last executing test programs: 1m36.903105425s ago: executing program 3 (id=2542): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x3) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x0, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x2, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x240488d0) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m35.679129834s ago: executing program 4 (id=2548): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e8, 0x2e8, 0x0, 0x98, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@empty, @empty, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @private=0xa010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x1, 0x4, 0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffffff, 'syzkaller0\x00', 'geneve0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x8, "e0f1"}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000200081dcfcffffff03000000020000000043cb26b30e0000050016000400000008000200ac1414bb080017004e214e22"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000100000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1m35.412927313s ago: executing program 3 (id=2550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)="05", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0x2, @local, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)="88515a", 0x3}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000800)={0x0, 0x1}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000500)={r5, r6+10000000}, &(0x7f0000000540)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000840)={0x2, &(0x7f0000000200)=[{0x28, 0x2e, 0xfc, 0xfeffefff}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004040) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r10}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000009c0)={@loopback, 0x6e}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="0c009900000400002b00000008000500050000000400cc001400040070696d367265670000000000000000000a00180003030303030300001400040070696d72656731000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r13, 0x0, 0x82, &(0x7f0000000a00)={'broute\x00', 0x0, 0x0, 0x0, [0x7f, 0x2, 0x9, 0x7fffffff, 0x0, 0x9]}, &(0x7f0000000a80)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1m35.406814426s ago: executing program 2 (id=2551): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000200)=""/53}, 0x20) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x8000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46", 0x5}], 0x1, 0x0, 0x0, 0x440c5}], 0x1, 0x4081) close(r2) 1m35.247729428s ago: executing program 2 (id=2552): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001, 0x2}, 0x38) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)='G', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xfff}, 0x8) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x24040) 1m35.149263943s ago: executing program 4 (id=2553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000e00), 0x4) sendmsg$inet(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'netdevsim0\x00'}) recvmsg$unix(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000902000073115b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x2, 0x0, &(0x7f0000000f80)=0x2000000}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000d40), 0x0, 0x10, &(0x7f0000000d80), 0xfffffffffffffd00}, 0x48) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000f00)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000016ffffff1000ff8bc60025000088a80000810082"], 0x22) 1m34.984359702s ago: executing program 0 (id=2554): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)={0x14, 0x4f, 0x30d, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000001400)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)={0x158, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xdb, 0x2a, [@supported_rates={0x1, 0x4, [{0x30}, {0x21, 0x1}, {0x33, 0x1}, {0x9}]}, @perr={0x84, 0xcf, {0x7, 0xd, [{{0x0, 0x1}, @device_a, 0x200, @value, 0x19}, {{0x0, 0x1}, @device_a, 0x45, @value=@device_b, 0xc}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x24}, {{}, @broadcast, 0x9, @void, 0xb}, {{}, @device_b, 0x400, @void, 0x1c}, {{}, @device_a, 0x10001, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x7fff, @value=@device_b, 0x18}, {{0x0, 0x1}, @broadcast, 0x44, @value=@device_b, 0x24}, {{}, @device_a, 0x5, @void, 0x42}, {{}, @device_b, 0x8, @void, 0x34}, {{}, @device_b, 0x7fff, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x14}, {{}, @device_b, 0xc, @void, 0x6}]}}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@ibss={0x6, 0x2, 0x3}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x158}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000014c0), &(0x7f0000001500)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0xffffffffffffff97, 0x10, &(0x7f0000001000), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0xfffffeb8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1m34.268493542s ago: executing program 4 (id=2556): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2ba) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r3, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000000300)=@newtfilter={0xf0c, 0x2c, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff1, 0xc}, {0x6, 0xb}, {0xb, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xf3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x10}}, @filter_kind_options=@f_basic={{0xa}, {0xec4, 0x2, [@TCA_BASIC_ACT={0x290, 0x3, [@m_ctinfo={0x84, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x40, 0x6, "c36a2630b72c68841b350415b2fd1a65b1498e1f003d3d099cdd084f42e3bc088acfed1b52c2f066ea3dc564982b5ba481f6cc1355a0b61b354adece"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xb4, 0x14, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8d, 0xe2b, 0x10000000, 0x9, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}]}, {0x1d, 0x6, "2eb2666c171604980229dbec3e6f742ee020a39f06fafa0a2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x154, 0xb, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5d, 0x8, 0x20000000, 0x7ff, 0x37}, @empty, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x613, 0x5, 0x0, 0x9, 0x2}, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010100, 0xff}}]}, {0xd9, 0x6, "17eae02a1dce7df2e4ee7062228d11082312dce1303dc2edef86c2b5ca710d438e42b3eacf4f4be58572a571abeca5462a5ea33dec73e31b5c89e606c423327f68d57df9cb625294c158e5062099b7ddc5de40387651a78ab190892d6a76cdc1742bda9cef464126c330ff3718a24b9c0669b5e35d8b6e40b81251cdd54b28a78da86cd56af064b182589571d6c9e680dfcd30b4a6b2adc8b4e7d2bdb868421e749c3d0322518705dab7a7f01785bf90fb7a43ff59c703f595b33d1cdbe8a72ee584009f388db796c70417260c38ccc02bf73d8170"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x4}}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x525d, 0x2, 0x7, 0x5, 0x3, 0x4, 0x4, 0x401, 0xffffff64, 0x81, 0x8, 0x8, 0xc, 0x7, 0x400, 0x3, 0x1, 0x8, 0x3, 0x4, 0xecb, 0x1ff, 0x1, 0x0, 0x81, 0xffff, 0xd, 0x5, 0x9, 0xb, 0xd603, 0x80000000, 0x2, 0x1, 0xb9bc, 0x6, 0x1, 0x3ff, 0x8, 0x7fffffff, 0x1ff, 0x5, 0x3, 0x5, 0xf065, 0x8e5, 0x3, 0x2, 0x200, 0x0, 0xffff, 0xdf9b, 0x44, 0x3, 0x5d, 0xffff, 0x1, 0x9, 0x9, 0x0, 0x81, 0x220000, 0x2, 0x7, 0x7ff, 0x5, 0x5, 0x8, 0x2, 0xfffffff7, 0x3, 0x12e, 0x3, 0x0, 0x2, 0xffffffff, 0x2, 0x3601, 0x8, 0x3, 0xe, 0xe648, 0xc, 0x1000, 0xf, 0x4, 0xe4e, 0xfff, 0xa3, 0x0, 0x2, 0x2, 0x1, 0x6, 0x9, 0x80000000, 0x80000001, 0xfff, 0x4, 0xf43, 0x2, 0x7, 0x8, 0x8, 0x2, 0x1, 0x2, 0x9, 0x1ff, 0x0, 0x29e4, 0x7, 0x3ff, 0x0, 0xe4, 0xa6, 0xc0a, 0xff, 0x227f, 0x7, 0x2348, 0x4, 0x9, 0x2, 0xc, 0x5, 0x2, 0x6e97, 0x8, 0x2000, 0x96a, 0x9, 0xc, 0x7, 0x4, 0x5, 0x400, 0x401, 0x8, 0x8, 0x4, 0x1, 0x3ff, 0x9, 0x3, 0x6, 0x9, 0x40, 0x0, 0x9, 0x1000, 0x6, 0x8001, 0x0, 0x3, 0x9, 0x800, 0x1cf096d5, 0x8, 0x7ff, 0x91, 0x7ef, 0x5c8, 0x6, 0x1, 0x2, 0x2, 0xffffffff, 0x3, 0x8, 0x9, 0x2, 0x10001, 0x81, 0x80, 0x1, 0xfffffff9, 0x3, 0x8000, 0x1, 0x5, 0x2, 0x3, 0x1, 0x34, 0xfffffff7, 0x6, 0x8, 0x6, 0xffffffff, 0x2, 0xf9000000, 0xff, 0x0, 0x8, 0x6, 0x1, 0x3, 0x9, 0x10001, 0x2, 0x100, 0xd0, 0x7f, 0xffff, 0x8, 0x4, 0x8, 0x6, 0x98f3, 0x9, 0x40, 0x38a80000, 0x5, 0x0, 0x6, 0x4, 0xe, 0x164, 0x9, 0x27c6400, 0x2, 0x4, 0x9, 0x48, 0xa, 0x200, 0xcd, 0x7, 0xa6, 0x1, 0x0, 0x0, 0x800, 0x9, 0x2535, 0x0, 0x1, 0x22021e4f, 0x101, 0xf9, 0x80000, 0x100, 0xffff, 0x100, 0x3, 0x5, 0x3, 0x0, 0x5, 0x38, 0xfffffffc, 0x8, 0x2, 0x3, 0x10]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x3, 0x8, 0x80000000, {0xf, 0x2, 0x2, 0x0, 0x9, 0x2}, {0xb, 0x1, 0x6, 0x4, 0x4, 0x4}, 0x625e, 0x4, 0xe45}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_BASIC_EMATCHES={0x180, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf83a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x5}, {{0x3, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x40, 0x7, 0x7fff}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1a86, 0x8, 0xfc8e}, {0x2, 0x6}}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x45}, {0x7, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x0, 0x4}, {0x2, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xd0, 0x2}, {0x4, 0x3}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='\bp', @TCF_META_TYPE_VAR]}]}}, @TCF_EM_CONTAINER={0x58, 0x2, 0x0, 0x0, {{0x2}, "4eda88eea498d0bb1da2e7634825b09ce0bef4596e699675ea4f5e68ba27fc044259275f97c701a96582187be0337ed541dcc260a4bedd446fe6d892670713e5b5aff97ff65f81b8be"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x6}, {0xffff, 0x10, 0x80, 0x6, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x52eb, 0x3, 0x9}, {0x1, 0x9, 0x7f, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x1, 0x6, 0x6}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x637, 0x8, 0x3}, {0xffffffffffffffff, 0x5, 0x2}}}, @TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0x7f, 0x9, 0x99}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x1b, 0x5, "35884c0a5977522af985efd5f90425603aabf6cfd52afa"}]}}]}]}, @TCA_BASIC_EMATCHES={0x630, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x6}, {0x1, 0x4, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x47d8, 0x8, 0x101}, {0x3, 0x1, 0x3}}}, @TCF_EM_IPT={0xf0, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x7e, 0x5, "430d1b0446cefed932271c3636934efdfe6c2a719d4f5282c6ffa12bea533cbc06eeaede2c1b9e5c0016b25993961694953c9c4cd18dc4b575b32d65a5589c5cf258479734688e9ef2f980c7d53743741aee9b0272fe7e0c8f8a7bc6d0acd2469638f8e7e713a9e57827d5a9bb37bbac3afd03994ac77870fa2c"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x2a, 0x5, "48a4a6190a65ed23976d14523db7a4ae3a1f1234daa7a89f094942e4212a28d9e9aebb484a96"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x4}, {0x3, 0x7, 0x4, 0xfffffffb}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7}, {0x0, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x2dc, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0xf8, 0x1}, {0x6, 0xff}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="e312b7f5d295", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b016", @TCF_META_TYPE_VAR="45fdc6a0", @TCF_META_TYPE_VAR="e664547feb25652d29"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="5ce7a2949d27", @TCF_META_TYPE_VAR="aea39d9f"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x33}, {0x7, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="64527d9b3a", @TCF_META_TYPE_VAR="8b76c2a074", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="d6ebe91c359eedafdfdc", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x15, 0x2}, {0x400, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="63ef", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="78a5ec19ea9f", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8}, {0x6, 0x24}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x771, 0x3, 0x95}, {0x9, 0x6, 0x7}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x2, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x7}, {0x1, 0x2, 0x1}}}, @TCF_EM_IPT={0x19c, 0x2, 0x0, 0x0, {{0xa, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "0d834969c348a5f0dc706470147e"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xcd, 0x5, "c79779510d69e39a8c415e3ae7f3e36abf7cb3913ecd3301e0a58442aa560c9207a605b5ffc0ee809486093ae12deb4debbe6b0918f0317b3fc434e0482e0178769c33168c9f52a223fd017d3f586b371c52901293df756373577e7d028ecfc3f95a9cda7ea327291f8f9901fe0e9c257f8caf9c7c706c30975e29e89961fbe5b4d783dcb83f67c1f525897d868b22c88f293504424f3cdb6957da877e6db3c709fec073bdfd0361354f30bf57639479aafcb752c63905996e983bc119b7bfa5d3523c800fc4d3fae5"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "86a4a179e38137c77a60517572331a6fb03ce6daac29cb5ca1dc8313f351bba9a00227d462920a975ef931b8d065b5d28cc067fd3a0125a11cd92fcd1db9eaaf4b6eecc7ea200f8f5ee9ee1e1680c4bdb38e1c871bb2141eb8110f0db97f91e64e62f8fc1f95aa235cc590aa85f3b85370828ff1a54d56b255bd9bb490"}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xb1, 0x2, 0x4}, {0x64ad, 0x7, 0x2, "ae00f176c34532"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x10}, {0x7fff, 0x6, 0x9, 0x4, 0x2, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x5}, {0xfff9, 0x1, 0x2, "ec"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x1}, {{0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x4c, 0x2, 0x0, 0x0, {{0x37, 0x0, 0x23}, "44e8c36eeacce434d41f7aed36ecc1f96bfc13515e492bb45b08a62b451b4141a244e04f472bafc3ac9636c641987501a66f59396945a602adef3d0615d039"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x200, 0x7, 0x2}, {{}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x5, 0x0, 0x0, {{0x8, 0x8, 0x1}, {0x0, 0x5, 0x1}}}, @TCF_EM_META={0x98, 0x3, 0x0, 0x0, {{0xf, 0x4, 0x1000}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="332b0afcd912e513cde2", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='\t', @TCF_META_TYPE_VAR="bb54a6aca9b6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="5b9c05ff55"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x45, 0xe, 0x2}, {0x101, 0x9}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="5b9270ed487f7778de", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="78144d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="41942e15ff6324", @TCF_META_TYPE_VAR="f2f6c1"]}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='\ac']}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0xd, 0x2}, {0x4, 0x3}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x800, 0x3, 0x1000}, {0xff4e, 0x6, 0x1e, 0xa}}}, @TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x7fff}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="e0ff4cfba12bf8114039"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x5, 0x1}, {0x0, 0x1, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x32, 0xfffffff8, 0x7fff, 0x6, 0xf, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xd0, 0x2, 0x2}, {0x9, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x7ff}, {0x2, 0x2, 0x2, 0x3, 0x7, 0x0, 0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xfffe, 0x9, 0xb5f7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xf, 0x3, 0x91}, {0x3, 0x30, 0x48f1, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0xcf, 0x2, 0x2, "d6ab"}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0xf0c}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x7) 1m34.089857122s ago: executing program 0 (id=2558): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @local}}, 0x5, 0x2}, &(0x7f00000002c0)=0x90) connect$bt_sco(r1, &(0x7f00000000c0), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5db3ddbf3d03090047f53585beaef405bfbdd6ef1063a2b175a96d7d777df9991ecb6f176beeaa56dce5f561eb4b07c0851ae62ea98f0da5b232", @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b00"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4810) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newlink={0x78, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7ffffffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8041}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000900)={0x0, @local, @multicast2}, &(0x7f0000000940)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x240002a0}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0x20, 0x800, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {0xfff1, 0x3}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x7, 0x8, 0x1, 0xfffffffd, 0xd7800000, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 1m34.018829175s ago: executing program 3 (id=2559): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r5) r6 = syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/uts\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x1a}}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x65c7, 0x24, 0x9}) sendmsg$nl_route(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_TXQLEN={0x8, 0xd, 0x2}, @IFLA_XDP={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x41b5f446e346220c}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x1) 1m33.857414572s ago: executing program 2 (id=2560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@random="cd1c43650b3c", @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x2f, 0xff, @private0, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0xfffe}}}}}}}, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000004c0)="6da03dfa5ec76a05875d872a9458b858748a779def1e62f4e87e851d7e75e6903520a2dd830c58755c0d56f814af6b592a0283136c9040cdaa27bd877d4d0513bd12033bc7e38687565a6f0b889b7f077a2af3a49d87f79d8d18ba44e8aaa232edec52699638c2140451b3137c7cfeb50e812daa2990fbf5b63486476d8f4ef3b459e71c52ace4dcdb8a3e52e2f62c53eaa910c9df11d32c5e21f60edc555ab815301cf3fe100a3aca24f82d015ad527c4849780c2d08c9a5e30bd1b29306863005b0a5654734eb762d9cd920ee63215bb7c996f178846f2571599057e1098703204c4d00dba00", 0xe7) 1m33.85367643s ago: executing program 4 (id=2561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x100}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x40011) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}]}, &(0x7f0000000700)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1m33.729432784s ago: executing program 0 (id=2563): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x48b, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0xfffffffe}, {0xe, 0x2, 0x156057ab}]}]}}, 0x0, 0x3e}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0x40000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0xfffffffffffffff2}, 0x94) 1m33.672434979s ago: executing program 2 (id=2564): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x12, 0x4, 0x0, &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f0000000400)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) sendto$inet6(r2, &(0x7f0000000480)="8d", 0x1, 0x80001, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000400)=ANY=[], 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000600)=0x41) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r4, &(0x7f00000004c0)="b81d768070fbcc17be408664ad6c05cf07b52636470be665db2cc33c1e981d05728136e983f5059364bb284a4cad94950aef9b2993dad783a4f47953ba4e57c99019373bd233bf420616f993e2ed7123f3be9c1bbc41c567634e27f3846c8936dbd91cec55f5e4b01f38a50f0918795c17bc467d757b17d66fed5cb53ee5793c430b935731a97b17d47ee0803709d41e9d971bd1dccd0e56d86ac7e0866af3ad290d0d1ba4a16ad2acd5ac9954f596b81bf52045eb40fb9e7123a3e37ab94eee2c6a0ee08d1dcaa0c8c7a540664745abea129ae738f4726c303a7c81724a33493b4e06d6118c79e06a79c457880c443f2acd287cb9beef", 0xf7, 0xc080, &(0x7f00000005c0)={0xa, 0x0, 0x7f, @local, 0xe, 0x4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) recvmsg$unix(r0, &(0x7f0000001700)={&(0x7f0000000640), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x40000100) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES16=r0, @ANYRES16=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x2, 0x0, 0x10000, {0x7a, 0x0, 0x0, r5, 0x0, 0x2281}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xffffffffffffff5b, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8640}]}, 0x50}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x44040) 1m33.570077745s ago: executing program 3 (id=2565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42901, 0x0) unshare(0x28040680) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000780)={{r1, &(0x7f0000000240)='@\x97\x00', 0xc800, &(0x7f0000000280)={@align=0x10001, {0x53, 0x5, 0x2, 0x8}}, 0xfd25, &(0x7f00000002c0), &(0x7f0000000300)=0x6}, 0x5, &(0x7f00000006c0)=[{0x3, 0x3, &(0x7f0000000340)='syzkaller1\x00', &(0x7f0000000380)="0f75cbb3ba6df8849dc3b01156687eb4eb8fd25a65f5874b7157215cb1da8e7a9ef1dd40df2b8b3b5902a9697ee4053e73ef4ea21e477ad8f339a362f56ba728204e558ff016ca2aa9a0b599b846aa3a3ba9ec366c656adeacb2ef0d49d8f9cbb0e924553f89793e705555bbb98cfbe1009ea66c6b4c7db55d5d4e", 0x7b, 0x2}, {0x2, 0x9, &(0x7f0000000400)='-{)+]\x00', &(0x7f0000000440)="dbd71cf741b1fddf1f07cc0591f9a78b9fdba1eadb2c893a77002ae258ce", 0x1e, 0x8}, {0x1, 0x7, &(0x7f0000000480)='!-$}\x00', &(0x7f00000004c0)='I', 0x1, 0x21}, {0x1, 0x4, &(0x7f0000000500)='.\'\xe2\x00', &(0x7f0000000540)="528275252b33f555eeb49706e003d11c0b5e055d778a6e2ae06f2f063baff8713826aeed04b02dacb877039398e183b3a3caef93ea4c19a80488ef63cb5c7f3e80ac556b75d59f955a7f7daebb7f4b197c3bb1c2427f1c5a5ab790831fe4", 0x5e, 0x20}, {0x3, 0x8, &(0x7f00000005c0)='#^\x00', &(0x7f0000000600)="0bf1e7b578afd0be99076a53ace4a1e52848e63e8a7435f7c27ce04caa6fd829fc5f86aa069729692000df9312ad0833d810e14e88466b800ef11ed58366791a3ec5a562f9ae27a925c5c23613880bd2ecc8811b63c47402e59e41e8dc4f3c6e8cec911796ac5d71003948971b4eacbaa4f7217f20ef2b4c14e60a695f5b7df8296530cef2c3522294e32bb5ee49660b59198c95266feee1a6ac1c2b44d10efa15274aaa560e0e1ad230b7a89133570e125d3ec60365d97d2dbd55", 0xbb, 0x20}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x19, 0x0, 0x1, 0x0, 0x6, @random="1f5d8aa44cec"}, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001b00)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x42, &(0x7f0000001dc0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x18}]}}}}}}}, 0x0) 1m33.301503515s ago: executing program 0 (id=2566): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x14, 0x3c, 0x1, 0x40, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1m33.096492018s ago: executing program 4 (id=2568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcdb}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@getchain={0x34, 0x66, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xe}, {0x1ffe8, 0x4}, {0x6, 0xfff1}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x24000001) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@getchain={0x34, 0x66, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xe}, {0x1ffe8, 0x4}, {0x6, 0xfff1}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x24000001) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x5c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xd, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x1ff, 0x4, 0x3, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0xc8aa, 0x1000, 0xb4}}]}}}]}, 0x5c}}, 0x0) sendto$packet(r1, &(0x7f00000005c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000600)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) sendto$packet(r1, &(0x7f00000005c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000600)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x9c5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}, @in6={0xa, 0x4e23, 0x3, @empty, 0x9}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0xe, @loopback, 0x8}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x5}, @in6={0xa, 0x4e20, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x6, @local, 0x28ef}], 0xb8) 1m32.82928971s ago: executing program 3 (id=2569): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) accept4$tipc(r3, 0x0, 0x0, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x60, 0x1403, 0x10, 0x70bd28, 0x25dfdbfa, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x5, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'pimreg0\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'ip6erspan0\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'veth0_vlan\x00'}}, {{0x0, 0x2, 'syz0\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'veth1_to_team\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x20040044) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="440200000000000000e4595e999321416300", @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf254d0000000e00a80066697273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r2], 0x68}}, 0x0) 1m32.741946733s ago: executing program 0 (id=2570): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x8, 0x7}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xdc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5c3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88d0}, 0x40) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000001c0)="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") r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x1, @mcast2, 0x48}, 0x1c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x8000, @empty, 0xb05}, 0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @loopback, 0x31ca}, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0a4d3ad71b6fc3b64893bbbb5d"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a2cc8f4134"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "db8ecb8082"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'veth0_to_bridge\x00', 0x1000}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe, 0x6}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dae6bdc4570c2be349562d1d52c0ab20252fdc0b109d6a77"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "636f76fa4c2ec2b5505863701e2fb48881f0a3a55b7e05d6"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x10) close(r2) sendmsg$NFT_BATCH(r3, &(0x7f0000003b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003ac0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x84, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x958}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2e20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2968, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}]}, {0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x120, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_LOG_PREFIX={0x14, 