last executing test programs: 17m1.57470113s ago: executing program 32 (id=2572): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = epoll_create1(0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x110804, 0x4) sendfile(r4, r2, &(0x7f0000000140)=0x6, 0x276f) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x10, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0xf, 0x7, 0x2, 0x4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x8, 0x6, 0xb, 0xffffffffffffffff, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa74}}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x7fffffff}, 0x10, 0xffffffffffffffff, r0, 0x3, &(0x7f0000000340)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000380)=[{0x4, 0x1, 0xa, 0x8}, {0x5, 0x2, 0x3}, {0x3, 0x1, 0x1, 0x4}], 0x10, 0x4}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @window={0x3, 0x1, 0x4}, @window={0x3, 0xff, 0xc}, @timestamp, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlinkprop={0x114, 0x6c, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x48000, 0x20000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'wg1\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'nr0\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}, {0x14, 0x35, 'team_slave_1\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x5}]}, 0x114}}, 0x20024090) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 15m27.757026627s ago: executing program 4 (id=2855): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) 15m27.022246833s ago: executing program 4 (id=2859): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x5, 0x0, {{0x39, 0x4, 0x3, 0x29, 0xe4, 0x68, 0x0, 0xfe, 0x29, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1f, 0x73, [@multicast2, @broadcast, @loopback, @rand_addr=0x64010101, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}, @ssrr={0x89, 0x23, 0xfe, [@empty, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x1e, 0x1, 0x0, [{@multicast2, 0xfffff97e}, {@loopback, 0x9}, {@remote, 0x4}, {@empty, 0xede7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x9}]}, @cipso={0x86, 0x43, 0x3, [{0x7, 0x6, "97140e2e"}, {0x0, 0x10, "3291ad65dbad260faf015b8ac803"}, {0x6, 0x9, "89d6f33475893e"}, {0x6, 0x11, "993fccb9b8cbdc8b0e70d5a8b0de1b"}, {0x2, 0x8, "2348dca3ea77"}, {0x1, 0x5, "179edd"}]}, @lsrr={0x83, 0xb, 0x6, [@rand_addr=0x64010101, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'gre0\x00', r2, 0x10, 0x40, 0xffffffff, 0x7ff, {{0xe, 0x4, 0x1, 0x4, 0x38, 0x66, 0x0, 0x51, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@end, @lsrr={0x83, 0xf, 0xb7, [@remote, @broadcast, @broadcast]}, @cipso={0x86, 0x6}, @end, @generic={0x44, 0xd, "7f113eee847af29fef8b9a"}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000002000000000000000000000b00"/38], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x100000, 0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000280)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000140)={0x10000, 0x0, 0x3, 0x0, 0x0, [{{r5}, 0xe14}, {{}, 0x9}, {{r4}, 0x8000}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r9, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/4076, 0xfec}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r10 = socket$pptp(0x18, 0x1, 0x2) close(r10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r5, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYRES8=r5, @ANYRESOCT, @ANYBLOB="0af186524607e31c19e12e0006", @ANYRES8=r4, @ANYRESOCT=r4, @ANYBLOB="a7b5677f5d27fef992943fd1ce6b39aefa00e8ff4a9c0c10ede229a6d24861700f745d5345414d6656c22b7448225d7af0df749f73a4fe274be85a45a7b94083be7b7502b9928e342929cd1235a9ddeb0a55706407a51577e000e3601cc52616feb174c9db935ed103e5d4bc09821375cd2a975d261b0929dd0cf66b7c5bbab297d164c100e3443d8eccc22f10eadb177150176557e3e74bf9a2c5e64a893107f0b14253ebe9dbe0ecf44aee11f8b473ac685e719d916fdf5df970034437eb280995522dad260e473d2461c174d9b6cc2b183d9c3812c143fb74d3ffb0c0689e"], 0x64}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) 15m25.436928993s ago: executing program 4 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df4800000000000000000c00000004000380180001801400020064756d6d7930000000000000000000003b9ce4ffaac105d78a1cf83e9bbcb357d6499db896f5f09756f285ce73117493e21d5c45e4d33bbe1aa35ef4e5e14c91aa1eb5a6dca370e0c7dc12382983b7727a5f3050469411044034d7ae097c9dc8a1bb1153f65fbd3cdf7e5e43c1ec67dc0b3bcd3d9bf3"], 0x30}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) r4 = accept4(r0, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xe7e5912e2ce1693c, 0x4) shutdown(r2, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1bc, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x78ce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffffffffffffff}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x82f}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xa679}, {0xc, 0x90, 0x1}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4800}, 0x80) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) setsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f00000003c0)="a342ba28115551d3f6ac436cfd1ff95fe359690c9be4b2d8c9e6a54a3f9c19609c6048fd17486d8a9d9f246a911255d8fdcccc90c381f6796df82a5a2e6b32c2ec74abbb3217d685579d63c7ab1f41812af4fe9daee2db0e9902cdbb448221836fc8fe0cc1a01dd18c50fea330c7fa074146ded005385b1460764e", 0x7b) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="5fbfc8fec363ce317d00000000000800010003000000b40426911eceb7892938b1737919d62d5e5293910ba739983ff6df9eb78fe5dd2d43735b934e76049bf819ae816751052d8baf2b10ccf0c4cbf6c6"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x1e10, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1dfc, 0x1, [@m_police={0x1df8, 0x1, 0x0, 0x0, {{0xb}, {0x1dcc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x80000000, 0xd, 0x6, {0x5a, 0x0, 0x1, 0x85f, 0x100, 0x7f}, {0x12, 0x1, 0xe5, 0x7ff, 0x2000, 0x1}, 0x0, 0x2, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0xf5, 0x5, 0xff, {0x4, 0x0, 0x76e, 0x0, 0x1, 0x9}, {0x90, 0x1, 0x1, 0x3, 0x84d6, 0x1d9}, 0x8, 0x4, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xb652, 0xd, 0xa6b, 0x4, 0x5, 0x1, 0x2, 0x40, 0x9, 0x40, 0x0, 0x9, 0x200, 0x80, 0x200, 0xe, 0x7fff, 0xffbf, 0x5, 0x4, 0x8, 0xfffffffb, 0x7, 0x5, 0x2, 0x6, 0x8, 0x284f2335, 0x7fffffff, 0x5, 0xb, 0x40, 0x8, 0x3ff, 0xffff6cef, 0x2c, 0x25f1, 0x6, 0x0, 0x5, 0x0, 0x3, 0x2, 0x8, 0x2dc, 0x2, 0x8, 0x1eb, 0x3, 0x0, 0xfffff1bf, 0x3, 0x7, 0x6, 0x100, 0xfffffffc, 0x3, 0x9, 0x81, 0x1, 0x0, 0x0, 0x5c4, 0xc9f1, 0x72, 0x90, 0x9, 0x2, 0x8, 0x79903847, 0x7, 0x1, 0x200, 0x3, 0x2, 0x2, 0x4, 0x0, 0x1, 0x401, 0xe, 0x0, 0x1, 0xba9, 0x7fff, 0x0, 0xb, 0xffff0001, 0x10000, 0x2, 0x6, 0xedaa, 0x800, 0x0, 0x2, 0x7ff, 0x9, 0x1, 0x7f, 0x6, 0x0, 0x1, 0x7, 0x7fff, 0x1ff, 0x0, 0x1, 0x3, 0x6, 0x0, 0xfffff800, 0x0, 0x8, 0x6, 0x2, 0x6, 0x7, 0x6, 0x2, 0x2, 0x90, 0xf944, 0x3cb, 0xffffffff, 0x6, 0x10, 0x1f8b, 0x7, 0xb, 0x8, 0x1, 0x0, 0x1, 0x3ae, 0x3, 0x4, 0x7, 0x2, 0x3, 0x400, 0xffff, 0xffff5365, 0x2, 0x80000000, 0x9, 0x1, 0x0, 0x5, 0x6d0c, 0x80000001, 0x7fffffff, 0x2, 0x8, 0x1, 0x7, 0xfffffff8, 0x3, 0x2c38, 0xb81a, 0x1000, 0x83, 0x5, 0x7, 0x5, 0x7, 0x200, 0xf, 0x3, 0xf, 0xd773, 0x9, 0xdaa, 0x80000001, 0x6, 0x80, 0x5, 0x5, 0x2, 0x1e, 0x1000000, 0x2, 0x8053, 0xfffffffa, 0xce, 0x2, 0xfffffff9, 0x1000, 0x3214000, 0x4d44, 0xbd, 0xf58, 0x8000, 0xfff, 0x92, 0x81, 0x3, 0x8, 0x3, 0x2, 0x6, 0x9, 0x3, 0x3, 0x842f, 0xff, 0x7, 0xf6d7, 0xd58, 0x4, 0x1, 0x9, 0x101, 0x4, 0x5, 0x200, 0xfffffffa, 0x1, 0x9, 0x10000, 0x6, 0x8, 0x2, 0x2, 0x10001, 0x4, 0x9, 0x8, 0x36b, 0x7, 0xfffffff9, 0x4, 0x3, 0x1000, 0x7ff, 0x6, 0x1ff, 0x7, 0x7, 0x800, 0x1, 0x7, 0xd, 0x4, 0x54c7, 0x7, 0x80000001, 0xfffffff8, 0x6, 0x4, 0x26c, 0x1, 0x80000001, 0x5, 0x8000, 0xfffffffa]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x23, 0x6, 0x0, 0x5e4d, 0x6904, 0x9, 0x4, 0x3706, 0x2, 0x1, 0x3, 0x8, 0xfffffff9, 0x2ef066ec, 0x5, 0x4, 0x88, 0x7fff, 0x9, 0x0, 0x1, 0x10000, 0x2745680d, 0x2, 0x40, 0x0, 0xb6b, 0x1bf, 0x4, 0x2, 0x3000000, 0x0, 0x6, 0x3, 0x809, 0x5, 0x3, 0x101, 0x8, 0x8, 0x9, 0x10, 0x5, 0xffffffff, 0x6, 0x7, 0x4, 0xb, 0x2, 0x7, 0x7, 0x9, 0x7ff, 0x7, 0x1fffe, 0x2, 0x1, 0x2, 0x80, 0x2, 0x97e9, 0x1, 0x9, 0x4d3a, 0x81, 0xa, 0xffff, 0x1e76, 0x5, 0x1ff, 0x6, 0x9, 0x0, 0x8, 0x8, 0x200, 0x3, 0xb6a, 0xfffffe00, 0x0, 0xfffffff7, 0xd51, 0xf, 0x0, 0xfffff001, 0x80, 0x2, 0x80, 0x53, 0xe, 0xaf, 0x0, 0x7, 0x9, 0x4, 0xd, 0x3, 0x9fc2, 0x8001, 0x0, 0x8, 0x9dd, 0x0, 0x2, 0x80000000, 0x1000, 0x4, 0x100, 0x10, 0x2, 0x6, 0x80, 0x4, 0x1, 0x8, 0x400, 0xffffffff, 0x3, 0xde9, 0x0, 0x4217, 0x5, 0x1, 0x5, 0x8, 0xffffffff, 0x2, 0x1, 0x6, 0xffffffff, 0x81, 0xdb, 0x8000, 0x9, 0x0, 0x6, 0x4, 0x4, 0x1, 0x0, 0x7, 0x3, 0x6, 0x4950, 0x40, 0x1ff, 0x7f000000, 0x1a, 0x4, 0xfffffff9, 0xfffffff7, 0xfffffff8, 0x10001, 0x6c652f5b, 0x8, 0x925, 0x2, 0xffffffff, 0x5, 0x1dd, 0xbdd, 0x8fc8, 0x6, 0x7, 0x2, 0xd, 0x2, 0x4c56, 0x7, 0x8, 0x6, 0x10000, 0xc7, 0x6, 0x6017, 0x5, 0x9, 0x1, 0x0, 0x6, 0x1, 0x5, 0x0, 0xb, 0x8, 0xfff, 0x7, 0x40, 0x3, 0x81, 0x7, 0x5, 0x0, 0x2, 0x7fffffff, 0x9, 0x3, 0x7, 0x1, 0x5, 0x6, 0x400, 0x3, 0x6, 0x1, 0x1, 0x80000001, 0x5, 0xfffffff0, 0x9, 0xe1, 0xe, 0xffffffff, 0x9, 0x6, 0x3, 0x6, 0xa, 0x5, 0x56, 0x89, 0x0, 0x7, 0x1c8000, 0x8, 0xe, 0x4, 0xfffffffe, 0x7, 0x3, 0x0, 0x8, 0x4, 0xd5, 0xffffffff, 0x10000, 0xfff, 0x1, 0x2, 0x6, 0x10000, 0x7fff, 0x4, 0x8000, 0x9, 0x5bc1, 0x2, 0x10001, 0x9, 0x4, 0x200, 0xfffffff8, 0x80000000, 0x3f]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd860, 0x5, 0xd, 0xfff, 0x6, {0x1, 0x1, 0x1, 0x0, 0x6, 0x4e5}, {0x4, 0x1, 0x5, 0x2, 0xe, 0x390c0}, 0x789, 0x48, 0x8ba}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xea, 0x0, 0x3, 0x0, 0x2, 0x1, 0x9b, 0x2, 0x8, 0x10000, 0xfffffffe, 0x81, 0x2, 0x5a3dc1a, 0x5, 0x81, 0x5, 0x1, 0x1, 0x800, 0xbe, 0x0, 0x411, 0x6, 0x5, 0x2, 0x9, 0x3ff, 0xfffffff4, 0x5, 0x2, 0x26471057, 0x1, 0xb, 0x2, 0xffff66eb, 0x3, 0x3ff, 0x7, 0xc, 0x100, 0x3ff, 0x294c, 0x3, 0xfffffffc, 0x2, 0xc1, 0x1, 0xffff, 0x7, 0xa, 0x8, 0x8, 0x0, 0x4, 0x5, 0xb0, 0x9, 0x0, 0x0, 0xa14, 0xd0, 0xbe, 0x7, 0x80, 0x0, 0x0, 0x14, 0xbc5e, 0xfd5, 0xb, 0x9, 0x6, 0x26, 0x100, 0xb76, 0x7fff, 0x6, 0x400, 0xfff, 0x1, 0x80000000, 0x1ff, 0x3, 0x80000001, 0x6ee9, 0x7, 0x0, 0x8000, 0x8, 0x4, 0x81, 0x100, 0x6, 0x7, 0x4, 0x19, 0xd, 0x9, 0x4, 0x3, 0x8, 0x80, 0x1ff, 0x1, 0xfffff3d8, 0xffff, 0x3, 0x7, 0x5, 0x8, 0x47, 0x755, 0xfffffc01, 0x1, 0x6, 0xf, 0x1400000, 0x8, 0x2, 0x3ff, 0x6, 0xb5, 0x8, 0xffff, 0x9d11, 0x6, 0x2, 0x6, 0x65d, 0x9, 0x1, 0x6, 0x4a9afbb5, 0x6, 0x66, 0x1, 0x5, 0x2, 0x101, 0x70a, 0x1, 0x8000, 0x3, 0x2, 0x3, 0x2, 0x3, 0x3, 0x40, 0xa, 0x6, 0x1, 0xa37, 0x1000, 0x81, 0x10000, 0x6, 0x8, 0x8, 0x1, 0x7ff, 0xa3, 0xffff884c, 0xda5a, 0x6, 0x8001, 0x8, 0x4, 0xc771, 0x6, 0x8, 0x6, 0x6431, 0x9, 0x10000, 0x400, 0x7ff, 0x900, 0x1ff, 0x6, 0x3, 0x2, 0x1000, 0xe, 0x8, 0x3ff, 0x3, 0x9, 0x401, 0xe9, 0x8, 0x4, 0x4, 0x5, 0x6, 0x2, 0x0, 0x8, 0x7, 0x5, 0x8, 0x60, 0x7, 0x4, 0x8, 0x0, 0x89, 0x4ff, 0x2, 0xa, 0x1, 0x7, 0x4, 0xc44, 0x0, 0x9, 0x8, 0x9df8, 0x7ff, 0x8000, 0x9, 0x5, 0x3, 0x7, 0x9, 0x3, 0x7, 0x3, 0x8, 0x7, 0x9d, 0x8, 0x7e, 0x5, 0x1, 0x0, 0xf4, 0x4, 0x1, 0xde1, 0x80000001, 0x4, 0x9, 0xfff, 0x7f20c365, 0x5, 0xe, 0x7, 0x80000001, 0x8, 0x8, 0x9, 0x8, 0x7b1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x1, 0x0, 0x7, 0xffffffff, 0x80000001, 0x8, 0x4, 0x9, 0x7f, 0xc, 0x60000000, 0xff, 0x7, 0x9, 0x9, 0x1ff, 0xa, 0x6, 0x20, 0x3, 0x8000, 0x9, 0x3a, 0x7fff, 0x4, 0x40, 0x7f170675, 0x4, 0x73, 0x10, 0x401, 0xc0, 0xe, 0x5, 0xfffffff7, 0x556, 0x8, 0xe90c, 0x0, 0x1, 0x3ff, 0x2, 0x4, 0x100, 0x7, 0xfffffff7, 0x3, 0x26, 0xfffffffb, 0x8000, 0x4, 0x5b08, 0x0, 0x1, 0x5, 0x0, 0x5, 0x95e, 0xd, 0x7ff, 0x8, 0x0, 0xaf, 0xffffffff, 0x7, 0x2b63, 0x7, 0x800, 0x34b, 0x2, 0x9, 0x3, 0x2c8, 0xfffffff8, 0x6, 0x2, 0x8c25, 0x8, 0x4, 0x0, 0x1, 0x3, 0xfffffffc, 0x2, 0x1, 0x8, 0xd, 0xf2c2, 0x9, 0x3, 0x4, 0x7, 0x1, 0x33d4, 0xfffff3f8, 0x2, 0xfffffff9, 0x80, 0x400, 0x0, 0x5, 0x793e, 0x3, 0xfffffffa, 0x44a4, 0x7, 0xffff, 0x5, 0x4, 0x0, 0x1ff, 0x7, 0x7, 0x0, 0x1000, 0x7fffffff, 0x3, 0x5, 0x80, 0x3, 0x3, 0xc828, 0x3, 0x2, 0x5, 0x9, 0x156d, 0x4, 0x400, 0x7, 0x1fc, 0x6, 0x3, 0xb, 0x3, 0x3, 0x7, 0x589, 0x0, 0x0, 0x9, 0x2, 0x5, 0x8001, 0x80000001, 0x0, 0x8, 0x81, 0x7, 0x5, 0x4, 0x2, 0xf28, 0x2ecd, 0xfffffffa, 0x9, 0x14a0af16, 0xb2e, 0x7, 0x6, 0x9, 0x2, 0x6, 0x2f0, 0x9, 0x4301, 0x400, 0x3, 0x5, 0x10001, 0x7fff, 0x9, 0x88a7, 0x5, 0x4, 0x3, 0xfffffffa, 0xfffffff9, 0x0, 0x4, 0x9, 0x7, 0x2, 0x9, 0x3, 0x9, 0x4, 0x5, 0x800, 0xd5, 0x1, 0x8be8, 0xc2d5, 0x5, 0x2, 0x2, 0x1ff, 0x80, 0x6, 0x6, 0x9, 0x7ff, 0x4f4f, 0xb8c, 0xe187, 0xf, 0x2, 0x3ff, 0x4, 0x200, 0xb, 0xf2, 0x6, 0x2, 0xc000, 0xffffffff, 0x8, 0x7, 0x5, 0x5, 0x3, 0xffff, 0x2, 0xeba, 0x4, 0x7, 0x9, 0x2, 0x100, 0x10001, 0x2, 0x0, 0x8000, 0x0, 0xffffff81, 0xffffff7d, 0x0, 0x2, 0x6, 0xc7, 0x1, 0x0, 0x10000, 0x4, 0x3, 0x558, 0x80000000, 0xcb7a, 0x8, 0x3ee, 0xfffffff1, 0x3, 0xe53, 0x7, 0x100]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5dc34a8d, 0x8, 0x3, 0x4, 0x8, 0xf6, 0x5, 0x8, 0x6, 0x9, 0x7, 0x7391, 0x2, 0x7, 0x9, 0xf8000000, 0x82b4, 0x7, 0xfffffffd, 0xaa2, 0x7, 0x0, 0x40, 0x7, 0xe4b, 0xb, 0x5, 0x6, 0x9, 0x6762, 0x8, 0x1, 0x1, 0x8, 0x754, 0x7f, 0x8, 0x10000, 0x7, 0x6, 0x7, 0x400, 0x40, 0x3, 0x80000001, 0x400, 0xda6b, 0x9, 0x6, 0x2, 0x3, 0x80000001, 0x29ca, 0xb46, 0xfff, 0xc2, 0x2, 0x10, 0x6, 0x10000, 0x8, 0x1, 0xc0000000, 0x0, 0x3, 0x8, 0x9, 0x3, 0xfffffff9, 0x9845, 0x4, 0x231, 0x3, 0x10000, 0x5, 0x5, 0xffffffff, 0x1, 0x8e, 0x2, 0x7, 0x6, 0x0, 0x2c000000, 0xfff, 0x1a53a03d, 0x7bc, 0x7, 0xc1, 0x80000000, 0x6, 0x6, 0x1be, 0x5, 0x0, 0x80, 0x2, 0x0, 0xa, 0x1, 0x7f, 0x7, 0x51a, 0xfff, 0x2, 0xe, 0x7, 0x5, 0x8e6, 0xc5, 0x3, 0x0, 0x5, 0x5d1b, 0x38e, 0x3, 0x60b, 0x1, 0xe, 0x7, 0xfffffd36, 0x1, 0x5, 0xffffffff, 0x7, 0xffff, 0x3, 0xfffffffa, 0x2, 0x81, 0xc248, 0xe38055cc, 0x46, 0x81, 0x2, 0x1, 0x1, 0x1000, 0xffffffff, 0x2, 0x7fff, 0x9, 0x4, 0x0, 0xffff0000, 0x75, 0x0, 0xc, 0x0, 0x3, 0x80000001, 0x0, 0xb2, 0x3ff, 0x1, 0x1, 0x0, 0x6, 0x6, 0x0, 0x1, 0x2, 0x5, 0x1, 0xf4c, 0x7, 0xfffffffb, 0x8, 0x5, 0x5, 0x3, 0x0, 0x5, 0x1, 0x9, 0x9, 0x1, 0xe022, 0x0, 0xc03a, 0x4, 0x7fffffff, 0x10001, 0x6a, 0x4, 0x5, 0x2f2, 0x3, 0x81, 0xa1ea, 0x0, 0x8, 0x1000, 0x5e, 0x5, 0x7, 0x6, 0x8, 0x2, 0xb, 0x1, 0x9, 0x8, 0x8, 0x2, 0x2, 0x50, 0x5, 0x8, 0x7fffffff, 0x3, 0x1, 0x9, 0x61c, 0x6e, 0x9, 0x45aa, 0x7, 0x10, 0x1000, 0x4, 0x6, 0xf, 0x4, 0xd, 0x600, 0x7fffffff, 0x1, 0x1, 0xf7f, 0x5, 0x2, 0x6, 0x4, 0x5, 0x8001, 0x7fff, 0x9, 0x5, 0xb, 0x0, 0x9, 0xee6d, 0x2, 0x5, 0x6, 0x10, 0x3, 0x6, 0x5, 0x7cf98e4c, 0x90, 0x10, 0x0, 0x80000001, 0x771]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x400, 0x6, 0xd, {0x3, 0x4a743ae1f1187d30, 0x4a87, 0xa, 0x6, 0x81}, {0xc0, 0x2, 0x1, 0x800, 0x3ff, 0xd6}, 0x2, 0x2, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0xffffffff, 0x3, 0x5, 0x2, 0x2, 0x6, 0x5, 0x5, 0x8d, 0x4, 0x7fffffff, 0x5, 0xffff, 0x7, 0x9, 0x1, 0x7ff, 0x7, 0x200, 0x7, 0x2, 0x2, 0x0, 0x8, 0x10001, 0x7, 0x6a70, 0x1, 0x8001, 0x9, 0x9, 0xf, 0x7, 0xc000000, 0x7fff, 0x80000001, 0xffff, 0x0, 0x2, 0xb, 0x503, 0x28f, 0x3, 0x10001, 0x2, 0x40, 0x1000, 0x8, 0x19f, 0xc, 0x8000, 0x5, 0x7fff, 0x8, 0x1, 0x7ff, 0x7, 0x9b, 0x5, 0x1000, 0x7, 0x6, 0xe3c, 0x1, 0x0, 0xbd98, 0xe98d, 0x2, 0xfe, 0x7fffffff, 0x3c, 0x81, 0x40, 0x800, 0x4, 0xffffff00, 0x1, 0x4, 0x50, 0x7fffffff, 0x2, 0x42a, 0x6, 0x31c2, 0x9, 0x92, 0x5, 0x1000, 0x5, 0x4, 0x1, 0x8, 0xfffffff7, 0x5, 0x1, 0x7fffffff, 0x7, 0x3, 0x401, 0x568, 0x7f, 0x4, 0xffff, 0x3, 0x3, 0xfffffff9, 0x0, 0x9, 0x1, 0x3, 0x4, 0x0, 0x10000000, 0x400, 0xffffff7f, 0xb, 0x10, 0xffff0001, 0x77, 0x10000, 0x8, 0xa43, 0xfffffffd, 0xd, 0x27bc8ca2, 0x88eb, 0x4, 0x4, 0x5, 0x6, 0x5, 0x19f9, 0xff, 0x9, 0x2, 0x1, 0x7, 0x9, 0x6, 0x4, 0x4, 0xbe, 0x1ff, 0x7, 0x0, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1, 0x3, 0x2, 0xc1, 0x8001, 0xfffe0000, 0xff, 0x8, 0x7, 0x9, 0x7fff, 0xd, 0x9, 0xfff, 0x4, 0x401, 0x81, 0x80, 0xfffffff9, 0x2, 0x8, 0x0, 0x9, 0x7, 0x8, 0x80000000, 0x8, 0x5, 0x6, 0x4, 0xb2a, 0x0, 0xd478, 0x8, 0x5, 0x80000000, 0xc, 0x7ff, 0xf0, 0x8, 0x2, 0x2, 0x0, 0x5, 0x1, 0x889, 0xfd1, 0xffff, 0xe, 0x80000001, 0x6, 0x7288, 0x7fffffff, 0x6, 0x300000, 0x3, 0xd, 0x8000000, 0xa8a, 0x2, 0x7, 0x0, 0x7, 0x80000001, 0xa, 0x8001, 0x9, 0x81, 0xd, 0x75cc, 0xd6, 0x1, 0x9, 0x9, 0x5, 0x10000, 0x5, 0x1ff, 0x7, 0x6, 0x3, 0xd, 0x2, 0x80000001, 0xa, 0x8, 0x6, 0xbbb2, 0x81, 0xd, 0x0, 0x9, 0x5, 0x7, 0xffffffff, 0x8, 0x3f41, 0xef, 0x3, 0x497ed19b, 0x9, 0x8, 0x2a58, 0xfffffffe, 0x200]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x397}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x6, 0xff, 0xd9, 0x5, 0xfff, 0x9, 0xffffffef, 0x40, 0x8, 0x4, 0x4, 0x4a8, 0x1000, 0x1ff, 0x3, 0x9, 0x6, 0xe, 0x0, 0x1, 0x5e9, 0x9, 0x6, 0x1, 0xa5ab, 0xe, 0x4, 0x3, 0xfffffffd, 0xf, 0xa09, 0x1da3, 0x80, 0x6, 0x0, 0x9, 0x40, 0x800, 0xf, 0x4, 0x8, 0x1, 0x8, 0x284f, 0x9, 0x5, 0x1000, 0x80000001, 0x400, 0x3, 0x10001, 0x9, 0x4, 0x4, 0x4, 0x6, 0x10001, 0x6, 0x2, 0x3, 0x9, 0x3e, 0x6, 0x6, 0x961, 0x6, 0x2, 0x0, 0x305, 0x8, 0x7fffffff, 0x8, 0x6, 0x5, 0x1, 0x1, 0xbda, 0x8, 0xc26a, 0x8000, 0x800, 0x5, 0x3, 0x8, 0x0, 0x81, 0x9, 0x81, 0x1, 0x0, 0xf, 0x3, 0x14, 0x88f1, 0x9, 0x0, 0x800, 0x1, 0xb4, 0x3, 0x8, 0x5, 0x3, 0x46836af1, 0x17f, 0x9, 0x0, 0x2, 0x8, 0x80000000, 0x5, 0x1, 0xfffff801, 0x4, 0x400, 0x4, 0x6, 0x1, 0x7, 0x9, 0x0, 0x157e, 0x9, 0x100, 0x1, 0x10000, 0x5, 0x400, 0x6, 0x3, 0x9, 0x5, 0x1ff, 0x6, 0x6, 0x0, 0x0, 0x969c, 0x2, 0x64, 0xfffffffd, 0xdad, 0x160, 0x4, 0xfff, 0x32d, 0x3, 0x3, 0x4, 0x2c4c76ab, 0x1000, 0x1, 0x1ff, 0x5, 0xd, 0xfa0, 0x800, 0x8001, 0x6, 0x442, 0x5, 0x1, 0x7fff, 0x7, 0x5, 0x7, 0x2, 0xd, 0x2, 0xbb, 0xfffffff9, 0x5, 0x0, 0xb, 0x7, 0xffff, 0x0, 0x1, 0x8, 0xfffffffa, 0x6, 0x1, 0x7, 0x8, 0x9, 0x5, 0x0, 0x524c, 0x4, 0x8, 0x8, 0x8000, 0x0, 0x9, 0x1, 0x3ff, 0x8, 0xafe0, 0x9, 0x8, 0x6, 0x7, 0x101, 0x3, 0xfffffff4, 0x9, 0x50, 0x80, 0x8, 0x1, 0x8, 0x0, 0x80000001, 0x2, 0x8001, 0x5, 0x6, 0x3, 0x1, 0x5, 0x2, 0x4, 0x1, 0x4, 0x5, 0x5, 0x1dee, 0xb, 0x6, 0xfff, 0x4, 0xbb0, 0x7, 0xf75, 0x6, 0x81, 0x4, 0x401, 0x8, 0x0, 0x2, 0x2, 0x9, 0x12, 0x5, 0x4, 0xe, 0xffffffff, 0x8, 0x5, 0x83c2, 0xc58, 0xc4b, 0xffffffff, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x1e10}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 15m23.239210776s ago: executing program 4 (id=2869): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x400, 0x1, 0x1}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "a16451953a3ce6b7", "f58ab8b81da3ff5a3d00c53ff91fd6c8", "01b7c2af", "5730c8aae60f7313"}, 0x28) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x2, 0x6, 0x3, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x700, 0xffffff58, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', r1, 0x80, 0x8000, 0xb1, 0x3, {{0x11, 0x4, 0x2, 0x6, 0x44, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@generic={0x94, 0xb, "be07f29635381da206"}, @end, @generic={0x82, 0x4, "5ac4"}, @ssrr={0x89, 0x1f, 0x68, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @loopback, @broadcast, @loopback]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x9e, 0x8000, 0x1ff, 0x29f, {{0x13, 0x4, 0x2, 0x29, 0x4c, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, {[@end, @ssrr={0x89, 0x13, 0xbe, [@private=0xa010102, @local, @loopback, @multicast1]}, @lsrr={0x83, 0x7, 0x1f, [@broadcast]}, @cipso={0x86, 0x17, 0x0, [{0x1, 0x11, "ebc3d84c8a15c3fdc1fd078482dec5"}]}, @generic={0x88, 0x3, "ad"}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000480)={'veth0\x00', {0x2, 0x0, @empty}}) r4 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r4, &(0x7f00000004c0)="1646b4a94c34d5ef30e9bc7e7b25467573f1a1c4d0fe88b5bdcaf730f2fb5d4bdbfde88553f48fe12d8dc16d9745960f4c0218883cfa2477481980d9e280283a1b7cb57724e8905b5814929d7d0a80bfa7e89248b13036d38efc96215db37b37839572ea3275fb256262985fcd8582e1da365ee2b2e00f46c68e84c48b07a8122f3c4aecb01a7bc6e4d65b731880b720ae95d8bc6d7c8ac36ad75b8df4a64f2cbd76dfd96cff937dfb30273dd794ead370bd9a3b3fcae3e0", 0xb8, 0x1, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000680)={@isdn={0x22, 0x7, 0x18, 0xf9, 0xc}, {&(0x7f0000000600)=""/23, 0x17}, &(0x7f0000000640), 0xd}, 0xa0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@empty, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000840)=0xe8) unshare(0x28000000) (async) connect$inet6(r0, &(0x7f0000000880)={0xa, 0x4e23, 0x1, @local, 0xffffffff}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'gre0\x00'}) (async) r5 = openat$cgroup(r0, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0) (async) recvmsg(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/223, 0xdf}, {&(0x7f0000000b80)=""/184, 0xb8}], 0x3, &(0x7f0000000c80)=""/4096, 0x1000}, 0x40000002) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r6, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000021c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002180)={&(0x7f0000001e40)={0x314, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CT={0x198, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x5, 0x10000, 0x7, 0x8, 0x4, 0x3, 0x2, 0x4, 0x5679]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x44}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x64}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfdb}]}, @CTA_SEQ_ADJ_REPLY={0x4}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x400}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x13c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6921f28d1e0c122e}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x840}, 0x20050045) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002240), r5) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x40, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_team\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000002340), r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000002540)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002500)={&(0x7f0000002400)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44800}, 0x4005) 15m21.440388666s ago: executing program 4 (id=2871): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000002014000380100000800c00018006000100d1030000140000001100010000000000000000000105000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000002014000380100000800c00018006000100d1030000140000001100010000000000000000000105000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) listen(r2, 0x800) sendto$inet6(r2, 0x0, 0x0, 0x4, 0x0, 0x0) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0x0, 0x1b}, @void, @mpls={[{0x2}, {0x9}, {0xb, 0x0, 0x1}, {0x400}, {0xecdf}, {0x6}, {0xd, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xd43eb}, {0x5, 0x0, 0x1}], @ipv6=@generic={0x4, 0x6, '>K\b', 0x29d, 0xfe, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, {[@hopopts={0x87, 0x1e, '\x00', [@generic={0x68, 0xde, "d979744e4e852445ef55b642e031e9c10fb668c2d2179ca9a743f87026fd0e0330aa68fdef3dfee8e3249086e0bf33a9d0b0ba70184ad48078bb8af046943237323eb4aa192c2fa7016aa75b3fcc9630e4d135d384b563b6ff7b5bea0c8c8831a8cc856c98a7b60f8664143ad23ccff2164560dcb4188822eb0b62f2585d9f142300cfe6b6939d0f1ef7247fd28de45788ce858cf33fda7318bb3755bd394d5bcb27fa51e023d55478420afc3cce5b689214189b7ed9b06ecf260c1d44783157a33f1e7e9343411adede11c29953b7161f56635d57626c12450469276b55"}, @hao={0xc9, 0x10, @empty}]}, @dstopts={0x1d, 0x0, '\x00', [@pad1]}, @hopopts={0x3c, 0x11, '\x00', [@generic={0x3, 0x2, ']['}, @generic={0x2, 0x73, "52f928079671090036af42786d9efd24e276b52e68b8323d9070e396d384b9470b4b35ba4de5a585b91ab26148c4eb3b7828f2009075e190230c90659ac10be5c7927120fd7b554d6d6976b3e66ee25fb5cb2f0b88ffca28eb26acd0da4f9b99575555f7d4dea609721515f512a175e8c2d744"}, @generic={0x0, 0x10, "2f6c4a3474e5e534009819c49e9c29d5"}]}], "6fa619445543c0d3f573d7753e89b5b83321b95d955370d4e6c46c741c46df353639f88f62af6d75e0ab57fc31632b71a84488db197e54189a729d42cd90fcedf2330a641aab6b8538a9ef0cd71a2ed8ef376d86368ec50961209748de7f10f103df7f65c0933181066ce8d7cb075f98211cb921f317d543920eaae21518590a746c170aedac1c217e7faf5509a0fceddcd401020f745900242f7910531ba51b0f8d1b3b4a976c3045a36960765cd5f34ee738308b5256c52835a786c50fcd76222cf972dca7361bc894bde49a3c2b84af5f4dbbd929197d91ac44ba7ea2698c01c411aa50bf18280e70884d4c6a853cf220a4a693"}}}}, 