks held by syz.7.6034/31552: 2, on CPU#0: [ 977.763401][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.763482][ T32] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: reg_reload_regdb+0x145/0x490 [ 977.763550][ T32] locks held by syz.1.6037/31555: 1, last CPU#1: [ 977.763566][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 977.763729][ T32] locks held by syz.1.6037/31557: 2, on CPU#1: [ 977.763779][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.763925][ T32] #1: ffffffff902c3de0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.764627][ T32] locks held by syz.1.6037/31564: 3, last CPU#1: [ 977.764677][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.764824][ T32] #1: ffffffff902c3de0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.764954][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9c0 [ 977.765102][ T32] locks held by syz.1.6037/31565: 4, on CPU#1: [ 977.765146][ T32] #0: ffffffff8f69e040 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 977.765298][ T32] #1: ffff888025bc3140 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x97/0x370 [ 977.765427][ T32] #2: ffffffff90565840 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x33/0x9b0 [ 977.881605][ T32] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x3c1/0x6f0 [ 977.881852][ T32] [ 977.881865][ T32] ============================================= [ 977.881865][ T32] [ 977.881915][ T32] NMI backtrace for cpu 1 [ 977.881965][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 977.882037][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.882071][ T32] Call Trace: [ 977.882101][ T32] [ 977.882124][ T32] dump_stack_lvl+0xe8/0x150 [ 977.882226][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 977.882319][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 977.882428][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 977.882534][ T32] sys_info+0x135/0x170 [ 977.882611][ T32] watchdog+0xfd7/0x1030 [ 977.882695][ T32] ? watchdog+0x1c7/0x1030 [ 977.882776][ T32] kthread+0x38b/0x480 [ 977.882839][ T32] ? __pfx_watchdog+0x10/0x10 [ 977.882891][ T32] ? __pfx_kthread+0x10/0x10 [ 977.882953][ T32] ret_from_fork+0x514/0xb70 [ 977.883034][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 977.883088][ T32] ? __switch_to+0xc89/0x1420 [ 977.883181][ T32] ? __pfx_kthread+0x10/0x10 [ 977.883245][ T32] ret_from_fork_asm+0x1a/0x30 [ 977.883358][ T32] [ 977.883530][ T32] Sending NMI from CPU 1 to CPUs 0: [ 977.883601][ C0] NMI backtrace for cpu 0 [ 977.883615][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 977.883636][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.883648][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 977.883675][ C0] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 24 76 06 cc 44 89 f9 80 e1 07 [ 977.883691][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 977.883708][ C0] RAX: 1ffffffff35a7c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 977.883722][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 977.883734][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 977.883747][ C0] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000 [ 977.883762][ C0] R13: 0000000000000000 R14: ffffffff9ad3e0c0 R15: 0000000000000000 [ 977.883775][ C0] FS: 0000000000000000(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 977.883791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 977.883805][ C0] CR2: 00007f5ecd9eb840 CR3: 000000007f7b6000 CR4: 00000000003526f0 [ 977.883822][ C0] Call Trace: [ 977.883830][ C0] [ 977.883840][ C0] wait_for_lsr+0x184/0x2f0 [ 977.883864][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 977.883896][ C0] serial8250_console_write+0xaa1/0x1200 [ 977.883923][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 977.883943][ C0] ? __schedule+0x17f1/0x58f0 [ 977.883972][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 977.884003][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 977.884028][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 977.884058][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 977.884081][ C0] nbcon_kthread_func+0x679/0x880 [ 977.884105][ C0] ? nbcon_kthread_func+0x163/0x880 [ 977.884125][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 977.884149][ C0] ? __kthread_parkme+0x71/0x1f0 [ 977.884178][ C0] ? __kthread_parkme+0x199/0x1f0 [ 977.884208][ C0] kthread+0x38b/0x480 [ 977.884226][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 977.884261][ C0] ? __pfx_kthread+0x10/0x10 [ 977.884280][ C0] ret_from_fork+0x514/0xb70 [ 977.884300][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 977.884317][ C0] ? __switch_to+0xc89/0x1420 [ 977.884345][ C0] ? __pfx_kthread+0x10/0x10 [ 977.884363][ C0] ret_from_fork_asm+0x1a/0x30 [ 977.884402][ C0] [ 977.898840][T31557] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6037'. [ 977.943945][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 979.069136][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 979.078278][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 979.088366][ T32] Call Trace: [ 979.091680][ T32] [ 979.094645][ T32] vpanic+0x56d/0xa60 [ 979.098670][ T32] ? __pfx___schedule+0x10/0x10 [ 979.103549][ T32] ? __pfx_vpanic+0x10/0x10 [ 979.108100][ T32] panic+0xc5/0xd0 [ 979.111858][ T32] ? __pfx_panic+0x10/0x10 [ 979.116321][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 979.121835][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 979.127257][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 979.133475][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 979.139706][ T32] watchdog+0x1030/0x1030 [ 979.144102][ T32] ? watchdog+0x1c7/0x1030 [ 979.148619][ T32] kthread+0x38b/0x480 [ 979.152730][ T32] ? __pfx_watchdog+0x10/0x10 [ 979.157488][ T32] ? __pfx_kthread+0x10/0x10 [ 979.162127][ T32] ret_from_fork+0x514/0xb70 [ 979.166759][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 979.171953][ T32] ? __switch_to+0xc89/0x1420 [ 979.176694][ T32] ? __pfx_kthread+0x10/0x10 [ 979.181347][ T32] ret_from_fork_asm+0x1a/0x30 [ 979.186187][ T32] [ 979.189918][ T32] Kernel Offset: disabled [ 979.194292][ T32] Rebooting in 86400 seconds..