0x2, 0x1, 0x0, 'veth0_to_bridge\x00'}]}}}, {0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "49101abf6466cfc293e357c3dadfe40a4922721b700c703f56932c9343f8a867641b5b976cc8638e77fc6436d69ba6670bfa81e26d79222b228c72255fbcc466869e9d0f29cb2c4db1aa2db51d91be3980c80f0c458f7330e472b6fa516ec63ad7cac4b63c27cb32624f2dccd9fcbb7a5883bf11280c3a126307f93dfe74ddc85167b86711d10de97834bad464cce88ce3e2e2d68b62a656a3e2b954eaf4d2c254551e74827b0a08c126c6820a1b1f92c94a468e163d88c900af7f331263892d37417801"}, @NFTA_DATA_VALUE={0x4d, 0x1, "bf4fb8d075eb48b30c4ea52104436f4542d25b865f616272e54c7c17a27a2e8d743ded724e5fbd8ff8c9332516a309e6ef23c89c218c42757bc498c5f075a84c2bf8c9c3903e22eeb4"}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x2654, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x10a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "75ae1bd03d7a73cf80c3d69b3777032b44463dca167bb19570411d35ba683bd07838904b35234835be18bad0b01afb0c337c1c4b562bd5cba2fb6f74d8158aae24752f5c703cc370143fe592b0f37f01079ad212c498b7029f7cf1856887aa4ca23e1133227084b2010be0578d31302b18acec5dfcacf1fba2699098a087630c7a98f85d2033caeed328a8e171039df4c7a7be0b856ced185ea5ace70fd373ff1560dac35a89be201dba27b1ea1bb48f72b41525a4bcd5e2669e076bae9368598a6b1438865ae01fc9eb185d143950e2864a4ee9a078251b6e39973abc97518b87951807021f3e425cd951ba962ad8bdfce71255660fb88cdff8d30312101bc578c510d6cb0c77b4e04b400a1de9a194d3eee2d5a4a1475c5b63a5b872c2d9aa81e829f71e00708458c5963ba93ce346d8395f56cd403e68c88862015ec75783d5332b9c7e698f5ff8d93ce776d770938e2cbeefac290c385c5cf3f1e15515844477df15e4201f166302efd7d1e59e4cc7d1cc85710fe2d212bf9bd921c15646ce2192dc81c4481287e4de0b5c384d538222e52455e9f65b2df5165d877648e5da10311288c76dbe69c8b39120656751274853b002cd5de4a87054511b5aa18b816c63c4f9a2b5f20a1a6b418cc46fa7c4cc4f34f5fe69bfb7909db794383e64bd3a0ce1f8d3cc80a5e32cfaa24a6d5ad21f5c5ecd79d4934fb12b00a7c20f15d6bd55f98fa30e4b98c9c4f9f2496f644d3e270bf9266fdb2ea050508fd4223a3890d93d6901d7002b8713f7798a1a8a4fd3f0f7c79a21710b4ea484eb9b05680901d395129ea5dfb80c89490fea2dba8cb2c13a9f558188374a8f14b7fdc2e641a9fcfb6920f88cfb32f82a69e58159cb8241f59196b58f578037a93f0db51785571d01a8b945a1ebcd8f4bf31ccd89c3eb6ce908568feb0ef659b720e7e671c8b17f5660195a0a9b1388c7500777507fad23f5aa40ca0d3a5b4d1c18cab10a8f387b752086805ff088c7e2824c86b9386eca5f70eb9d585c9bb20bc8efd1ea3fbc2a6f68c0ec3de75f720fba312c060b7c46914ee5eb2a2551ca3bcd164983baade3b7e78c9af24e7662151c5c5181caebe3f9b6658575e99f35728d5aa3f9d06277ad66da4539c646fe648adfb6a88586797ab68f1d4539c2c2d08fca15a21f67daf21605dc7d4a5c093bafc459024f1c563aa5cb2b84d88c0f9b592ab0a5809c888c46160961d37854adfd599195d4237fa19db07c54f0a1eb6bed438f0342f57a60f6011b0e55eebbe1e523538e50e5adea42e7210e294dceed134ba0a3bdef88eb5297b587c44bded08f917a749e87a02b7f6c51b6678e046a1d668cbcc75fc30715c9562d0f29321f01b71778dc5bbeec850359931e8b61e8a4d89254daca4a4b24b9fd243c3aa60f431543530d25e080595e1b1a32febcfa86031707163c8ece59bca455f3d9e3eaa1356771cb0e5de58444714262a3c87e70bde7d2ee2eb0dd9b6c58908f54e0c137fc0168c61f976cabd099fcca64fd929cc84374e39168714d8210c22966bc641afd25e8c17bc6a86ceb992b2f755db0fdbeda2fbfa415e6ddb317c34e9d8601e5c98efee3a7a881b2b6f2370223c8e3811f93c926ad61e9a374b1a8dc049864f507cddfd632ec41fa1872265cfa73a77deb8b5c8f247bc089e7c7da1ab297ddd840052c557e292740d31fedd2545f96cd5177bc1e9b830a4b78f84de960b96e4f9ebf573f0955549ecb59aeae47d2722cb6ce9dd0f95d67a6cba44460add655047162564047b452a1b3a40c1b96f2c7f62a870b048c7b4199b369b72dbbc60d02fd5397b53932390e23c9dfb040f5fcb5523ff7aa47847e6c04a361cb2a854acbf6771f40b88d21c839c4b42b4260a9b108e64125f18eff2d980d815c3d74b8c4c9cf4ff12923b75739ad3513f3a28a7b6480df96a532ad3506dde7a2928a7a0c4e40a51aa39ecb4b63290063830f135c89c25f605a550f5bf8f0b97e008753c338c81850a0271778c0baeb6a9fd4282f0ba9ed47b1240247d796bc836635226cd6eddb78e55f208cb46ca0672a4ef10788e586c9dd0b703e4a35f36526025cef5ee74ce09e3c20bbc8cde9eed4cba7b1dfa2024db9694c55bad9ae9c6928b8957f441f827de39f4fc8d9cd922e9beaa0a5142045c83206e9573b6957fa668159719f2593a5b8fbadeb6ad0453225e3738eba1bf6784148036551d908e35ff6b3cccb1c5368330a82c698c2ec2d1329235e4a51ea8b03b1dac65e01efd251a4bff45bf4670571e85d49b340801938fabcdcd1e58c7ff87d73fc8fa00ff7dd43bfe2d54ceef48ab7f1a649408a6a11fa37f4212ed3cb803937a3f4b955444546105ef1897ff7c701dff5f5bb1e7c93241b07adabaab912759a8882e3512604ef2554f46b690d5a91eee003c632e11632e14606ad7f8dcc3dd4a377ba3dee2b33ba9687c92e715fbe27308238172e0a837c83280dfa4187df946c70aaed8739c1af7fbf783439fb6464c8e136a90f11a6a321dbd444fd3d6c8716a3f4802a0b742aa6d16a9e6ef073da09440dbdb69034d2d02dbdc016af0374a6385330ffa1758233e6f9244ccce0145c13ff20db558bad82699b15b0cfdad5260af86fc383189b86b48b999edda5657fd27997e19a47ce46006080e2470b9bc600e1fb46273af80f73861fbfb907a13ddb3fe105f39396ffd980937272f7bc9507146a10b5dcf1af1462e660ec4972fb5820fbb5eef74ff6a0167a0ef6f49aec7751f8923558edeb579ed5cd7069af48be96d6f4b07f53a6348a109cba8f97cbc8a558bd5b238121eb21501e5917a1fda3db3e4d0187bd7df6e7238380bbb617ea01399f81cebc449c79ad225900a04e57da49c1b068cc596d062a593c423bfb85649dde327d7d91fc54b9a31ec920f3b70a1ece1c13fc102d9b47aade2ebe10fcaa34bf138093b91d0d5bfd366acc418f2727fca65255243533b38e98229aed0baf694993eb0bf2a2ec19f8501fa2aff49d260bad24bdb0a6f954cca5c6fca0e92973fe62f3b86d6c930538def4f605974613212a9bc9b22a6aff6007bc6cf216e32341fca75f611b2ce8c77cf4bd5457f3427d3ad83b3c00feedea12c70fd0fd47f24c59adecaaea071cebf6543d4d2cf76a308df134bfd0e31ece4ae3663ee9ce8db437706229f2227e9b54ac35e10c53106ab89318a350beecd15790bb95b6f81f839311e6ae0675deeb8560b1abd2087dcdc39dd569f04632bf97f4892231a9014db0d6bdc1c4d61484ea2a223ec1b745b31014c4833e7ce286e1f26d98adf4f84902d7aa83da5b0ca768055f404814d83e438f03bbc7174ee3dccbd73deb7caf60bd56d2149d6a6daef2fdea7b24b5bf7bef370ce7c6e6e95765d73545a374c8327fd8cb8f1a4568443f7fcf41aea6e0043235c4e62a2caab53c529b2e59c745b496accfb0ac4fb7cb401b1980f236bf78cda929c9fd31ddb8a1521bc84dc7b7c596d55fefc79a9cca8f7846e24a95298d9428f4ec0b6be963f6911a3d2e283e916b8501a845efa2d7d5eb20417ecad38147ce703ba98695f19210423df67663c647a9422c05361fd81aca8c13b5b2ae0d7be30886c58183d5df1f4c28fdcb9bb325b1882d08c613a229473c47b9089db2cc047cf24bd573cf1381f6ebe41a74a1d79236b0a48f9a3b9d82f01073eb41fad1bf55a06bfddf8d621f1d494182b3590d00d49f347439a7e37c192e18353e5fc98aaf3f1bc8c3a9f02df970dfc193f2f86cc8083b808a082186caec4fc142e5467ce9f82a62ef4673fe90ccebe266f384c5eee1f3862ae02008942a5680c3ec07ecd104e45fdd4feedb0925305b805363d89ccbb516292dd743010f6673d364e9538505e81b6641918c182f0cbe938c804d95608011a4c858ed97b2834249692c35382c124450a99342de3725a10ccf28a72f8c68924d12e55065993138f49d9f82e5432af321329f2a9b8a5ba8fe07bb678ef38de26d79291d6d792067fc28a45a70581026945e858f86251547bdd4232e2e6f15ca70c77b4962023ef4842c34ef35866e9060f2cc5917a709936fd50bb76e5c1549e965ed13cbf052bf4f76f6e369c5e66634d19b6c9f4bd71982ef35864b7316304cadd4136bba272575a406bdf007841e066bfb8e1e78e1480b45bcf000c3543609584cd33ed8e0c321aa838781b6f9416907abf7457fa705e18142d9016f6f510dcf4dd9562ddaf0d66f8a70bf62b29e6e8f050d88a5832ea6523db4e2a04a5060a6c161cdc7d6ecc2c6c14433c08d2ac6e01af31cf07ac9f7e016fbe5e57bc91091c5acc2d06ee41ad97952702dbd464bee650118b261e8fe8a73fe71acddc7beb0aae60ce61f8535932faf54995f7745640a445a9ca15ef968aea503b648b3fe6a4aa6d004f0e9c805a2936ad8f6aabb03d8bd875879a1baccd6761b3abd8e697bbc596dcd59b7a1eab8143e33dd981ec9853a3bc8bbed7275287e10728cfa085e18d8b3595474cc4ff4b27897488aff602fcafe50d49cc64d363c6d94961f59a4edeb9e92642243dd0411906bc133c46b786a1d805b931d2eaa5727b62a32e94c84c5265eb5e664aa0bf2191c3832fbfefd464936ef6de2cfdc5378fbe33ca78f15cffad867c613eccf26ad0c023997d4a4512db8aa3de0468cb0262646b70be7e9ae1e72703eb6fecce700ca445919ff6cced2f32cee377eb2161d2544e674223267107e26344ce8def9035ac844094f3cc31618a4b212b6e1c50fd4aa033f9d51a2f6dedeebc8269de7d116fa985d92ac28ddf5a6fcb9f1acd21fd36a43bda1533d57b8916e3f594ebbb9462edec109a558e3c97658bf5c524608cb154a1148e6f2b45c30b81617d098d7209920588eee9efdc9a01149ef7e22228d62b9517baa92cc3c4459c9fa3c6bc2dc25f71126fd0593a826d4f84e95736da5b5aa99b27e435a6f3faa0a1311141d0d1d5f0485b92311fd7737d59a315665304d84e0cf116901715c6511e88ccc5afd19e9a7a21d3448db21720bd0ddcfea01430b92e4a7e32a0e7ccbe863ce0d671f68b0beb7de2f2ec67752bff9d8cd57701b522967d8c2fcace3025ec1ee7179d0c4b2767930bb0c94accd878a9cc0994dab28eacab0098aed056679d3fb14859dff71e359916d9270a8d5cbde2283cc4ddf0b2a223e6ff84bdac1d633431c00dc1ab53222a26befb9a08ff9b258c068970dec8e6befb13f024eacebee0ca6e067435bae1c8c418e56bb2a20c5bcd34f20d3978aa235bea3eeb36916ec82e9fa18381dbd293931eb45deff259f7158a67f6a8e72ce7f6ad3ed5fc8bfb163d3a74b3ed3731eecba0c165cb21f33922186a90826bd1d5d6d7d65724387c94caaeeaeba4ce50f9910b9d60e22b24824f961f11d738d958ebcc7acfe645010e26d3aab3508760a4ec46385a299fa93bbf6c4915252fc427d048de3acdcfdcaebf2ea8fa2175126ae22f9ec19c5d23a15676d5c0c6b428c492a94745ac0b956b14acd9b8743fd8f1cdec2342ae5ad0584213bcc540a58cc08afdf03ae5ed498c6234d11a6f90a96f111632439113f8849604244c38ed86489b3ea15eded77d7ab5b1b30db163bcb2e06cae3b56162cdb41b7a8a6a82f900be821f6d418350beac8ee949b9302937cb12b44aea6c5ac3bfa2bd645bf5bf106690ea7cb31d59745b2b9ed45e2b971727633449451e2411f76b9fbc954f1b5910a1163dce73c9f0cc6a421fca60b4abbc5b361d77bc3305ec6f3850680bc890a2664dfe30d71deeb3e7d686e82e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x15}]}]}, @NFTA_SET_ELEM_DATA={0x394, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "0e5fc09106b6e7669197269b4b10a61928a47247ed3e0012497c13eb41a47c13c237fb377557556e57ad651d936964cf61e258eebd462797d32efac23106f739070820964797e27578149845a9c759c5e1ecd5b9f3cf4a2e355de139b97afc4ddc8a6d51f3c7430d61724179dbc954e35368a6c45e8f0bc19f9de0c07ed71a8e18627c564a8b0cadd0b135c3c2acc0ed9787c9666683f6310d30b7d7d2e218446ca89b9ff7d167ee3886c31b8a15b75403e96a5f"}, @NFTA_DATA_VALUE={0xba, 0x1, "eee687716e253501c28dab2bfe55778f47596740145bfc19f66d0ec4b640a717b92b9a51c3c9eca7b05abf905650e0402d2e820b07af743622e3f47548a24bc3d910ffdc84fa9280734985a2780373d258686082f9d3499c1c883e041a37777304614680181d237668d6cd8fd8faa60472d77d93f679563f3b891a21335238429f50ad3580b5f60f0552dad70cf9d2e895671e3e7239c65033b40aa2579ccc295e65e0300a5654fecb97ed1db5f834b97f1d060d8554"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "54b8ade514ad644346e08ccefc1faa3456e1516958ab4be3662e369c92ac0a5f4957cad2bae52dc56cac73237c2ab754e3db519f8258e730a1"}, @NFTA_DATA_VALUE={0x9b, 0x1, "8d031f40acaa6f4e4c6cbc5b309159016b317ca73732116068e84c8a35e6c047b57a95f227b92eee49b0935fe4be8176bffbce1dfbc218509c4fd313711f9c7afd3c85054ddd75b86feacf2fbccd3d8e35a3a9815a93c287c2b9671885be99a72b03ba58da58faee64f2819986e2396af109e833f2c4aa76874a33fbc745b8d6ee30fe7447a5c0c18221478b161bafa4aa107dc50b4529"}, @NFTA_DATA_VALUE={0xd6, 0x1, "3236501030747943ab2f29fc7c6dfb13385dfe4fadf0981cc1b6184e63a4e98d7f8163944a19b7e0fb05ac5e8a419bb17b1e825046b62bee5eef76b927994933935aaeb6f5f67f3129d78365717f90b3f2dc37160c1909ff967c91eeb203343c8ae3adad86f00c0877553b00740d87be9c3f98ff7c3ca504c7348505a170a5c590db4388f9db32961eba82cf8d1d4d4cc292ec450bf1253981216f03a4adad5552cd452dffa3e5d6265d6914663b7ac3ccdf2dd04e1cc5337c6081bf1e5e0551a0c1b3d6d8ef6c5a6a939e0bbd4ce78bce44"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x11b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "2b8fa46ea9649e1247ae"}, @NFTA_DATA_VALUE={0x1004, 0x1, "54b8fb7786c79f36d0d7fc49c0655bf35f79a4473347240d0e5c0a025d0eabca6e9c3542be2ec743ff56ec7919f782a1e723a5b8a2b4246d9f188c7ed236fd021331b3a426d5ffd0c1a969ecddc17de9713918a0dec23d7cf34f013fdf7d542e19e9586421a61a5e14b09a919516508b1a54eb6ac9c2cfd3fe910784b2583ad9929f11b938b279a979edb82921bab12c78cce62e3fa2e53a109a6a4a448a42699de9fdc4b9dff9ccf2359dd6c4df1faee6dcb017d12980092228085042682f0e8e0bf48938c38a646d31f08ec870a2caadee7c798e96aba12ce4527f279f6ccbfb87584781ce4c16fab5b5219e47e031022d7b9720dc3786df3953467c1e50a4a77a62b8dfc90018108434ee24e05cd6923f872b3354052d6c74817ea35427e2b518e1bdcdf2e0cb38111763dcb5099a2e601dcec9a0683235083f206cdea1f8293156a07fe76dfb5bd01601c578f7bf8434783fbb4284a37ad1262ef723ea76d9c25e5a7210f98d8d23c47a838aad7d2a955654775a0319aec1a133ae57cd69d97df9d4f84844336849aabe64ae5ee6381ce1ad6bb4d1fcfabfa3e31880a927e59f652f61d2fd94f00690e97c6e61c5cf0f688e78acbc30e3fe4ea6d65b5cb19d98e0e5545b0c2db7a8191458b9bd6a0e02187b48d5032363e96d96938fa528d04f5e213f1e72ef2a26c084164559ef9a89a4a5944360385b05a7da5a1f684f35a6db28ed72aa7cb3dedc391da37cbab90db6dd7baca92ee95ea0fa21a041de96b19e8c7cd315b8044463eed80de7c6ee7264c8499c361ceb6788a4141f6e8682669d3b84d8c0a6b75e899b59c0e8cd87cd9f00041efab5a943a619e7e49c4c7880abff065a78557a771ae794521649f07e0991a1971d07ea972622892e541b1960d815833f9d026f9a3bbb2a30f8b48c7e359b891cb6e34bf4c87df462b07217ecc107826a8492a563ab81a4966a1a61fd4044f29e4ef0e4f2456f66d09c7baf28748a34930ad0e17d90e4bd27e676058803aaa8242f0bbfbe2ccc6d93934f0a20bc512ec17e7c111b138f5044bb1ef4b77d9dc4255983899471040f58aff7d8984e5e858e10526df8db6cb97ace4e2ce5beac526d7ccca5bc2f1fa14cb10ac5ad96eea00510165fd9ed686ac36beecc122b2d232875429d57c48b8d45d9e34d46bae59695b230d1a08926ebf55070b3fefebe17bb5fa0e00ba405baaa659047ea867fc905360a39de31cbfa44bb2f8bffabdf530c88e5cafcf5be3bbb35cc61d13bd7838162561801fb03d892c8837c372ea1b5eb71d20baebaa899cc2821e6e21eb583f61811b361f58ef6ec2135a6902b7c49070dff64cb92a3a58f0d43ddbf57b355eb2cdb14a96cc9fa134dc710067cebe437acb99282b13e3b8b90bff3fe5dfbf2ec5797556a7d917bcc79cc6cebcd270500bd793bb4ff2c0ffa6ca1be5ae6de70c1b94a8a1a7ded73701e7f064126c60a41bff351bc9fb2c7152b6be70ccb12085f9b3474bfd188d85fb7c00dde29dfc3a3297300cd7080f80feb3b3e2b346a4b96189f695ddcdad0e634736cf1ec4f28f7cd0d36797be446534585178e27eb31c138127ebd44c2a936641f9dfdc8012b72342068d9d8526c3c2251e0298c28b369c48d292deacecc2381243fc69a8473ba9d4dbea0a60f2247184bea1972b27a76922831944913698299b0ef86e323d37dacc1545a7bdd72923899b6528f32d7c15d88767fb326f5bbd8fdc1e751f94a72f316733acbf6f84f2f6727e91bff2a823a1c53cd3ddb6e34401c3e299ae618a8cfa28c1de872f32b3e91b82ef25091899362dde736a3c27915cd9ffe9ed97dbeb29e3cd08ae4bd0febcda77acc5a591512a071e1a15dd9ad8c30f4ebb67336386b5bf3a18b3e1b6cafc2e0c92f58a042203a8f135cc1c4b42ee0f2bbc8f990a519a133da62eb337fdd0d0bba5072dd39493b0612e5355e14a2716bd63b7a59ad8eddcfaedce60f5b412acc34ec68073b8993fa56424316d72aee640b56b05128ac61e4edb97713a506ce6af9ab311a25eb6fee47c7910573b7cc49e8d88a6ed9167233d69a03bdce12e09b7506ac290a88e5a0862576212dc1c3996232e33e60a727846b3defe22b873acffdbed47aadc90b186e3da488c1d3ab9f568ad1eb9c5545ca0e76d7a7975626ff5ddf1ddd30ba820481acde5e1561e521e3aa3c589f89f82e6f8adb32cfbdf28cf7b1f3c4a99ac647a99985f80bd7fcd32466b09206cea423221fdce8696d7f2f51e7a95f8ecfc1c57032060b94381cadaef134595ebc5bef8e3f6cbb3055ec3ad99a38ba4aefa3bcb0c7d55c51fee44e32815ab49d2c9af7a5c4ac4a89808a7d36e844d9f5e2029da036b546c61b4e09f613b00c30af89616ad63a530213691a9976a24669c815bfc1c8895e481973c05749d428e73321e8692b0de54af9cf5b71d4094ca6ec95307898433a22edafde6377321f5d2af1be78d991b2437fa2ed268be54d02edd0546f3a0a12644fc6006982318f18fb88acbe7e5feba10cbdc5110805477dc486da1422df59404846ade281b29b89f20fdc7f5f1e7196af1837b11582feb528ff77e19680970bcd7fd9ddf0fb66b7bf0d00139f91d52773fee5ef239033cd22227261fe8e112886aca8c938ff522e305bdeade226324926f04aa0ff83beecc09943263202e6d0fef4ead8b217f76de82b73469485e5481fa65e1a8dda70c63d9e7c98029d5ad7b9757534a91f7c4550d5a429df5121f588fc18384eb4f32c6b3f9dbe2b9bee81e20524e2920647600bfbf021acfb093c55242d11c9270d72233933cd9e8a2288bb64a597eb2db7da84bc430c5fa79e7b4dbae3cbcc7e6ea8f1254701bbf069dd32e4ad43d6dc0efa64d2be0de64eaf1932bac0ab9b9c567a87e9d0735083d3a36d56a69d9c77de5ef0f85d7418e0ae6b21e3bcb38faabd236f929602f5804b325a497a699553e2a5dcac6bb5d078ab1f469c7c97b26aa92fc3d87c3eb72852a8d2125470c00f2d8812ec31e838a525684f860987e716300cb034dd8a8c403c942f47d4f4dc572247e4ef09cd0165d1a3c38beb9ccb77c091332fd50dcb8c90bc44f3cac4cb1fe03e6a60c09b75eb06c856e9c75cdd08ad4c061545d630eae65a1136ab096da812af885acddd2be6cb446d1cdfbf1b4d503704c7acb7f7094d0820a457ae6b7dc43a0c1adff77ae913a213399b8edbc52299dd215c79c1a56ebaca56b0f77bd9af1d31528f1d3b0ff27c464c7d24e61d46d610239386974596c88cf3110a80c384899b6f53fc8136cdcc72c9c77aa6e81dcbf42071f5b852039b1b004733e5af07e8152d0a6f94a8c4cbd4486f054fe256d075311ba5bfe3dcfbe64606ffc84282a4b86f96fa9ea2c95e6698245d75088df10fec0153c792e66eaefc698a3a82a0221c8db43ca9fdd7ecac66f9ea77da0c4b475cd09f4e99709e229c69db98322f809f3443749ea0b403bb2ae2ee55feec0361ddc2be2a87138d74ffb3ff5c3037dea8e5c327fd62340c4a5cd7aa8d2c94d248cc8000df11b7ca3857f592d612ba3863780e413cdd516dae7fbfe489dc4401d888b3e295d4c0cd17886d44ae580a736e814a3ccbe39bf7b6e28fffab6e061a5dce11bab82a90d4816b2f0f2a2e7d51d200454082a182ecedba04db318e35a7c3cf3df186a3bf89301860b2a85ec3a187372cd09d56ce5056ffcc14b25357f80d5c2fc65ffd85f6af828c46e25dddbaa2343f02f46ffc0fb6a7f2a19b1fbc098d88e3e77e714537b50c35c0d454667dea6c61193475fd08526baff834f8a60fb4b28faabdf530323526d08f3e5a7fe8f7b211a118fab8b73b9f341b464161f2581c72fa9cf14987150f9ba3fd8287fff092c5fa6450ef62137d879a168c3de813857050683af763541f51b401b07479c1519a8265b1b47a5524f3c00a96a4ee683885d9cecd99966179448a036a1baf62992429cd9c9d17b6dee54b4d5ca41189b4587a26b13dad2e62ecfda7bd1d8f752aab3ca1846efdf1612a4a5d7b6582197eb83c49d0a9a39044687058f5c842c2a2c7b7db9946d2c2cba73c77cbf7a0c3e4b1ee750c1198a706f647ee6271894b9d7a6ad55179cb432ca672632834edde35bbd6488b378803c7b1726520a95879e084651e4b3db8007c87dca9f2205a9e5b62196c37111909999e95a83ce1bc3dbf21235281c0047aa52c2071942af5191358d184f5f59efd419efd5dc9e51962ef16109d6650af1f3a6d10ab8a7497ecf1e68d8d4bbe9e5f7c08c21db6af5976c8c21a4d4026a3ca4d09c88e0efbbbd592f1e81bd64fd717be008cf239174423acac247a82d055c143689a89f06d7c8c24584fb0e129111669de427b843b4cf74cdb56dd5bbd8709050c7a2a3c90665bf52b8b4d594ea755e6f3005d18b4c9fa27bff51a9b3e58225029f24c9cf7a1cb75855c8c9b665d5b30105694823e65210d207dd11004c87b3706a2b6f47dce585d5733956626fb36733cd1a0e07a06ee23763e77ca77254208a2e2009ac76c27b7d20a09ddd56dd0612e303a6c93a792cb2b00703b886718d5ae51e80035ef186c868121d878708706eb0e7d4f4fcd2958164d408104ab46efe23a1c1ad372a246d69582e29d05bc54fa416512085f034e0b1a038a5310090e753dbbc4c5640b0573800f7d725cca9bdc47230ef6f36ee63409e2d48d8b774bda46cd542c6f6096a74915c309e6645ce7651c11f05d0e511fbd9fa0443c8f9e03f4ceb96d4ed2679d4490d5bf11a75ab90e2a9eb552b8f577903c02d3a4cc49a7fd9702061d017f018ec2b4329fd166da2d5c674b5a3bf09f52f82ab31d3c417c5db23993c81a7a88472e0ebe322a6834ae5fd483f2f90499f9b80463185c61be9a4c06629384a660c00e216d086aab79fbd8c9dd8a0fef6fada34faf9739789da5fb310c568c44b9a10c81d32f6e0f1c9cb45a8a818c93d75cd39aa4bc9c2d784e37b23c2d03e52f5ed877090873f762475ac5724c5326abf4e1bf9b9e814331a433856da6ba6668785115a45daaa8a41d7a9c8003232d29c601d082ec01f7bb4edc4d041007c7b7b8fed8738acc15483810b26e8e5e77a744af65732820d16d92f091a8dd4ff4dfac085d3ea3b9986021ab7e12e3169581ea84b778895fb022481c255a8ae4a9de93678cdaea62ccd59a37ae472ac9aea47b109309f3e33901641ecae4d87f943f4f34213bc9861b83f8e2ed868b15f5d066a2ec96c73836e25eeaf03adfe7248fe75207abb9fe50621bb200d05dba449b7a5b4c798f58939ec698d06aa800944bfc490aad0ac849ce32283a972e64acc18bb2114a4f6675b1d3913128e2dee4c76cc2fa95da2fd9fe192fb1b82a517923a729509d4c1016da63e222329a042630b4d2b62d6cffaf736b10c72dff71e666d8b3d97cbc3259f98d1eaf8b996faaae4a9e7a4009f3ed05399d2b1a2e691d14f83a0384b97aae506552e32410d5350c29274c6a2f7d1b13d2a5f9f0ac2b5a0ee2375c6e47b22ed51be571e21de989159168f61343253cf845571318c97118b3c167f41751363c13a2ef631ea7c070f7b93f19796d4fca9f1e760e28f32a9f51deef785ecb688a1052b1503c59f2b23a603b62fe3e21f2440cfda042f3d45fb5cbea26ab7702a64efa1eb91ed1dcbbd25e2e8deb4bf633c0fb2de42aa6989fe74426fc27ea4c44a7806cbc02b1a9edf3f09a704374b79b2311a7142322e678dd7f702612f23ced734b2091443dd1b13931c8965907f88912b22cbfac418973d4d404814e66e49d"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8c8c03b2e4c3d72c}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "a865e3e7808137e2f13781cf84f798dec512bca93ad8ee1b6661c6ad05cf3d8a6ef24717a7795396dc31377cab9afa0e01e2f30b46765f30861cdf11429e09264cf0eeff816c2c947e4126b19b964faa829768acd5d46f1edeb18c16b0b2d07da9344c836605b73984a4d66f607d2286df108a0ffbf3b3c97b7a1d66b736866aeea405ab9736"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8, 0x1, "b52bf710"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x46c, 0x3, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xab}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0xb7d7908e2a3c4a45}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, {0x4}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x120, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd, 0x1, "f941d09faff85d50cd"}, @NFTA_DATA_VALUE={0x8d, 0x1, "65e64a6247b020f6cbc006002575bd16901aec0a092dc5586fffeb39b0a55bf4536f6be4b2c1e15dee77db9d40561fdd81f6be4d2f3662c8a96baa080563d4675fcd9fe1de25d019622f6eec6b910d80d7be8fccc9123b8845a96e263bdd55182c9158f85b344e07fe88e1f58569258e1aae09e46f43720c4dbccc7826a955e81db72cc98ae535ac87"}, @NFTA_DATA_VALUE={0x5d, 0x1, "9ce912e40cffbb381df83e66f9f23ae4dc189c9d827c23cadd75fea5932bd93eb56b551c3bf5d245263cc6247076aac2efb7290a25af8a31362801089b66a9bb876933273874d2362b8d28469533a00490196c452411ecb7ca"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x88, 0x1, "2aa78361e46fa69e8bde62343c709b63b56a85470e87faa80dd4120349ba55b10cdf5104903f32d6ad7c78f741e039d4b85c979ce6d211b93c21af20a0d14a778810b282f012501698154d63e67a6e79430e626e98bc14b93ba1eed0731687f15b616e30d3060d68b2d69ee03bbf780c60e69fb7537a6ca05dbf5c055b1c5bef5d6de7f6"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4f}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_QUOTA_FLAGS={0x8}]}}, @NFT_MSG_DELSETELEM={0xbc, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x84, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "7ed8723cf16e3dd1fd3fb468d540842f4420c19e3f1e3cfc9aa9532ab347e9d09045bfae1c13d7bbbec2c3d28f131aba402b2058ebd2fa48387e3026255f17cfb9ddb0ec04cb6f38d537d0f829fde3b2330c732d35a85322af1c866e9746a1d0cdfe311b79c6959883d5"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xab, 0x6, "ba45f615028ed8ebbfbf78ce5958d01f2b380349ac5c378e444f7b2665192c0897adf12c6043b672fd5ed3543e95e00cd20af264ca365a6bc949e05dc235445ac3bb91c63eba6761655cd05e9eecd9b7e7be6014db758789d11fe364284a0cf3bb7926758f2cc362891b4c03296ec48d502bc2eeefa5a2896012ba984ed7a323813909e80c5804dfb9c7c97b99919ed78ea79a023698b74ad46fd736fa17c4deb1afbe134d8672"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40129d78}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6fd5f983}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3220}, 0x1, 0x0, 0x0, 0x80e0}, 0x4000000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000003b40)={0xa6b3, 0xff, 0x7, 0x4, 0x6}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003c00)={'syztnl0\x00', &(0x7f0000003b80)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x9, 0x6, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7800, 0x80, 0x8, 0x339}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000003cc0)={'ip6tnl0\x00', &(0x7f0000003c40)={'syztnl2\x00', r10, 0x2f, 0x9, 0x9d, 0x5, 0x50, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x700, 0x2, 0x6}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000003d00), 0x101802, 0x0) ioctl$TUNGETVNETHDRSZ(r12, 0x800454d7, &(0x7f0000003d40)) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000003e40)={&(0x7f0000003d80), 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x20, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x43d6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x800) bind$inet6(r9, &(0x7f0000003e80)={0xa, 0x4e22, 0x5, @mcast1, 0x3}, 0x1c) 1m32.669112313s ago: executing program 2 (id=2571): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x398, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf270}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "53701b31395599bc40bb4690258a44de47b59ef8784cfc2d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe87}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d203252}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "344802334ee9464937800738fd1d9c799816efc5dc6e8b22f454af35ad7921b76d"}}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "a900315a5b8eef1a3c54314697ef57b09841a7645f85b37e459b7b64482617bead7c46313156ba7456f668cfbc7cd7c20f764ba9f54ef4e03b0891389bcba4f5eb9123b6b0143363e5dea8775e2d21e15eef23a3f450d74bda2fc49f26c4a6fbe78122cec04db9e65c8ad3e2376cae7b51e0d7e97d26d8902a8f49572abaa68843126b4bb0f414356a336cc4023f0b5f40f116f0ada0f2b46baf0a1823a12b240ed1064a9f49038b09c716eae61459604c718bc1569a56f46c715a"}]}, @TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "a988471385d83a8d4a429e1f5283870e28b72de53407272d13313cc484d951ebc0d30ca9ce4ecae56faaca35e1a8129321b0177c1c78b5711c93db22c8e74c69930bdaf102adebd5d787b161cab9d1bf3eb74b10a966dd914b68a520f8cb3337936d690a9ab2b9a1a69cb93e52412a4bc85363f18944e9a1d4619beaa993ca0980ce84407edebeacaeab6f0d6631869409ef5120861575b5ef1e23c9e23e8b459df3d4fbcaac636f2f32420508e817934a1845d4831d82e99e76ae029f596c91475b9a47999d651de68ee5aaee34e472118f1646071598a03d07756ced96f6184a45914a6a100924dd29486357ca9b43819010d2130a8a95"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "0ea40588732fe739165eadf0783094d3a488f0a30ff90f6a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "774a630dd03951c6dbcf24f3beadfcf36bd745b66f4364a7b7cebb27caaf"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x58d5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x8040}, 0x80) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000480)={0x8, 0x1ff, 0x2, 0xdca8, 0x8}) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x0, 0xbd, &(0x7f00000004c0)="babf452c136d38d057ddc386d2373a0207f2fde1f1a9fc87b06e4d8bac04b8e1dd8797e718f3bfe0db4d4cc9e05d3c33d4df04c8e2b900a7af5cf2197d0f8be73fe46c8d22ef708e98bbdea73c31f6208ba4c35941c5121c7526195f2f0857eacc7a648c0bd6c78ebbc2acb03e0992d6e52b779955793007fb90dda71a5abc4d52d37ad4d52ca1b61c07a05111b3bbe5bf552d8385ee56875a618978f7fa67d428b7d1d092d1fca9962af618e1f071e6f5e8ed2d79325daf10d54d2ab3", 0x1, 0x1}, {0xa, 