0x2f1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000004080108000000000000000001000001060002400017000005000300110000002c0004800800034000000009080005400811dbfa0800084000007fff080005400000000d08000b4000001000"], 0x50}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000004080108000000000000000001000001060002400017000005000300110000002c0004800800034000000009080005400811dbfa0800084000007fff080005400000000d08000b4000001000"], 0x50}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x170}}, 0x0) 15m20.569642409s ago: executing program 4 (id=2874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0xa00000000000000}, 0x0) 15m5.387675245s ago: executing program 33 (id=2874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0xa00000000000000}, 0x0) 14m48.233530158s ago: executing program 5 (id=2923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000001000370400008000000000000000000059a760fe027beebb5d34df846499fd9d483a4ea797b86d9bf43dfb5c2cdd18a4f675ed4969b6f0671567ee849175639b92846c38cf341e0e0cf51f29c3190f265f45e31fb016ace3c09db75367bb938ab2dfad6581258fd9485a46c7cc2e8e5ced6371bd4de336574e73e7bb9b06574b28d6f9d07acf8c743375f2228b218c8c228b0359dcac61cc4fb0364c64c1b2d267632e748c29cacd19dd76a474e68584785b748ff6f931ea16e8a5fac7c68d40fdae73c4d6777afff0c226069ea501be8d39b144db6353c30e7097eade", @ANYRES32=r6, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x38, r4, 0x1, 0x70bd28, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x842) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000040)="20a0", 0x2}], 0x1) 14m46.524904103s ago: executing program 5 (id=2927): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x6, 0xfe, 0x3, 0x0, 0xfd}, 0x8) 14m46.039552151s ago: executing program 1 (id=2928): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000380)={&(0x7f0000000340)=[{&(0x7f0000000080)="72634a11c748fe78fdc469a686739866461b1ef5074808887d6f5e89a6975d06e04bb34460378feb73e8cad7999911ea9baa13eec89c5fc297384cb2d1bf8237136cff4633ceddc58927cccc9354889c1c285835c595945919dddb9b403c6e05973155ae82f6e01c9589802a39f2c59f5f36ab3020256a72fcd58e00e68b75cfb303e956c8b95d994735701f024d043d200b7f", 0x93}, {&(0x7f0000000140)="739c2c77ed734f0e2c618e1a5cd77272131d4fca213c074316bac71a10426521a65c143863ee1920c97923b1b10ba516dab588a5c12791965350c5d36e0b886ac214c34fa7ebece21f6215b34bfafa877a177ca0bbba32755693179813bf793889f927597f56490a51e31d0c2de6ce0b945a52fbcf7aa6156e4d117c860286e70a58042bbfc922614b0c12bf52771bc8d38bb085257d3bae9425a46a0900469f38b266e190a9daf2e048dc5337d3bcfe1784d0576caaeeaf097d91e38483e1948d995856e899a42303e48f348e54d804df524c385f5266deae1eefa8a4b5925b97c762df6ff21a6b185e812e7fb2852978673a22c3f97e2758", 0xf9}, {&(0x7f0000000240)="92da3ec44da8830284655ad41557333450bb4e2f96086b84a8f74378c90dad51d4e34ad9d275b2497959cca10369b348fe4f76038f4433a0b844a9003d42f04333ba6ec74920aeb2b594e3042eb8c3c63713c23bd61daf91635f8da0f42ab612495e00d3c69fb0f9e180a69f0fd55cb857fc4a1c92cb09e5640883c0220ab81ba42cd2c9fc9b1aaeb68c6371e59fb9a7f2b918225f524698eea46b75be7cd602ed48ee07fb386e3e4d79fe11a66135e13c28f5bee15373eb0e396ff61fdc56c739034399daf8a580d8580c05427be0dcf44ccbe00d8b5dc2fc6f0c3d8a49ffad", 0xe0}], 0x3, 0xa9ff, 0x0, 0x3, 0x63, 0x7, 0x3, 0xf3}) 14m33.730626129s ago: executing program 1 (id=2931): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0x98, 0x7}, &(0x7f0000000100)=0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="7f002200f1f20b008220c1db5c0dec6bc087ff1bad59cdcdb2cf43ddfb51b2644e622ad06f7570258662f51a739f0ccf244b17cc72fd112d1ec8df93da70"], 0x2a) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060088480000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 14m32.349290487s ago: executing program 5 (id=2933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xfff) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7d, &(0x7f0000000080)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r6, 0xe}, 0x8) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000001) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0xc0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) 14m32.265347497s ago: executing program 1 (id=2934): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000080), 0x0}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) 14m31.321523686s ago: executing program 1 (id=2936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="000000000000000000c04e75e9991b41a866296b0000000000000054198691add48fa1b795dc739f8727fdc4c1ed2df3eb51b1975e41bce46f96eb03f5b632a7b8532903f752ee49517710a306ae2b737e4c608a671e726e24cd741a66a7a2c83df93416ed4f74a4172e5603cc17f37c8f6dcaf7f3b89cfe4a5b8e6018af48e804509829a953870823aece6682b1221ce8aa530730ed32345e5006034323cde886c4315a57815df5790a68a0e8cd2816ac0c363861b776749fcb110c3f7faee3261604401f86b28f45b948ab817652fbbad3a6bca2964d756e229f4fb895089c4c36d1dfd90875639705471fc40d559dc2e368b0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r3}, 0x38) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89, 0x0, @private=0xa010101, @local}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', r5, 0x29, 0x81, 0x5, 0x8, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0x22, 0x7}}) sendmsg$inet6(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="436a40a19275702302ef7bad584627599a7f34935b5eb05c38cd2a90db29ce22d72e935fc367c63ea4fd587a0d3ecddef88a83a8184f45135bde95bbaca5ab1e79170d25f3285dae7ad1e7416c0c56525b2485f0c4148f9331da", 0x5a}, {&(0x7f0000000440)="8f8f0e5a273293c8b40b72f5d1b19c0db564bb6a62e20d2166ab05d5a9dea4", 0x1f}, {&(0x7f0000000740)="032d22545e67bb2fb7a89bf1165f20051856ffafa6aadf90955676d0aae7963d5acdfaf26aa02b35b600d8577350c6d56c8f068f891f120eedb9fb7f781a61db5fe55f7981076df7c619bb8199922f4dde630b8b37ef95618dfbd54f9d8a78147932fcfb4d559847e9d43023102229d4cfdef682d5115f00f73704ed915213b86480f3bd2f9fa41b22334c9b516e74aa46c5ad8650b25ed67a4c0c82a3687ddbdf73455ff38534156b61de9cf8d2c5f8d3e3b35210c756", 0xb7}, {&(0x7f0000000800)="2747ca66818d5129ea25f1", 0xb}], 0x4, &(0x7f0000000a00)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffff9ef}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r8}}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x1, 0x4, 0x0, [@mcast2]}}}, @hopopts={{0xb0, 0x29, 0x36, {0x2f, 0x12, '\x00', [@generic={0xe, 0x56, "52ceb38dc1f43cd10cde4a3f81db142ee38d87d4a0c348102c1100f7de7b8434dcb6513360dc7cf71cc8c06f641a6c6a28e700d3459deb5c3a3970192815442438fcfa98ac70a9fe60062862bbb74c636ca14bb16c14"}, @hao={0xc9, 0x10, @remote}, @pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x1f, 0xb, [0x5, 0x0, 0xfffffffffffffff9, 0x6]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x180}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0xb4, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000800) 14m29.737282052s ago: executing program 5 (id=2939): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000001c0)=@ipv4_newaddr={0x54, 0x14, 0x509, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x7b, 0xcb, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x3fe000, 0x7ff, 0xffffffff, 0xffff7fff}}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040054}, 0x20004004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_skb}, 0x48) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000180)=0x5b, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xfc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 14m28.797298392s ago: executing program 5 (id=2941): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x12, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1bf8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000001c000100030000000000000007"], 0x30}}, 0x80a1) 14m28.764239681s ago: executing program 1 (id=2942): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x10, 0x14, 0x1, 0x70bd2d}, 0x10}], 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0x98, 0x7}, &(0x7f0000000100)=0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="7f002200f1f20b008220c1db5c0dec6bc087ff1bad59cdcdb2cf43ddfb51b2644e622ad06f7570258662f51a739f0ccf244b17cc72fd112d1ec8df93da70"], 0x2a) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060088480000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 14m27.886072525s ago: executing program 5 (id=2943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x40000040, 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket(0x10, 0x803, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000bfa3000000000000b70c000000000200850000003c0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="41f035b05058e17c697eebc6aa5d59dea01a169300277e59e5fcfb627e4be348ee4a7b12785acf67010ac688544190985d2944a64cdbf05429ce1fd4d303f4898baa42101cf78b6b3d4835482e35f7939b89bc01247239fe1451f9644c96c6791a80ea931d1da70982c712c48eb87a3b0c0d0970f20226bf27d73175e6fdab3387ef087b285736e9502a4b136e62f3", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r9, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) socket$netlink(0x10, 0x3, 0xe) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 14m26.422992274s ago: executing program 1 (id=2945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0xc}, 0x94) 14m12.72079885s ago: executing program 34 (id=2943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x40000040, 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket(0x10, 0x803, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000bfa3000000000000b70c000000000200850000003c0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="41f035b05058e17c697eebc6aa5d59dea01a169300277e59e5fcfb627e4be348ee4a7b12785acf67010ac688544190985d2944a64cdbf05429ce1fd4d303f4898baa42101cf78b6b3d4835482e35f7939b89bc01247239fe1451f9644c96c6791a80ea931d1da70982c712c48eb87a3b0c0d0970f20226bf27d73175e6fdab3387ef087b285736e9502a4b136e62f3", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r9, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) socket$netlink(0x10, 0x3, 0xe) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 14m11.002518444s ago: executing program 35 (id=2945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0xc}, 0x94) 2m53.441394695s ago: executing program 0 (id=9435): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x32}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x399d, 0x2b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x5) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x4c}}, 0x0) 2m52.937629172s ago: executing program 0 (id=9441): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x7, 0x7, 0x41}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0xcfd78e9fe246157c, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}]}, 0x1c}}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "b718073c8f78"}]}}}]}, 0x6c}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 2m52.259409159s ago: executing program 0 (id=9444): setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0xb, 0xffff, 0x1, @mcast2, @mcast2, 0x80, 0x7, 0x9, 0xc0000000}}) recvfrom$packet(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x3, &(0x7f00000010c0)={0x11, 0xf7, r1, 0x1, 0xfe, 0x6, @random="ee2008f0a184"}, 0x14) r2 = socket(0x3, 0x5, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x94}, 0x11) socketpair(0x8, 0x800, 0xc181, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000001280)={0x1, "df"}, 0x2) bind$l2tp6(r2, &(0x7f00000012c0)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff, 0x2}, 0x20) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r6, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x3f9, 0x10, 0x70bd26, 0x25dfdbff, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4040891) bind$l2tp6(r2, &(0x7f0000001400)={0xa, 0x0, 0x6, @mcast2, 0x4cf4, 0x4}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x3, &(0x7f0000001440)=0x8, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000001480)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x1a, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ldst={0x2, 0x1, 0x4, 0x4, 0x7, 0x2, 0x5}, @ringbuf_query, @map_fd={0x18, 0x4}, @jmp={0x5, 0x1, 0x3, 0x2, 0x3, 0xffffffffffffffc0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x71}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='GPL\x00', 0x7, 0xb6, &(0x7f0000001600)=""/182, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001700)={0x2, 0x5, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001740)=[0xffffffffffffffff, 0x1], &(0x7f0000001780)=[{0x2, 0x1, 0x3, 0xc}, {0x2, 0x5, 0xb}, {0x1, 0x4, 0xf, 0x5}, {0x4, 0x5, 0x9, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r8, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x6, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000001b80), 0x4) syz_emit_ethernet(0x2e, &(0x7f0000001bc0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@arp={0x806, @generic={0x308, 0x1c, 0x6, 0x1, 0xa, @random="7ebbc7a51cc3", "0f", @remote, "e3a98a5625fa89"}}}}, &(0x7f0000001c00)={0x1, 0xffffffff, [0x1bf, 0xd39, 0x79b, 0x9e8]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001c40)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001e40)={{r9, 0x0, 0x5, 0xfffffffffffffffd, 0x7, 0x8, 0x100000000, 0x4, 0x9, 0x81, 0x3, 0x5, 0xfffffffffffffffa, 0x5, 0x4}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$tipc(&(0x7f0000001f00), r2) getsockname$packet(r5, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001f80)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4(r7, &(0x7f0000001fc0)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000002040)=0x80, 0x80000) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_STATUS={0x8}]}, 0x24}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002180)='wg0\x00', 0x4) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r10, &(0x7f0000002340)={&(0x7f00000021c0)={0x24, @short={0x2, 0xffff, 0x7ffd}}, 0x14, &(0x7f0000002300)={&(0x7f0000002200)="2cfbb4c7225342fcd189febade7abae6ff9388ea5f477178dc8405854d455ff4ef4d42386a422437073b4c3123cddaa03225805cdc9f78b6bde0f6861042c088d3b81e63d9f61b37af1a539f6b279108dd83fe1aeb29d2c46e82ebe71b47b70cd1c70a179526f9ff9ec1a014599df7d2311a733d8f78c8190f8394af57a487a455a3fc1810386736c84652f3b48e1a8a269d6b2bcc44a318afa01a788ed9a324d04dfed317131698ebb70cf2bfd88675686a465b81636bb93f3c50908305343892ef04651231244e4c1fc020970c4dfdedb2c0a86af29c20e6e8b07583221c950278a2fecc747b2e2c8acf43b0df8efe562de6968ff8", 0xf6}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 2m51.873442375s ago: executing program 0 (id=9450): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x400, 0xc11d, 0x6, 0x6000}, {0x4, 0x3, 0x800, 0x101, 0x524d, 0x4}, 0x5, 0x0, 0x1520}}]}}]}, 0x58}}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 2m51.662479132s ago: executing program 0 (id=9454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r6, 0x29, 0x48, &(0x7f0000000080)=@srh={0x0, 0xc, 0x4, 0x0, 0x0, 0x0, 0x0, [@dev, @rand_addr=' \x01\x00', @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0]}, 0x68) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno', 0xa) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r9}, 0x14) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xfffffff8}, 0x8) 2m51.212784027s ago: executing program 0 (id=9458): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000300)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010007000000440b00000600000088a8000014"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x25dfdbfe, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000027000100f6ff0740fedbdf25060000004d6491d4e81c0c99f244e54b78a4af5a85a9aff001e71d167b46ef544493bc928ad00be377129426f4cc1c6b"], 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x2c, 0x14, 0x503, 0x800000, 0x25dfdbfc, {0x2, 0x0, 0x51, 0xff, r9}, [@IFA_LABEL={0x14, 0x3, 'geneve1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000080300800c0001"], 0x314}], 0x1}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) sendto$llc(0xffffffffffffffff, &(0x7f0000000000)="aedf8a3a419850173bb2f3cbf7a2912c0f118108eed603bd60cee342e7a3f45f05adca52187860e7bb39a8770c10e57336e630186cbc", 0x36, 0x48044, &(0x7f0000000180)={0x1a, 0x337, 0x1, 0xc5, 0x7, 0x9f, @broadcast}, 0x10) 2m36.182510947s ago: executing program 36 (id=9458): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000300)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010007000000440b00000600000088a8000014"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x25dfdbfe, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000027000100f6ff0740fedbdf25060000004d6491d4e81c0c99f244e54b78a4af5a85a9aff001e71d167b46ef544493bc928ad00be377129426f4cc1c6b"], 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x2c, 0x14, 0x503, 0x800000, 0x25dfdbfc, {0x2, 0x0, 0x51, 0xff, r9}, [@IFA_LABEL={0x14, 0x3, 'geneve1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000080300800c0001"], 0x314}], 0x1}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) sendto$llc(0xffffffffffffffff, &(0x7f0000000000)="aedf8a3a419850173bb2f3cbf7a2912c0f118108eed603bd60cee342e7a3f45f05adca52187860e7bb39a8770c10e57336e630186cbc", 0x36, 0x48044, &(0x7f0000000180)={0x1a, 0x337, 0x1, 0xc5, 0x7, 0x9f, @broadcast}, 0x10) 2m26.084769717s ago: executing program 6 (id=9691): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r1, 0x3000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2m25.761075926s ago: executing program 6 (id=9697): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x81f9}}, 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x30004080) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 2m25.462176354s ago: executing program 6 (id=9700): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) poll(&(0x7f00000000c0)=[{r0, 0x8432}, {r0, 0x4221}, {r1, 0x2}, {r0, 0x2090}, {r1, 0x80}], 0x5, 0x8) 2m25.3434227s ago: executing program 6 (id=9701): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) close(r1) (async) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="8d1811c11651", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0xfd, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)="0021199f6dd1be01000000f69800721d5874f72cf86d", 0x16}], 0x1, 0x7, 0x1) (async) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)="0021199f6dd1be01000000f69800721d5874f72cf86d", 0x16}], 0x1, 0x7, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 2m25.035611201s ago: executing program 6 (id=9704): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000040)=""/72, 0x48, 0x9, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012000d00010076736f636b6d6f6e00000000"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000130005000000000000000000000000000000000000000000010000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110005000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) 2m24.734917476s ago: executing program 6 (id=9707): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @void}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r6, 0x29, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000001500)={{r6, &(0x7f0000000080)='gre0\x00', 0xc40, &(0x7f00000001c0)={@_ha_fsid={[0x2, 0x3]}, {0x0, 0x1, 0x8c, 0x9e3}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x4}, {[0x9746, 0x1, 0xa2, 0x4]}, 0x0, 0x1000, &(0x7f0000000500)=""/4096}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000100000000000000001d00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4f23, @multicast2}, 0x10) sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="e0000002ac1414aa0100000001000000ac1414aa2194c6112a2d7508cdce13615784797ae1b6b7d61012a858806e0a791ddb229ad1e0c57dae44f2b81cae8f8e476b049925c13f1f66db1bbbb0973bf8f46f4c988d9aba85f38be87155edefa942785b5788d01d686ab8c7e906a0c9a2dfbac6c19738243cafa1eeb0ea0f3698cb20877df914a8684d9b926b3bed343320e29d2ba31c28ffc9ce01640b44b53eb7476c453838541bf2301273f44b09a8b742"], 0x14) 2m9.663864747s ago: executing program 37 (id=9707): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @void}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r6, 0x29, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000001500)={{r6, &(0x7f0000000080)='gre0\x00', 0xc40, &(0x7f00000001c0)={@_ha_fsid={[0x2, 0x3]}, {0x0, 0x1, 0x8c, 0x9e3}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x4}, {[0x9746, 0x1, 0xa2, 0x4]}, 0x0, 0x1000, &(0x7f0000000500)=""/4096}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000100000000000000001d00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4f23, @multicast2}, 0x10) sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="e0000002ac1414aa0100000001000000ac1414aa2194c6112a2d7508cdce13615784797ae1b6b7d61012a858806e0a791ddb229ad1e0c57dae44f2b81cae8f8e476b049925c13f1f66db1bbbb0973bf8f46f4c988d9aba85f38be87155edefa942785b5788d01d686ab8c7e906a0c9a2dfbac6c19738243cafa1eeb0ea0f3698cb20877df914a8684d9b926b3bed343320e29d2ba31c28ffc9ce01640b44b53eb7476c453838541bf2301273f44b09a8b742"], 0x14) 3.495249232s ago: executing program 9 (id=10793): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000ff89107d0000000000750500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000003e7e0bbdd361f376eb88ab0e34ed000000000000000a14000000000a050000000000000000000500000040000000030a010100000000050000000900010073797a30000000020900030001400000000208000240521deb0b1400000011007e599d0e733aac9229fffab3bc085daf448b88ac298a042869e720d13eb5845b3a813938c49ec3e6a187e3f69e09043580d2f03c6fb300d1abcfab2e880383640c381c828f65d5d39d96e7de73064f743022e504ff69f41029c347c148098cecabe9f6238abfd0a9fcc9ba1483ab342e40ab8fb21139442967684af739a9ddc6b8ab4be7a36a8acc8edbc50682189b105d22c4826437dd899cd8e526adf181de33edc1a2740983fd6e62d0f177aba16b3087a98be8affbccdffb1817112a0500d0fc18a28b622d69859da200"/323], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x140a, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}}, 0x20000040) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r4, 0x9fde9000) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xc040ff0b, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400003a7acae22e3180268a00", @ANYRES16=r2, @ANYBLOB="00012bbd7000fcdbdf252100000005002000000000000500200001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000003e7e0bbdd361f376eb88ab0e34ed000000000000000a14000000000a050000000000000000000500000040000000030a010100000000050000000900010073797a30000000020900030001400000000208000240521deb0b1400000011007e599d0e733aac9229fffab3bc085daf448b88ac298a042869e720d13eb5845b3a813938c49ec3e6a187e3f69e09043580d2f03c6fb300d1abcfab2e880383640c381c828f65d5d39d96e7de73064f743022e504ff69f41029c347c148098cecabe9f6238abfd0a9fcc9ba1483ab342e40ab8fb21139442967684af739a9ddc6b8ab4be7a36a8acc8edbc50682189b105d22c4826437dd899cd8e526adf181de33edc1a2740983fd6e62d0f177aba16b3087a98be8affbccdffb1817112a0500d0fc18a28b622d69859da200"/323], 0x7c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x140a, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}}, 0x20000040) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r4, 0x9fde9000) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) ioctl$TUNSETNOCSUM(r6, 0xc040ff0b, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400003a7acae22e3180268a00", @ANYRES16=r2, @ANYBLOB="00012bbd7000fcdbdf252100000005002000000000000500200001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) (async) 3.087670008s ago: executing program 3 (id=10798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b8, 0x1a0, 0xd0, 0x360, 0x360, 0x360, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'rose0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff], 'bridge0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x4}, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2a, 0x9, 0x6, 0xb9, 0xed4, @mcast2, @remote, @loopback, [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff0000ff], 0x2000, 0x301}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x8080) 3.086080453s ago: executing program 2 (id=10799): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500044804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000afac7c77d60edd80c727cf84deef3b17224da12323d68e86c9fce4c8c4b785b0be532a0d92425139d05cf6e0f468e35905ba9b87ce041e2cec59f582b1ceba8df8fdabfa282"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000740)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xbf, 0x3, 0xa}, @call={0x85, 0x0, 0x0, 0xb0}, @generic={0x85, 0x0, 0x0, 0xfffd, 