0x8a, &(0x7f0000000580)="787e1b1fc7663b03fb9d8356e3e2da7a97226de7cfffb1000acee831796a5b4a5fe07506ba7dc50929fcfb26c057daf5d8fa9c02e513741adf5ff9079b51c4e3bcd35aad9441f7bfd0a8008920c98ebb4ece4c1f38d1640f2ce626271c502a067149283821de81b559ddc66a32f6b71541ae4463f54ad0f751a1e4b6d15e061305a4318576b6f733f995", 0x1}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000006c0)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000700)=0xc) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000740)={{0x2, 0x4e24, @private=0xa010102}, {0x306, @local}, 0x5e, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 'veth0_to_hsr\x00'}) getpeername(r3, &(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r1) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0xf, &(0x7f0000000940)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @map_fd={0x18, 0xe, 0x1, 0x0, r6}], &(0x7f00000009c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x34, r7, 0x8, &(0x7f0000000a40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x1, 0xf, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000ac0)=[{0x1, 0x5, 0xa, 0x2}, {0x4, 0x2, 0x8, 0x1}, {0x0, 0x5, 0x4, 0x5}, {0x4, 0x5, 0x10, 0xb}, {0x1, 0x1, 0x8, 0x1}, {0x1, 0x3, 0xa, 0xb}, {0x5, 0x1, 0x3, 0xb}], 0x10, 0x2}, 0x94) r9 = accept4(r3, &(0x7f0000000c00)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000c80)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000cc0)={r2, 0x9}, &(0x7f0000000d00)=0x8) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f0000000d40)={0x2}) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000d80)={0x1ff, 0x4, 0x6, 0x80000001, 0xcd4}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', 0x0, r7, 0x4, 0x1, 0x5}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x7, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x2e, 0x0, 0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f0000001000)=""/235, 0x31, 0xeb, 0x1, 0x6, 0x10000, @value=r5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000011c0)={0x80, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000e40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7fff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f00)='syzkaller\x00', 0x6, 0x61, &(0x7f0000000f40)=""/97, 0x40f00, 0x1, '\x00', 0x0, 0x1b, r11, 0x8, &(0x7f0000001140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x0, 0x9, 0x5, 0xffffffff}, 0x10, r12, 0x0, 0x0, &(0x7f0000001200)=[r6, r6], 0x0, 0x10, 0xa13}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000001300)={0x1, 0x7}) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)={0x1e4, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79f42cbf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ec1431a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf722}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b8a7a2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f1bc43d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28b18e36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5208}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9987}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f8abd95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c205ad8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74f8d484}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a39bcd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x475aca3d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8637}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb70}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35248408}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46c5bed5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f520620}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f4df023}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x336c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc2bbb6c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49b3ffc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e59693f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xab1bed4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406c21a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cd10df4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d81fe7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x44010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001780)={'erspan0\x00', &(0x7f0000001640)={'syztnl0\x00', 0x0, 0x7, 0x80, 0xc3, 0x10, {{0x3e, 0x4, 0x3, 0xc, 0xf8, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0x23, 0x70, [@loopback, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @loopback, @private=0x9, @empty, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x71, 0x3, [{0x5, 0xf, "17af837a04f8fb780f54b8a457"}, {0x6, 0xe, "7146306c5d41c466a37d804e"}, {0x7, 0x9, "e82825ef1b82bc"}, {0x7, 0xa, "51bbaa1678a72156"}, {0x2, 0x12, "1025bf007613ac5e444da0b2b796c0c5"}, {0x6, 0xd, "5c26d381c9a5570c0c4074"}, {0x2, 0x11, "41a3f7693c98863b59a93ce99bb02c"}, {0x5, 0xb, "500b97be4ae6f20c0c"}]}, @rr={0x7, 0x23, 0x5b, [@local, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @rr={0x7, 0x1f, 0x3a, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @multicast2, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f00000018c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x94, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x40, r14, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x100008a3) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001a40)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001bc0)={@fallback=r11, r8, 0x10, 0x21, r15}, 0x20) 1m32.353981444s ago: executing program 2 (id=2572): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000002c0)=0xc) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) bind$unix(r7, &(0x7f0000001300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', 0x41}) (async, rerun: 64) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e24, 0x7, @mcast2, 0x7}, 0x1c) (async) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2460e6"], 0x64) (async) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0xfffd}}, 0x71, 0x0, 0x0, 0x0, 0x0, 0x4080}, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x363e7b0174693de2}, 0xe) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000001380)=0x3, 0x4) (async, rerun: 32) r10 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000013c0)={0x2017be01}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) 1m32.061512648s ago: executing program 3 (id=2574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000500)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x8, 0x7ff, 0x8001, 0xc}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000005c0)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m29.665514668s ago: executing program 4 (id=2577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0xffffffffffffffe8, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0xffffffffffffffe8, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x20040000) (async) 1m29.664543057s ago: executing program 0 (id=2578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) (async) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0xfffffffe}, 0x50) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r6, @ANYBLOB="080002000000000014000c00fe880000ecff00000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$inet6(r8, &(0x7f0000000200)='test\x00', 0x5, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) (async, rerun: 32) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000090601020000000000000000027e0000000900020073797a300000000005000100070000002c0007800c0001800800013de7ffffff0c00148008000140ff00000000ffffffff000000050007000600e6"], 0x54}}, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r13, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001800800"], 0x64}}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) 1m16.703795659s ago: executing program 1 (id=2580): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xd8}], 0x1}, 0x44004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540), 0x4) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000580)='nr0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000006c0), 0x4000000000001f2, 0x0) bind$can_raw(r6, &(0x7f0000000780), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000900), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000980)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f00000009c0)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbb020000004000002c000000008002907800000000e000030044041a010d0090780040000f0000810300000000000000bd"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000a40)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000a80)) 1m13.35200047s ago: executing program 32 (id=2572): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000002c0)=0xc) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) bind$unix(r7, &(0x7f0000001300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', 0x41}) (async, rerun: 64) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e24, 0x7, @mcast2, 0x7}, 0x1c) (async) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2460e6"], 0x64) (async) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0xfffd}}, 0x71, 0x0, 0x0, 0x0, 0x0, 0x4080}, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x363e7b0174693de2}, 0xe) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000001380)=0x3, 0x4) (async, rerun: 32) r10 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000013c0)={0x2017be01}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) 1m10.054165975s ago: executing program 33 (id=2574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000500)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x8, 0x7ff, 0x8001, 0xc}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000005c0)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m7.397878089s ago: executing program 34 (id=2578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) (async) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0xfffffffe}, 0x50) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r6, @ANYBLOB="080002000000000014000c00fe880000ecff00000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$inet6(r8, &(0x7f0000000200)='test\x00', 0x5, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) (async, rerun: 32) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000090601020000000000000000027e0000000900020073797a300000000005000100070000002c0007800c0001800800013de7ffffff0c00148008000140ff00000000ffffffff000000050007000600e6"], 0x54}}, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r13, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001800800"], 0x64}}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) 1m6.657023108s ago: executing program 1 (id=2584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54}, 0x94) (async) r1 = socket$inet_sctp(0x2, 0x0, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7d, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x1005, 0x402}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000740)={r2, &(0x7f0000000640)='\x00', 0x103000, &(0x7f0000000680)={@align=0x8001, {0x0, 0xe4d, 0x3000000, 0xd4}}, 0x5, &(0x7f00000006c0), &(0x7f0000000700)=0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x12, 0x0, r5, 0x1, '\x00', 0x0, r6, 0x4, 0x1, 0x1}, 0x50) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000440)={r4, 0xffffffffffffffff, 0x80000}, &(0x7f0000000480)=0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m3.924308303s ago: executing program 35 (id=2577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0xffffffffffffffe8, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0xffffffffffffffe8, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x20040000) (async) 54.26143689s ago: executing program 1 (id=2586): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x5, 0xfd90, &(0x7f00000005c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x1f3, 0x10, &(0x7f00000006c0), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000700), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.820762189s ago: executing program 1 (id=2587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000c7ffd302253d231c65c493942559c430ef8a5b43b8a8dd1b44c1161e8be25570be88a1cb28ccde527685c1e678e59f84c02438a51a50c4d011e7373f75933095a8ae775408c4314e79ebad9daa89", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c"], 0x64}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x1}}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000840)=r5, 0x4) bind$netlink(r4, &(0x7f0000000880)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b000100627269646765000018000280090014"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmmsg(r3, &(0x7f00000009c0), 0x4000000000001f2, 0xfc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[], 0x3261e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000001180)="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", 0x1000) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x208}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x220, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x0, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x0, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan0\x00'}]}, 0xfffffffffffffe62}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 33.069222302s ago: executing program 1 (id=2588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES64=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES16=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x24020400) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)}, 0x10022) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000800), &(0x7f0000000900), 0x3f, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r5, &(0x7f00000009c0), 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x9dac, @loopback, 0x7f}}}, 0x3a) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x14, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="015363f93a33f162bd5cbb03416b7c337cfc9e0bac47192f0fb9207184ac194b27d656d78b18db398e96e4b9da7fadc2f73338d79c408a3d45f414308dbfea3a4fa8c54a590851342d448bbd4e2bad01742a644ea264c02f27e84da92f0a1a18a5c775624e9951a1eb02528c9d13e4ca381670bcdfe9feca28bc17f2db087c47ac44472f6a0450201bb0a1ca53480234f81691c66e686983dc331bbf7d27d7bdd1bc", @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000d8490000010000000d480000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000056a0c2d1e18095271e000000d500000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b709000000000000739af1ff00000000ce09020000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000edff55080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003"], 0x9c}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x4f}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 20.499434333s ago: executing program 1 (id=2589): setsockopt(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000180)="49548becdb6c644aed03e70e53911d5e4ff8ba53ed27cb1f8e3b8135ee66b8b8ad0d239073cf00c576eef31b3dd45e340e2d33d0b6105c239affe6df2283a22e474eb295643a74a183c027f973e8e5cdc4c58d559c1d8f52bf4ef7caf9ef6922b8ad9cda49f4fae7ae9a8ce2c44b76835327deb93911e06b4ed46351124113ff9fe018ea903f5ce98a8576a26823162d0acb405815dea59bcc1d560b9c08946bd7122b5a9932b6ae194f55ff9e6611fceed1ede8734ab050d818d4e22739c44d7deea6c1197f7b7c4fb0304030f3af9dc6e9ee8d6c394a0822a51b3c34429fce7fbd0ed0aef9d7d5af78d61375d694f8a7b1", 0xf2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x348bf}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 0s ago: executing program 36 (id=2589): setsockopt(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000180)="49548becdb6c644aed03e70e53911d5e4ff8ba53ed27cb1f8e3b8135ee66b8b8ad0d239073cf00c576eef31b3dd45e340e2d33d0b6105c239affe6df2283a22e474eb295643a74a183c027f973e8e5cdc4c58d559c1d8f52bf4ef7caf9ef6922b8ad9cda49f4fae7ae9a8ce2c44b76835327deb93911e06b4ed46351124113ff9fe018ea903f5ce98a8576a26823162d0acb405815dea59bcc1d560b9c08946bd7122b5a9932b6ae194f55ff9e6611fceed1ede8734ab050d818d4e22739c44d7deea6c1197f7b7c4fb0304030f3af9dc6e9ee8d6c394a0822a51b3c34429fce7fbd0ed0aef9d7d5af78d61375d694f8a7b1", 0xf2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x348bf}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) kernel console output (not intermixed with test programs): 5][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 280.944882][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 280.980714][T12178] xt_ipvs: protocol family 7 not supported [ 281.166798][T12192] x_tables: duplicate underflow at hook 1 [ 281.195938][T12194] x_tables: duplicate underflow at hook 1 [ 281.245290][T12196] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1490'. [ 281.284532][T12200] netlink: 'syz.2.1492': attribute type 21 has an invalid length. [ 281.315499][T12200] netlink: 'syz.2.1492': attribute type 6 has an invalid length. [ 281.315522][T12200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1492'. [ 281.786457][T12228] netlink: 'syz.0.1503': attribute type 6 has an invalid length. [ 281.788170][T12228] netlink: 'syz.0.1503': attribute type 6 has an invalid length. [ 281.891017][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.013268][T12237] tipc: Started in network mode [ 282.013287][T12237] tipc: Node identity , cluster identity 4711 [ 282.013300][T12237] tipc: Failed to obtain node identity [ 282.013324][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.013476][T12237] tipc: Started in network mode [ 282.013484][T12237] tipc: Node identity , cluster identity 4711 [ 282.013495][T12237] tipc: Failed to obtain node identity [ 282.013516][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.013657][T12237] tipc: Started in network mode [ 282.013666][T12237] tipc: Node identity , cluster identity 4711 [ 282.013675][T12237] tipc: Failed to obtain node identity [ 282.013703][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.013845][T12237] tipc: Started in network mode [ 282.013854][T12237] tipc: Node identity , cluster identity 4711 [ 282.013864][T12237] tipc: Failed to obtain node identity [ 282.013885][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.014025][T12237] tipc: Started in network mode [ 282.014034][T12237] tipc: Node identity , cluster identity 4711 [ 282.014044][T12237] tipc: Failed to obtain node identity [ 282.014065][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.019760][T12237] tipc: Started in network mode [ 282.019776][T12237] tipc: Node identity , cluster identity 4711 [ 282.019790][T12237] tipc: Failed to obtain node identity [ 282.019813][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.019967][T12237] tipc: Started in network mode [ 282.019976][T12237] tipc: Node identity , cluster identity 4711 [ 282.019986][T12237] tipc: Failed to obtain node identity [ 282.020008][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.106286][T12237] tipc: Started in network mode [ 282.106301][T12237] tipc: Node identity , cluster identity 4711 [ 282.106335][T12237] tipc: Failed to obtain node identity [ 282.106364][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.106515][T12237] tipc: Started in network mode [ 282.106523][T12237] tipc: Node identity , cluster identity 4711 [ 282.106533][T12237] tipc: Failed to obtain node identity [ 282.106554][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.106722][T12237] tipc: Started in network mode [ 282.106731][T12237] tipc: Node identity , cluster identity 4711 [ 282.106740][T12237] tipc: Failed to obtain node identity [ 282.106761][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.106901][T12237] tipc: Started in network mode [ 282.106910][T12237] tipc: Node identity , cluster identity 4711 [ 282.106919][T12237] tipc: Failed to obtain node identity [ 282.106939][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.107084][T12237] tipc: Started in network mode [ 282.107093][T12237] tipc: Node identity , cluster identity 4711 [ 282.107102][T12237] tipc: Failed to obtain node identity [ 282.107122][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.107261][T12237] tipc: Started in network mode [ 282.107269][T12237] tipc: Node identity , cluster identity 4711 [ 282.107279][T12237] tipc: Failed to obtain node identity [ 282.107298][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.107466][T12237] tipc: Started in network mode [ 282.107474][T12237] tipc: Node identity , cluster identity 4711 [ 282.107483][T12237] tipc: Failed to obtain node identity [ 282.107502][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.118832][T12237] tipc: Started in network mode [ 282.118847][T12237] tipc: Node identity , cluster identity 4711 [ 282.118860][T12237] tipc: Failed to obtain node identity [ 282.118882][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.122146][T12237] tipc: Started in network mode [ 282.122160][T12237] tipc: Node identity , cluster identity 4711 [ 282.122172][T12237] tipc: Failed to obtain node identity [ 282.122194][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.122381][T12237] tipc: Started in network mode [ 282.122390][T12237] tipc: Node identity , cluster identity 4711 [ 282.122399][T12237] tipc: Failed to obtain node identity [ 282.122421][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.122562][T12237] tipc: Started in network mode [ 282.122570][T12237] tipc: Node identity , cluster identity 4711 [ 282.122580][T12237] tipc: Failed to obtain node identity [ 282.122600][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.125017][T12237] tipc: Started in network mode [ 282.125028][T12237] tipc: Node identity , cluster identity 4711 [ 282.125051][T12237] tipc: Failed to obtain node identity [ 282.125072][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.125212][T12237] tipc: Started in network mode [ 282.125221][T12237] tipc: Node identity , cluster identity 4711 [ 282.125230][T12237] tipc: Failed to obtain node identity [ 282.125250][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.125412][T12237] tipc: Started in network mode [ 282.125420][T12237] tipc: Node identity , cluster identity 4711 [ 282.125430][T12237] tipc: Failed to obtain node identity [ 282.125450][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.125585][T12237] tipc: Started in network mode [ 282.125593][T12237] tipc: Node identity , cluster identity 4711 [ 282.125602][T12237] tipc: Failed to obtain node identity [ 282.127793][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.127995][T12237] tipc: Started in network mode [ 282.128005][T12237] tipc: Node identity , cluster identity 4711 [ 282.128015][T12237] tipc: Failed to obtain node identity [ 282.128036][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.128178][T12237] tipc: Started in network mode [ 282.128187][T12237] tipc: Node identity , cluster identity 4711 [ 282.128196][T12237] tipc: Failed to obtain node identity [ 282.128216][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.128384][T12237] tipc: Started in network mode [ 282.128393][T12237] tipc: Node identity , cluster identity 4711 [ 282.128403][T12237] tipc: Failed to obtain node identity [ 282.128423][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.128593][T12237] tipc: Started in network mode [ 282.128601][T12237] tipc: Node identity , cluster identity 4711 [ 282.128611][T12237] tipc: Failed to obtain node identity [ 282.128631][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.128779][T12237] tipc: Started in network mode [ 282.128787][T12237] tipc: Node identity , cluster identity 4711 [ 282.128796][T12237] tipc: Failed to obtain node identity [ 282.131209][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.138356][T12237] tipc: Started in network mode [ 282.138371][T12237] tipc: Node identity , cluster identity 4711 [ 282.138382][T12237] tipc: Failed to obtain node identity [ 282.138404][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.138555][T12237] tipc: Started in network mode [ 282.138564][T12237] tipc: Node identity , cluster identity 4711 [ 282.138574][T12237] tipc: Failed to obtain node identity [ 282.138595][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.138783][T12237] tipc: Started in network mode [ 282.138792][T12237] tipc: Node identity , cluster identity 4711 [ 282.138802][T12237] tipc: Failed to obtain node identity [ 282.138822][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.140590][T12237] tipc: Started in network mode [ 282.140602][T12237] tipc: Node identity , cluster identity 4711 [ 282.140641][T12237] tipc: Failed to obtain node identity [ 282.140663][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.143189][T12237] tipc: Started in network mode [ 282.143201][T12237] tipc: Node identity , cluster identity 4711 [ 282.143212][T12237] tipc: Failed to obtain node identity [ 282.143239][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.143506][T12237] tipc: Started in network mode [ 282.143516][T12237] tipc: Node identity , cluster identity 4711 [ 282.143525][T12237] tipc: Failed to obtain node identity [ 282.143545][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.143702][T12237] tipc: Started in network mode [ 282.143711][T12237] tipc: Node identity , cluster identity 4711 [ 282.143720][T12237] tipc: Failed to obtain node identity [ 282.143740][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.144126][T12237] tipc: Started in network mode [ 282.144136][T12237] tipc: Node identity , cluster identity 4711 [ 282.144146][T12237] tipc: Failed to obtain node identity [ 282.144166][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.155624][T12237] tipc: Started in network mode [ 282.155639][T12237] tipc: Node identity , cluster identity 4711 [ 282.155650][T12237] tipc: Failed to obtain node identity [ 282.155704][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.155856][T12237] tipc: Started in network mode [ 282.155865][T12237] tipc: Node identity , cluster identity 4711 [ 282.155875][T12237] tipc: Failed to obtain node identity [ 282.155895][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.156037][T12237] tipc: Started in network mode [ 282.156045][T12237] tipc: Node identity , cluster identity 4711 [ 282.156055][T12237] tipc: Failed to obtain node identity [ 282.156075][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.156214][T12237] tipc: Started in network mode [ 282.156222][T12237] tipc: Node identity , cluster identity 4711 [ 282.156232][T12237] tipc: Failed to obtain node identity [ 282.156252][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.156411][T12237] tipc: Started in network mode [ 282.156419][T12237] tipc: Node identity , cluster identity 4711 [ 282.156428][T12237] tipc: Failed to obtain node identity [ 282.156449][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.156588][T12237] tipc: Started in network mode [ 282.156596][T12237] tipc: Node identity , cluster identity 4711 [ 282.156606][T12237] tipc: Failed to obtain node identity [ 282.156625][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.156818][T12237] tipc: Started in network mode [ 282.156826][T12237] tipc: Node identity , cluster identity 4711 [ 282.156836][T12237] tipc: Failed to obtain node identity [ 282.156857][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.156992][T12237] tipc: Started in network mode [ 282.157000][T12237] tipc: Node identity , cluster identity 4711 [ 282.157009][T12237] tipc: Failed to obtain node identity [ 282.157031][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.164949][T12237] tipc: Started in network mode [ 282.164964][T12237] tipc: Node identity , cluster identity 4711 [ 282.164976][T12237] tipc: Failed to obtain node identity [ 282.164997][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.165161][T12237] tipc: Started in network mode [ 282.165170][T12237] tipc: Node identity , cluster identity 4711 [ 282.165179][T12237] tipc: Failed to obtain node identity [ 282.165204][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.165373][T12237] tipc: Started in network mode [ 282.165382][T12237] tipc: Node identity , cluster identity 4711 [ 282.165391][T12237] tipc: Failed to obtain node identity [ 282.165413][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.170289][T12237] tipc: Started in network mode [ 282.170332][T12237] tipc: Node identity , cluster identity 4711 [ 282.170344][T12237] tipc: Failed to obtain node identity [ 282.170367][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.170524][T12237] tipc: Started in network mode [ 282.170532][T12237] tipc: Node identity , cluster identity 4711 [ 282.170542][T12237] tipc: Failed to obtain node identity [ 282.170562][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.170718][T12237] tipc: Started in network mode [ 282.170727][T12237] tipc: Node identity , cluster identity 4711 [ 282.170737][T12237] tipc: Failed to obtain node identity [ 282.170759][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.184750][T12237] tipc: Started in network mode [ 282.184763][T12237] tipc: Node identity , cluster identity 4711 [ 282.184774][T12237] tipc: Failed to obtain node identity [ 282.184795][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.184941][T12237] tipc: Started in network mode [ 282.184949][T12237] tipc: Node identity , cluster identity 4711 [ 282.184958][T12237] tipc: Failed to obtain node identity [ 282.184978][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.185122][T12237] tipc: Started in network mode [ 282.185131][T12237] tipc: Node identity , cluster identity 4711 [ 282.185140][T12237] tipc: Failed to obtain node identity [ 282.185161][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.185295][T12237] tipc: Started in network mode [ 282.185326][T12237] tipc: Node identity , cluster identity 4711 [ 282.185336][T12237] tipc: Failed to obtain node identity [ 282.185357][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.185492][T12237] tipc: Started in network mode [ 282.185501][T12237] tipc: Node identity , cluster identity 4711 [ 282.185510][T12237] tipc: Failed to obtain node identity [ 282.185530][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.185706][T12237] tipc: Started in network mode [ 282.185715][T12237] tipc: Node identity , cluster identity 4711 [ 282.185724][T12237] tipc: Failed to obtain node identity [ 282.185745][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.185881][T12237] tipc: Started in network mode [ 282.185889][T12237] tipc: Node identity , cluster identity 4711 [ 282.185898][T12237] tipc: Failed to obtain node identity [ 282.185918][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.186065][T12237] tipc: Started in network mode [ 282.186073][T12237] tipc: Node identity , cluster identity 4711 [ 282.186083][T12237] tipc: Failed to obtain node identity [ 282.186103][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.210166][T12237] tipc: Started in network mode [ 282.210182][T12237] tipc: Node identity , cluster identity 4711 [ 282.210193][T12237] tipc: Failed to obtain node identity [ 282.210216][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.210383][T12237] tipc: Started in network mode [ 282.210392][T12237] tipc: Node identity , cluster identity 4711 [ 282.210402][T12237] tipc: Failed to obtain node identity [ 282.210422][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.210587][T12237] tipc: Started in network mode [ 282.210596][T12237] tipc: Node identity , cluster identity 4711 [ 282.210605][T12237] tipc: Failed to obtain node identity [ 282.210625][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.210768][T12237] tipc: Started in network mode [ 282.210776][T12237] tipc: Node identity , cluster identity 4711 [ 282.210786][T12237] tipc: Failed to obtain node identity [ 282.210805][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.228842][T12237] tipc: Started in network mode [ 282.228857][T12237] tipc: Node identity , cluster identity 4711 [ 282.228869][T12237] tipc: Failed to obtain node identity [ 282.228891][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.229043][T12237] tipc: Started in network mode [ 282.229052][T12237] tipc: Node identity , cluster identity 4711 [ 282.229062][T12237] tipc: Failed to obtain node identity [ 282.232977][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.234203][T12237] tipc: Started in network mode [ 282.234215][T12237] tipc: Node identity , cluster identity 4711 [ 282.234225][T12237] tipc: Failed to obtain node identity [ 282.234247][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.234410][T12237] tipc: Started in network mode [ 282.234418][T12237] tipc: Node identity , cluster identity 4711 [ 282.234428][T12237] tipc: Failed to obtain node identity [ 282.234449][T12237] tipc: Enabling of bearer rejected, failed to enable media [ 282.811993][T12253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.836195][T12257] netlink: 'syz.4.1511': attribute type 83 has an invalid length. [ 283.199070][T10398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.199098][T10398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.256529][T12329] netlink: 'syz.0.1523': attribute type 16 has an invalid length. [ 284.256562][T12329] netlink: 'syz.0.1523': attribute type 17 has an invalid length. [ 284.329523][T12329] vcan1: left allmulticast mode [ 284.349045][T12329] bond13: left promiscuous mode [ 284.349069][T12329] xfrm0: left promiscuous mode [ 284.391671][T10405] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.391714][T10405] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.391745][T10405] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.394565][T12330] tipc: Enabling of bearer rejected, failed to enable media [ 284.402846][T10412] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.846151][T12303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.846177][T12303] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 284.872197][T12303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.872217][T12303] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 284.878595][T12303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.878615][T12303] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 284.910049][T12303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.910064][T12303] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 285.104903][T12340] __nla_validate_parse: 11 callbacks suppressed [ 285.104923][T12340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1525'. [ 285.104947][T12340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1525'. [ 285.124674][T12340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1525'. [ 285.124705][T12340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1525'. [ 285.205758][T12311] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 285.227639][T12269] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 285.326193][T12347] xt_NETMAP: bad rangesize 37. [ 285.328053][T12347] net_ratelimit: 37 callbacks suppressed [ 285.328068][T12347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.328225][T12347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.328549][T12347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.370257][T12347] syzkaller0: entered promiscuous mode [ 285.370276][T12347] syzkaller0: entered allmulticast mode [ 285.419204][T12347] tipc: Enabled bearer , priority 0 [ 285.443649][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 285.443675][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 285.448225][T12352] netlink: 'syz.1.1527': attribute type 21 has an invalid length. [ 285.448299][T12352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'. [ 285.508685][T12346] tipc: Resetting bearer [ 285.582297][T12346] tipc: Disabling bearer [ 285.602029][T12350] block nbd0: reconnected socket [ 285.608813][ T52] block nbd0: Receive control failed (result -32) [ 285.992768][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 286.102028][T12377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'. [ 286.147170][T12365] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 286.159480][T12365] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 286.176894][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 286.697046][T12381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.761766][T12387] bond0: left promiscuous mode [ 286.761788][T12387] xfrm1: left promiscuous mode [ 286.815563][T12387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.838445][T12387] bond3: (slave bond0): making interface the new active one [ 286.857552][T12387] bond3: (slave bond0): Enslaving as an active interface with an up link [ 286.909072][T12398] Bluetooth: hci0: unsupported parameter 5135 [ 286.909093][T12398] Bluetooth: hci0: unsupported parameter 8192 [ 286.909104][T12398] Bluetooth: hci0: unsupported parameter 5135 [ 286.909115][T12398] Bluetooth: hci0: unsupported parameter 8192 [ 286.984578][T12389] bond3 (unregistering): (slave bond0): Releasing active interface [ 286.985310][T12401] netlink: 'syz.4.1540': attribute type 10 has an invalid length. [ 287.015293][T12389] bond3 (unregistering): Released all slaves [ 287.117917][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.118069][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.119920][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.120717][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.121652][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.121809][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.121992][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.228344][T12401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.235383][T12401] .`: (slave batadv0): Enslaving as an active interface with an up link [ 287.235891][T12399] bridge0: port 1(syz_tun) entered blocking state [ 287.239213][T12399] bridge0: port 1(syz_tun) entered disabled state [ 287.239373][T12399] syz_tun: entered allmulticast mode [ 287.248050][T12399] syz_tun: entered promiscuous mode [ 287.318614][T12406] .`: (slave batadv0): Releasing backup interface [ 287.555598][T12421] pim6reg: entered allmulticast mode [ 287.610558][T12422] pim6reg: left allmulticast mode [ 287.677682][T12423] pim6reg: entered allmulticast mode [ 287.702859][T12422] pim6reg: left allmulticast mode [ 287.880047][T12433] syzkaller0: entered promiscuous mode [ 287.880068][T12433] syzkaller0: entered allmulticast mode [ 289.157963][T12442] can: request_module (can-proto-0) failed. [ 289.257925][T12465] rxe_eth0 speed is unknown, defaulting to 1000 [ 289.588133][T12476] x_tables: duplicate underflow at hook 1 [ 289.610798][T12465] lo speed is unknown, defaulting to 1000 [ 289.621910][T12465] virt_wifi0 speed is unknown, defaulting to 1000 [ 290.369965][T12493] syzkaller1: entered promiscuous mode [ 290.369988][T12493] syzkaller1: entered allmulticast mode [ 290.436854][T12496] net_ratelimit: 178 callbacks suppressed [ 290.436874][T12496] ip_tables: iptables: counters copy to user failed while replacing table [ 290.771126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.773132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.773310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.053479][T12510] __nla_validate_parse: 17 callbacks suppressed [ 291.053499][T12510] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1571'. [ 291.055877][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 291.056400][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 291.183690][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 291.493227][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 291.571175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.669525][T12542] tipc: Enabling of bearer rejected, failed to enable media [ 291.714857][T12538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1580'. [ 292.755586][T12590] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 292.808714][T12590] bond5: entered promiscuous mode [ 292.809114][T12590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.876887][T12590] ipvlan2: entered allmulticast mode [ 292.876910][T12590] bond5: entered allmulticast mode [ 292.997663][T12590] ipvlan3: entered allmulticast mode [ 293.049496][T12590] bond5: (slave bridge4): making interface the new active one [ 293.049518][T12590] bridge4: entered promiscuous mode [ 293.049664][T12590] bridge4: entered allmulticast mode [ 293.072097][T12590] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 293.176164][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 293.176207][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 293.354817][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 293.486592][T12628] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 293.905697][T12640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.051043][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 294.160706][T12663] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1606'. [ 294.472926][T12640] veth0_to_bridge: left allmulticast mode [ 294.721843][ T6824] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.721875][ T6824] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.721910][ T6824] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.721933][ T6824] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.721965][ T6824] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.721987][ T6824] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.722018][ T6824] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.722040][ T6824] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.944564][T12674] syzkaller0: entered promiscuous mode [ 294.944591][T12674] syzkaller0: entered allmulticast mode [ 296.017112][T12736] xt_IDLETIMER: label is empty or not nul-terminated [ 297.800565][T12735] geneve1: entered promiscuous mode [ 297.891122][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.040672][T12743] syzkaller1: entered promiscuous mode [ 298.040695][T12743] syzkaller1: entered allmulticast mode [ 298.058107][T12750] tipc: Enabling of bearer rejected, media not registered [ 298.107192][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1617'. [ 298.325403][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 298.325453][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 298.449893][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 298.567759][T12781] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 298.570343][T12790] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 298.722858][T12781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.752470][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 298.755511][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 298.768340][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 298.769793][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 298.913846][T12793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1625'. [ 299.449657][T12824] netlink: 'syz.3.1632': attribute type 83 has an invalid length. [ 299.476428][T12838] netlink: 'syz.3.1632': attribute type 83 has an invalid length. [ 299.576451][T12843] syzkaller1: entered promiscuous mode [ 299.576472][T12843] syzkaller1: entered allmulticast mode [ 299.643735][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 300.224158][T12881] openvswitch: netlink: IP tunnel dst address not specified [ 300.814942][T12888] bond3: entered promiscuous mode [ 300.815010][T12888] bond3: entered allmulticast mode [ 300.815393][T12888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.083057][T12913] sctp: [Deprecated]: syz.0.1650 (pid 12913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.083057][T12913] Use struct sctp_sack_info instead [ 301.368817][T12930] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 301.389256][T12931] netlink: 'syz.2.1656': attribute type 46 has an invalid length. [ 301.438528][T12935] xt_socket: unknown flags 0x4 [ 301.909889][T12950] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 301.961101][T12959] syz.1.1664 (12959) used obsolete PPPIOCDETACH ioctl [ 302.282967][T12980] bridge9: entered promiscuous mode [ 302.282988][T12980] bridge9: entered allmulticast mode [ 302.304883][T12980] team0: Port device bridge9 added [ 302.312718][T12980] bridge0: port 1(team0) entered blocking state [ 302.312880][T12980] bridge0: port 1(team0) entered disabled state [ 302.313036][T12980] team0: entered allmulticast mode [ 302.313050][T12980] team_slave_0: entered allmulticast mode [ 302.313093][T12980] team_slave_1: entered allmulticast mode [ 302.324246][T12980] team0: entered promiscuous mode [ 302.324281][T12980] team_slave_0: entered promiscuous mode [ 302.324783][T12980] team_slave_1: entered promiscuous mode [ 302.541223][T12986] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 302.932827][T13010] sctp: [Deprecated]: syz.4.1677 (pid 13010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.932827][T13010] Use struct sctp_sack_info instead [ 302.934757][T13008] pim6reg: entered allmulticast mode [ 302.937208][T13010] netlink: zone id is out of range [ 302.937220][T13010] netlink: zone id is out of range [ 302.937226][T13010] netlink: zone id is out of range [ 302.937234][T13010] netlink: zone id is out of range [ 302.937240][T13010] netlink: zone id is out of range [ 302.937247][T13010] netlink: zone id is out of range [ 302.937545][T13010] netlink: zone id is out of range [ 302.937555][T13010] netlink: zone id is out of range [ 302.937561][T13010] netlink: zone id is out of range [ 302.954736][T13008] pim6reg: left allmulticast mode [ 303.287953][T13027] __nla_validate_parse: 17 callbacks suppressed [ 303.287973][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 303.790544][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'. [ 303.790579][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'. [ 303.790594][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 304.071754][T13062] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1691'. [ 304.470537][T13080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.611790][T13080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.643166][T13077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1694'. [ 305.234297][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 305.234341][T13106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1702'. [ 305.316150][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 305.316171][T13106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1702'. [ 305.339726][T13112] gretap0: left promiscuous mode [ 305.566136][T13112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.637686][T13112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.190376][T13112] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 306.365764][T13126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.543242][T10412] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.543799][T10412] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.543836][T10412] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.543866][T10412] netdevsim netdevsim1 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.973529][T13168] bond7: option lp_interval: invalid value (0) [ 306.973551][T13168] bond7: option lp_interval: allowed values 1 - 2147483647 [ 306.975392][T13168] bond7 (unregistering): Released all slaves [ 307.128507][T13176] nbd1: detected capacity change from 0 to 63 [ 307.157415][ T52] block nbd1: Receive control failed (result -104) [ 307.164811][ T1984] block nbd1: Dead connection, failed to find a fallback [ 307.164835][ T1984] block nbd1: shutting down sockets [ 307.164937][ T1984] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.165021][ T1984] Buffer I/O error on dev nbd1, logical block 0, async page read [ 307.212280][ T1984] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.212335][ T1984] Buffer I/O error on dev nbd1, logical block 1, async page read [ 307.212448][ T1984] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.212471][ T1984] Buffer I/O error on dev nbd1, logical block 2, async page read [ 307.212577][ T1984] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.212598][ T1984] Buffer I/O error on dev nbd1, logical block 3, async page read [ 307.213059][ T1984] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.213094][ T1984] Buffer I/O error on dev nbd1, logical block 0, async page read [ 307.213185][ T1984] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.213208][ T1984] Buffer I/O error on dev nbd1, logical block 1, async page read [ 307.213294][ T1984] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.213339][ T1984] Buffer I/O error on dev nbd1, logical block 2, async page read [ 307.213427][ T1984] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.213447][ T1984] Buffer I/O error on dev nbd1, logical block 3, async page read [ 307.213546][ T1984] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.213567][ T1984] Buffer I/O error on dev nbd1, logical block 0, async page read [ 307.213659][ T1984] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 307.213680][ T1984] Buffer I/O error on dev nbd1, logical block 1, async page read [ 307.215452][T13177] ldm_validate_partition_table(): Disk read failed. [ 307.216818][T13177] Dev nbd1: unable to read RDB block 0 [ 307.218253][T13177] nbd1: unable to read partition table [ 307.411925][T13177] ldm_validate_partition_table(): Disk read failed. [ 307.413558][T13177] Dev nbd1: unable to read RDB block 0 [ 307.421315][T13177] nbd1: unable to read partition table [ 307.529852][T13186] xt_connbytes: Forcing CT accounting to be enabled [ 307.530001][T13186] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 307.940232][T13205] netlink: 'syz.3.1722': attribute type 178 has an invalid length. [ 308.337327][T13219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.356866][T13219] __nla_validate_parse: 8 callbacks suppressed [ 308.356886][T13219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1727'. [ 308.418840][T13219] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1727'. [ 308.596635][T13232] net_ratelimit: 3419 callbacks suppressed [ 308.596655][T13232] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 308.921904][T13249] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1735'. [ 309.310159][T13266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.374514][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1739'. [ 309.405638][T13270] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1737'. [ 309.547917][T13278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1740'. [ 309.605516][T13280] bridge7: entered allmulticast mode [ 309.615473][T13273] netlink: 'syz.0.1734': attribute type 13 has an invalid length. [ 309.615492][T13273] netlink: 'syz.0.1734': attribute type 12 has an invalid length. [ 309.715294][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 309.870742][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1745'. [ 310.143140][T13307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1751'. [ 310.163429][T13309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1751'. [ 310.671656][T13324] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 310.702588][T13333] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 310.782637][T13341] Bluetooth: hci0: unsupported parameter 5135 [ 310.782660][T13341] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 310.861720][T13338] veth0_to_bond: left promiscuous mode [ 311.444235][T13387] openvswitch: netlink: ufid size 26 bytes exceeds the range (1, 16) [ 311.444257][T13387] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 313.846259][T13348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.309323][T13413] syzkaller0: entered promiscuous mode [ 314.309345][T13413] syzkaller0: entered allmulticast mode [ 314.359594][T13422] __nla_validate_parse: 6 callbacks suppressed [ 314.359613][T13422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1777'. [ 314.394119][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1774'. [ 314.500281][T13426] bridge9: entered promiscuous mode [ 314.500306][T13426] bridge9: entered allmulticast mode [ 315.049927][T13406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.194441][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 315.261028][T13436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1781'. [ 317.098535][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.418277][T13443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1785'. [ 317.795133][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 318.015221][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 318.032310][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1789'. [ 318.053835][T13473] ip6tnl2: entered allmulticast mode [ 318.176954][T13482] macsec2: entered promiscuous mode [ 318.323501][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1795'. [ 318.323534][T13497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1795'. [ 318.937077][T13507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 318.977760][T13510] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 318.977784][T13510] netlink: 'syz.1.1799': attribute type 3 has an invalid length. [ 319.094504][T13510] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 319.242982][T13524] FAULT_INJECTION: forcing a failure. [ 319.242982][T13524] name failslab, interval 1, probability 0, space 0, times 1 [ 319.243020][T13524] CPU: 0 UID: 0 PID: 13524 Comm: syz.1.1806 Not tainted syzkaller #0 PREEMPT(full) [ 319.243040][T13524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 319.243055][T13524] Call Trace: [ 319.243062][T13524] [ 319.243071][T13524] dump_stack_lvl+0xe8/0x150 [ 319.243102][T13524] should_fail_ex+0x410/0x560 [ 319.243132][T13524] should_failslab+0xa8/0x100 [ 319.243159][T13524] __kmalloc_cache_noprof+0xa3/0x600 [ 319.243180][T13524] ? nfnetlink_rcv+0x1021/0x28c0 [ 319.243201][T13524] ? nfnetlink_rcv+0x1021/0x28c0 [ 319.243229][T13524] nfnetlink_rcv+0x1021/0x28c0 [ 319.243286][T13524] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 319.243346][T13524] ? skb_clone+0x246/0x3a0 [ 319.243377][T13524] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.243398][T13524] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.243424][T13524] netlink_unicast+0x7bd/0x940 [ 319.243455][T13524] netlink_sendmsg+0x813/0xb40 [ 319.243495][T13524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.243525][T13524] ? apparmor_socket_sendmsg+0x98/0x360 [ 319.243551][T13524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.243573][T13524] sock_sendmsg_nosec+0x14e/0x190 [ 319.243600][T13524] ____sys_sendmsg+0x54e/0x850 [ 319.243625][T13524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.243652][T13524] ? import_iovec+0x73/0xa0 [ 319.243680][T13524] ___sys_sendmsg+0x2a5/0x360 [ 319.243697][T13524] ? __lock_acquire+0x747/0x2de0 [ 319.243720][T13524] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.243777][T13524] ? __fget_files+0x2a/0x420 [ 319.243803][T13524] ? __fget_files+0x3a2/0x420 [ 319.243839][T13524] __x64_sys_sendmsg+0x1b1/0x290 [ 319.243862][T13524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.243905][T13524] do_syscall_64+0x166/0x520 [ 319.243930][T13524] ? trace_irq_disable+0x3b/0x140 [ 319.243950][T13524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.243968][T13524] ? clear_bhb_loop+0x70/0xc0 [ 319.243991][T13524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.244009][T13524] RIP: 0033:0x7f2d4d99e559 [ 319.244027][T13524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.244042][T13524] RSP: 002b:00007f2d4e7c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.244061][T13524] RAX: ffffffffffffffda RBX: 00007f2d4dc25fa0 RCX: 00007f2d4d99e559 [ 319.244074][T13524] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 319.244086][T13524] RBP: 00007f2d4e7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.244097][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.244109][T13524] R13: 00007f2d4dc26038 R14: 00007f2d4dc25fa0 R15: 00007ffd1d04c768 [ 319.244140][T13524] [ 319.369928][T13521] __nla_validate_parse: 2 callbacks suppressed [ 319.369946][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 319.617399][T13532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.686827][T13533] xt_IDLETIMER: timeout value is zero [ 319.856226][T13547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 319.906403][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 319.966336][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 319.992582][T13551] netlink: 'syz.4.1803': attribute type 16 has an invalid length. [ 319.992603][T13551] netlink: 'syz.4.1803': attribute type 17 has an invalid length. [ 320.109352][T13550] batadv_slave_1: entered promiscuous mode [ 320.182145][T13551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.218021][T13551] vlan0: left promiscuous mode [ 320.228212][T13551] macvtap0: left promiscuous mode [ 320.228369][T13551] macvtap0: left allmulticast mode [ 320.228391][T13551] veth0_macvtap: left allmulticast mode [ 320.250793][T13551] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 320.274262][T13551] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 320.274286][T13551] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 320.274303][T13551] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 320.289016][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 320.399015][T13549] batadv_slave_1: left promiscuous mode [ 320.667998][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 320.674725][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 320.684550][T13561] netlink: zone id is out of range [ 320.684564][T13561] netlink: zone id is out of range [ 320.684571][T13561] netlink: zone id is out of range [ 320.684578][T13561] netlink: zone id is out of range [ 320.684585][T13561] netlink: zone id is out of range [ 320.684592][T13561] netlink: zone id is out of range [ 320.684602][T13561] netlink: zone id is out of range [ 320.841985][T13568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1815'. [ 320.949044][T13575] FAULT_INJECTION: forcing a failure. [ 320.949044][T13575] name failslab, interval 1, probability 0, space 0, times 0 [ 320.949077][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.1.1817 Not tainted syzkaller #0 PREEMPT(full) [ 320.949097][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 320.949108][T13575] Call Trace: [ 320.949116][T13575] [ 320.949124][T13575] dump_stack_lvl+0xe8/0x150 [ 320.949155][T13575] should_fail_ex+0x410/0x560 [ 320.949184][T13575] should_failslab+0xa8/0x100 [ 320.949208][T13575] ? skb_clone+0x212/0x3a0 [ 320.949236][T13575] kmem_cache_alloc_noprof+0xa1/0x600 [ 320.949259][T13575] ? skb_clone+0x212/0x3a0 [ 320.949285][T13575] skb_clone+0x212/0x3a0 [ 320.949311][T13575] __netlink_deliver_tap+0x355/0x6e0 [ 320.949346][T13575] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.949371][T13575] netlink_deliver_tap+0x19c/0x1b0 [ 320.949396][T13575] netlink_sendskb+0x68/0x140 [ 320.949421][T13575] nfnetlink_rcv+0x260c/0x28c0 [ 320.949479][T13575] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.949546][T13575] ? skb_clone+0x246/0x3a0 [ 320.949580][T13575] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.949603][T13575] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.949632][T13575] netlink_unicast+0x7bd/0x940 [ 320.949665][T13575] netlink_sendmsg+0x813/0xb40 [ 320.949699][T13575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.949731][T13575] ? apparmor_socket_sendmsg+0x98/0x360 [ 320.949757][T13575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.949780][T13575] sock_sendmsg_nosec+0x14e/0x190 [ 320.949807][T13575] ____sys_sendmsg+0x54e/0x850 [ 320.949832][T13575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.949860][T13575] ? import_iovec+0x73/0xa0 [ 320.949891][T13575] ___sys_sendmsg+0x2a5/0x360 [ 320.949908][T13575] ? __lock_acquire+0x747/0x2de0 [ 320.949933][T13575] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.949989][T13575] ? __fget_files+0x2a/0x420 [ 320.950015][T13575] ? __fget_files+0x3a2/0x420 [ 320.950052][T13575] __x64_sys_sendmsg+0x1b1/0x290 [ 320.950074][T13575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.950114][T13575] do_syscall_64+0x166/0x520 [ 320.950138][T13575] ? trace_irq_disable+0x3b/0x140 [ 320.950156][T13575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.950175][T13575] ? clear_bhb_loop+0x70/0xc0 [ 320.950197][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.950216][T13575] RIP: 0033:0x7f2d4d99e559 [ 320.950238][T13575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.950255][T13575] RSP: 002b:00007f2d4e7c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.950274][T13575] RAX: ffffffffffffffda RBX: 00007f2d4dc25fa0 RCX: 00007f2d4d99e559 [ 320.950288][T13575] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 320.950300][T13575] RBP: 00007f2d4e7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 320.950311][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.950322][T13575] R13: 00007f2d4dc26038 R14: 00007f2d4dc25fa0 R15: 00007ffd1d04c768 [ 320.950354][T13575] [ 320.975642][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 320.975669][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 321.285705][T13583] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 321.288852][T13586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1822'. [ 321.410485][T13583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.457642][T13589] bond5: (slave veth3): Enslaving as an active interface with a down link [ 321.548806][T13587] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.549445][T13587] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.623766][T13597] macvlan0: left promiscuous mode [ 321.645525][T13597] bond5: (slave macvlan0): Enslaving as an active interface with a down link [ 321.709541][ T43] bond2: (slave syz_tun): link status definitely down, disabling slave [ 322.324113][T13631] netlink: 'syz.1.1829': attribute type 16 has an invalid length. [ 322.355920][T13636] sctp: [Deprecated]: syz.3.1830 (pid 13636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.355920][T13636] Use struct sctp_sack_info instead [ 323.007180][T13672] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 323.214141][T13685] nbd: must specify at least one socket [ 324.009631][T13715] FAULT_INJECTION: forcing a failure. [ 324.009631][T13715] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 324.009663][T13715] CPU: 0 UID: 0 PID: 13715 Comm: syz.2.1853 Not tainted syzkaller #0 PREEMPT(full) [ 324.009684][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.009695][T13715] Call Trace: [ 324.009703][T13715] [ 324.009711][T13715] dump_stack_lvl+0xe8/0x150 [ 324.009741][T13715] should_fail_ex+0x410/0x560 [ 324.009773][T13715] _copy_from_user+0x2d/0xb0 [ 324.009800][T13715] smc_setsockopt+0x3c0/0xb40 [ 324.009829][T13715] ? __pfx_smc_setsockopt+0x10/0x10 [ 324.009854][T13715] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 324.009885][T13715] ? __pfx_smc_setsockopt+0x10/0x10 [ 324.009907][T13715] do_sock_setsockopt+0x17c/0x1b0 [ 324.009931][T13715] __x64_sys_setsockopt+0x13d/0x1b0 [ 324.009954][T13715] do_syscall_64+0x166/0x520 [ 324.009977][T13715] ? trace_irq_disable+0x3b/0x140 [ 324.009996][T13715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.010015][T13715] ? clear_bhb_loop+0x70/0xc0 [ 324.010036][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.010055][T13715] RIP: 0033:0x7f9c8119e559 [ 324.010071][T13715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.010086][T13715] RSP: 002b:00007f9c8207c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.010105][T13715] RAX: ffffffffffffffda RBX: 00007f9c81425fa0 RCX: 00007f9c8119e559 [ 324.010117][T13715] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 324.010128][T13715] RBP: 00007f9c8207c090 R08: 00000000000003f0 R09: 0000000000000000 [ 324.010140][T13715] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 324.010152][T13715] R13: 00007f9c81426038 R14: 00007f9c81425fa0 R15: 00007fffe5d24fe8 [ 324.010182][T13715] [ 324.034298][T13717] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 324.103974][T13719] xt_ipcomp: unknown flags 1D [ 324.354468][T13724] ªªªªªª: renamed from vlan0 (while UP) [ 324.395206][T13733] __nla_validate_parse: 4 callbacks suppressed [ 324.395227][T13733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1858'. [ 324.490775][T13743] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1856'. [ 324.533788][T13739] net_ratelimit: 501 callbacks suppressed [ 324.533808][T13739] netlink: Conntrack attr has 4 unknown bytes [ 324.533834][T13739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.649972][T13749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1863'. [ 325.009043][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 325.152017][T13781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'. [ 325.352230][T13793] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 325.383459][T13793] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 325.615766][T13805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.616578][T13804] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.745657][T13809] netlink: 'syz.4.1880': attribute type 10 has an invalid length. [ 325.745681][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 326.236471][T13839] tc_dump_action: action bad kind [ 326.271404][T13849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.382596][T13869] pimreg0: tun_chr_ioctl cmd 1074025677 [ 327.382675][T13869] pimreg0: linktype set to 778 [ 328.611126][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.126822][T13825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.453951][T13881] syzkaller0: entered promiscuous mode [ 329.453972][T13881] syzkaller0: entered allmulticast mode [ 329.520559][T13886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1898'. [ 329.838180][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 330.094336][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.198533][T13917] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.199891][T13917] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.226778][T13917] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.241750][T13917] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.269296][T13917] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.302941][T13917] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.314664][T13917] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.490481][T13932] syzkaller0: entered promiscuous mode [ 330.490503][T13932] syzkaller0: entered allmulticast mode [ 330.524354][T13932] tipc: Enabled bearer , priority 0 [ 330.539187][T13931] tipc: Resetting bearer [ 330.585097][T13931] tipc: Disabling bearer [ 330.845972][T13947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.120010][T13983] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 332.217843][T13991] xt_TCPMSS: Only works on TCP SYN packets [ 332.235325][T13994] xt_TCPMSS: Only works on TCP SYN packets [ 333.478239][ T31] audit: type=1800 audit(1792113589.030:9): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1933" name=FFFFFFFF dev="tmpfs" ino=2101 res=0 errno=0 [ 333.567748][ T31] audit: type=1804 audit(1792113589.120:10): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1933" name=2F6E6577726F6F742F3430372FFFFFFFFF dev="tmpfs" ino=2101 res=1 errno=0 [ 334.167177][T14046] tipc: Started in network mode [ 334.167199][T14046] tipc: Node identity 1d85edc, cluster identity 4711 [ 334.167212][T14046] tipc: Node number set to 30957276 [ 334.170427][T14046] tipc: Enabled bearer , priority 10 [ 334.174481][T14046] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 335.058557][T14052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.217246][T14059] __nla_validate_parse: 7 callbacks suppressed [ 335.217267][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 336.192725][T14087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.506519][T14109] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1950'. [ 337.694377][T14113] netlink: 'syz.1.1953': attribute type 6 has an invalid length. [ 337.694404][T14113] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.120705][T14121] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20000 [ 338.443630][T14132] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 339.361962][T14149] macvlan2: entered allmulticast mode [ 339.361984][T14149] bridge0: entered allmulticast mode [ 339.362017][T14149] bridge0: entered promiscuous mode [ 339.394844][T14154] IPv6: NLM_F_REPLACE set, but no existing node found! [ 340.113500][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 340.520051][T14172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1976'. [ 340.972175][T14188] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1980'. [ 341.096444][T14185] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1980'. [ 341.299084][T14196] netlink: 'syz.0.1982': attribute type 1 has an invalid length. [ 341.380910][T14201] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 341.405806][T14198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1983'. [ 341.436676][T14196] 8021q: adding VLAN 0 to HW filter on device bond14 [ 341.465819][T14200] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 341.577359][T14201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.774477][T14209] bond6: (slave veth11): Enslaving as an active interface with a down link [ 341.804182][T14213] bond6: (slave syz_tun): making interface the new active one [ 341.805117][T14213] syz_tun: entered promiscuous mode [ 341.805404][T14213] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 341.880074][T14201] bond6: (slave bridge11): Enslaving as an active interface with a down link [ 343.946586][T14259] gretap0: left promiscuous mode [ 344.047399][T14259] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.097784][T14259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.257890][T14259] veth0_to_bridge: left promiscuous mode [ 344.279648][T14259] bridge_slave_1: entered promiscuous mode [ 344.510239][T14259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.584841][T14259] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 344.873219][T14269] ip6gretap2: entered allmulticast mode [ 344.897620][T14269] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 344.912217][T14269] batman_adv: batadv0: Adding interface: ip6gretap2 [ 344.912233][T14269] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.964210][T14269] batman_adv: batadv0: Interface activated: ip6gretap2 [ 345.216869][T14287] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2005'. [ 345.556575][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2007'. [ 347.057473][T14318] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 347.057499][T14318] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 347.389074][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 347.389105][T14334] gre0: left promiscuous mode [ 347.389316][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 347.389334][T14334] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 348.000261][T14341] bond4: Removing last arp target with arp_interval on [ 348.089342][T14342] bridge12: entered promiscuous mode [ 348.089366][T14342] bridge12: entered allmulticast mode [ 348.105237][T14345] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2021'. [ 348.121415][T14342] team0: Port device bridge12 added [ 348.128547][T14351] tipc: Enabling of bearer rejected, failed to enable media [ 348.164568][T14351] ip_tables: iptables: counters copy to user failed while replacing table [ 348.166961][T14351] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2022'. [ 348.558869][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'. [ 348.828135][T14360] netlink: 'syz.4.2023': attribute type 16 has an invalid length. [ 348.828159][T14360] netlink: 'syz.4.2023': attribute type 17 has an invalid length. [ 349.435595][T14351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.474838][T14351] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 349.476586][T14351] ip6gre1: left promiscuous mode [ 349.476603][T14351] ip6gre1: left allmulticast mode [ 349.476904][T14351] ip6tnl1: left allmulticast mode [ 349.477010][T14351] macsec1: left allmulticast mode [ 349.477502][T14351] bridge4: left promiscuous mode [ 349.477715][T14351] ip6gre2: left allmulticast mode [ 349.479643][T14351] bridge8: left promiscuous mode [ 349.479866][T14351] ip6tnl2: left allmulticast mode [ 350.044951][T14363] syz_tun (unregistering): left allmulticast mode [ 350.044977][T14363] syz_tun (unregistering): left promiscuous mode [ 350.045051][T14363] bridge0: port 1(syz_tun) entered disabled state [ 350.459371][T14360] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 350.459398][T14360] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 350.478706][T14360] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 350.600471][T14379] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 350.600583][T14379] syzkaller0: linktype set to 1 [ 350.840012][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2029'. [ 351.119012][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'. [ 351.154077][T14399] lo: left promiscuous mode [ 351.277887][T14399] tunl0: left promiscuous mode [ 351.306317][T14399] gretap0: left promiscuous mode [ 351.320457][T14399] ip_vti0: left promiscuous mode [ 351.340406][T14399] sit0: left promiscuous mode [ 351.375022][T14399] ip6tnl0: left promiscuous mode [ 351.380721][T14399] v: left promiscuous mode [ 351.393129][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 351.396761][T14399] ip6gretap0: left promiscuous mode [ 351.430615][T14399] bridge0: left promiscuous mode [ 351.442997][T14399] bridge0: entered promiscuous mode [ 351.443080][T14399] vcan0: left promiscuous mode [ 351.469649][T14399] bond0: left promiscuous mode [ 351.508471][T14399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.526230][T14399] team0: left promiscuous mode [ 351.526585][T14399] dummy0: left promiscuous mode [ 351.557702][T14399] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.584389][T14399] nlmon0: left promiscuous mode [ 351.585585][T14399] batadv0: left promiscuous mode [ 351.610523][T14399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.634195][T14399] vxcan0: left promiscuous mode [ 351.639919][T14399] vxcan1: left promiscuous mode [ 351.667275][T14399] veth0: left promiscuous mode [ 351.693605][T14399] veth1: left promiscuous mode [ 351.702590][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 351.891289][T14414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2036'. [ 351.891323][T14414] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 352.042967][T14399] wg0: left promiscuous mode [ 352.097944][T14399] wg1: left promiscuous mode [ 352.138987][T14399] wg2: left promiscuous mode [ 352.159745][T14399] veth0_to_bridge: left promiscuous mode [ 352.200646][T14399] veth1_to_bridge: left promiscuous mode [ 352.224357][T14399] bond_slave_0: left promiscuous mode [ 352.225166][T14399] veth0_to_team: left promiscuous mode [ 352.226222][T14399] team_slave_0: left promiscuous mode [ 352.227067][T14399] veth1_to_team: left promiscuous mode [ 352.228097][T14399] team_slave_1: left promiscuous mode [ 352.228909][T14399] veth0_to_batadv: left promiscuous mode [ 352.229970][T14399] batadv_slave_0: left promiscuous mode [ 352.334334][T14399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.334715][T14399] veth1_to_batadv: left promiscuous mode [ 352.336885][T14399] batadv_slave_1: left promiscuous mode [ 352.338660][T14399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.338947][T14399] xfrm0: left promiscuous mode [ 352.397926][T14399] veth0_to_hsr: left promiscuous mode [ 352.413242][T14399] hsr_slave_0: left promiscuous mode [ 352.428921][T14399] veth1_to_hsr: left promiscuous mode [ 352.457989][T14399] hsr_slave_1: left promiscuous mode [ 352.458605][T14399] veth1_virt_wifi: left promiscuous mode [ 352.486099][T14399] veth0_virt_wifi: left promiscuous mode [ 352.500404][T14399] virt_wifi0: left promiscuous mode [ 352.538764][T14399] vlan0: left promiscuous mode [ 352.556613][T14399] vlan1: left promiscuous mode [ 352.598337][T14399] macvlan1: left promiscuous mode [ 352.612842][T14399] ipvlan0: left promiscuous mode [ 352.614583][T14399] ipvlan1: left promiscuous mode [ 352.647967][T14399] veth0_macvtap: left promiscuous mode [ 352.660678][T14399] veth0_macvtap: entered promiscuous mode [ 352.677873][T14399] macvtap0: left promiscuous mode [ 352.720059][T14399] geneve0: left promiscuous mode [ 352.742061][T14399] geneve1: left promiscuous mode [ 352.747953][T14399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.765953][T14399] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 352.766338][T14399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.770683][T14399] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 352.796888][T14399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.809170][T14399] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 352.821633][T14399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.822790][T14399] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 352.855827][T14399] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 352.857084][T14399] bond1: left promiscuous mode [ 352.857608][T14399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.858232][T14399] ipip0: left promiscuous mode [ 352.859806][T14399] vxlan0: left promiscuous mode [ 352.892925][T14399] K: left promiscuous mode [ 352.894475][T14399] bridge1: left promiscuous mode [ 352.896140][T14399] geneve2: left promiscuous mode [ 352.897599][T14399] gretap1: left promiscuous mode [ 352.898317][T14399] pimreg: left promiscuous