0x3c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="23c93d6b5d60a307d8607679be043cb6d627964181fccdd1e957bf32f9258b769d35ef1ec517b8ca49f4f3512e04f4a56d24a3696e6a8e5d25fca853e6e48878aa7562d83427287c70c997d2f0c789a5ffb2f732d1d94eef30bc40ba3e518c2a0ce3594622906eb8df21a9c2379137731c01192901f90ff715b15c8b2a7bc3266b47b2a50abbd0810af43efab44ae01ba04cd8a6dacf4bbdfa19f90c387f405ce0192037d734d97d31", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x1}, 0x1c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x41}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004804}, 0x24000010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000600), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) r12 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@volatile={0x10, 0x0, 0x0, 0x9, 0x5}, @union={0xd, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x2, 0x4, 0x8001}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x49, 0x0, 0x58}, @float={0xc, 0x0, 0x0, 0x10, 0xc}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x5f, 0x61, 0x30, 0x0, 0x5f]}}, &(0x7f0000000440)=""/190, 0x7c, 0xbe, 0x0, 0xff}, 0x28) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) 3.085807296s ago: executing program 7 (id=10800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000580)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r2, 0x300, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r6, 0x4, r6}, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000000116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.057446984s ago: executing program 9 (id=10801): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x20) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x200, 0x0, 0x4, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_hsr\x00'}]}, 0x34}, 0x1, 0x2000000000000000}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0xc, 0x5}, 0x2) 2.949283621s ago: executing program 8 (id=10802): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) 2.886230325s ago: executing program 3 (id=10803): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x7, 0x2, &(0x7f0000000040)='\x00\x00', 0x9, 0x1, 0x15c2, 0x5df, 0x8b, 0x1, 0x9, 'syz0\x00'}) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xff06, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x38, r9, 0x1, 0x20000, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) 2.800732382s ago: executing program 8 (id=10804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)="1ef70d8901997ee93154d1e2f6efda5fb77b28f818b3cee3cabdb2828e6517dbafd6f1972970292683dbd228d891835868fd64af7b9e045fca3c30322b052ffef5db2ca7d3ea33eccd3056c555e854fc187bf72d1ff99102d555095efaabc8c0e59c65b7dadf7d7c87859558a2454dccb14603a2d503f38e78547422a5a2f3de6c257fc80678c9f13f548e2231d721aa9f209c2ab25c577d2c619ab5f5676069e95bda10640ad37c506474b8796eb089", 0xb0}, {&(0x7f00000005c0)="b49f8b5aebe230c299f9e8338763d6060890cd21f5f46e348a7e705ccfb7c568cd8eff10daf2c05fc4e5a6b893ed050ca5f1d73548e09bb572b617cc8fc0a4c84812e16fe0d524d4a63fa223ecc2c9d12b55a560e85d24ce301744f94da04835f68a4a019af9e0b25f111378e6945c27a2d3ddc9a1ced30d71f22035682e011e588d0d434da67d7cf9aa45c8b0932b29c9c05adeacc41edb230ca16c36a31aaa4b09e856a416df3dcb770dc6189e455ec01ec236b81eff2ceea92a6eec96a4e70c80c4d9eb6fc4bb68556e7989df0f1fc6f3ca33e5", 0xd5}, {&(0x7f00000006c0)="162adf22d0ba6c15053af96d8182316a8da577ba5533e76bded77ff8b57255d3a42a81e3a1f3f95f7080025f9851b07fea819ec1f4ccae48daa8e3930c99acf64742c87d3ccc167851078031f824d2b481f99311e5e019e9e7fb1c96e644621b03084cdfb7e748d4344b34b1d01951e42f3c710de6193602678bd5a3a9eaccc436cbbaf5a259da84a6cba4129534d26ab24a0f6df4b8953d26df0f24cbd4a4c20e54065b25614120cf8bd3de7fba0fe89dbc591d52b3d031", 0xb8}], 0x3}, 0x44000) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x712) shutdown(r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000520003030019000000000000001c000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)="1ef70d8901997ee93154d1e2f6efda5fb77b28f818b3cee3cabdb2828e6517dbafd6f1972970292683dbd228d891835868fd64af7b9e045fca3c30322b052ffef5db2ca7d3ea33eccd3056c555e854fc187bf72d1ff99102d555095efaabc8c0e59c65b7dadf7d7c87859558a2454dccb14603a2d503f38e78547422a5a2f3de6c257fc80678c9f13f548e2231d721aa9f209c2ab25c577d2c619ab5f5676069e95bda10640ad37c506474b8796eb089", 0xb0}, {&(0x7f00000005c0)="b49f8b5aebe230c299f9e8338763d6060890cd21f5f46e348a7e705ccfb7c568cd8eff10daf2c05fc4e5a6b893ed050ca5f1d73548e09bb572b617cc8fc0a4c84812e16fe0d524d4a63fa223ecc2c9d12b55a560e85d24ce301744f94da04835f68a4a019af9e0b25f111378e6945c27a2d3ddc9a1ced30d71f22035682e011e588d0d434da67d7cf9aa45c8b0932b29c9c05adeacc41edb230ca16c36a31aaa4b09e856a416df3dcb770dc6189e455ec01ec236b81eff2ceea92a6eec96a4e70c80c4d9eb6fc4bb68556e7989df0f1fc6f3ca33e5", 0xd5}, {&(0x7f00000006c0)="162adf22d0ba6c15053af96d8182316a8da577ba5533e76bded77ff8b57255d3a42a81e3a1f3f95f7080025f9851b07fea819ec1f4ccae48daa8e3930c99acf64742c87d3ccc167851078031f824d2b481f99311e5e019e9e7fb1c96e644621b03084cdfb7e748d4344b34b1d01951e42f3c710de6193602678bd5a3a9eaccc436cbbaf5a259da84a6cba4129534d26ab24a0f6df4b8953d26df0f24cbd4a4c20e54065b25614120cf8bd3de7fba0fe89dbc591d52b3d031", 0xb8}], 0x3}, 0x44000) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x712) (async) shutdown(r1, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000520003030019000000000000001c000000"], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) 2.792646545s ago: executing program 2 (id=10805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001540)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001a00fd5800006c610e2a00000a"], 0x18}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001940)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x8010) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r9 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000300)={0x0, 0x0, 0x0, r11, 0x8}, 0xc) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x84) recvmsg$can_raw(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000840)=""/205, 0xcd}], 0x2}, 0x40) (async, rerun: 64) sendto$l2tp(r12, &(0x7f00000003c0)="15dbd662b4ce147fa594a54fad7a4580010e028057aba204a78fc47a7252bfd236a25e75d6d29e500a8afd43410f32e2fc48958f1ed58b2db0d90b77afd4b1aa1431de0f6b0cc786afa828fa8d39ae064015f95a0af404ffb79a734bf21691731581526f55e79ee6e3564185012f", 0x6e, 0x20004000, 0x0, 0x0) (rerun: 64) 2.64902025s ago: executing program 9 (id=10806): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000002fdb1ed100000000", @ANYRES32, @ANYBLOB="f800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x24}}, 0x40) ppoll(&(0x7f0000000240)=[{r1, 0x80}, {0xffffffffffffffff, 0x284}, {r2, 0x440}], 0x3, &(0x7f0000000280), &(0x7f00000002c0)={[0x9]}, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x16e, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @remote, @void, {@ipv4={0x800, @tcp={{0x1d, 0x4, 0x3, 0x1, 0x160, 0x66, 0x0, 0x70, 0x6, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x93, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x16}}, {@loopback, 0xfffffffd}]}, @generic={0x86, 0x3, "6e6736454844be95512bfa"}, @rr={0x7, 0xf, 0x58, [@private=0xa010101, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0x7, 0x6c, [@local]}, @lsrr={0x83, 0x27, 0x48, [@rand_addr=0x64010100, @rand_addr=0x64010102, @broadcast, @broadcast, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback]}]}}, {{0x4e22, 0x8001, r4, 0x41424344, 0x1, 0x0, 0x400000000000013c, 0x1, 0x2, 0x0, 0x7, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xc9}, @sack_perm={0x4, 0x2}, @eol]}}, {"2a6b1c543aee194e11ffbd1e4957fb3cf5207e95ca9acf1c4f567ac8a5cf760515bb28ef48247de7014c548391ca088a3353e9f9a050567a8046ff41c45a79910b5fa740b013511bdebc1c4c364d67117ec05fe2615186bf557cf8650f91beea584fa59869c0560b1844203fd66f7ed52dfd46a6a36ffecbc1671d2f687b0fb55877682f2bccc28806c40ea3b0744dba582da4be817cca6ff370cd550b9c3c338c2ea5d714c251e02c0cac2aff975552aee4bb50444fd72aabdd953625f0aaa28e789717da239768f7113aa8c62a013c"}}}}}}, &(0x7f0000000480)={0x0, 0x4, [0xb4c, 0x1b, 0x5d9, 0xd77]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@deltclass={0x78, 0x29, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xfff3, 0x1}, {0xfff3, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0xad, 0xff}}, @TCA_RATE={0x6, 0x5, {0x80, 0xe6}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}]}, 0x78}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0000000}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r8, 0x0, 0xffffffff000) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r10, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x3) socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r11, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) 2.648474321s ago: executing program 7 (id=10807): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000b40)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0xa, {0x2, 0x4e21, @local}, 'vcan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000900"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x12, 0x0, 0xfffffff8, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r4, r2, 0x1c, 0x2000, 0x0, @value, @void, @void, @void, r3}, 0x20) socket(0x11, 0x3, 0x2a7) 2.644599501s ago: executing program 2 (id=10808): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xf, 0x10001, 0x30, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x10, 0x2, 0x2}}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x8c, 0x10, 0x200, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x47}, @IFLA_GROUP={0x8, 0x1b, 0x51}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}, @IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dvmrp1\x00'}, @IFLA_IFNAME={0x14, 0x3, 'wg0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0xa}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x8c}, 0x1, 0x2000000000000000}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) (async, rerun: 32) listen(r2, 0x8) (rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt(r3, 0x84, 0x82, &(0x7f0000000480)="1a00000002000000", 0x8) (async) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x0, r1, 0x21}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x44040}, 0x40895) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x2, r1, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) 2.424745288s ago: executing program 3 (id=10809): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000000000002001000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003c00000000000000ac1414000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000e00000010000000000000000000000000000000000000000000000000000000000000000e0000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff000000000000000001000000003200000000000000fc0100"/372], 0x1bc}}, 0x0) 2.344385542s ago: executing program 8 (id=10810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) (async) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x4) r5 = openat$cgroup_pressure(r4, &(0x7f0000000d40)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'full', 0x20, 0x7, 0x20, 0xfffdfffffffffff5}, 0x2f) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000002c0)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.232482347s ago: executing program 2 (id=10811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000022d874a271b227840000000003000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 2.164588951s ago: executing program 7 (id=10812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.012022391s ago: executing program 3 (id=10813): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xa4, 0x80000000, 0x7, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x80, 0xbed4, 0x1623, 0x8000100, 0x3, 0x2, 0x11000, 0x808, 0x5, 0x79b, 0x2, 0xf3b, 0x3, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa08602, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8f, 0x5, 0x2af, 0xf7, 0xfffff0df, 0x1, 0x6, 0x9, 0x7, 0x7, 0x4009, 0x6b000000, 0x4, 0x100202, 0x8, 0x752, 0x0, 0x3, 0x0, 0xa7, 0x2, 0xffffffff, 0x6, 0x8, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x100000, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x136, 0x2a2, 0xffffffff, 0xba4, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x80000000, 0x401, 0x66ca, 0x80000001, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800004000000000000000000000000061953791db8cc9ad1d9471230e95cd45cf6b0bf7527100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.94813857s ago: executing program 2 (id=10814): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8993, &(0x7f0000000540)={'gre0\x00', @ifru_ivalue=0x8000}) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000480)={@in={0x2, 0x4e22, @remote}, {&(0x7f00000003c0)=""/97, 0x61}, &(0x7f0000000440), 0x23}, 0xa0) sendto$packet(r6, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0x6}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$can_raw(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "1a4569443c002dc3"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400715b3732828dc0000000000000845b87dc41749325aabcca4eae792b008ac657c31d9dfe6f9db0ffbd5985b1161ecebe96a2020000000000000011e2521d41f8fedb69baa42b38cdf66e8b60074e0c650000000000000000ae62f74452", @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=0x0, @ANYBLOB="0002000055b9156e08001f0009000000"], 0x50}, 0x1, 0x0, 0x0, 0x31}, 0x4004800) 1.946880242s ago: executing program 8 (id=10815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000183a00000200000000000000000000009500000000000000a8100000020000000d5701000000000004100400070000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r2], 0x38}}, 0x20044804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100000000000026b82bd90000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000041000701fefeffff00000000017c0000040042802000018006000600800a00000c001500faffffffffffffff08000900", @ANYRES32=r0, @ANYRESDEC=r3], 0x3c}, 0x1, 0x0, 0x0, 0x48091}, 0xc010) 1.8498165s ago: executing program 7 (id=10816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x11}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x10}}, 0x14}}, 0x4000080) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x10}}, 0x14}}, 0x4000080) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100003ccf8d66523bef8a2b000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000054000000002090002007308000a40ffffffed0c000980080001400000000108000840000000011400000011ff01b131000000000000000001000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.713224933s ago: executing program 3 (id=10817): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x800) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r4, &(0x7f0000002e40)=[{{&(0x7f0000000400)=@nl, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000b00)=""/203, 0xcb}], 0x1, &(0x7f0000000800)=""/180, 0xb4}, 0x3}, {{&(0x7f00000008c0)=@nfc_llcp, 0x80, &(0x7f0000002500)=[{&(0x7f0000000940)=""/133, 0x85}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/132, 0x84}, {&(0x7f00000022c0)=""/174, 0xae}, {&(0x7f0000002380)=""/135, 0x87}, {&(0x7f0000002440)=""/133, 0x85}], 0x6}, 0xffff7575}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000002600)=""/203, 0xcb}, {&(0x7f0000002700)=""/168, 0xa8}], 0x3, &(0x7f0000000a80)=""/83, 0x53}, 0x3}, {{&(0x7f0000000a00)=@ieee802154, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002900)=""/55, 0x37}, {&(0x7f0000002940)=""/185, 0xb9}, {&(0x7f0000002a00)=""/79, 0x4f}, {&(0x7f0000002a80)=""/187, 0xbb}], 0x4, &(0x7f0000002b80)=""/98, 0x62}, 0x1}, {{&(0x7f0000002c00)=@nl=@proc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/127, 0x7f}, {&(0x7f0000002d00)=""/82, 0x52}], 0x2, &(0x7f0000002dc0)=""/117, 0x75}, 0x7d8e}], 0x5, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000000000000000000000000820be98d14a6ac88d7a602000088dcf9480076ddde0c4a8131ff078d2f52e73b57f32fced4f72996ba971439e331426a538f4905947f62eb0e534cd2cbad275d54e94719de78824db6179f9ed894616233bf5a2e24644d1bc9dd1c74d8988ac7ee36bcebf8bdd04ef6b94f6ad963a162fc82a28319e4030000000000000043ce99c6d9171e0918358e2dafad278e179abeb83d1a8c2f7d8e1f2da7870bbbe3ca24a782a22ef1924b5d41866d2c91eae1143d0f9c575afe84fe3cc4d6abad37013143726bdea3e760d3e200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0000000000"], 0x44}}, 0x0) 1.528428662s ago: executing program 2 (id=10818): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r5, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e23, @loopback}}, 0x9, 0x7648}, 0x90) 1.525963318s ago: executing program 8 (id=10819): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001580"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) 1.374106312s ago: executing program 7 (id=10820): listen(0xffffffffffffffff, 0xfff) r0 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth1_vlan\x00', &(0x7f0000000200)=@ethtool_perm_addr}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000240)=0x6e) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x303, 0x70bd29, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48890}, 0x20000804) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d42, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) 1.322744416s ago: executing program 9 (id=10821): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x4e, 0x2, 0x0, 0x1, [@generic="684f90f2552ddba98ff349ae4a3f7dee944a928273cd104a70853544174011460f2cf94449c865116acf76f86817e708f4be38c78e2a1e6366046fbe47c41ab045842b50c776a24f32ee"]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.175402787s ago: executing program 8 (id=10822): syz_emit_ethernet(0x52, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x1c, 0x3a, 0xff, @dev, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x3, @loopback, 0x5, 0x1, 0x0, 0x5}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x801, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x4}, 0xc) getsockopt(r0, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x3, 0xff, 0xd8, 0x4, 0xb6, 0x4, 0x2, 0x2, 0x65, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r7], 0x4b) r8 = socket(0x28, 0x801, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0x8f8}}}, 0x84) shutdown(r8, 0x1) syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x9, 0x0]}, @rr={0x7, 0x3, 0xf7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) poll(&(0x7f0000000040)=[{r8, 0x82}], 0x1, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x7e}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r9, 0x29, 0x1f, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) 792.422853ms ago: executing program 9 (id=10823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x1}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000d0428bd7100fcdbff2500008000", @ANYRESDEC, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002", @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1d, &(0x7f0000000600)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x3, 0x0, 0xc, 0x10, 0x9, 0x1, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff69f5}, @ldst={0x0, 0x2, 0x4, 0xa, 0xb, 0x4, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x891d, &(0x7f00000001c0)={'gre0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008040) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r8, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10) (async) openat$cgroup_ro(r7, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x0, 0x0) (async) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={0x174, r5, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "4c9270cc65ce6221dc5e79dcb34e8cc34384df65d2e0b7a910fdacdde6ee525cfd05d6440bdea117797a79ca732ffec7d78438dbfadafcec8fb1a3f84569f2a7f66f84108f77263493a258c61c272278087bad0f7c0d841eaa5851f445d86c7f1f54dc9c82508fe8c0dd94418678528051f12ff6c2568d3ef1da1b81a8b62e2ba1b7bc28f66f7edc0d5247a43fb45e1b6c023845feb536f0ba6a469835f36ce369528aa8caafc4e41291fd038927e6b2e63c33895851e075aa135e67e40d88cc0afc00e1c3b04242cfaebb3cc78e53e68a369398466cf627d3272fb0bcb2e48dfeef7fd00f7c75d3aee96896db724ce563e2cbffe50f36bf"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x174}}, 0x24040894) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 487.377393ms ago: executing program 9 (id=10824): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001040)={@llc={0x1a, 0x13, 0x92, 0x7f, 0x2, 0x2, @broadcast}, {&(0x7f0000000000)=""/4096, 0x1000}, &(0x7f0000001000), 0x36}, 0xa0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000001140)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001180)=[{{0x4}, {0x1, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x2}}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1}}], 0x28) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000011c0)={0x1, 'macvtap0\x00', {}, 0x9}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r0, &(0x7f0000002400)={&(0x7f0000001200)=@generic, 0x80, &(0x7f0000002340)=[{&(0x7f0000001280)=""/191, 0xbf}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/72, 0x48}, 0x12040) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000002540)={r3, &(0x7f0000002440)='\\,\x00', 0x80000, &(0x7f0000002480)={@_ha_fsid={[0x5, 0x7f]}, {0x9, 0x9, 0x3, 0x100}}, 0x7fff, &(0x7f00000024c0), &(0x7f0000002500)=0x5}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000002580), 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f00000025c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000002640)={0xe, 0x4, 0x5, 0x5}) recvmsg$unix(r5, &(0x7f0000002980)={&(0x7f0000002680), 0x6e, &(0x7f0000002800)=[{&(0x7f0000002700)=""/45, 0x2d}, {&(0x7f0000002740)=""/72, 0x48}, {&(0x7f00000027c0)=""/12, 0xc}], 0x3, &(0x7f0000002840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x2000) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f00000029c0)={0x3}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000002a80)={@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, {&(0x7f0000002a00)=""/36, 0x24}, &(0x7f0000002a40), 0x40}, 0xa0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000002b40), 0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002bc0), r12) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x28, r13, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6ce, 0x13}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002d00), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x58, r14, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0x25, 0xa, 0x4, &(0x7f0000002e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r15, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002e80)=""/129, 0x81}, {&(0x7f0000002f40)=""/95, 0x5f}, {&(0x7f0000002fc0)=""/71, 0x47}, {&(0x7f0000003040)=""/163, 0xa3}, {&(0x7f0000003100)=""/208, 0xd0}, {&(0x7f0000003200)=""/116, 0x74}], 0x6, &(0x7f0000003c00)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x10001}, &(0x7f0000003300), &(0x7f0000003340)=0x10000, 0x7f, 0x4, 0xffffffffffffff9a, 0x9, 0x0, 0x5}}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x15}, &(0x7f0000003380)=0x8, &(0x7f00000033c0)=0x9, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x5, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x1}, {&(0x7f0000003400)=""/84, 0x54}, &(0x7f0000003b40)=[{&(0x7f0000003480)=""/224, 0xe0}, {&(0x7f0000003580)=""/116, 0x74}, {&(0x7f0000003600)=""/169, 0xa9}, {&(0x7f00000036c0)=""/62, 0x3e}, {&(0x7f0000003700)=""/102, 0x66}, {&(0x7f0000003780)=""/197, 0xc5}, {&(0x7f0000003880)=""/59, 0x3b}, {&(0x7f00000038c0)=""/209, 0xd1}, {&(0x7f00000039c0)=""/161, 0xa1}, {&(0x7f0000003a80)=""/184, 0xb8}], 0xa, 0x12, 0x7108}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_dest={0x18, 0x114, 0x2, {0x8db, 0x8}}], 0x128, 0x4000}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r11, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003dc0)="49046504e9bf40566e12574e59245f37396b91066d750331eb911b824045148064a709d087a646ab604ddf8071451013c98dd02f4dc3379ea62ed4", 0x3b}, {&(0x7f0000003e00)="c33b2c6bfc54910f696dbf3fa41d9ff3a99c728f7c090b76ef3986911aa67b74f935bb6607ac3e4328ef6487a4d28e9077950155c3f92a345d62dcace2fb413041eee01604a167a483f10d14caabddf362c60b7f2cd80fba812899c43f80e2fa4e61119d0cfa40f7dd3e2bf8cefc", 0x6e}], 0x2, &(0x7f0000003ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x22}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xe8}, 