mode [ 352.899081][T14399] vx0: left promiscuous mode [ 352.942583][T14399] gretap2: left promiscuous mode [ 352.957733][T14399] macsec0: left promiscuous mode [ 352.958303][T14399] ip6gre1: left promiscuous mode [ 352.977118][T14399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.979162][T14399] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 352.997002][T11460] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.009835][T14399] bridge9: left promiscuous mode [ 353.027809][T14399] bridge12: left promiscuous mode [ 353.123844][ T6820] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 353.124153][ T6820] bond5: (slave veth3): making interface the new active one [ 353.190705][ T6820] bond5: active interface up! [ 353.290891][T10486] lo speed is unknown, defaulting to 1000 [ 353.290937][T10486] syz2: Port: 1 Link ACTIVE [ 353.425063][T14402] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 353.456815][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.456924][ T6825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.510353][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.510457][ T6825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.591791][T11460] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.760254][T11450] team_slave_0: entered promiscuous mode [ 353.760303][T11450] team_slave_1: entered promiscuous mode [ 353.776114][T14251] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 353.776254][T14251] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 353.776588][T14251] bond5: (slave macvlan0): link status definitely up, 10000 Mbps full duplex [ 353.776633][T14251] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 353.778544][ T6820] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 353.851729][T11450] dummy0: entered promiscuous mode [ 354.086858][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2038'. [ 354.424610][T11450] bridge12: entered promiscuous mode [ 354.579690][T14407] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.686820][T10820] ip6_tunnel: K xmit: Local address not yet configured! [ 354.687081][T10820] ip6_tunnel: K xmit: Local address not yet configured! [ 354.716403][T10501] ip6_tunnel: K xmit: Local address not yet configured! [ 354.746217][T10820] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 355.187438][T11460] ip6_tunnel: K xmit: Local address not yet configured! [ 355.492635][T11460] ip6_tunnel: K xmit: Local address not yet configured! [ 355.538538][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 355.552497][T14455] hsr_slave_0: left promiscuous mode [ 355.564139][T14455] hsr_slave_1: left promiscuous mode [ 355.636762][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2041'. [ 355.880224][T14458] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 355.924276][T14458] bond7 (unregistering): Released all slaves [ 356.346176][T14407] lo speed is unknown, defaulting to 1000 [ 356.375500][T14407] virt_wifi0 speed is unknown, defaulting to 1000 [ 356.389618][T14461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'. [ 356.474032][T14476] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2049'. [ 356.474138][T14476] netlink: Unknown conntrack attr (type=2055, max=9) [ 356.503945][T14476] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 356.815645][T14480] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿA<øZ´”à�I�ƺ¥þ àø§% [ 357.148249][T14495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.224308][T14482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.295886][T14497] netlink: 'syz.0.2055': attribute type 4 has an invalid length. [ 357.350477][T14499] netlink: 'syz.0.2055': attribute type 4 has an invalid length. [ 357.528377][T14496] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 357.770313][T14501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2056'. [ 358.375220][T14510] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 358.375244][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'. [ 358.771094][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 358.931160][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 359.272099][T14517] syzkaller0: entered promiscuous mode [ 359.272121][T14517] syzkaller0: entered allmulticast mode [ 359.763644][T14528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'. [ 360.196597][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'. [ 360.293921][T14533] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2065'. [ 360.522698][T14535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2065'. [ 360.596191][T14540] netlink: 'syz.4.2067': attribute type 1 has an invalid length. [ 360.656804][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2067'. [ 360.660391][T14537] l2tp_mt_check: 23 callbacks suppressed [ 360.660408][T14537] xt_l2tp: invalid flags combination: 8 [ 360.759723][T14541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.782558][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 361.325822][T14554] netlink: 'syz.2.2069': attribute type 30 has an invalid length. [ 361.407683][T14558] netlink: 'syz.2.2069': attribute type 30 has an invalid length. [ 364.052661][T14597] 8021q: VLANs not supported on sit0 [ 364.088505][T14604] __nla_validate_parse: 1 callbacks suppressed [ 364.088526][T14604] netlink: 440 bytes leftover after parsing attributes in process `syz.0.2082'. [ 364.090591][T14606] netlink: 440 bytes leftover after parsing attributes in process `syz.0.2082'. [ 364.727494][T14631] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 364.811881][T14616] 8021q: VLANs not supported on sit0 [ 364.848690][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 365.626688][T14645] x_tables: duplicate underflow at hook 1 [ 366.498823][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2092'. [ 366.668770][T14663] 8021q: VLANs not supported on ip6_vti0 [ 367.169964][T14680] netlink: 'syz.1.2098': attribute type 4 has an invalid length. [ 367.300571][T14692] netlink: 'syz.1.2098': attribute type 4 has an invalid length. [ 367.652272][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 367.967993][T14702] vti0: entered promiscuous mode [ 367.968017][T14702] vti0: entered allmulticast mode [ 368.294704][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 368.348083][T14724] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2106'. [ 368.485364][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2108'. [ 368.487574][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2108'. [ 368.533957][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 368.533981][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 368.534006][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 368.601656][ T6820] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.601701][ T6820] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.601732][ T6820] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.601763][ T6820] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.137370][T14736] __nla_validate_parse: 3 callbacks suppressed [ 369.137392][T14736] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2109'. [ 369.137406][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 371.074938][T14714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.556078][T14752] syzkaller0: entered promiscuous mode [ 371.556258][T14752] syzkaller0: entered allmulticast mode [ 371.665763][T14761] ip_tables: iptables: counters copy to user failed while replacing table [ 372.815939][T14784] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 376.492946][T14757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2112'. [ 376.499586][T14784] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 376.570505][T14785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2117'. [ 376.909053][T14788] syzkaller1: entered promiscuous mode [ 376.909263][T14788] syzkaller1: entered allmulticast mode [ 377.185007][T14804] syzkaller0: entered allmulticast mode [ 378.045094][T14836] netlink: 'syz.4.2130': attribute type 4 has an invalid length. [ 378.045119][T14836] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.2130'. [ 378.134938][T14837] netlink: NAT attribute has 1 unknown bytes [ 378.134972][T14837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.552197][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.684823][T14826] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 378.709702][T14826] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 380.848197][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 380.932002][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2133'. [ 381.036637][T14851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2133'. [ 381.398318][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 381.429719][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 381.486890][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 381.591682][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 381.845698][T14868] netlink: 'syz.2.2138': attribute type 62 has an invalid length. [ 381.866488][T14868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2138'. [ 381.866514][T14868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2138'. [ 382.260208][T14882] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 382.724924][T14882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2140'. [ 382.755856][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 383.120480][T14912] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2149'. [ 383.651295][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 384.292142][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.380100][T14932] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 384.568338][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 384.610819][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2153'. [ 384.706425][T14939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.148064][T14945] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 385.558935][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 386.047627][T14968] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.2162'. [ 386.713586][T14968] __nla_validate_parse: 1 callbacks suppressed [ 386.713607][T14968] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.2162'. [ 386.713628][T14968] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.2162'. [ 386.802538][T10499] ip6_tunnel: K xmit: Local address not yet configured! [ 386.853393][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 386.956555][T10499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.056527][T14944] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.314003][T10499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.401660][T10499] ip6_tunnel: K xmit: Local address not yet configured! [ 387.642062][T14987] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 387.642110][T14987] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 387.767474][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 388.559685][ T6820] nci: nci_rx_work: unknown MT 0x6 [ 388.831568][T15008] : renamed from bridge_slave_1 [ 389.561189][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2174'. [ 389.561336][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 391.276679][T15014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.916566][T15108] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2182'. [ 392.918183][T15108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.919646][T15109] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2182'. [ 392.969868][T15114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.142688][T15094] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 393.513608][T15118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2183'. [ 393.700155][T15131] sctp: [Deprecated]: syz.1.2186 (pid 15131) Use of int in max_burst socket option. [ 393.700155][T15131] Use struct sctp_assoc_value instead [ 393.891426][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.405927][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2188'. [ 394.507928][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2188'. [ 394.508129][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2188'. [ 394.508347][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2188'. [ 394.508534][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2188'. [ 394.508719][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2188'. [ 394.508905][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2188'. [ 395.356480][T15170] IPVS: stopping backup sync thread 6035 ... [ 395.379382][T15173] netlink: 'syz.2.2193': attribute type 30 has an invalid length. [ 395.468416][T15173] bond6: option arp_missed_max: invalid value (0) [ 395.468438][T15173] bond6: option arp_missed_max: allowed values 1 - 255 [ 395.548068][T15173] bond6 (unregistering): Released all slaves [ 395.769923][T15180] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 398.294448][T15233] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 398.420580][T15233] bond8 (unregistering): Released all slaves [ 398.525637][T15246] netlink: zone id is out of range [ 398.525652][T15246] netlink: zone id is out of range [ 398.525661][T15246] netlink: zone id is out of range [ 398.525668][T15246] netlink: zone id is out of range [ 398.525675][T15246] netlink: zone id is out of range [ 399.043291][T15257] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 399.099928][T15257] bond6: option mode: invalid value (8) [ 399.111890][T15257] bond6 (unregistering): Released all slaves [ 399.121101][T15266] __nla_validate_parse: 35 callbacks suppressed [ 399.121118][T15266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2214'. [ 399.319582][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 399.353469][T15280] ip_tables: iptables: counters copy to user failed while replacing table [ 399.376800][T15280] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 399.723304][T15273] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.2214'. [ 399.918346][T15269] tc_dump_action: action bad kind [ 399.952256][T15293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2217'. [ 399.955866][T15293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2217'. [ 400.136855][T15280] 8021q: adding VLAN 0 to HW filter on device bond15 [ 400.205553][T15297] netlink: 'syz.3.2218': attribute type 83 has an invalid length. [ 401.048907][T15305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2220'. [ 401.623810][T15330] batman_adv: batadv0: Adding interface: syzkaller0 [ 401.623828][T15330] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.623857][T15330] batman_adv: batadv0: Interface activated: syzkaller0 [ 401.821522][T14251] wlan0: Trigger new scan to find an IBSS to join [ 402.023621][T15307] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 402.175855][T15307] batman_adv: batadv0: Removing interface: syzkaller0 [ 402.296572][T15310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.139965][T15365] netlink: 'syz.2.2228': attribute type 16 has an invalid length. [ 403.164725][T15369] bond0: option lacp_strict: mode dependency failed, not supported in mode active-backup(1) [ 404.674666][T15406] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2240'. [ 404.873274][T15409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2241'. [ 404.942937][T15412] bridge0: Caught tx_queue_len zero misconfig [ 404.969477][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2243'. [ 405.105882][T15418] netlink: 'syz.4.2244': attribute type 1 has an invalid length. [ 405.216388][T15420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2245'. [ 405.292090][T15424] netlink: 'syz.4.2244': attribute type 10 has an invalid length. [ 405.292112][T15424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2244'. [ 405.339177][T15418] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.217524][ T6822] nci: nci_rx_work: unknown MT 0x6 [ 406.445567][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'. [ 406.776568][ T6820] wlan0: Trigger new scan to find an IBSS to join [ 407.035333][T15459] bond0: (slave gretap0): Opening slave failed [ 407.246889][T15465] ipt_REJECT: ECHOREPLY no longer supported. [ 407.468310][T15476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2262'. [ 407.691380][ T6822] wlan0: Creating new IBSS network, BSSID 8e:88:0a:77:5e:bf [ 407.713244][T15484] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 407.895214][T15487] bond7: (slave geneve3): making interface the new active one [ 407.904706][T15487] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 407.921702][ T6822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 407.929118][ T6822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 407.929597][ T6822] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 407.935439][ T6822] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 408.448827][T15499] syzkaller1: entered promiscuous mode [ 408.448849][T15499] syzkaller1: entered allmulticast mode [ 408.869177][T15440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.066622][T15505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.960469][T15515] tipc: Resetting bearer [ 410.048133][T15540] xt_nfacct: accounting object `syz' does not exist [ 410.106201][T15515] 8021q: adding VLAN 0 to HW filter on device  [ 410.173313][T15515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.396915][T15515] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 410.513145][ T6822] bond2: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 410.631966][ T6822] bond2: active interface up! [ 410.667376][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.667482][T14250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.728992][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.729096][T14250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.443370][T15568] xt_l2tp: missing protocol rule (udp|l2tpip) [ 411.744417][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 411.922893][T15575] 8021q: adding VLAN 0 to HW filter on device bond9 [ 411.942194][T15580] lo: entered promiscuous mode [ 411.944501][T15580] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 411.947969][T15580] 8021q: adding VLAN 0 to HW filter on device bond9 [ 411.990166][T15580] bond9: (slave lo): Enslaving as an active interface with an up link [ 412.107198][T15579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2283'. [ 412.149632][T15585] GUP no longer grows the stack in syz.4.2285 (15585): 200000003000-20000000a000 (200000001000) [ 412.149670][T15585] CPU: 1 UID: 0 PID: 15585 Comm: syz.4.2285 Not tainted syzkaller #0 PREEMPT(full) [ 412.149691][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 412.149704][T15585] Call Trace: [ 412.149712][T15585] [ 412.149720][T15585] dump_stack_lvl+0xe8/0x150 [ 412.149822][T15585] __get_user_pages+0x23b6/0x2750 [ 412.149881][T15585] ? lock_acquire+0x115/0x350 [ 412.149940][T15585] ? __gup_longterm_locked+0xc3b/0x15c0 [ 412.149977][T15585] __gup_longterm_locked+0xd52/0x15c0 [ 412.150007][T15585] ? lock_acquire+0x115/0x350 [ 412.150046][T15585] gup_fast_fallback+0x1d92/0x20e0 [ 412.150108][T15585] ? __pfx_gup_fast_fallback+0x10/0x10 [ 412.150137][T15585] ? lock_acquire+0x115/0x350 [ 412.150155][T15585] ? is_valid_gup_args+0x11f/0x200 [ 412.150184][T15585] ? get_user_pages_fast+0x4d/0xb0 [ 412.150214][T15585] __iov_iter_get_pages_alloc+0x378/0xa40 [ 412.150344][T15585] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 412.150385][T15585] iov_iter_get_pages2+0x5e/0xa0 [ 412.150417][T15585] __se_sys_vmsplice+0x7b5/0x1660 [ 412.150457][T15585] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 412.150485][T15585] ? __pfx_futex_wait+0x10/0x10 [ 412.150591][T15585] do_syscall_64+0x166/0x520 [ 412.150706][T15585] ? trace_irq_disable+0x3b/0x140 [ 412.150733][T15585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.150767][T15585] ? clear_bhb_loop+0x70/0xc0 [ 412.150790][T15585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.150810][T15585] RIP: 0033:0x7f9d5ad9e559 [ 412.150830][T15585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.150844][T15585] RSP: 002b:00007f9d5bccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 412.150865][T15585] RAX: ffffffffffffffda RBX: 00007f9d5b025fa0 RCX: 00007f9d5ad9e559 [ 412.150880][T15585] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000006 [ 412.150891][T15585] RBP: 00007f9d5ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 412.150903][T15585] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 412.150914][T15585] R13: 00007f9d5b026038 R14: 00007f9d5b025fa0 R15: 00007fff22884de8 [ 412.150947][T15585] [ 412.641885][T15592] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 412.648210][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 412.695660][T15589] veth0: entered promiscuous mode [ 413.126978][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2286'. [ 413.234119][T15582] veth0: left promiscuous mode [ 413.457493][T15617] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 413.457519][T15617] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 413.567671][T15628] ip_tables: iptables: counters copy to user failed while replacing table [ 413.569248][T15628] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2290'. [ 413.569809][T15626] tipc: Enabling of bearer rejected, failed to enable media [ 414.016205][T15626] ipvlan4: entered promiscuous mode [ 414.018484][T15626] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 414.018507][T15626] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 414.018686][T15626] bond0: (slave ipvlan4): Error -95 calling set_mac_address [ 414.122503][T15643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2293'. [ 414.912114][T15657] ip_tables: iptables: counters copy to user failed while replacing table [ 415.117866][T15669] tunl0: Caught tx_queue_len zero misconfig [ 415.507502][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 416.375430][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 416.424888][T15694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2304'. [ 416.592077][T15697] bond0: left allmulticast mode [ 416.592102][T15697] xfrm1: left allmulticast mode [ 416.642538][T15702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2307'. [ 416.719052][T15702] tipc: Enabling of bearer rejected, failed to enable media [ 416.784932][T15714] __nla_validate_parse: 1 callbacks suppressed [ 416.784952][T15714] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2309'. [ 416.784969][T15714] openvswitch: netlink: Message has 512 unknown bytes. [ 416.988483][T15717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.209012][T15723] netlink: 'syz.1.2312': attribute type 1 has an invalid length. [ 417.209036][T15723] netlink: 'syz.1.2312': attribute type 2 has an invalid length. [ 417.209049][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2312'. [ 417.308666][T15711] xt_LOG: level 115 >= 8 [ 417.714886][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 417.715009][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 417.715118][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 417.715219][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 417.715327][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 417.715430][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 417.802916][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 417.803045][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 418.211778][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 418.616761][T15753] netlink: zone id is out of range [ 419.780102][T15787] atomic_op ffff88807a3611e0 conn xmit_atomic 0000000000000000 [ 419.794172][T15787] syzkaller1: entered promiscuous mode [ 419.794193][T15787] syzkaller1: entered allmulticast mode [ 420.102471][T15799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 420.188885][T15791] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.946572][T15819] tipc: New replicast peer: 172.20.20.187 [ 421.013714][T15819] tipc: Enabled bearer , priority 10 [ 421.084556][T15822] macvtap0: entered promiscuous mode [ 421.528155][T15827] veth0: entered promiscuous mode [ 421.561644][T15827] veth0: left promiscuous mode [ 421.838992][T15829] bond6: entered promiscuous mode [ 421.839034][T15829] bond6: entered allmulticast mode [ 421.839472][T15829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 422.785549][T15867] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 423.278366][T15859] veth13: entered allmulticast mode [ 423.323012][T15859] bond8: (slave veth13): Enslaving as an active interface with a down link [ 423.331620][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 423.397156][T15876] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 423.512439][T15878] macvlan0: entered promiscuous mode [ 423.512462][T15878] macvlan0: entered allmulticast mode [ 423.535750][T15878] bond8: entered promiscuous mode [ 423.559597][T15878] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 423.583163][T15878] bond8: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 423.618370][T15878] bond8: left promiscuous mode [ 424.222204][T15891] sctp: [Deprecated]: syz.3.2350 (pid 15891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.222204][T15891] Use struct sctp_sack_info instead [ 424.748271][T15906] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 424.815847][T15909] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 424.859644][T15912] __nla_validate_parse: 61 callbacks suppressed [ 424.859664][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2354'. [ 426.252053][T15936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 426.493540][T15937] rxe_eth0 speed is unknown, defaulting to 1000 [ 426.784688][T15953] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 427.138472][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 427.138497][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2365'. [ 427.139759][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 427.139776][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2365'. [ 427.678629][T15965] netlink: 'syz.2.2369': attribute type 2 has an invalid length. [ 427.703654][T15970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2366'. [ 427.855978][T15968] Bluetooth: MGMT ver 1.23 [ 428.066296][T15937] lo speed is unknown, defaulting to 1000 [ 428.089997][T15937] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.362988][T16021] netlink: 'syz.0.2381': attribute type 2 has an invalid length. [ 430.486786][T16021] : entered promiscuous mode [ 430.503578][T16028] IPVS: stopping backup sync thread 8569 ... [ 430.509322][T16028] raw_sendmsg: syz.2.2382 forgot to set AF_INET. Fix it! [ 431.763230][T16067] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 432.101065][T16075] veth0_to_bridge: entered promiscuous mode [ 432.123431][T16075] macvtap0: entered allmulticast mode [ 432.123454][T16075] veth0_to_bridge: entered allmulticast mode [ 432.164758][T16078] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.202817][T16075] veth0_to_bridge: left allmulticast mode [ 432.203162][T16075] veth0_to_bridge: left promiscuous mode [ 432.374882][T16082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.446200][T16095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2398'. [ 433.617644][T16129] netlink: 'syz.3.2405': attribute type 6 has an invalid length. [ 433.617668][T16129] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.863169][T16149] rxe_eth0 speed is unknown, defaulting to 1000 [ 434.973920][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 435.218950][T16168] ip_tables: iptables: counters copy to user failed while replacing table [ 435.841846][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 435.914977][T16185] xt_l2tp: v2 sid > 0xffff: 33554432 [ 435.927282][ T7210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.927331][ T7210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.927366][ T7210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.927402][ T7210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.936852][T16147] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.000366][T16149] lo speed is unknown, defaulting to 1000 [ 436.009432][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 436.032633][T16149] virt_wifi0 speed is unknown, defaulting to 1000 [ 436.966646][T16147] lo speed is unknown, defaulting to 1000 [ 436.990351][T16147] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.562243][T16225] netlink: 'syz.4.2425': attribute type 21 has an invalid length. [ 437.562315][T16225] netlink: 'syz.4.2425': attribute type 6 has an invalid length. [ 437.562328][T16225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2425'. [ 438.709725][T16246] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 438.737616][T16247] veth1_to_bond: entered allmulticast mode [ 439.036237][T16254] netlink: 'syz.0.2429': attribute type 1 has an invalid length. [ 439.357875][T16245] veth1_to_bond: left allmulticast mode [ 439.409789][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.410131][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.410468][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.410803][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.411400][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.411706][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.412029][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.412357][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.412678][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.413001][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.413353][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.413675][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.413994][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.414320][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.414641][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.414964][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.415290][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.415604][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.415914][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.416250][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.416575][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.416895][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.417222][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.417544][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.417864][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.418228][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.418549][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.418896][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.419217][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.419568][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.419889][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.420215][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.420581][T16262] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 439.916934][T16266] SET target dimension over the limit! [ 439.983557][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449386][T16271] netlink: 964 bytes leftover after parsing attributes in process `syz.4.2433'. [ 440.449410][T16271] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 441.199904][T16277] syzkaller0: entered promiscuous mode [ 441.199929][T16277] syzkaller0: entered allmulticast mode [ 443.869185][T16279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.029160][T16305] block nbd2: server does not support multiple connections per device. [ 446.069782][T16305] block nbd2: shutting down sockets [ 446.138855][T16306] ip6gretap3: entered allmulticast mode [ 446.170340][T16306] batman_adv: batadv0: Adding interface: ip6gretap3 [ 446.170361][T16306] batman_adv: batadv0: Interface activated: ip6gretap3 [ 446.207164][T16309] sctp: [Deprecated]: syz.3.2447 (pid 16309) Use of int in max_burst socket option deprecated. [ 446.207164][T16309] Use struct sctp_assoc_value instead [ 446.520658][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 446.570760][T16323] netlink: 'syz.0.2452': attribute type 4 has an invalid length. [ 446.927830][T16327] pimreg: entered allmulticast mode [ 447.543246][T16347] batadv_slave_1: entered promiscuous mode [ 448.065982][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 448.576014][T16358] bridge_slave_0: left allmulticast mode [ 448.576044][T16358] bridge_slave_0: left promiscuous mode [ 448.576272][T16358] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.624625][T16364] bridge_slave_1: left allmulticast mode [ 448.624653][T16364] bridge_slave_1: left promiscuous mode [ 448.624866][T16364] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.859922][T16367] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 448.864829][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 449.094221][T16367] bond9: Invalid ad_actor_system MAC address. [ 449.094243][T16367] bond9: option ad_actor_system: invalid value (7) [ 449.124303][T16367] bond9 (unregistering): Released all slaves [ 449.385977][T16379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2461'. [ 449.714296][T16391] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2461'. [ 449.753840][T16407] siw: device registration error -23 [ 449.848995][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2465'. [ 450.330576][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 450.477969][T16421] x_tables: duplicate underflow at hook 1 [ 450.675847][T16425] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2466'. [ 452.273780][T16472] netlink: 'syz.0.2475': attribute type 21 has an invalid length. [ 452.273802][T16472] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2475'. [ 452.650605][T16472] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2475'. [ 452.825275][T16486] netlink: 'syz.1.2479': attribute type 2 has an invalid length. [ 453.037815][T16495] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.119402][T16495] netlink: 'syz.3.2478': attribute type 16 has an invalid length. [ 453.119427][T16495] netlink: 'syz.3.2478': attribute type 17 has an invalid length. [ 453.347616][T16509] netlink: 11184 bytes leftover after parsing attributes in process `syz.4.2484'. [ 453.347643][T16509] openvswitch: netlink: Flow key attr not present in new flow. [ 453.799907][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 453.958569][T16495] vti0: left promiscuous mode [ 453.958752][T16495] vti0: left allmulticast mode [ 454.017242][T16495] veth13: left allmulticast mode [ 454.224047][T10820] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 454.224102][T10820] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 454.224134][T10820] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 454.240455][T10820] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 454.567706][T16536] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2493'. [ 454.590438][T16533] syzkaller0: entered promiscuous mode [ 454.590460][T16533] syzkaller0: entered allmulticast mode [ 454.650263][T16540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2494'. [ 454.684186][T16540] netlink: 'syz.2.2494': attribute type 21 has an invalid length. [ 454.684244][T16540] netlink: 'syz.2.2494': attribute type 6 has an invalid length. [ 454.684258][T16540] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2494'. [ 454.811882][T16545] netlink: 632 bytes leftover after parsing attributes in process `syz.4.2495'. [ 454.890297][T16547] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2497'. [ 455.199953][T16558] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2498'. [ 455.394408][T16565] lo: Caught tx_queue_len zero misconfig [ 455.394436][T16565] netlink: 'syz.2.2500': attribute type 14 has an invalid length. [ 455.885311][T16574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.968060][T16582] Bluetooth: hci0: unsupported parameter 5135 [ 455.968082][T16582] Bluetooth: hci0: unsupported parameter 8192 [ 455.968094][T16582] Bluetooth: hci0: unsupported parameter 5135 [ 455.968105][T16582] Bluetooth: hci0: unsupported parameter 8192 [ 457.758026][T16604] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.889155][T16604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.996893][T16612] __nla_validate_parse: 3 callbacks suppressed [ 457.996914][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 458.035379][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 458.490814][T16604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.504548][T16621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2511'. [ 458.504733][T16622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2511'. [ 458.579803][T16624] netlink: 'syz.4.2510': attribute type 7 has an invalid length. [ 458.579825][T16624] netlink: 'syz.4.2510': attribute type 8 has an invalid length. [ 458.620804][T16604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.666479][T16604] veth0_vlan: left promiscuous mode [ 458.687378][T16604] veth0_vlan: entered promiscuous mode [ 458.750290][T16604] veth1_macvtap: left promiscuous mode [ 458.767241][T16604] veth0_macvtap: left promiscuous mode [ 458.788400][T16604] veth0_macvtap: entered promiscuous mode [ 458.869832][T16604] veth1_macvtap: entered promiscuous mode [ 458.973970][T16604] gretap0: entered promiscuous mode [ 458.976257][T16604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.065770][T16604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.266022][T16604] veth0_to_bridge: entered promiscuous mode [ 459.362767][T16604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.389722][T16604] 8021q: adding VLAN 0 to HW filter on device eth0 [ 459.404644][T16604] 8021q: adding VLAN 0 to HW filter on device eth1 [ 459.429439][T16604] 8021q: adding VLAN 0 to HW filter on device eth2 [ 459.459841][T16604] 8021q: adding VLAN 0 to HW filter on device eth3 [ 459.484569][T16604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.524775][T16604] 8021q: adding VLAN 0 to HW filter on device bond5 [ 459.562990][T16604] 8021q: adding VLAN 0 to HW filter on device bond6 [ 459.598251][T16604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 459.613021][T16604] 8021q: adding VLAN 0 to HW filter on device bond8 [ 459.842504][ T43] bridge0: port 1(team0) entered blocking state [ 459.842610][ T43] bridge0: port 1(team0) entered forwarding state [ 460.160116][T16617] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 460.160142][T16617] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 460.204925][T10418] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.204968][T10418] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.204991][T10418] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.265504][T10418] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 460.265806][T10418] bond3: (slave veth9): making interface the new active one [ 460.339187][T10418] bond3: active interface up! [ 460.353571][ T6825] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.353604][ T6825] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.353626][ T6825] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.417384][ T6825] bond8: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 460.417689][ T6825] bond8: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 460.417995][ T6825] bond8: (slave veth13): making interface the new active one [ 460.420513][ T6825] bond8: active interface up! [ 460.468764][ T6825] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.468797][ T6825] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.468820][ T6825] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.469113][ T6825] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 460.469195][ T6825] bond2: (slave veth7): making interface the new active one [ 460.514400][ T6825] bond2: active interface up! [ 460.517394][ T6825] bond6: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 460.556571][T10400] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.556605][T10400] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.556628][T10400] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.596669][T16623] tipc: Enabling of bearer rejected, already enabled [ 460.865655][T10820] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.865895][T10820] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.908448][T11460] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.945136][T16644] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 461.289205][T10418] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.289438][T10418] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.313229][T11450] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.350438][T10501] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 461.462757][T11450] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 461.874724][T10501] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 462.055141][T10501] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 463.044975][T16688] lo: entered allmulticast mode [ 463.204676][ T49] syz_tun: left promiscuous mode [ 463.517276][T16704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2528'. [ 464.189143][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 464.189234][T16728] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2535'. [ 464.428275][T16720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.823649][T16741] veth0: mtu less than device minimum [ 464.896351][T16744] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 464.896373][T16744] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2536'. [ 465.272673][T16750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2539'. [ 465.310290][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 465.310323][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2540'. [ 465.507705][T16757] syzkaller0: entered promiscuous mode [ 465.507727][T16757] syzkaller0: entered allmulticast mode [ 465.694659][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2544'. [ 466.624849][T16786] SET target dimension over the limit! [ 467.180550][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 467.722773][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 467.726921][T16814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.279856][T16823] xt_MASQUERADE: bad MAP_IPS. [ 468.290344][T16823] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 468.307009][T16824] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.307798][T16823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.308535][T16823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 468.526135][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2562'. [ 468.638284][T16830] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 468.650110][T16838] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 468.848025][T16840] ip_tables: iptables: counters copy to user failed while replacing table [ 469.299101][T16848] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 469.386438][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2568'. [ 469.454485][T16854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.594248][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 473.251392][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 473.251415][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 473.893003][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 475.402254][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.402723][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.403153][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.403587][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.404015][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.404453][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.404882][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.405308][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.405737][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 475.406191][T16897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2578'. [ 476.816885][ C0] sched: DL replenish lagged too much [ 489.891878][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.532016][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 491.172334][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 501.413142][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 501.516849][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.623648][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.628739][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.629885][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.911701][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 506.251993][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.531298][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 508.851122][ T5620] Bluetooth: hci5: command tx timeout [ 510.646357][T16932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 510.660470][T16932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 510.753827][T16932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 510.760672][T16932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 510.865561][T16932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 510.866858][T16932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 510.931234][ T5620] Bluetooth: hci5: command tx timeout [ 511.262066][ T5620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 511.264007][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 511.265958][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 511.471466][T16932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 513.011278][T16932] Bluetooth: hci5: command tx timeout [ 513.571385][T16932] Bluetooth: hci6: command tx timeout [ 513.991291][T16932] Bluetooth: hci7: command tx timeout [ 515.251532][T16931] Bluetooth: hci5: command tx timeout [ 515.422479][T16931] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 515.513220][T16931] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 515.642294][T16931] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 515.651079][T16931] Bluetooth: hci6: command tx timeout [ 515.852283][T16931] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 515.855331][T16931] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 516.081566][T16932] Bluetooth: hci7: command tx timeout [ 517.730942][T16931] Bluetooth: hci6: command tx timeout [ 518.130962][T16931] Bluetooth: hci7: command tx timeout [ 518.251446][T16931] Bluetooth: hci8: command tx timeout [ 519.815389][T16931] Bluetooth: hci6: command tx timeout [ 520.211565][T16931] Bluetooth: hci7: command tx timeout [ 520.291055][T16931] Bluetooth: hci8: command tx timeout [ 521.892202][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.371482][T16931] Bluetooth: hci8: command tx timeout [ 524.453238][T16931] Bluetooth: hci8: command tx timeout [ 525.091926][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.021018][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.063374][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.572606][T16932] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 566.588758][T16932] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 566.590542][T16932] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 566.614309][T16932] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 566.902392][T16932] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 569.518104][T16931] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 569.591991][T16931] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 569.594642][T16931] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 569.821397][T16931] Bluetooth: hci9: command tx timeout [ 571.903647][T16931] Bluetooth: hci9: command tx timeout [ 572.432049][T16931] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 572.574674][T16931] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 574.001071][T16931] Bluetooth: hci9: command tx timeout [ 574.444987][T16932] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 574.450750][T16932] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 574.610984][T16932] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 574.690142][T16932] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 575.112090][T16932] Bluetooth: hci10: command tx timeout [ 575.119339][ T5620] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 576.051776][T16931] Bluetooth: hci9: command tx timeout [ 577.190920][ T5620] Bluetooth: hci10: command tx timeout [ 579.111590][ T5620] Bluetooth: hci11: command tx timeout [ 579.292289][ T5620] Bluetooth: hci10: command tx timeout [ 581.171933][ T5620] Bluetooth: hci11: command tx timeout [ 581.380895][T16931] Bluetooth: hci10: command tx timeout [ 581.382188][T16931] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 581.497359][T16931] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 581.529776][T16931] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 581.539340][T16931] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 581.540602][T16931] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 583.122785][T16931] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 583.260952][T16931] Bluetooth: hci11: command tx timeout [ 583.661267][T16931] Bluetooth: hci12: command tx timeout [ 585.001157][T16931] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 585.014019][T16931] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 585.019115][T16931] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 585.020447][T16931] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 585.341381][ T5620] Bluetooth: hci11: command tx timeout [ 585.731237][ T5620] Bluetooth: hci12: command tx timeout [ 587.423976][T16931] Bluetooth: hci13: command tx timeout [ 588.121716][T16931] Bluetooth: hci12: command tx timeout [ 588.452328][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.671343][T16931] Bluetooth: hci13: command tx timeout [ 590.140954][T16931] Bluetooth: hci12: command tx timeout [ 591.740939][T16931] Bluetooth: hci13: command tx timeout [ 593.572169][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 593.811341][T16931] Bluetooth: hci13: command tx timeout [ 624.295158][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.299834][ T32] INFO: task dhcpcd:5277 blocked for more than 143 seconds. [ 624.299855][ T32] Not tainted syzkaller #0 [ 624.299865][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.299874][ T32] task:dhcpcd state:D stack:21384 pid:5277 tgid:5277 ppid:5276 task_flags:0x400140 flags:0x00080000 [ 624.299930][ T32] Call Trace: [ 624.299938][ T32] [ 624.299956][ T32] __schedule+0x17db/0x58f0 [ 624.300084][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.300121][ T32] ? __pfx___schedule+0x10/0x10 [ 624.300153][ T32] ? schedule+0x90/0x2b0 [ 624.300179][ T32] schedule+0x164/0x2b0 [ 624.300204][ T32] schedule_preempt_disabled+0x13/0x30 [ 624.300226][ T32] __mutex_lock+0x7c1/0x1550 [ 624.300256][ T32] ? __mutex_lock+0x5d4/0x1550 [ 624.300284][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 624.300402][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 624.300440][ T32] ? __nla_parse+0x40/0x60 [ 624.300548][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 624.300574][ T32] ? __kernel_text_address+0xd/0x30 [ 624.300612][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.300650][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 624.300706][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 624.300731][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 624.301591][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 624.301689][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 