0x4040800) 332.076158ms ago: executing program 3 (id=10825): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) (async) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0xe, 0x0, 0xffffffff, 0x9, r2}, &(0x7f0000000080)=0x10) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 0s ago: executing program 7 (id=10826): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)='&\v-\x00', 0x189040, &(0x7f0000000100)={@_ha_fsid={[0x1768, 0x4]}, {0x401, 0x0, 0xffff0001, 0x5}}, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0x4, 0x8, 0x6, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf2517000000500006804c0004"], 0x64}, 0x1, 0x0, 0x0, 0x40041}, 0x48c0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "20b7c9d390f3d191576e0aa9427c03a88b30bd5a1ffc437ec2d45d2fca122875f0d4ff"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x17, 0x3, "07b8b423c1ccfd458be9ba12d0299556b82b04"}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x99e8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)='&\v-\x00', 0x189040, &(0x7f0000000100)={@_ha_fsid={[0x1768, 0x4]}, {0x401, 0x0, 0xffff0001, 0x5}}, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x7}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0x4, 0x8, 0x6, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf2517000000500006804c0004"], 0x64}, 0x1, 0x0, 0x0, 0x40041}, 0x48c0) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "20b7c9d390f3d191576e0aa9427c03a88b30bd5a1ffc437ec2d45d2fca122875f0d4ff"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x17, 0x3, "07b8b423c1ccfd458be9ba12d0299556b82b04"}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x99e8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): socket option. [ 1182.516547][ T8011] Use struct sctp_assoc_value instead [ 1182.935352][ T8032] xt_hashlimit: size too large, truncated to 1048576 [ 1184.058848][ T8078] tipc: Failed to remove unknown binding: 66,0,0/0:2433598499/2433598500 [ 1184.094233][ T8076] tipc: Failed to remove unknown binding: 66,0,0/0:2433598499/2433598500 [ 1184.140792][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.372251][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9231'. [ 1184.455918][ T8101] netlink: 388 bytes leftover after parsing attributes in process `syz.0.9233'. [ 1184.465813][ T8102] netlink: 6024 bytes leftover after parsing attributes in process `syz.8.9232'. [ 1184.865799][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9238'. [ 1185.032969][ T8123] netlink: 'syz.7.9239': attribute type 2 has an invalid length. [ 1185.055649][ T7422] veth0_vlan: entered promiscuous mode [ 1185.074189][ T8123] netlink: 'syz.7.9239': attribute type 1 has an invalid length. [ 1185.104297][ T7422] veth1_vlan: entered promiscuous mode [ 1185.276292][ T8133] batman_adv: batadv0: Adding interface: wlan0 [ 1185.310659][ T8133] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.360385][ T8133] batman_adv: batadv0: Interface activated: wlan0 [ 1185.379828][ T8142] batadv_slave_1: entered promiscuous mode [ 1185.392335][ T7422] veth0_macvtap: entered promiscuous mode [ 1185.409255][ T7422] veth1_macvtap: entered promiscuous mode [ 1185.428634][ T8141] batadv_slave_1: left promiscuous mode [ 1185.492337][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.531458][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.646445][ T8150] geneve4: entered promiscuous mode [ 1185.712189][T19634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.763521][ T771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.792156][ T771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.841333][ T771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.088271][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.125341][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.272619][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.295373][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.382087][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9258'. [ 1186.458652][ T8182] netlink: 182 bytes leftover after parsing attributes in process `syz.8.9257'. [ 1186.480068][ T8190] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.9260'. [ 1186.505326][ T8182] netlink: 1012 bytes leftover after parsing attributes in process `syz.8.9257'. [ 1186.807745][ T8208] netlink: 'syz.7.9262': attribute type 5 has an invalid length. [ 1187.446386][ T8190] veth0_to_batadv: left allmulticast mode [ 1187.781724][ T8190] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1187.867948][ T8190] veth3: left allmulticast mode [ 1187.883486][ T8190] vlan2: left allmulticast mode [ 1187.888373][ T8190] bond0: left allmulticast mode [ 1187.899532][ T8190] bond_slave_0: left allmulticast mode [ 1187.906168][ T8190] bond_slave_1: left allmulticast mode [ 1187.912034][ T8190] veth0_to_bond: left allmulticast mode [ 1188.028908][ T8190] bridge2: left allmulticast mode [ 1188.058934][ T8190] bond2: left allmulticast mode [ 1188.283982][ T8190] ip6tnl3: left allmulticast mode [ 1188.324740][ T8190] ip6erspan0: left promiscuous mode [ 1188.339997][ T8190] macvtap1: left allmulticast mode [ 1188.348250][ T8190] gretap2: left promiscuous mode [ 1188.353448][ T8190] gretap2: left allmulticast mode [ 1188.383329][ T8190] bond13: left allmulticast mode [ 1188.405148][ T8190] gretap4: left promiscuous mode [ 1188.413797][ T8190] gretap4: left allmulticast mode [ 1188.700403][ T8759] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.746563][ T8759] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.790467][ T8759] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.831900][ T8759] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.124964][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1189.157205][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1189.168770][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1189.188967][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1189.197127][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1189.332417][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9271'. [ 1189.432410][ T8269] netlink: NAT attribute has 5 unknown bytes [ 1189.439200][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.556324][ T8253] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 1189.566970][ T8253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1189.589854][ T8253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1189.609168][ T8253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1189.772780][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.780174][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.310830][T28771] Bluetooth: hci1: command tx timeout [ 1193.382009][T28771] Bluetooth: hci1: command tx timeout [ 1193.490620][ T157] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.508933][ T157] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.549184][ T8276] netlink: 'syz.2.9274': attribute type 2 has an invalid length. [ 1193.754809][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9276'. [ 1193.760433][ T8759] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.779574][ T8759] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.781187][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9276'. [ 1193.808930][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9277'. [ 1193.825280][ T8293] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode [ 1193.835769][ T8293] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode [ 1193.845664][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9276'. [ 1193.999743][ T8303] openvswitch: netlink: Unknown key attributes 1 [ 1194.006790][ T8302] openvswitch: netlink: Unknown key attributes 1 [ 1194.251019][ T8312] vlan2: entered promiscuous mode [ 1194.292051][ T8259] lo speed is unknown, defaulting to 1000 [ 1194.306544][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9283'. [ 1194.725347][ T8334] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9286'. [ 1194.744091][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 1194.973126][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9289'. [ 1194.983243][ T8343] netlink: 'syz.7.9289': attribute type 1 has an invalid length. [ 1195.168687][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9289'. [ 1195.183666][ T8764] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.259110][ T8360] netlink: NAT attribute has 5 unknown bytes [ 1195.267341][ T8360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.290814][ T8350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1195.302173][ T8350] bond4: (slave bond5): making interface the new active one [ 1195.314932][ T8350] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1195.429360][ T8352] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 1195.448132][ T8368] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9294'. [ 1195.460892][T28771] Bluetooth: hci1: command tx timeout [ 1195.499070][ T8355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1195.992792][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.428861][T22932] bond6: left allmulticast mode [ 1196.449723][ T8422] netlink: 'syz.8.9303': attribute type 11 has an invalid length. [ 1196.470063][ T8422] netlink: 'syz.8.9303': attribute type 4 has an invalid length. [ 1196.694189][T22932] bond13 (unregistering): (slave ip6gretap1): Releasing active interface [ 1196.999484][T22932] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1197.119638][T22932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.131838][T22932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.146398][T22932] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1197.157550][T22932] bond0 (unregistering): Released all slaves [ 1197.170471][T22932] bond1 (unregistering): Released all slaves [ 1197.188152][T22932] bond2 (unregistering): Released all slaves [ 1197.205612][T22932] bond3 (unregistering): Released all slaves [ 1197.228741][T22932] bond4 (unregistering): Released all slaves [ 1197.246478][T22932] bond5 (unregistering): Released all slaves [ 1197.269737][T22932] bond6 (unregistering): Released all slaves [ 1197.285844][T22932] bond7 (unregistering): Released all slaves [ 1197.306486][T22932] bond8 (unregistering): Released all slaves [ 1197.327000][T22932] bond9 (unregistering): Released all slaves [ 1197.346505][T22932] bond10 (unregistering): Released all slaves [ 1197.368650][T22932] bond11 (unregistering): Released all slaves [ 1197.386476][T22932] bond12 (unregistering): Released all slaves [ 1197.405782][T22932] bond13 (unregistering): Released all slaves [ 1197.488660][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1197.523085][ T8440] tipc: Started in network mode [ 1197.529069][ T8440] tipc: Node identity 7aa67837165a, cluster identity 4711 [ 1197.546475][T28771] Bluetooth: hci1: command tx timeout [ 1197.565801][ T8440] tipc: Enabled bearer , priority 0 [ 1197.574560][ T771] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.627655][ T8446] vlan1: entered allmulticast mode [ 1197.642743][ T8446] veth0_vlan: entered allmulticast mode [ 1197.660518][ T8444] syzkaller0: MTU too low for tipc bearer [ 1197.678053][ T8444] tipc: Disabling bearer [ 1197.864609][T22932] tipc: Left network mode [ 1197.873029][ T771] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.113460][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.121087][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.128427][ T8259] bridge_slave_0: entered allmulticast mode [ 1198.142030][ T8259] bridge_slave_0: entered promiscuous mode [ 1198.186768][ T8470] netlink: 'syz.7.9311': attribute type 9 has an invalid length. [ 1198.195921][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.204197][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.213597][ T8259] bridge_slave_1: entered allmulticast mode [ 1198.223287][ T8259] bridge_slave_1: entered promiscuous mode [ 1198.747360][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.763701][ T8493] __nla_validate_parse: 5 callbacks suppressed [ 1198.763725][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9316'. [ 1198.783919][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.359917][ T8259] team0: Port device team_slave_0 added [ 1199.403758][ T8259] team0: Port device team_slave_1 added [ 1199.653204][T22932] hsr_slave_0: left promiscuous mode [ 1199.667128][T22932] hsr_slave_1: left promiscuous mode [ 1199.678462][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9326'. [ 1199.935002][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9328'. [ 1200.159876][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1200.169811][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.179695][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.207244][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.229210][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.236742][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.266750][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.557662][ T8259] hsr_slave_0: entered promiscuous mode [ 1200.607478][ T8259] hsr_slave_1: entered promiscuous mode [ 1200.638713][ T8259] debugfs: 'hsr0' already exists in 'hsr' [ 1200.653482][ T8259] Cannot create hsr debugfs directory [ 1200.963140][ T8570] ip_tables: iptables: counters copy to user failed while replacing table [ 1200.986595][T22932] IPVS: stop unused estimator thread 0... [ 1201.640865][ T8259] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.835152][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1202.046173][ T8259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.057927][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9344'. [ 1202.154847][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9345'. [ 1202.210360][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9345'. [ 1202.316831][ T8619] netlink: zone id is out of range [ 1202.339705][ T8619] netlink: zone id is out of range [ 1202.354415][ T8619] netlink: zone id is out of range [ 1202.362653][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9348'. [ 1202.365286][ T8259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.371937][ T8619] netlink: zone id is out of range [ 1202.371952][ T8619] netlink: zone id is out of range [ 1202.371963][ T8619] netlink: zone id is out of range [ 1202.371978][ T8619] netlink: zone id is out of range [ 1202.371988][ T8619] netlink: zone id is out of range [ 1202.371997][ T8619] netlink: zone id is out of range [ 1202.415513][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9348'. [ 1202.480973][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9347'. [ 1202.490755][ T8628] ip6t_srh: unknown srh match flags 5F28 [ 1202.498230][ T8621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1202.554267][ T8621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.653487][ T8623] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1202.672734][ T8626] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1202.766549][ T8259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.109898][ T8660] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1203.436440][ T8672] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1203.477904][ T8672] xt_hashlimit: size too large, truncated to 1048576 [ 1203.789349][ T8259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1203.844262][ T8259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1203.885122][ T8259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1203.912881][ T8259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1203.957683][ T8690] netlink: 'syz.7.9366': attribute type 2 has an invalid length. [ 1203.989530][ T8259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1204.025072][ T8690] __nla_validate_parse: 5 callbacks suppressed [ 1204.025093][ T8690] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9366'. [ 1204.072351][ T8259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1204.106408][ T8259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1204.170873][ T8259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1204.396056][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9370'. [ 1204.631355][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.707023][ T8729] xt_hashlimit: size too large, truncated to 1048576 [ 1204.721241][ T8259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.746246][ T8730] bridge0: port 3(syz_tun) entered blocking state [ 1204.801174][ T8730] bridge0: port 3(syz_tun) entered disabled state [ 1204.855825][ T8730] syz_tun: entered allmulticast mode [ 1204.908280][ T8730] syz_tun: entered promiscuous mode [ 1204.970907][ T8730] bridge0: port 3(syz_tun) entered blocking state [ 1204.977530][ T8730] bridge0: port 3(syz_tun) entered forwarding state [ 1205.049663][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1205.091610][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.098841][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.099619][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1205.187620][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.194896][ T8764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.216988][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1205.392442][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9377'. [ 1205.822871][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9384'. [ 1205.906617][ T8785] netlink: 'syz.2.9385': attribute type 1 has an invalid length. [ 1205.949959][ T8785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9385'. [ 1206.163232][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9387'. [ 1206.179159][ T8793] smc: net device lo erased user defined pnetid SYZ0 [ 1206.209876][ T8793] smc: smcd device lo erased user defined pnetid SYZ0 [ 1206.448116][ T8806] netlink: 'syz.2.9390': attribute type 3 has an invalid length. [ 1206.482573][ T8806] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1206.695829][ T8820] tipc: Started in network mode [ 1206.716567][ T8820] tipc: Node identity , cluster identity 4711 [ 1206.735566][ T8820] tipc: Failed to set node id, please configure manually [ 1206.754272][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 1206.968547][ T8842] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9395'. [ 1207.026772][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9397'. [ 1207.054292][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.148929][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1207.213428][ T8259] veth0_vlan: entered promiscuous mode [ 1207.246703][ T8259] veth1_vlan: entered promiscuous mode [ 1207.366537][ T8259] veth0_macvtap: entered promiscuous mode [ 1207.394180][ T8259] veth1_macvtap: entered promiscuous mode [ 1207.462054][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.509829][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1207.672844][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.714842][ T157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.767977][T22932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.861096][T22932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.960846][T22932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.988030][T22932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.133830][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.168769][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.962799][ T8908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1208.976293][ T8908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1208.986839][ T8908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1208.999887][ T8908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1209.009080][ T8908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1209.068893][ T8884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1209.577065][ T8934] __nla_validate_parse: 4 callbacks suppressed [ 1209.577087][ T8934] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9416'. [ 1210.262909][T16552] Bluetooth: hci3: command 0x0405 tx timeout [ 1210.628974][ T8906] lo speed is unknown, defaulting to 1000 [ 1211.123136][ T9005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1211.128347][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9425'. [ 1211.146206][T28771] Bluetooth: hci4: command tx timeout [ 1211.234406][ T9012] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9425'. [ 1211.607973][ T9025] syz_tun: entered allmulticast mode [ 1211.658257][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9428'. [ 1211.709379][ T9025] syz_tun: left allmulticast mode [ 1211.835532][ T9034] netlink: 'syz.6.9431': attribute type 1 has an invalid length. [ 1211.977192][ T9034] bond1: entered promiscuous mode [ 1211.990657][ T9034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1212.092385][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9434'. [ 1212.119170][ T9037] macvtap1: entered allmulticast mode [ 1212.137368][ T9042] macvtap2: entered allmulticast mode [ 1212.155745][ T9034] bond1: (slave bridge1): making interface the new active one [ 1212.163671][ T9034] bridge1: entered promiscuous mode [ 1212.173502][ T9034] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1212.584334][ T9068] netlink: 'syz.7.9440': attribute type 2 has an invalid length. [ 1212.615333][ T9061] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1212.694251][ T9061] bond13 (unregistering): Released all slaves [ 1213.087220][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.115611][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.126518][ T8906] bridge_slave_0: entered allmulticast mode [ 1213.150914][ T8906] bridge_slave_0: entered promiscuous mode [ 1213.168906][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.201377][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.216566][ T8906] bridge_slave_1: entered allmulticast mode [ 1213.234897][T28771] Bluetooth: hci4: command tx timeout [ 1213.238974][ T8906] bridge_slave_1: entered promiscuous mode [ 1213.396659][ T8906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.461539][ T8906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.612812][ T9092] net_ratelimit: 501 callbacks suppressed [ 1213.612832][ T9092] sock: sock_set_timeout: `syz.6.9447' (pid 9092) tries to set negative timeout [ 1213.635665][ T8906] team0: Port device team_slave_0 added [ 1213.657857][ T8906] team0: Port device team_slave_1 added [ 1213.789347][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.813293][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.846211][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1213.866549][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1213.867836][ T9104] netlink: 'syz.2.9452': attribute type 4 has an invalid length. [ 1213.882241][ T8906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.901450][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1213.917124][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.922983][ T9108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1213.925374][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.963852][ T8906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.116215][ T8906] hsr_slave_0: entered promiscuous mode [ 1214.134966][ T8906] hsr_slave_1: entered promiscuous mode [ 1214.145490][ T8906] debugfs: 'hsr0' already exists in 'hsr' [ 1214.153374][ T8906] Cannot create hsr debugfs directory [ 1214.153456][ T9115] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9455'. [ 1214.447146][ T9127] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1214.523075][T28771] block nbd0: Receive control failed (result -107) [ 1214.621282][ T9127] netlink: 'syz.0.9458': attribute type 1 has an invalid length. [ 1214.631077][ T9127] __nla_validate_parse: 1 callbacks suppressed [ 1214.631096][ T9127] netlink: 756 bytes leftover after parsing attributes in process `syz.0.9458'. [ 1214.730048][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9462'. [ 1214.766758][ T9142] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1214.775214][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9463'. [ 1214.865881][ T9146] sctp: [Deprecated]: syz.2.9464 (pid 9146) Use of int in max_burst socket option. [ 1214.865881][ T9146] Use struct sctp_assoc_value instead [ 1215.218552][ T8906] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.260600][ T8906] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.301886][T28771] Bluetooth: hci4: command tx timeout [ 1215.476093][ T8906] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.495045][ T8906] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.597306][ T8906] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.610655][ T8906] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.703035][ T8906] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.715782][ T8906] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.307196][ T8906] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1216.355122][ T8906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1216.379829][ T8906] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1216.402481][ T8906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1216.428911][ T8906] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1216.455061][ T8906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1216.499340][ T8906] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1216.553937][ T8906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1216.817887][ T8906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.825197][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9482'. [ 1216.875429][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.893653][ T8906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.934792][T22933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.942089][T22933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.986464][T22933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.993768][T22933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.028255][ T9217] netlink: 666 bytes leftover after parsing attributes in process `syz.7.9485'. [ 1217.048765][ T9217] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9485'. [ 1217.380479][T28771] Bluetooth: hci4: command tx timeout [ 1218.029365][ T9258] x_tables: duplicate underflow at hook 2 [ 1218.031675][ T8906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.152910][ T9266] x_tables: duplicate underflow at hook 1 [ 1218.326722][ T9272] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1218.383532][ T9272] sctp: [Deprecated]: syz.7.9500 (pid 9272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1218.383532][ T9272] Use struct sctp_sack_info instead [ 1218.407301][ T9272] netlink: 200 bytes leftover after parsing attributes in process `syz.7.9500'. [ 1218.442468][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9500'. [ 1218.739778][ T8906] veth0_vlan: entered promiscuous mode [ 1218.796519][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9506'. [ 1218.812142][ T8906] veth1_vlan: entered promiscuous mode [ 1218.824160][ T9292] netlink: 'syz.7.9506': attribute type 10 has an invalid length. [ 1218.828567][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9507'. [ 1218.918639][ T8906] veth0_macvtap: entered promiscuous mode [ 1218.944255][ T8906] veth1_macvtap: entered promiscuous mode [ 1218.994245][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.035740][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.150526][ T8759] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.253934][ T9304] macvtap1: entered promiscuous mode [ 1219.266880][ T9304] macvtap1: entered allmulticast mode [ 1219.285821][ T9304] veth1_vlan: entered allmulticast mode [ 1219.322660][T22933] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.362563][T22933] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.526743][T22933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.532223][ T9320] netlink: 'syz.2.9515': attribute type 1 has an invalid length. [ 1219.543478][ T8759] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.545278][T22933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.651200][ T9321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.654380][ T9322] netlink: 'syz.6.9517': attribute type 5 has an invalid length. [ 1219.683152][ T9322] __nla_validate_parse: 2 callbacks suppressed [ 1219.683172][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9517'. [ 1219.714354][ T9324] netlink: 116 bytes leftover after parsing attributes in process `syz.7.9518'. [ 1219.719897][T22933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.739687][T22933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.388429][ T9346] netlink: 'syz.8.9523': attribute type 2 has an invalid length. [ 1220.426975][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1220.443128][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1220.457020][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1220.469567][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1220.479889][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1220.895743][ T9365] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9527'. [ 1221.231570][T29165] syz_tun (unregistering): left allmulticast mode [ 1221.249827][T29165] team0: Port device syz_tun removed [ 1221.347456][ T9375] lo speed is unknown, defaulting to 1000 [ 1221.579938][ T9347] lo speed is unknown, defaulting to 1000 [ 1221.744950][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.744950][ T9397] Use struct sctp_sack_info instead [ 1221.771397][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.771397][ T9397] Use struct sctp_sack_info instead [ 1221.829085][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.829085][ T9397] Use struct sctp_sack_info instead [ 1221.847380][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.847380][ T9397] Use struct sctp_sack_info instead [ 1221.865459][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.865459][ T9397] Use struct sctp_sack_info instead [ 1221.885301][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.885301][ T9397] Use struct sctp_sack_info instead [ 1221.918762][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.918762][ T9397] Use struct sctp_sack_info instead [ 1221.965438][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.965438][ T9397] Use struct sctp_sack_info instead [ 1221.989379][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.989379][ T9397] Use struct sctp_sack_info instead [ 1222.008228][ T9397] sctp: [Deprecated]: syz.7.9537 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1222.008228][ T9397] Use struct sctp_sack_info instead [ 1222.148456][ T9406] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9539'. [ 1222.418245][ T9422] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1222.462240][ T9415] netlink: 'syz.7.9541': attribute type 3 has an invalid length. [ 1222.477476][ T9415] netlink: 666 bytes leftover after parsing attributes in process `syz.7.9541'. [ 1222.482656][ T9424] team0: Port device syz_tun added [ 1222.587283][ T5613] Bluetooth: hci2: command tx timeout [ 1222.639905][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.647808][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.656007][ T9347] bridge_slave_0: entered allmulticast mode [ 1222.664823][ T9347] bridge_slave_0: entered promiscuous mode [ 1222.709579][ T1606] IPVS: starting estimator thread 0... [ 1222.719018][ T9435] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1222.782528][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.801272][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.820630][ T9438] IPVS: using max 32 ests per chain, 76800 per kthread [ 1222.838296][ T9347] bridge_slave_1: entered allmulticast mode [ 1222.882879][ T9347] bridge_slave_1: entered promiscuous mode [ 1223.031491][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.048681][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.161160][ T9347] team0: Port device team_slave_0 added [ 1223.175303][ T9347] team0: Port device team_slave_1 added [ 1223.292529][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.321422][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.392979][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.439307][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.463325][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.534804][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.673965][ T9347] hsr_slave_0: entered promiscuous mode [ 1223.681163][ T9347] hsr_slave_1: entered promiscuous mode [ 1223.687513][ T9347] debugfs: 'hsr0' already exists in 'hsr' [ 1223.693510][ T9347] Cannot create hsr debugfs directory [ 1223.906558][ T9478] netlink: 'syz.7.9555': attribute type 4 has an invalid length. [ 1224.362305][ T9497] SET target dimension over the limit! [ 1224.661472][ T5613] Bluetooth: hci2: command tx timeout [ 1224.778010][ T9506] bond1 (unregistering): Released all slaves [ 1224.865208][ T9347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1224.881002][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.890740][ T9347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1224.903691][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1224.912118][ T9347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1224.924730][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1224.933958][ T9347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1224.963622][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.112233][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.148393][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.167836][ T9522] netdevsim netdevsim8: Direct firmware load for ÿ failed with error -2 [ 1225.168462][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.178302][ T9522] netdevsim netdevsim8: Falling back to sysfs fallback for: ÿ [ 1225.183864][ T8760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.214986][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.222241][ T8760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.768859][ T9545] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9572'. [ 1225.800070][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9572'. [ 1225.822472][ T9545] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9572'. [ 1225.917607][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.013510][ T9347] veth0_vlan: entered promiscuous mode [ 1226.052784][ T9551] xt_hashlimit: size too large, truncated to 1048576 [ 1226.054834][ T9347] veth1_vlan: entered promiscuous mode [ 1226.123012][ T9553] netlink: 1580 bytes leftover after parsing attributes in process `syz.7.9574'. [ 1226.159462][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9574'. [ 1226.164900][ T9347] veth0_macvtap: entered promiscuous mode [ 1226.201126][ T9347] veth1_macvtap: entered promiscuous mode [ 1226.234244][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.255811][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.291954][ T8759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.305002][ T8759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.341820][T22935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.356460][T22935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.514394][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.539343][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.639269][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.658487][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.738320][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9579'. [ 1226.751410][ T5613] Bluetooth: hci2: command tx timeout [ 1226.768594][ T9564] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1226.829330][ T9567] syz.7.9580: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1226.868026][ T9567] CPU: 1 UID: 0 PID: 9567 Comm: syz.7.9580 Not tainted syzkaller #0 PREEMPT(full) [ 1226.868056][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1226.868069][ T9567] Call Trace: [ 1226.868078][ T9567] [ 1226.868088][ T9567] dump_stack_lvl+0xe8/0x150 [ 1226.868141][ T9567] warn_alloc+0x24c/0x270 [ 1226.868173][ T9567] ? stack_depot_save_flags+0x33/0x800 [ 1226.868204][ T9567] ? __pfx_warn_alloc+0x10/0x10 [ 1226.868233][ T9567] ? kasan_save_track+0x3e/0x80 [ 1226.868259][ T9567] ? __kasan_kmalloc+0x93/0xb0 [ 1226.868288][ T9567] ? xsk_setsockopt+0x52a/0x960 [ 1226.868311][ T9567] ? do_sock_setsockopt+0x17c/0x1b0 [ 1226.868345][ T9567] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1226.868375][ T9567] ? do_syscall_64+0x174/0x580 [ 1226.868400][ T9567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.868433][ T9567] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1226.868491][ T9567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1226.868521][ T9567] ? __kasan_kmalloc+0x93/0xb0 [ 1226.868549][ T9567] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1226.868574][ T9567] ? __kmalloc_cache_noprof+0x150/0x660 [ 1226.868602][ T9567] vmalloc_user_noprof+0xad/0xe0 [ 1226.868625][ T9567] ? xskq_create+0xbf/0x170 [ 1226.868649][ T9567] xskq_create+0xbf/0x170 [ 1226.868675][ T9567] xsk_init_queue+0x8a/0xe0 [ 1226.868701][ T9567] xsk_setsockopt+0x52a/0x960 [ 1226.868721][ T9567] ? __fget_files+0x2a/0x420 [ 1226.868749][ T9567] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1226.868770][ T9567] ? __pfx_aa_sk_perm+0x10/0x10 [ 1226.868805][ T9567] ? aa_sock_opt_perm+0xff/0x1a0 [ 1226.868838][ T9567] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1226.868859][ T9567] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1226.868881][ T9567] do_sock_setsockopt+0x17c/0x1b0 [ 1226.868915][ T9567] __x64_sys_setsockopt+0x13d/0x1b0 [ 1226.868949][ T9567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.868971][ T9567] do_syscall_64+0x174/0x580 [ 1226.868995][ T9567] ? trace_irq_disable+0x3b/0x140 [ 1226.869025][ T9567] ? clear_bhb_loop+0x70/0xc0 [ 1226.869049][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.869068][ T9567] RIP: 0033:0x7f68bf39e0d9 [ 1226.869090][ T9567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.869108][ T9567] RSP: 002b:00007f68c01b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1226.869143][ T9567] RAX: ffffffffffffffda RBX: 00007f68bf625fa0 RCX: 00007f68bf39e0d9 [ 1226.869158][ T9567] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1226.869172][ T9567] RBP: 00007f68bf435024 R08: 0000000000000004 R09: 0000000000000000 [ 1226.869185][ T9567] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.869198][ T9567] R13: 00007f68bf626038 R14: 00007f68bf625fa0 R15: 00007fff0813d1c8 [ 1226.869234][ T9567] [ 1226.869361][ T9567] Mem-Info: [ 1227.162077][ T9567] active_anon:6911 inactive_anon:0 isolated_anon:0 [ 1227.162077][ T9567] active_file:2 inactive_file:43897 isolated_file:0 [ 1227.162077][ T9567] unevictable:0 dirty:66 writeback:0 [ 1227.162077][ T9567] slab_reclaimable:13099 slab_unreclaimable:150871 [ 1227.162077][ T9567] mapped:29532 shmem:538 pagetables:3822 [ 1227.162077][ T9567] sec_pagetables:0 bounce:0 [ 1227.162077][ T9567] kernel_misc_reclaimable:0 [ 1227.162077][ T9567] free:1259276 free_pcp:9507 free_cma:0 [ 1227.208270][ T9567] Node 0 active_anon:27644kB inactive_anon:0kB active_file:8kB inactive_file:175396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118128kB dirty:260kB writeback:0kB shmem:2152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19232kB pagetables:15160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1227.291990][ T9567] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1227.331273][ T9567] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1227.376728][ T9577] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9581'. [ 1227.386709][ T9567] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1227.409533][ T9567] Node 0 DMA32 free:1084956kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27444kB inactive_anon:0kB active_file:8kB inactive_file:175396kB unevictable:0kB writepending:260kB zspages:0kB present:3129332kB managed:2548688kB mlocked:0kB bounce:0kB free_pcp:35048kB local_pcp:17940kB free_cma:0kB [ 1227.412826][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9582'. [ 1227.454472][ T9567] lowmem_reserve[]: 0 0 0 0 0 [ 1227.473011][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9582'. [ 1227.485612][ T9567] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1227.568529][ T9567] lowmem_reserve[]: 0 0 0 0 0 [ 1227.591808][ T9567] Node 1 Normal free:3936788kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1227.627042][ T9567] lowmem_reserve[]: 0 0 0 0 0 [ 1227.636706][ T9567] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1227.655585][ T9567] Node 0 DMA32: 261*4kB (ME) 497*8kB (UME) 402*16kB (M) 495*32kB (UM) 158*64kB (UM) 508*128kB (UME) 470*256kB (UME) 218*512kB (UM) 75*1024kB (UME) 9*2048kB (UME) 160*4096kB (UM) = 1084956kB [ 1227.675761][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9584'. [ 1227.705987][ T9590] netlink: 'syz.8.9585': attribute type 2 has an invalid length. [ 1227.715704][ T9590] netlink: 'syz.8.9585': attribute type 2 has an invalid length. [ 1227.717135][ T9567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1227.746943][ T9567] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3936840kB [ 1227.764621][ T9567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.775434][ T9567] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1227.808031][ T9567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.823425][ T9567] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1227.833083][ T9567] 44433 total pagecache pages [ 1227.839843][ T9567] 0 pages in swap cache [ 1227.845404][ T9567] Free swap = 124996kB [ 1227.849635][ T9567] Total swap = 124996kB [ 1227.855358][ T9567] 2097051 pages RAM [ 1227.859275][ T9567] 0 pages HighMem/MovableOnly [ 1227.867601][ T9567] 428198 pages reserved [ 1227.874639][ T9567] 0 pages cma reserved [ 1227.921545][ T9594] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1227.972430][ T9594] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1228.085309][ T9599] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 1228.085329][ T9599] sctp: [Deprecated]: syz.2.9589 (pid 9599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1228.085329][ T9599] Use struct sctp_sack_info instead [ 1228.820802][ T5613] Bluetooth: hci2: command tx timeout [ 1229.608937][T28771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1229.626397][T28771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1229.636657][T28771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1229.645726][T28771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1229.653742][T28771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1229.722252][ T9670] bond1: entered allmulticast mode [ 1229.763864][ T9670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1230.069802][ T9695] tipc: Failed to remove unknown binding: 66,0,0/0:1341943323/1341943324 [ 1230.097571][ T9695] tipc: Failed to remove unknown binding: 66,0,0/0:1341943323/1341943324 [ 1230.696995][ T9724] ip6erspan0: entered allmulticast mode [ 1230.875312][ T9673] lo speed is unknown, defaulting to 1000 [ 1231.208649][ T7734] IPVS: starting estimator thread 0... [ 1231.330346][ T9755] IPVS: using max 30 ests per chain, 72000 per kthread [ 1231.403384][ T9763] netlink: 'syz.8.9626': attribute type 1 has an invalid length. [ 1231.476225][ T9769] __nla_validate_parse: 4 callbacks suppressed [ 1231.476246][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9626'. [ 1231.617051][ T9763] bond1: entered promiscuous mode [ 1231.624622][ T9763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1231.702488][ T5613] Bluetooth: hci5: command tx timeout [ 1231.709830][ T9772] vlan2: entered allmulticast mode [ 1231.709854][ T9772] bond1: entered allmulticast mode [ 1231.773143][ T9773] bond1: (slave bridge1): making interface the new active one [ 1231.816211][ T9773] bridge1: entered promiscuous mode [ 1231.844852][ T9773] bridge1: entered allmulticast mode [ 1231.891943][ T9773] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1231.984409][ T9789] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1232.475753][ T9808] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9636'. [ 1232.845338][ T9821] bridge0: port 3(ipvlan2) entered blocking state [ 1232.853415][ T9821] bridge0: port 3(ipvlan2) entered disabled state [ 1232.867949][ T9821] ipvlan2: entered allmulticast mode [ 1232.873920][ T9821] bridge0: entered allmulticast mode [ 1232.882633][ T9821] ipvlan2: left allmulticast mode [ 1232.887703][ T9821] bridge0: left allmulticast mode [ 1232.929699][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.122967][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.130498][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.144645][ T9673] bridge_slave_0: entered allmulticast mode [ 1233.164734][ T9673] bridge_slave_0: entered promiscuous mode [ 1233.192815][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.215246][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.255376][ T9673] bridge_slave_1: entered allmulticast mode [ 1233.275484][ T9673] bridge_slave_1: entered promiscuous mode [ 1233.323768][ T9841] netlink: 'syz.8.9642': attribute type 12 has an invalid length. [ 1233.349120][ T9841] netlink: 'syz.8.9642': attribute type 29 has an invalid length. [ 1233.378411][ T9841] netlink: 'syz.8.9642': attribute type 2 has an invalid length. [ 1233.424714][ T9841] netlink: 260 bytes leftover after parsing attributes in process `syz.8.9642'. [ 1233.499715][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.526913][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.650047][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9650'. [ 1233.706739][ T9673] team0: Port device team_slave_0 added [ 1233.718493][ T9673] team0: Port device team_slave_1 added [ 1233.719797][ T9873] netlink: 'syz.8.9650': attribute type 1 has an invalid length. [ 1233.766606][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.774537][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.781285][ T5613] Bluetooth: hci5: command tx timeout [ 1233.833244][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.885277][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.893226][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.926997][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.020489][ T9673] hsr_slave_0: entered promiscuous mode [ 1234.028041][ T9673] hsr_slave_1: entered promiscuous mode [ 1234.036362][ T9673] debugfs: 'hsr0' already exists in 'hsr' [ 1234.042929][ T9673] Cannot create hsr debugfs directory [ 1235.861605][ T5613] Bluetooth: hci5: command tx timeout [ 1236.440077][ T9854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.453161][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9649'. [ 1236.532968][ T9673] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1236.633500][ T9673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1236.669385][ T9673] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1236.716675][ T9673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1236.735718][ T9889] netlink: 112 bytes leftover after parsing attributes in process `syz.7.9654'. [ 1236.739734][ T9884] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1236.767444][ T9890] netlink: 112 bytes leftover after parsing attributes in process `syz.7.9654'. [ 1236.780583][ T9673] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1236.804709][ T9673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1236.819639][ T9673] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1236.846998][ T9673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1236.937067][ T9890] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1237.228618][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9660'. [ 1237.262615][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9660'. [ 1237.300027][ T9914] netlink: 'syz.6.9662': attribute type 21 has an invalid length. [ 1237.339409][ T9914] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9662'. [ 1237.397354][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.428967][ T9914] netlink: 'syz.6.9662': attribute type 5 has an invalid length. [ 1237.467455][ T9914] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9662'. [ 1237.590147][ T9916] bond2 (unregistering): Released all slaves [ 1237.699527][ T9922] erspan1: entered allmulticast mode [ 1237.796157][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.812964][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9667'. [ 1237.828373][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.835655][ T8759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.847902][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9668'. [ 1237.870039][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.877282][ T8759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.942482][ T5613] Bluetooth: hci5: command tx timeout [ 1237.955912][ T9935] ip_tables: iptables: counters copy to user failed while replacing table [ 1237.980537][ T9934] ip_tables: iptables: counters copy to user failed while replacing table [ 1237.999509][ T9673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1238.013208][ T9673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1238.529617][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9676'. [ 1238.868584][ T9983] ªªªªª»: renamed from dummy0 (while UP) [ 1239.170584][ T9994] netlink: 'syz.8.9686': attribute type 11 has an invalid length. [ 1239.189842][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9686'. [ 1239.311122][T22935] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.325319][T10004] netlink: 'syz.6.9689': attribute type 2 has an invalid length. [ 1239.335177][T22935] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.382530][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.421268][T22935] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.450971][T22935] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.553141][T10016] netlink: 'syz.6.9691': attribute type 3 has an invalid length. [ 1239.561791][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.578134][T10016] netlink: 'syz.6.9691': attribute type 1 has an invalid length. [ 1239.606744][T10016] NCSI netlink: No device for ifindex 813332851 [ 1239.933280][T10035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1240.292105][ T9673] veth0_vlan: entered promiscuous mode [ 1240.335053][ T9673] veth1_vlan: entered promiscuous mode [ 1240.373235][ T9673] veth0_macvtap: entered promiscuous mode [ 1240.404667][ T9673] veth1_macvtap: entered promiscuous mode [ 1240.437195][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.475262][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.551738][T22934] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.693395][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.747614][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.760686][T10068] netlink: 'syz.8.9705': attribute type 1 has an invalid length. [ 1240.921241][T10068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1240.989743][T10074] netlink: 'syz.2.9706': attribute type 8 has an invalid length. [ 1241.001613][T22933] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.036912][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.056678][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.217976][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.242472][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.323752][T10087] netlink: 'syz.7.9711': attribute type 6 has an invalid length. [ 1241.345679][T10087] netlink: 'syz.7.9711': attribute type 6 has an invalid length. [ 1241.908332][T10115] veth3: entered allmulticast mode [ 1241.914149][T10116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1242.265549][T10131] __nla_validate_parse: 7 callbacks suppressed [ 1242.265570][T10131] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9726'. [ 1242.291984][T10130] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9726'. [ 1242.301686][T10130] openvswitch: netlink: Message has 4 unknown bytes. [ 1242.308835][T10131] openvswitch: netlink: Message has 4 unknown bytes. [ 1242.515268][T10143] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.9728'. [ 1242.526188][T10142] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1242.559305][T10146] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.9728'. [ 1242.937765][T10170] validate_nla: 1 callbacks suppressed [ 1242.937786][T10170] netlink: 'syz.8.9737': attribute type 10 has an invalid length. [ 1242.965496][T10170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.988320][T10170] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1243.333442][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9741'. [ 1243.344330][T10189] x_tables: duplicate underflow at hook 1 [ 1244.415259][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9752'. [ 1244.448933][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9752'. [ 1245.150095][T10260] netlink: 'syz.2.9757': attribute type 64 has an invalid length. [ 1245.179382][T10260] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9757'. [ 1245.657398][T10276] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9763'. [ 1246.107139][T10291] netlink: 'syz.9.9768': attribute type 2 has an invalid length. [ 1246.643386][T10317] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9776'. [ 1246.720011][T10318] netlink: 'syz.9.9774': attribute type 3 has an invalid length. [ 1247.478355][T10337] __nla_validate_parse: 2 callbacks suppressed [ 1247.478378][T10337] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9781'. [ 1247.662002][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9784'. [ 1248.895363][T10396] netlink: 'syz.2.9797': attribute type 11 has an invalid length. [ 1248.909537][T10396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9797'. [ 1249.436839][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9804'. [ 1249.722935][T10427] bridge0: port 3(ipvlan2) entered blocking state [ 1249.729725][T10427] bridge0: port 3(ipvlan2) entered disabled state [ 1249.738478][T10427] ipvlan2: entered allmulticast mode [ 1249.744223][T10427] bridge0: entered allmulticast mode [ 1249.762989][T10427] ipvlan2: left allmulticast mode [ 1249.775443][T10427] bridge0: left allmulticast mode [ 1249.992006][T10435] netlink: 'syz.8.9812': attribute type 25 has an invalid length. [ 1250.587883][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9817'. [ 1250.731324][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1250.845544][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9821'. [ 1250.865438][T10466] ip6gre1: entered allmulticast mode [ 1251.004575][T10473] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1252.127578][T10533] netlink: 'syz.2.9839': attribute type 2 has an invalid length. [ 1252.138467][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9838'. [ 1252.147276][T10533] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.9839'. [ 1252.172188][T10529] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9838'. [ 1252.301447][T10538] netlink: 'syz.9.9840': attribute type 2 has an invalid length. [ 1252.366836][T10544] netlink: 'syz.2.9841': attribute type 1 has an invalid length. [ 1252.708127][T10556] __nla_validate_parse: 2 callbacks suppressed [ 1252.708148][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9845'. [ 1252.736504][T10559] vlan2: entered allmulticast mode [ 1252.746599][T10559] bond0: entered allmulticast mode [ 1252.756027][T10559] bond_slave_0: entered allmulticast mode [ 1252.764883][T10559] bond_slave_1: entered allmulticast mode [ 1253.239964][T10587] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9857'. [ 1253.299756][T10597] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.349453][T10590] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.387909][T10597] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.422576][T10590] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.447974][T10597] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.462018][T10590] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.479756][T10597] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.499932][T10590] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9856'. [ 1253.999201][T10635] netlink: 'syz.2.9870': attribute type 1 has an invalid length. [ 1254.009979][T10635] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 1254.298844][T10648] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1254.416385][T10652] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1255.014824][T10701] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1255.130830][T10701] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1255.318303][T10675] bond3: option fail_over_mac: invalid value (16) [ 1255.438127][T10675] bond3 (unregistering): Released all slaves [ 1255.645912][T10721] veth1_macvtap: left promiscuous mode [ 1256.040058][T28771] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1256.057892][T28771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1256.071982][T28771] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1256.084241][T10747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1256.091571][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 1256.098873][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 1256.115249][T28771] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1256.127806][T28771] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1256.542268][T10744] lo speed is unknown, defaulting to 1000 [ 1256.788451][T10744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.796232][T10744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.803618][T10744] bridge_slave_0: entered allmulticast mode [ 1256.811043][T10744] bridge_slave_0: entered promiscuous mode [ 1256.826147][T10744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.833623][T10744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.841058][T10744] bridge_slave_1: entered allmulticast mode [ 1256.848467][T10744] bridge_slave_1: entered promiscuous mode [ 1256.881092][T10744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.895795][T10744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.931611][T10744] team0: Port device team_slave_0 added [ 1256.939928][T10744] team0: Port device team_slave_1 added [ 1256.967281][T10744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.974381][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.001824][T10744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.015010][T10744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.023834][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.050343][T10744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.100333][T10744] hsr_slave_0: entered promiscuous mode [ 1257.107616][T10744] hsr_slave_1: entered promiscuous mode [ 1257.114698][T10744] debugfs: 'hsr0' already exists in 'hsr' [ 1257.120720][T10744] Cannot create hsr debugfs directory [ 1257.327021][T10744] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.343453][T10744] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.355239][T10744] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1257.448512][T10744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.469250][T10744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.481541][T10744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1257.571729][T10744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.586620][T10744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.598169][T10744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1257.683797][T10744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.694596][T10744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.706849][T10744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1258.190498][ T5613] Bluetooth: hci6: command tx timeout [ 1258.826892][T10728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1258.885570][T10744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1258.977481][T10744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1259.041613][T10744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1259.083311][T10744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1259.109678][T10744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1259.162338][T10744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1259.191246][T10784] __nla_validate_parse: 150 callbacks suppressed [ 1259.191268][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9896'. [ 1259.239615][T10744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1259.267974][T10744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1259.281376][T10794] netlink: 'syz.8.9900': attribute type 21 has an invalid length. [ 1259.494552][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9902'. [ 1259.639293][T10744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.703866][T10744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.741220][T22933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.748446][T22933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.788953][T22933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.794159][T10822] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9907'. [ 1259.796184][T22933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.886070][T10822] netlink: 'syz.7.9907': attribute type 3 has an invalid length. [ 1260.068527][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9910'. [ 1260.183971][T10835] syzkaller1: entered promiscuous mode [ 1260.208805][T10835] syzkaller1: entered allmulticast mode [ 1260.239269][T10827] netlink: 'syz.8.9910': attribute type 1 has an invalid length. [ 1260.260374][ T5613] Bluetooth: hci6: command tx timeout [ 1260.600605][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9916'. [ 1261.050150][T10889] Bluetooth: MGMT ver 1.23 [ 1261.178768][T10744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.299759][T10744] veth0_vlan: entered promiscuous mode [ 1261.348297][T10744] veth1_vlan: entered promiscuous mode [ 1261.462412][T10744] veth0_macvtap: entered promiscuous mode [ 1261.489862][T10744] veth1_macvtap: entered promiscuous mode [ 1261.574504][T10744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.595667][T10744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.632247][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.654981][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.742509][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.800998][T10703] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.983088][T10912] infiniband syz1: set active [ 1261.987827][T10912] infiniband syz1: added bridge_slave_0 [ 1261.996981][T10912] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1261.999951][T10912] infiniband syz1: Couldn't open port 1 [ 1262.015570][T10912] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1262.032952][T10912] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1262.052718][T10912] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1262.098280][T10912] RDS/IB: syz1: added [ 1262.105221][T10912] smc: adding ib device syz1 with port count 1 [ 1262.113411][T10912] smc: ib device syz1 port 1 has no pnetid [ 1262.340899][ T5613] Bluetooth: hci6: command tx timeout [ 1263.549230][T10857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1263.563718][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9917'. [ 1263.727057][T22933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.773951][T22933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.879915][T10703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.907080][T10703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.146204][T10936] x_tables: duplicate underflow at hook 1 [ 1264.264427][T10934] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9932'. [ 1264.441334][ T5613] Bluetooth: hci6: command tx timeout [ 1264.529912][ T7739] IPVS: starting estimator thread 0... [ 1264.549296][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9934'. [ 1264.643149][T10945] IPVS: using max 26 ests per chain, 62400 per kthread [ 1264.965953][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9938'. [ 1265.837419][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9948'. [ 1266.404075][T11021] gretap0: entered promiscuous mode [ 1266.437331][T11021] vlan3: entered promiscuous mode [ 1266.739491][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9958'. [ 1266.807198][T11030] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1267.181511][T11044] netlink: 'syz.8.9960': attribute type 1 has an invalid length. [ 1267.205672][T11044] netlink: 244 bytes leftover after parsing attributes in process `syz.8.9960'. [ 1267.580117][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9961'. [ 1267.583045][T11052] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9962'. [ 1268.223940][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9970'. [ 1268.268137][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9970'. [ 1268.300689][T11083] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 1268.325367][T11083] tunl0: entered promiscuous mode [ 1268.364066][T11083] netlink: 'syz.2.9972': attribute type 4 has an invalid length. [ 1268.567807][T11096] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1268.684726][T11096] netlink: 'syz.7.9977': attribute type 32 has an invalid length. [ 1268.923771][T11103] netlink: 'syz.9.9979': attribute type 4 has an invalid length. [ 1269.465915][T11129] __nla_validate_parse: 8 callbacks suppressed [ 1269.465936][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9987'. [ 1269.484079][T11133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.745766][T11146] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1269.778192][T11146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.826255][T11145] netlink: 'syz.7.9992': attribute type 2 has an invalid length. [ 1269.852788][T11145] netlink: 'syz.7.9992': attribute type 8 has an invalid length. [ 1269.861621][T11145] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9992'. [ 1270.022978][T11151] veth0: entered promiscuous mode [ 1270.050027][T11144] veth0: left promiscuous mode [ 1270.222974][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9998'. [ 1270.339925][T11178] netlink: 'syz.2.9997': attribute type 3 has an invalid length. [ 1270.350747][T11178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9997'. [ 1270.363278][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9997'. [ 1270.671493][T11150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1271.026027][T11191] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1271.065598][T11189] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1274.614025][T11208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1274.806256][T11212] netlink: 'syz.9.10006': attribute type 1 has an invalid length. [ 1274.846933][T11212] netlink: 224 bytes leftover after parsing attributes in process `syz.9.10006'. [ 1275.188588][T11234] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1275.197191][T11234] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1275.351927][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10015'. [ 1275.387550][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10015'. [ 1275.412322][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10015'. [ 1275.422458][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10015'. [ 1275.454613][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10015'. [ 1275.485296][T11251] netlink: 'syz.2.10018': attribute type 4 has an invalid length. [ 1275.533165][T11251] bridge0: port 3(dummy0) entered blocking state [ 1275.563288][T11251] bridge0: port 3(dummy0) entered disabled state [ 1275.587175][T11251] dummy0: entered allmulticast mode [ 1275.627754][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10020'. [ 1275.629265][T11251] dummy0: entered promiscuous mode [ 1275.668584][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10020'. [ 1275.675861][T11251] bridge0: port 3(dummy0) entered blocking state [ 1275.684263][T11251] bridge0: port 3(dummy0) entered forwarding state [ 1275.702510][T11258] vlan0: entered promiscuous mode [ 1275.726162][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10018'. [ 1276.255839][T11284] nbd: must specify at least one socket [ 1276.313717][T11292] IPv6: NLM_F_CREATE should be specified when creating new route [ 1276.341789][T11292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1276.346656][T11291] netlink: 'syz.9.10032': attribute type 1 has an invalid length. [ 1276.349110][T11292] IPv6: NLM_F_CREATE should be set when creating new route [ 1276.364195][T11292] IPv6: NLM_F_CREATE should be set when creating new route [ 1276.686856][T11289] veth5: entered allmulticast mode [ 1276.697107][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10035'. [ 1276.862034][T11310] netlink: 'syz.8.10036': attribute type 11 has an invalid length. [ 1277.298828][T11335] netlink: 'syz.7.10043': attribute type 1 has an invalid length. [ 1277.431726][T11343] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1277.614601][T11335] syzkaller0: entered promiscuous mode [ 1277.645823][T11335] syzkaller0: entered allmulticast mode [ 1277.752039][T11339] bridge4: entered promiscuous mode [ 1277.774430][T11339] bond7: (slave bridge4): making interface the new active one [ 1277.829001][T11339] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1277.903934][T11335] bridge5: entered promiscuous mode [ 1277.922340][T11371] netlink: 'syz.3.10054': attribute type 2 has an invalid length. [ 1277.930932][T11335] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 1278.099724][T11371] : entered promiscuous mode [ 1279.142614][T11433] Unsupported xt match [ 1279.142636][T11433] unable to load match [ 1279.268254][T11433] bond3: (slave bond_slave_1): Device is not our slave [ 1279.276042][T11433] bond3: option active_slave: invalid value (bond_slave_1) [ 1279.295740][T11433] bond3 (unregistering): Released all slaves [ 1279.301863][T11436] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1279.459047][T11445] vlan2: entered allmulticast mode [ 1279.495888][T11445] bond0: entered allmulticast mode [ 1279.507071][T11445] bond_slave_0: entered allmulticast mode [ 1279.513601][T11445] bond_slave_1: entered allmulticast mode [ 1279.812374][T11453] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1279.833831][T11454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.905915][T11457] __nla_validate_parse: 14 callbacks suppressed [ 1279.905974][T11457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1280.598297][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10087'. [ 1280.620467][T11481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10087'. [ 1280.631621][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10087'. [ 1280.770863][ T8764] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.841233][T10695] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.858446][T11497] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 1280.861813][T10695] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.893099][T10695] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.092529][T11503] sch_fq: defrate 0 ignored. [ 1281.362416][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10098'. [ 1281.827504][T11529] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1281.834084][T11529] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1281.845219][T11529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10102'. [ 1281.898523][T11528] macvtap2: entered promiscuous mode [ 1281.908971][T11528] macvtap2: entered allmulticast mode [ 1281.995991][T11532] veth1_to_bond: entered allmulticast mode [ 1282.008930][T11532] veth1_to_bond: left allmulticast mode [ 1282.181016][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10105'. [ 1282.521456][T11552] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1282.781335][T11563] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1282.789051][T11563] syzkaller1: group set to 0 [ 1282.794981][T11564] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1282.802096][T11564] syzkaller1: group set to 0 [ 1283.006909][T11567] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10112'. [ 1283.056646][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10114'. [ 1283.799884][T11605] sctp: [Deprecated]: syz.9.10120 (pid 11605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1283.799884][T11605] Use struct sctp_sack_info instead [ 1284.608218][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10128'. [ 1284.996927][T11634] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1285.904511][T11651] __nla_validate_parse: 1 callbacks suppressed [ 1285.904550][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10133'. [ 1289.803505][T11664] netlink: 'syz.8.10138': attribute type 4 has an invalid length. [ 1289.844996][T11664] netlink: 152 bytes leftover after parsing attributes in process `syz.8.10138'. [ 1289.897254][T11664] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1291.362386][T11722] tipc: Started in network mode [ 1291.417320][T11722] tipc: Node identity , cluster identity 4711 [ 1291.493235][T11722] tipc: Failed to set node id, please configure manually [ 1291.580968][T11722] tipc: Enabling of bearer rejected, failed to enable media [ 1291.665290][T11735] sctp: [Deprecated]: syz.3.10156 (pid 11735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1291.665290][T11735] Use struct sctp_sack_info instead [ 1291.709983][T11735] 8021q: VLANs not supported on gre0 [ 1292.629663][T11778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10168'. [ 1293.850962][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10177'. [ 1294.187395][T11828] netlink: 'syz.7.10181': attribute type 5 has an invalid length. [ 1294.538811][T11841] xt_hashlimit: size too large, truncated to 1048576 [ 1294.644939][ T5613] Bluetooth: hci2: link tx timeout [ 1294.651807][ T5613] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1294.664949][ T5613] Bluetooth: hci2: link tx timeout [ 1294.670128][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1294.813229][T11856] xt_cgroup: invalid path, errno=-2 [ 1295.751771][T11880] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1296.146872][T11896] bond3: (slave bond_slave_1): Device is not our slave [ 1296.147331][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10199'. [ 1296.154847][T11896] bond3: option active_slave: invalid value (bond_slave_1) [ 1296.497995][T11896] bond3 (unregistering): Released all slaves [ 1296.753725][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1296.776850][T11925] netlink: 332 bytes leftover after parsing attributes in process `syz.7.10207'. [ 1296.810910][T11920] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10199'. [ 1296.827000][T11918] syzkaller0: entered promiscuous mode [ 1296.868171][T11918] syzkaller0: entered allmulticast mode [ 1297.106039][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10209'. [ 1297.341054][T11936] syzkaller0: entered promiscuous mode [ 1297.365142][T11936] syzkaller0: entered allmulticast mode [ 1297.709133][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10215'. [ 1298.176227][T11975] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10219'. [ 1298.259607][T11980] x_tables: duplicate underflow at hook 1 [ 1298.489808][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10222'. [ 1298.592931][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10223'. [ 1298.822812][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1298.856279][T12010] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10227'. [ 1299.233825][T12022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10229'. [ 1299.354482][T11987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.371352][T11987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.445479][T12028] xt_hashlimit: size too large, truncated to 1048576 [ 1299.668936][T12029] vlan3: entered promiscuous mode [ 1299.675212][T12029] geneve1: entered promiscuous mode [ 1299.685061][T12029] vlan3: entered allmulticast mode [ 1299.694797][T12029] geneve1: entered allmulticast mode [ 1299.958483][T11987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.975168][T11987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.359943][T11987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.416011][T11987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.838510][T12065] geneve2: entered promiscuous mode [ 1301.138632][T11987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.173187][T11987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.182356][T12083] netlink: 'syz.3.10238': attribute type 10 has an invalid length. [ 1301.319984][T12083] veth0_to_bond: entered allmulticast mode [ 1302.202445][ T8764] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.235075][ T8764] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.300449][ T8764] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.335626][ T8764] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.422792][T22942] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.453344][T22942] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.493004][T22942] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.525533][T22942] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.745063][T12126] syzkaller1: entered promiscuous mode [ 1302.770757][T12126] syzkaller1: entered allmulticast mode [ 1303.291981][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10251'. [ 1304.071385][T12161] netlink: 'syz.7.10258': attribute type 4 has an invalid length. [ 1304.127893][T12161] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10258'. [ 1304.204876][T12163] netlink: 'syz.7.10258': attribute type 4 has an invalid length. [ 1304.211717][T12161] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1304.229695][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10262'. [ 1304.229735][T12171] netlink: 'syz.8.10262': attribute type 10 has an invalid length. [ 1304.229754][T12171] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10262'. [ 1304.240112][T12163] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10258'. [ 1304.333964][T12171] geneve2: entered promiscuous mode [ 1304.347843][T12171] geneve2: entered allmulticast mode [ 1304.349150][T12165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10260'. [ 1304.417217][T12163] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1304.979830][T12194] netlink: 'syz.7.10266': attribute type 1 has an invalid length. [ 1305.007153][T12194] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10266'. [ 1305.034558][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10266'. [ 1305.554833][T12211] netlink: 'syz.7.10270': attribute type 13 has an invalid length. [ 1305.643681][T12211] gretap0: refused to change device tx_queue_len [ 1305.663653][T12218] netlink: 'syz.2.10269': attribute type 10 has an invalid length. [ 1305.674471][T12211] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1305.758732][T12222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.213948][T12240] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10276'. [ 1306.306994][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10278'. [ 1308.548499][T12320] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1308.694648][T12329] netlink: 'syz.8.10297': attribute type 1 has an invalid length. [ 1308.726873][T12328] __nla_validate_parse: 3 callbacks suppressed [ 1308.726894][T12328] netlink: 5 bytes leftover after parsing attributes in process `syz.7.10296'. [ 1308.785988][T12329] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10297'. [ 1308.968652][T12334] openvswitch: netlink: Unknown nsh attribute 0 [ 1309.009451][T12335] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10298'. [ 1309.052731][T12335] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10298'. [ 1309.138286][T12335] netlink: 'syz.9.10298': attribute type 32 has an invalid length. [ 1309.211959][T12335] netlink: 500 bytes leftover after parsing attributes in process `syz.9.10298'. [ 1309.273074][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10303'. [ 1309.289499][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10298'. [ 1309.577507][T12354] netlink: 'syz.2.10304': attribute type 83 has an invalid length. [ 1309.656395][T12354] xt_TCPMSS: Only works on TCP SYN packets [ 1310.254818][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10310'. [ 1310.319266][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10310'. [ 1310.398974][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10310'. [ 1311.067734][T12413] xt_hashlimit: overflow, try lower: 3/0 [ 1312.260778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.661148][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1312.671811][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.284999][T12477] xt_limit: Overflow, try lower: 271964/0 [ 1313.300451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.381782][ T1606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.701256][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.875134][T12491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1314.043240][T12510] __nla_validate_parse: 3 callbacks suppressed [ 1314.043292][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10342'. [ 1314.093343][T12510] netlink: 13 bytes leftover after parsing attributes in process `syz.2.10342'. [ 1314.285735][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1314.340784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.344657][T12510] veth5: entered promiscuous mode [ 1314.369672][T12521] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10346'. [ 1314.426657][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.458017][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10346'. [ 1314.510114][T12521] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10346'. [ 1314.744457][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.921999][T12540] netlink: 156 bytes leftover after parsing attributes in process `syz.8.10348'. [ 1314.961981][T12540] netlink: 156 bytes leftover after parsing attributes in process `syz.8.10348'. [ 1315.200839][T12550] netlink: 48 bytes leftover after parsing attributes in process `syz.9.10351'. [ 1315.380452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.429180][T12566] netlink: 'syz.8.10354': attribute type 1 has an invalid length. [ 1315.448313][T12565] netlink: 'syz.7.10355': attribute type 10 has an invalid length. [ 1315.465499][T12565] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10355'. [ 1315.614096][T12566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1315.715268][T12565] team0: Port device geneve1 added [ 1315.802753][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.979613][T12573] bond3: (slave veth0_to_bond): making interface the new active one [ 1316.032946][T12573] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1316.169853][T12590] netlink: 'syz.9.10361': attribute type 58 has an invalid length. [ 1316.594190][T12594] bond9: option mode: invalid value (10) [ 1316.647350][T12594] bond9 (unregistering): Released all slaves [ 1317.460669][ C1] net_ratelimit: 2 callbacks suppressed [ 1317.460690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.479595][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.506659][T12631] openvswitch: netlink: Key 4 has unexpected len 429 expected 12 [ 1317.606898][T12634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1317.944285][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.466547][T12665] netlink: 'syz.7.10383': attribute type 1 has an invalid length. [ 1318.500302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.558796][T12668] bond2: option xmit_hash_policy: invalid value (64) [ 1318.578759][T12668] bond2 (unregistering): Released all slaves [ 1318.606715][T12671] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1318.902687][T12673] team0: Device ipvlan0 failed to register rx_handler [ 1319.028111][T12683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1319.039433][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.102923][T12683] batman_adv: batadv0: Adding interface: gretap1 [ 1319.137788][T12683] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.175325][T12683] batman_adv: batadv0: Interface activated: gretap1 [ 1319.236101][T12691] __nla_validate_parse: 8 callbacks suppressed [ 1319.236123][T12691] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10389'. [ 1319.513874][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10393'. [ 1319.541215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.830668][T12714] netlink: 'syz.9.10397': attribute type 15 has an invalid length. [ 1319.903541][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10397'. [ 1320.131619][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.370081][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10401'. [ 1320.446207][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10402'. [ 1320.501205][ T1606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.761996][T12742] netlink: 188 bytes leftover after parsing attributes in process `syz.7.10405'. [ 1320.958187][T12747] netlink: 'syz.2.10409': attribute type 1 has an invalid length. [ 1320.997863][T12747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10409'. [ 1321.013514][T12753] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10410'. [ 1321.099144][T12755] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10410'. [ 1321.153775][T12757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10410'. [ 1321.688838][T12780] netlink: 'syz.8.10418': attribute type 12 has an invalid length. [ 1321.728608][T12777] netlink: 'syz.8.10418': attribute type 32 has an invalid length. [ 1321.964772][T12777] bond4: option coupled_control: invalid value (52) [ 1321.994906][T12777] bond4 (unregistering): Released all slaves [ 1322.078722][T12789] bond2: entered allmulticast mode [ 1322.084760][T12789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1322.126206][T12792] xt_HMARK: proto mask must be zero with L3 mode [ 1322.518274][T12810] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1322.577756][T12810] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1322.611385][T12810] veth1_to_bridge: entered allmulticast mode [ 1322.648121][T12810] veth1_to_bridge: entered promiscuous mode [ 1322.660521][ C1] net_ratelimit: 6 callbacks suppressed [ 1322.660541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.231599][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.512594][T12847] veth0: entered promiscuous mode [ 1323.532413][T12846] batadv_slave_1: entered promiscuous mode [ 1323.541492][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.573263][T12845] batadv_slave_1: left promiscuous mode [ 1323.591063][T12845] veth0: left promiscuous mode [ 1323.700536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.733868][T12858] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1324.139937][T12878] xt_hashlimit: size too large, truncated to 1048576 [ 1324.203712][T12881] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1324.264834][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.316567][T12881] 0ªX¹¦Dö»: entered allmulticast mode [ 1324.527184][T12891] pimreg: entered allmulticast mode [ 1324.629187][T12903] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1324.740319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.897746][T12908] netlink: 'syz.8.10457': attribute type 4 has an invalid length. [ 1324.933443][T12908] __nla_validate_parse: 12 callbacks suppressed [ 1324.933466][T12908] netlink: 240 bytes leftover after parsing attributes in process `syz.8.10457'. [ 1325.179092][T12911] bond4: option mode: invalid value (10) [ 1325.235047][T12911] bond4 (unregistering): Released all slaves [ 1325.297085][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10460'. [ 1325.311266][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.658498][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10464'. [ 1325.668470][T12933] xt_nfacct: accounting object `' does not exist [ 1325.763309][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10466'. [ 1325.780371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.795652][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10468'. [ 1325.817965][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10466'. [ 1325.868138][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10466'. [ 1325.889387][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10468'. [ 1325.997506][T12949] netlink: 'syz.7.10470': attribute type 1 has an invalid length. [ 1326.198467][T12956] netlink: 'syz.3.10471': attribute type 24 has an invalid length. [ 1326.336814][T28771] block nbd2: Receive control failed (result -32) [ 1326.352259][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.536028][T12964] netlink: 'syz.2.10474': attribute type 11 has an invalid length. [ 1326.577408][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1326.588506][ T1606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.646308][T12970] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10476'. [ 1326.672862][T12972] netlink: 'syz.7.10479': attribute type 1 has an invalid length. [ 1326.741047][T22934] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.747383][T12964] netlink: 'syz.2.10474': attribute type 11 has an invalid length. [ 1326.764338][T12972] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1326.822466][ T8764] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.856861][T12977] netlink: 'syz.8.10478': attribute type 1 has an invalid length. [ 1326.990599][T22934] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.016285][T22934] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.855774][T13014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.863245][ C1] net_ratelimit: 2 callbacks suppressed [ 1327.863263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.424681][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.464533][T13035] veth0: entered promiscuous mode [ 1328.539476][T13034] veth0: left promiscuous mode [ 1328.874162][T13037] team0: Port device syz_tun added [ 1328.900293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.986638][T13047] netlink: 'syz.7.10502': attribute type 1 has an invalid length. [ 1329.239590][T13068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.462793][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.625996][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.940707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.512291][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.606252][T13071] __nla_validate_parse: 22 callbacks suppressed [ 1330.606274][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10510'. [ 1330.980393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.517736][T13148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1331.587009][T13150] netlink: 212 bytes leftover after parsing attributes in process `syz.8.10530'. [ 1331.735919][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10531'. [ 1331.995831][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10535'. [ 1332.497592][T13187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10541'. [ 1332.804295][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10546'. [ 1332.808928][T13205] netlink: 'syz.9.10545': attribute type 1 has an invalid length. [ 1332.833738][T13205] netlink: 'syz.9.10545': attribute type 1 has an invalid length. [ 1333.060449][ C1] net_ratelimit: 5 callbacks suppressed [ 1333.060469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.085345][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10551'. [ 1333.111493][T13216] xfrm1: entered promiscuous mode [ 1333.117726][T13216] xfrm1: entered allmulticast mode [ 1333.140321][T28771] Bluetooth: hci4: command 0x0406 tx timeout [ 1333.553721][T13232] vlan3: entered promiscuous mode [ 1333.560540][T13232] bridge0: entered promiscuous mode [ 1333.626944][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.807967][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10558'. [ 1333.858004][T13243] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10560'. [ 1333.899517][T13243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10560'. [ 1334.100396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.674064][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.140346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.700949][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.709128][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.184469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.752230][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.220604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.260331][ C1] net_ratelimit: 1 callbacks suppressed [ 1338.260355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.741405][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.823457][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.301606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.864667][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.340351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.912648][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.380304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.780792][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.952451][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.460286][ C1] net_ratelimit: 2 callbacks suppressed [ 1343.460307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.032142][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.500400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.822628][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.062590][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.540487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.102944][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.580312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.143367][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.620354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.660507][ C1] net_ratelimit: 2 callbacks suppressed [ 1348.660527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.223887][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.700272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.273707][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.740341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.900923][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.302427][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.780476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.351115][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.820561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.621004][T28771] Bluetooth: hci5: command 0x0406 tx timeout [ 1353.860283][ C1] net_ratelimit: 1 callbacks suppressed [ 1353.860307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.940881][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.431907][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.464251][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.024600][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.511751][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.980921][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.060288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.552619][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.100270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.140499][ C1] net_ratelimit: 1 callbacks suppressed [ 1359.140521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.554096][T13301] netdevsim netdevsim7: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1359.581199][T13303] netlink: 'syz.8.10574': attribute type 1 has an invalid length. [ 1359.621911][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.813488][T13311] __nla_validate_parse: 5 callbacks suppressed [ 1359.813510][T13311] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10578'. [ 1360.020912][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.055371][T13317] vlan4: entered promiscuous mode [ 1360.066886][T13317] bridge0: entered promiscuous mode [ 1360.130653][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10582'. [ 1360.178407][T13324] netlink: 'syz.7.10582': attribute type 11 has an invalid length. [ 1360.186561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.323349][T13333] netlink: 'syz.2.10584': attribute type 2 has an invalid length. [ 1360.379638][T13334] netlink: 'syz.3.10586': attribute type 10 has an invalid length. [ 1360.541698][T13334] netlink: 'syz.3.10586': attribute type 58 has an invalid length. [ 1360.571330][T13334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10586'. [ 1360.588589][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10586'. [ 1360.666542][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10588'. [ 1360.671361][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.860010][ T8764] nci: nci_rsp_packet: unknown rsp opcode 0x303 [ 1360.970770][T13364] tun0: tun_chr_ioctl cmd 1074025675 [ 1360.980487][T13364] tun0: persist enabled [ 1361.220301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.379599][T13369] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1361.537476][T13349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1361.553408][T13374] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1361.589604][T13374] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1361.711111][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.889328][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1361.958219][T13382] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1362.044173][T13388] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1362.044173][T13388] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1362.069624][T13390] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10602'. [ 1362.114511][T13390] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1362.200024][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10602'. [ 1362.260530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.694081][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10611'. [ 1362.742339][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.945164][T13424] netlink: 'syz.9.10614': attribute type 9 has an invalid length. [ 1362.984455][T13429] netlink: 'syz.9.10614': attribute type 9 has an invalid length. [ 1363.040668][T13372] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1363.404190][T13434] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1364.340551][ C1] net_ratelimit: 3 callbacks suppressed [ 1364.340571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.518030][T13475] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1364.834910][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.380650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.866193][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.046057][T13527] __nla_validate_parse: 3 callbacks suppressed [ 1366.046077][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10648'. [ 1366.103804][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.212510][T13535] nbd: nbd0 already in use [ 1366.279504][T13537] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10651'. [ 1366.394039][T13538] netlink: 'syz.8.10653': attribute type 10 has an invalid length. [ 1366.414964][T13538] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10653'. [ 1366.420284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.495512][T13538] team0: Port device geneve1 added [ 1366.544056][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10657'. [ 1366.571119][T13548] netlink: 'syz.9.10656': attribute type 12 has an invalid length. [ 1366.590028][T13548] netlink: 'syz.9.10656': attribute type 29 has an invalid length. [ 1366.607646][T13548] netlink: 148 bytes leftover after parsing attributes in process `syz.9.10656'. [ 1366.619664][T13548] netlink: 51 bytes leftover after parsing attributes in process `syz.9.10656'. [ 1366.778629][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10658'. [ 1366.845101][T13558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.883736][T13558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.924066][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.092533][T13567] syz_tun: entered allmulticast mode [ 1367.168790][T13568] dvmrp8: entered allmulticast mode [ 1367.289523][T13568] syz_tun: left allmulticast mode [ 1367.685652][T13595] mac80211_hwsim hwsim91 wlan1: entered allmulticast mode [ 1367.727518][T13599] netlink: 'syz.7.10667': attribute type 13 has an invalid length. [ 1367.900060][T13608] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10671'. [ 1368.075120][T13598] bond10 (unregistering): Released all slaves [ 1368.276832][T13611] syzkaller0: entered promiscuous mode [ 1368.304235][T13611] syzkaller0: entered allmulticast mode [ 1368.753509][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10676'. [ 1369.146628][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10679'. [ 1369.540311][ C1] net_ratelimit: 9 callbacks suppressed [ 1369.540332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.829583][T13673] netlink: 'syz.7.10683': attribute type 21 has an invalid length. [ 1369.979943][T13681] Cannot find add_set index 0 as target [ 1370.032357][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.580240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.064868][ T7739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.199449][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10694'. [ 1371.630459][ T7739] IPVS: starting estimator thread 0... [ 1371.760728][T13741] IPVS: using max 28 ests per chain, 67200 per kthread [ 1371.994926][T13751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.005879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.026139][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.043904][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.106645][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.747949][T13786] pim6reg: entered allmulticast mode [ 1372.849804][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10710'. [ 1372.863670][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10710'. [ 1373.060262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.894810][T13748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1374.906250][T13761] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10699'. [ 1374.915921][T13761] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10699'. [ 1375.083253][ T7733] net_ratelimit: 3 callbacks suppressed [ 1375.083274][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.140729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.224386][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.330920][T13799] veth0: entered promiscuous mode [ 1375.417844][T13797] veth0: left promiscuous mode [ 1375.502640][ T29] audit: type=1800 audit(1786466002.314:19): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10715" name=9A57B9CCC00BBCA22395E41F9E9652AF665F0E1603FB85D4799D54D44C706FF8DF9BB805B182A1260B5936AE44F649B5E2FDCA240984DCD0033EC28AEAAA686608C5 dev="tmpfs" ino=1328 res=0 errno=0 [ 1376.180445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.262219][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.515622][T13840] netlink: 'syz.9.10727': attribute type 1 has an invalid length. [ 1376.558026][T13838] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1376.877413][T13847] veth7: entered allmulticast mode [ 1376.932123][T13847] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1377.021444][T13848] bond3: (slave veth0_to_bond): making interface the new active one [ 1377.063655][T13848] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1377.220508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.310192][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.539243][T13871] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10738'. [ 1377.590711][T13872] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10738'. [ 1377.627444][T13871] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10738'. [ 1377.666054][T13874] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10739'. [ 1377.691923][T13875] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10738'. [ 1377.946641][T13877] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10740'. [ 1378.147736][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.200303][T13888] netlink: 198796 bytes leftover after parsing attributes in process `syz.8.10744'. [ 1378.222308][T13888] netlink: 'syz.8.10744': attribute type 2 has an invalid length. [ 1378.260683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.298558][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10746'. [ 1378.451778][T13894] netlink: 'syz.3.10746': attribute type 1 has an invalid length. [ 1378.499275][T13894] netlink: 'syz.3.10746': attribute type 2 has an invalid length. [ 1378.555886][T13901] netlink: 'syz.9.10748': attribute type 2 has an invalid length. [ 1378.843594][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10754'. [ 1379.069688][T13922] netlink: 'syz.2.10758': attribute type 1 has an invalid length. [ 1379.219999][T13922] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1379.595053][T13951] syzkaller1: entered promiscuous mode [ 1379.657576][T13951] syzkaller1: entered allmulticast mode [ 1379.719756][T13958] netlink: 'syz.7.10765': attribute type 29 has an invalid length. [ 1379.721448][T13954] geneve2: entered promiscuous mode [ 1379.809596][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10766'. [ 1379.927105][T13959] veth0_macvtap: left promiscuous mode [ 1380.238152][T13978] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1380.340639][ C1] net_ratelimit: 3 callbacks suppressed [ 1380.340659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.503105][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.646466][T13991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1381.245932][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.378156][T14019] vlan2: entered promiscuous mode [ 1381.380848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.398822][T14019] geneve1: entered promiscuous mode [ 1381.423470][T14019] vlan2: entered allmulticast mode [ 1381.439478][T14019] geneve1: entered allmulticast mode [ 1381.555448][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.838293][T14033] bond10: entered promiscuous mode [ 1381.893525][T14038] macvlan2: entered promiscuous mode [ 1381.899782][T14038] macvlan2: entered allmulticast mode [ 1381.911334][T14038] bond10: (slave macvlan2): Opening slave failed [ 1382.043207][T14045] tipc: Failed to obtain node identity [ 1382.049532][T14045] tipc: Enabling of bearer rejected, failed to enable media [ 1382.267454][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.317681][ T8983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.366740][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.405867][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.715738][T14066] xt_l2tp: invalid flags combination: 0 [ 1382.976178][ T7736] hid-generic 0005:15C2:05DF.0005: unknown main item tag 0x0 [ 1383.031212][ T7736] hid-generic 0005:15C2:05DF.0005: unknown main item tag 0x0 [ 1383.114579][ T7736] hid-generic 0005:15C2:05DF.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 1383.324622][T14102] netlink: 'syz.3.10809': attribute type 11 has an invalid length. [ 1383.738345][T14115] __nla_validate_parse: 72 callbacks suppressed [ 1383.738366][T14115] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10814'. [ 1383.778178][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10815'. [ 1383.927421][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10816'. [ 1384.131654][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10819'. [ 1384.152176][T14129] tunl0: left promiscuous mode [ 1384.567824][T14137] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10822'. [ 1384.897167][T14129] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1384.936041][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1385.115303][T14129] veth0_to_team: entered promiscuous mode [ 1385.203294][T14129] veth5: left promiscuous mode [ 1385.289501][T14129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1385.311934][T14153] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10825'. [ 1385.461619][ T30] INFO: task syz.6.9707:10073 blocked for more than 143 seconds. [ 1385.462612][ T7733] net_ratelimit: 12 callbacks suppressed [ 1385.462628][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.489234][ T30] Not tainted syzkaller #0 [ 1385.518451][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1385.541615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.574729][T14153] 0·: renamed from hsr0 (while UP) [ 1385.586696][ T30] task:syz.6.9707 state:D stack:24488 pid:10073 tgid:10070 ppid:7422 task_flags:0x400140 flags:0x00080002 [ 1385.649016][ T30] Call Trace: [ 1385.652792][ T30] [ 1385.656109][ T30] __schedule+0x17d9/0x56c0 [ 1385.664356][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1385.685575][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1385.693868][ T30] ? __pfx___schedule+0x10/0x10 [ 1385.698918][ T30] ? schedule+0x90/0x2b0 [ 1385.706748][ T30] schedule+0x164/0x2b0 [ 1385.717474][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.721575][ T30] schedule_preempt_disabled+0x13/0x30 [ 1385.749025][ T30] __mutex_lock+0x7bf/0x1550 [ 1385.760541][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1385.774282][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1385.792018][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1385.803127][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1385.813721][ T30] ? genlmsg_put+0x137/0x2e0 [ 1385.823083][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1385.828987][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1385.835870][ T30] ? __nla_parse+0x40/0x60 [ 1385.844418][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1385.852002][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1385.858527][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1385.866246][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1385.873466][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 1385.878902][ T30] genl_rcv_msg+0x614/0x7a0 [ 1385.883907][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1385.889107][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1385.895659][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1385.902221][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1385.907053][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1385.913120][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1385.918546][ T30] ? down_read+0x2be/0x330 [ 1385.923636][ T30] genl_rcv+0x28/0x40 [ 1385.927697][ T30] netlink_unicast+0x7bb/0x940 [ 1385.932803][ T30] netlink_sendmsg+0x813/0xb40 [ 1385.937748][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1385.947142][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1385.953477][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1385.958862][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1385.964218][ T30] ____sys_sendmsg+0x54e/0x850 [ 1385.969054][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1385.975045][ T30] ? import_iovec+0x73/0xa0 [ 1385.979675][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1385.985008][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1385.990482][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1385.995868][ T30] ? futex_wait+0x2a2/0x390 [ 1386.000909][ T30] ? __fget_files+0x2a/0x420 [ 1386.005560][ T30] ? __fget_files+0x3a2/0x420 [ 1386.010691][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1386.015696][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1386.022235][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.028366][ T30] do_syscall_64+0x174/0x580 [ 1386.033854][ T30] ? trace_irq_disable+0x3b/0x140 [ 1386.039058][ T30] ? clear_bhb_loop+0x70/0xc0 [ 1386.046248][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.053660][ T30] RIP: 0033:0x7fe11cd9e0d9 [ 1386.058249][ T30] RSP: 002b:00007fe11db85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1386.068604][ T30] RAX: ffffffffffffffda RBX: 00007fe11d025fa0 RCX: 00007fe11cd9e0d9 [ 1386.076935][ T30] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1386.085197][ T30] RBP: 00007fe11ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 1386.094168][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.105910][ T30] R13: 00007fe11d026038 R14: 00007fe11d025fa0 R15: 00007ffe2a8f4878 [ 1386.119270][ T30] [ 1386.123006][ T30] [ 1386.123006][ T30] Showing all locks held in the system: [ 1386.135087][T14153] 0·: entered allmulticast mode [ 1386.140065][T14153] hsr_slave_0: entered allmulticast mode [ 1386.168975][T14153] hsr_slave_1: entered allmulticast mode [ 1386.178128][T14153] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1386.203175][ T30] 1 lock held by khungtaskd/30: [ 1386.209371][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1386.221244][ T30] 2 locks held by getty/5368: [ 1386.226580][ T30] #0: ffff888035c4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1386.238372][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1386.253072][ T30] 3 locks held by kworker/1:31/7733: [ 1386.259043][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1386.304599][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1386.327271][ T30] #2: ffff888051a98530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 1386.363797][ T30] 4 locks held by kworker/1:33/7737: [ 1386.390753][ T30] 2 locks held by syz.0.9458/9123: [ 1386.410184][ T30] #0: ffffffff900978e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1386.425777][ T30] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1386.437518][ T30] 2 locks held by syz.6.9707/10073: [ 1386.443129][ T30] #0: ffffffff900978e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1386.451684][ T30] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1386.465578][ T30] 3 locks held by syz.8.10827/14162: [ 1386.471175][ T30] #0: ffff8880590be400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1386.481681][ T30] #1: ffff88804725c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x7b7/0xd30 [ 1386.492204][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1386.503732][ T30] [ 1386.506110][ T30] ============================================= [ 1386.506110][ T30] [ 1386.527205][ T30] NMI backtrace for cpu 1 [ 1386.527228][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1386.527250][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.527262][ T30] Call Trace: [ 1386.527271][ T30] [ 1386.527280][ T30] dump_stack_lvl+0xe8/0x150 [ 1386.527313][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1386.527407][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1386.527452][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1386.527476][ T30] sys_info+0x135/0x170 [ 1386.527511][ T30] watchdog+0xfd7/0x1030 [ 1386.527552][ T30] ? watchdog+0x1c7/0x1030 [ 1386.527582][ T30] kthread+0x388/0x470 [ 1386.527611][ T30] ? __pfx_watchdog+0x10/0x10 [ 1386.527631][ T30] ? __pfx_kthread+0x10/0x10 [ 1386.527657][ T30] ret_from_fork+0x514/0xb70 [ 1386.527701][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1386.527727][ T30] ? __switch_to+0xc89/0x1420 [ 1386.527754][ T30] ? __pfx_kthread+0x10/0x10 [ 1386.527782][ T30] ret_from_fork_asm+0x1a/0x30 [ 1386.527833][ T30] [ 1386.527841][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1386.584769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.657834][ C0] NMI backtrace for cpu 0 [ 1386.657855][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1386.657877][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.657887][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1386.657920][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 00 3a 5d 0a cc 89 f6 31 d2 e9 36 91 9a 03 66 0f 1f 44 00 [ 1386.657933][ C0] RSP: 0018:ffffc90000007eb0 EFLAGS: 00000046 [ 1386.657949][ C0] RAX: 00000000000008e6 RBX: ffff8880b8623c80 RCX: 0000000000000838 [ 1386.657961][ C0] RDX: 0000000000000000 RSI: 00000000000008e6 RDI: 0000000000000838 [ 1386.657971][ C0] RBP: ffffc90000007f80 R08: ffffffff81b3fb45 R09: 0000000000080000 [ 1386.657983][ C0] R10: 0000000000000000 R11: ffffffff8174d530 R12: 00000000000008e6 [ 1386.657994][ C0] R13: dffffc0000000000 R14: 00000000100006b5 R15: 0000000000000020 [ 1386.658006][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 1386.658019][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1386.658030][ C0] CR2: 00007f4de09ed158 CR3: 0000000031a32000 CR4: 00000000003526f0 [ 1386.658047][ C0] Call Trace: [ 1386.658054][ C0] [ 1386.658060][ C0] lapic_next_event+0x11/0x20 [ 1386.658082][ C0] clockevents_program_event+0x385/0x630 [ 1386.658133][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1386.658155][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1386.658177][ C0] ? tick_program_event+0x8f/0x120 [ 1386.658196][ C0] __hrtimer_rearm_deferred+0x26c/0x420 [ 1386.658215][ C0] __irq_exit_rcu+0x14e/0x220 [ 1386.658240][ C0] irq_exit_rcu+0x9/0x30 [ 1386.658254][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1386.658273][ C0] [ 1386.658279][ C0] [ 1386.658286][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1386.658302][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1386.658319][ C0] Code: 3b 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 3e 19 00 fb f4 4c 06 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1386.658332][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 1386.658344][ C0] RAX: 00000000008a41dd RBX: ffffffff819b4450 RCX: 0000000080000001 [ 1386.658355][ C0] RDX: 0000000000000001 RSI: ffffffff8e22805f RDI: ffffffff8c4bba80 [ 1386.658373][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1386.658384][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1386.658395][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1386.658408][ C0] ? do_idle+0x2e0/0x540 [ 1386.658438][ C0] default_idle+0x9/0x20 [ 1386.658456][ C0] default_idle_call+0x72/0xb0 [ 1386.658475][ C0] do_idle+0x2e0/0x540 [ 1386.658494][ C0] ? __pfx_do_idle+0x10/0x10 [ 1386.658518][ C0] cpu_startup_entry+0x43/0x60 [ 1386.658537][ C0] rest_init+0x2de/0x300 [ 1386.658562][ C0] start_kernel+0x392/0x3e0 [ 1386.658679][ C0] x86_64_start_reservations+0x24/0x30 [ 1386.658725][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1386.658748][ C0] common_startup_64+0x13e/0x157 [ 1386.658777][ C0] [ 1386.673386][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1386.673423][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1386.984859][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.994931][ T30] Call Trace: [ 1386.998220][ T30] [ 1387.001159][ T30] vpanic+0x56c/0xa60 [ 1387.005165][ T30] ? __pfx___schedule+0x10/0x10 [ 1387.010028][ T30] ? __pfx_vpanic+0x10/0x10 [ 1387.014555][ T30] panic+0xc5/0xd0 [ 1387.018295][ T30] ? __pfx_panic+0x10/0x10 [ 1387.022727][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1387.028198][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1387.033599][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1387.039776][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1387.045941][ T30] watchdog+0x1030/0x1030 [ 1387.050293][ T30] ? watchdog+0x1c7/0x1030 [ 1387.054728][ T30] kthread+0x388/0x470 [ 1387.058809][ T30] ? __pfx_watchdog+0x10/0x10 [ 1387.063497][ T30] ? __pfx_kthread+0x10/0x10 [ 1387.068101][ T30] ret_from_fork+0x514/0xb70 [ 1387.072713][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1387.077844][ T30] ? __switch_to+0xc89/0x1420 [ 1387.082537][ T30] ? __pfx_kthread+0x10/0x10 [ 1387.087143][ T30] ret_from_fork_asm+0x1a/0x30 [ 1387.091934][ T30] [ 1387.095236][ T30] Kernel Offset: disabled [ 1387.099559][ T30] Rebooting in 86400 seconds..