624.301727][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.301753][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.301784][ T32] netlink_rcv_skb+0x226/0x4a0 [ 624.301807][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.301835][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.301871][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.301893][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.301921][ T32] netlink_unicast+0x7bd/0x940 [ 624.301963][ T32] netlink_sendmsg+0x813/0xb40 [ 624.301997][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.302030][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 624.302137][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.302160][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 624.302233][ T32] ____sys_sendmsg+0x54e/0x850 [ 624.302257][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.302283][ T32] ? import_iovec+0x73/0xa0 [ 624.302311][ T32] ___sys_sendmsg+0x2a5/0x360 [ 624.302327][ T32] ? count_memcg_event_mm+0x21/0x260 [ 624.302355][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.302403][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 624.302424][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 624.302441][ T32] ? __pfx_set_user_sigmask+0x10/0x10 [ 624.302471][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 624.302493][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.302519][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 624.302558][ T32] do_syscall_64+0x166/0x520 [ 624.302582][ T32] ? trace_irq_disable+0x3b/0x140 [ 624.302602][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.302622][ T32] ? clear_bhb_loop+0x70/0xc0 [ 624.302645][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.302663][ T32] RIP: 0033:0x7f7cd3c89407 [ 624.302680][ T32] RSP: 002b:00007ffe6acc3e50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 624.302709][ T32] RAX: ffffffffffffffda RBX: 00007f7cd3bff780 RCX: 00007f7cd3c89407 [ 624.302722][ T32] RDX: 0000000000000000 RSI: 00007ffe6acd8030 RDI: 0000000000000004 [ 624.302734][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.302744][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe6ace8260 [ 624.302756][ T32] R13: 00007f7cd3bff708 R14: 0000000000000044 R15: 00007ffe6acd8030 [ 624.302787][ T32] [ 624.302881][ T32] INFO: task syz.2.2572:16866 blocked for more than 143 seconds. [ 624.302895][ T32] Not tainted syzkaller #0 [ 624.302905][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.302913][ T32] task:syz.2.2572 state:D stack:25576 pid:16866 tgid:16866 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 624.302962][ T32] Call Trace: [ 624.302968][ T32] [ 624.302980][ T32] __schedule+0x17db/0x58f0 [ 624.303026][ T32] ? __pfx___schedule+0x10/0x10 [ 624.303059][ T32] ? schedule+0x90/0x2b0 [ 624.303085][ T32] schedule+0x164/0x2b0 [ 624.303109][ T32] schedule_preempt_disabled+0x13/0x30 [ 624.303131][ T32] __mutex_lock+0x7c1/0x1550 [ 624.303161][ T32] ? __mutex_lock+0x5d4/0x1550 [ 624.303189][ T32] ? netdev_run_todo+0x70b/0x1090 [ 624.303246][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 624.303279][ T32] ? rcu_barrier+0x424/0x530 [ 624.303309][ T32] ? msleep+0xdd/0x100 [ 624.303330][ T32] netdev_run_todo+0x70b/0x1090 [ 624.303356][ T32] ? __pfx_netif_state_change+0x10/0x10 [ 624.303411][ T32] ? __pfx_netdev_run_todo+0x10/0x10 [ 624.303432][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 624.303461][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 624.303495][ T32] ? netdev_state_change+0x1bc/0x210 [ 624.303517][ T32] tun_chr_close+0x13c/0x1c0 [ 624.303596][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 624.303619][ T32] __fput+0x418/0xa50 [ 624.303664][ T32] task_work_run+0x1d9/0x270 [ 624.303689][ T32] ? __pfx_task_work_run+0x10/0x10 [ 624.303807][ T32] exit_to_user_mode_loop+0x204/0x770 [ 624.303829][ T32] ? rcu_is_watching+0x16/0xb0 [ 624.303857][ T32] do_syscall_64+0x328/0x520 [ 624.303881][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.303901][ T32] ? clear_bhb_loop+0x70/0xc0 [ 624.303925][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.303944][ T32] RIP: 0033:0x7f9c8119e559 [ 624.303961][ T32] RSP: 002b:00007fffe5d25148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 624.303980][ T32] RAX: 0000000000000000 RBX: 00007f9c81427da0 RCX: 00007f9c8119e559 [ 624.303993][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 624.304004][ T32] RBP: 00007f9c81427da0 R08: 00007f9c81426128 R09: 0000000000000000 [ 624.304016][ T32] R10: 000000000003fcc4 R11: 0000000000000246 R12: 0000000000072efb [ 624.304028][ T32] R13: 00007f9c8142627c R14: 0000000000072d36 R15: 00007f9c81426270 [ 624.304060][ T32] [ 624.304069][ T32] INFO: task syz.0.2578:16890 blocked for more than 143 seconds. [ 624.304083][ T32] Not tainted syzkaller #0 [ 624.304092][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.304100][ T32] task:syz.0.2578 state:D stack:27584 pid:16890 tgid:16889 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 624.304150][ T32] Call Trace: [ 624.304156][ T32] [ 624.304168][ T32] __schedule+0x17db/0x58f0 [ 624.304219][ T32] ? __pfx___schedule+0x10/0x10 [ 624.304251][ T32] ? schedule+0x90/0x2b0 [ 624.304277][ T32] schedule+0x164/0x2b0 [ 624.304302][ T32] schedule_preempt_disabled+0x13/0x30 [ 624.304324][ T32] __mutex_lock+0x7c1/0x1550 [ 624.304354][ T32] ? __mutex_lock+0x5d4/0x1550 [ 624.304382][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 624.304402][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 624.304437][ T32] ? ns_capable+0x89/0xe0 [ 624.304463][ T32] ? rtnl_nets_add+0x16c/0x300 [ 624.304481][ T32] ? refcount_inc+0x46/0x70 [ 624.304508][ T32] rtnl_newlink+0xc1d/0x1c30 [ 624.304538][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.304560][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.304600][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.304634][ T32] ? lock_acquire+0x115/0x350 [ 624.304660][ T32] ? lock_acquire+0x115/0x350 [ 624.304690][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 624.304727][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.304754][ T32] ? __kernel_text_address+0xd/0x30 [ 624.304773][ T32] ? unwind_get_return_address+0x4d/0x90 [ 624.304795][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.304815][ T32] ? arch_stack_walk+0xfb/0x150 [ 624.304848][ T32] ? lock_acquire+0x115/0x350 [ 624.304868][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.304898][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.304915][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 624.304941][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 624.304970][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 624.304997][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.305027][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.305060][ T32] netlink_rcv_skb+0x226/0x4a0 [ 624.305087][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.305122][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.305159][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.305183][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.305212][ T32] netlink_unicast+0x7bd/0x940 [ 624.305246][ T32] netlink_sendmsg+0x813/0xb40 [ 624.305279][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.305312][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 624.305341][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.305364][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 624.305392][ T32] __sys_sendto+0x408/0x5a0 [ 624.305464][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 624.305521][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 624.305545][ T32] __x64_sys_sendto+0xde/0x100 [ 624.305577][ T32] do_syscall_64+0x166/0x520 [ 624.305600][ T32] ? trace_irq_disable+0x3b/0x140 [ 624.305619][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.305638][ T32] ? clear_bhb_loop+0x70/0xc0 [ 624.305662][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.305680][ T32] RIP: 0033:0x7f22f335ed8e [ 624.305696][ T32] RSP: 002b:00007f22f15f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 624.305720][ T32] RAX: ffffffffffffffda RBX: 00007f22f15f66c0 RCX: 00007f22f335ed8e [ 624.305734][ T32] RDX: 0000000000000020 RSI: 00007f22f15f5000 RDI: 0000000000000005 [ 624.305746][ T32] RBP: 0000000000000000 R08: 00007f22f15f4f04 R09: 000000000000000c [ 624.305758][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 624.305768][ T32] R13: 00007f22f15f4f58 R14: 00007f22f15f5000 R15: 0000000000000000 [ 624.305799][ T32] [ 624.305806][ T32] INFO: task syz.0.2578:16892 blocked for more than 143 seconds. [ 624.305820][ T32] Not tainted syzkaller #0 [ 624.305828][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.305836][ T32] task:syz.0.2578 state:D stack:26928 pid:16892 tgid:16889 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 624.305885][ T32] Call Trace: [ 624.305891][ T32] [ 624.305902][ T32] __schedule+0x17db/0x58f0 [ 624.305953][ T32] ? __pfx___schedule+0x10/0x10 [ 624.305986][ T32] ? schedule+0x90/0x2b0 [ 624.306011][ T32] schedule+0x164/0x2b0 [ 624.306036][ T32] schedule_preempt_disabled+0x13/0x30 [ 624.306058][ T32] __mutex_lock+0x7c1/0x1550 [ 624.306088][ T32] ? __mutex_lock+0x5d4/0x1550 [ 624.306116][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 624.306136][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 624.306171][ T32] ? ns_capable+0x89/0xe0 [ 624.306195][ T32] ? rtnl_nets_add+0x16c/0x300 [ 624.306212][ T32] ? refcount_inc+0x46/0x70 [ 624.306240][ T32] rtnl_newlink+0xc1d/0x1c30 [ 624.306270][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.306287][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.306310][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.306337][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.306366][ T32] ? lock_acquire+0x115/0x350 [ 624.306389][ T32] ? lock_acquire+0x115/0x350 [ 624.306416][ T32] ? lock_acquire+0x115/0x350 [ 624.306445][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 624.306474][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.306501][ T32] ? __kernel_text_address+0xd/0x30 [ 624.306520][ T32] ? unwind_get_return_address+0x4d/0x90 [ 624.306542][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.306561][ T32] ? arch_stack_walk+0xfb/0x150 [ 624.306609][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.306626][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 624.306653][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 624.306681][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 624.306714][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.306744][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.306777][ T32] netlink_rcv_skb+0x226/0x4a0 [ 624.306802][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.306832][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.306869][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.306894][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.306924][ T32] netlink_unicast+0x7bd/0x940 [ 624.306958][ T32] netlink_sendmsg+0x813/0xb40 [ 624.306991][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.307025][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 624.307052][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.307075][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 624.307102][ T32] ____sys_sendmsg+0x54e/0x850 [ 624.307127][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.307157][ T32] ? import_iovec+0x73/0xa0 [ 624.307188][ T32] ___sys_sendmsg+0x2a5/0x360 [ 624.307205][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.307229][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.307253][ T32] ? futex_wait+0x2a2/0x390 [ 624.307302][ T32] ? __fget_files+0x2a/0x420 [ 624.307328][ T32] ? __fget_files+0x3a2/0x420 [ 624.307366][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 624.307389][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.307431][ T32] do_syscall_64+0x166/0x520 [ 624.307455][ T32] ? trace_irq_disable+0x3b/0x140 [ 624.307474][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.307493][ T32] ? clear_bhb_loop+0x70/0xc0 [ 624.307516][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.307534][ T32] RIP: 0033:0x7f22f339e559 [ 624.307550][ T32] RSP: 002b:00007f22f15d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.307568][ T32] RAX: ffffffffffffffda RBX: 00007f22f3626090 RCX: 00007f22f339e559 [ 624.307581][ T32] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 624.307593][ T32] RBP: 00007f22f34358b0 R08: 0000000000000000 R09: 0000000000000000 [ 624.307604][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.307615][ T32] R13: 00007f22f3626128 R14: 00007f22f3626090 R15: 00007ffe7fed70f8 [ 624.307646][ T32] [ 624.307654][ T32] INFO: task syz.4.2577:16893 blocked for more than 143 seconds. [ 624.307666][ T32] Not tainted syzkaller #0 [ 624.307676][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.307683][ T32] task:syz.4.2577 state:D stack:27232 pid:16893 tgid:16891 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 624.307867][ T32] Call Trace: [ 624.307876][ T32] [ 624.307890][ T32] __schedule+0x17db/0x58f0 [ 624.307946][ T32] ? __pfx___schedule+0x10/0x10 [ 624.307979][ T32] ? schedule+0x90/0x2b0 [ 624.308005][ T32] schedule+0x164/0x2b0 [ 624.308030][ T32] schedule_preempt_disabled+0x13/0x30 [ 624.308052][ T32] __mutex_lock+0x7c1/0x1550 [ 624.308083][ T32] ? __mutex_lock+0x5d4/0x1550 [ 624.308111][ T32] ? rtnetlink_rcv_msg+0x767/0xc00 [ 624.308185][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 624.308212][ T32] ? lock_acquire+0x115/0x350 [ 624.308250][ T32] rtnetlink_rcv_msg+0x767/0xc00 [ 624.308282][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 624.308309][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.308340][ T32] ? __copy_skb_header+0xa3/0x4a0 [ 624.308425][ T32] netlink_rcv_skb+0x226/0x4a0 [ 624.308451][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.308482][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.308520][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.308544][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.308574][ T32] netlink_unicast+0x7bd/0x940 [ 624.308608][ T32] netlink_sendmsg+0x813/0xb40 [ 624.308641][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.308674][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 624.308701][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.308724][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 624.308752][ T32] ____sys_sendmsg+0x54e/0x850 [ 624.308778][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.308808][ T32] ? import_iovec+0x73/0xa0 [ 624.308838][ T32] ___sys_sendmsg+0x2a5/0x360 [ 624.308857][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.308882][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.308906][ T32] ? futex_wait+0x2a2/0x390 [ 624.308953][ T32] ? __fget_files+0x2a/0x420 [ 624.308980][ T32] ? __fget_files+0x3a2/0x420 [ 624.309018][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 624.309042][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.309084][ T32] do_syscall_64+0x166/0x520 [ 624.309108][ T32] ? trace_irq_disable+0x3b/0x140 [ 624.309128][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.309155][ T32] ? clear_bhb_loop+0x70/0xc0 [ 624.309178][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.309197][ T32] RIP: 0033:0x7f9d5ad9e559 [ 624.309215][ T32] RSP: 002b:00007f9d5bccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.309234][ T32] RAX: ffffffffffffffda RBX: 00007f9d5b025fa0 RCX: 00007f9d5ad9e559 [ 624.309249][ T32] RDX: 0000000020040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 624.309261][ T32] RBP: 00007f9d5ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 624.309273][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.309284][ T32] R13: 00007f9d5b026038 R14: 00007f9d5b025fa0 R15: 00007fff22884de8 [ 624.309316][ T32] [ 624.309324][ T32] INFO: task syz.4.2577:16896 blocked for more than 143 seconds. [ 624.309338][ T32] Not tainted syzkaller #0 [ 624.309348][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.309357][ T32] task:syz.4.2577 state:D stack:27232 pid:16896 tgid:16891 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 624.309407][ T32] Call Trace: [ 624.309413][ T32] [ 624.309425][ T32] __schedule+0x17db/0x58f0 [ 624.309474][ T32] ? __pfx___schedule+0x10/0x10 [ 624.309506][ T32] ? schedule+0x90/0x2b0 [ 624.309539][ T32] schedule+0x164/0x2b0 [ 624.309563][ T32] schedule_preempt_disabled+0x13/0x30 [ 624.309585][ T32] __mutex_lock+0x7c1/0x1550 [ 624.309616][ T32] ? __mutex_lock+0x5d4/0x1550 [ 624.309643][ T32] ? rtnetlink_rcv_msg+0x767/0xc00 [ 624.309667][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 624.309687][ T32] ? lock_acquire+0x115/0x350 [ 624.309719][ T32] rtnetlink_rcv_msg+0x767/0xc00 [ 624.309751][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 624.309779][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.309810][ T32] ? __copy_skb_header+0xa3/0x4a0 [ 624.309842][ T32] netlink_rcv_skb+0x226/0x4a0 [ 624.309868][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.309899][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.309936][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.309960][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.309990][ T32] netlink_unicast+0x7bd/0x940 [ 624.310024][ T32] netlink_sendmsg+0x813/0xb40 [ 624.310056][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.310090][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 624.310116][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.310150][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 624.310178][ T32] ____sys_sendmsg+0x54e/0x850 [ 624.310203][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.310233][ T32] ? import_iovec+0x73/0xa0 [ 624.310263][ T32] ___sys_sendmsg+0x2a5/0x360 [ 624.310282][ T32] ? __lock_acquire+0x747/0x2de0 [ 624.310306][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.310363][ T32] ? __fget_files+0x2a/0x420 [ 624.310387][ T32] ? __fget_files+0x3a2/0x420 [ 624.310419][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 624.310435][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 624.310502][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.310528][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 624.310558][ T32] do_syscall_64+0x166/0x520 [ 624.310582][ T32] ? trace_irq_disable+0x3b/0x140 [ 624.310600][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.310620][ T32] ? clear_bhb_loop+0x70/0xc0 [ 624.310642][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.310661][ T32] RIP: 0033:0x7f9d5ad9e559 [ 624.310678][ T32] RSP: 002b:00007f9d5bc8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.310697][ T32] RAX: ffffffffffffffda RBX: 00007f9d5b026180 RCX: 00007f9d5ad9e559 [ 624.310711][ T32] RDX: 0000000020040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 624.310723][ T32] RBP: 00007f9d5ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 624.310735][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.310746][ T32] R13: 00007f9d5b026218 R14: 00007f9d5b026180 R15: 00007fff22884de8 [ 624.310778][ T32] [ 624.310807][ T32] [ 624.310807][ T32] Showing all locks held in the system: [ 627.261942][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 627.261966][ T32] #0: ffffffff8fc364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 627.262027][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 627.262041][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 627.262128][ T32] locks held by kworker/u8:3/49: 3, last CPU#1: [ 627.262143][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.262197][ T32] #1: ffffc90000ba7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.262251][ T32] #2: ffff888079c09258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 627.262396][ T32] locks held by kworker/u8:6/205: 3, on CPU#1: [ 627.262410][ T32] #0: ffff88801d7a0140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.262460][ T32] #1: ffffc90002edfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.262510][ T32] #2: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 627.262642][ T32] locks held by dhcpcd/5277: 1, on CPU#1: [ 627.262655][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.262708][ T32] locks held by getty/5373: 2, on CPU#1: [ 627.262721][ T32] #0: ffff888036a310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 627.262817][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 627.262903][ T32] locks held by kworker/u8:9/6820: 2, on CPU#1: [ 627.262917][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.262965][ T32] #1: ffffc9001b047c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263015][ T32] locks held by kworker/u8:10/6822: 3, last CPU#0: [ 627.263028][ T32] #0: ffff88802b3cb940 ((wq_completion)krds_cp_wq#2/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263077][ T32] #1: ffffc9001b067c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263126][ T32] #2: ffff888036555280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.263233][ T32] locks held by kworker/u8:12/6825: 4, last CPU#1: [ 627.263247][ T32] #0: ffff8880267e1140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263300][ T32] #1: ffffc9001b097c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263357][ T32] #2: ffff888023b99440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 627.263447][ T32] #3: ffff888034fcaad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 627.263495][ T32] locks held by kworker/u8:14/6861: 4, last CPU#1: [ 627.263509][ T32] #0: ffff8880774d6140 ((wq_completion)krds_cp_wq#2/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263558][ T32] #1: ffffc9001bc87c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263606][ T32] #2: ffff888036555e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.263656][ T32] #3: ffff8880346e5360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 627.263735][ T32] locks held by kworker/u8:15/7201: 4, last CPU#0: [ 627.263748][ T32] #0: ffff88802b3cd140 ((wq_completion)krds_cp_wq#2/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263797][ T32] #1: ffffc90005317c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.263846][ T32] #2: ffff888036555580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.263895][ T32] #3: ffff8880346e60e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 627.263950][ T32] locks held by kworker/u8:27/10404: 3, last CPU#0: [ 627.263963][ T32] #0: ffff8880774d7940 ((wq_completion)krds_cp_wq#2/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264011][ T32] #1: ffffc90002f6fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264065][ T32] #2: ffff888036555b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.264115][ T32] locks held by kworker/u8:30/10410: 3, last CPU#0: [ 627.264128][ T32] #0: ffff8880774d6940 ((wq_completion)krds_cp_wq#2/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264176][ T32] #1: ffffc90002567c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264225][ T32] #2: ffff888036555880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.264275][ T32] locks held by kworker/u8:36/10418: 3, last CPU#0: [ 627.264303][ T32] #0: ffff8880774d7140 ((wq_completion)krds_cp_wq#2/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264358][ T32] #1: ffffc90003ab7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264407][ T32] #2: ffff888036556480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.264457][ T32] locks held by kworker/u8:37/10419: 4, last CPU#0: [ 627.264470][ T32] #0: ffff8880774d4940 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264518][ T32] #1: ffffc90003d0fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264567][ T32] #2: ffff888036556780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.264617][ T32] #3: ffff888054bae0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 627.264666][ T32] locks held by kworker/0:14/10486: 2, last CPU#0: [ 627.264679][ T32] #0: ffff88807eb91140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264733][ T32] #1: ffffc900037dfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264797][ T32] locks held by kworker/u8:45/10818: 2, last CPU#0: [ 627.264810][ T32] #0: ffff88803378a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264865][ T32] #1: ffffc9000d6efc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264914][ T32] locks held by kworker/u8:47/10820: 3, last CPU#1: [ 627.264927][ T32] #0: ffff8880774d0140 ((wq_completion)krds_cp_wq#2/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.264975][ T32] #1: ffffc9000b787c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.265024][ T32] #2: ffff888036556180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 627.265077][ T32] locks held by kworker/u8:48/14250: 2, last CPU#0: [ 627.265090][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.265138][ T32] #1: ffffc90006cd7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 627.265190][ T32] locks held by syz.2.2572/16866: 1, on CPU#0: [ 627.265203][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x70b/0x1090 [ 627.265251][ T32] locks held by syz.3.2574/16875: 2, on CPU#0: [ 627.265264][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 627.265310][ T32] #1: ffffffff8fd62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 627.265368][ T32] locks held by syz.0.2578/16890: 1, on CPU#0: [ 627.265380][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 627.265423][ T32] locks held by syz.0.2578/16892: 2, on CPU#0: [ 627.265435][ T32] #0: ffffffff9179fef8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 627.265483][ T32] #1: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 627.265525][ T32] locks held by syz.4.2577/16893: 1, on CPU#0: [ 627.265538][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 627.265589][ T32] locks held by syz.4.2577/16896: 1, on CPU#0: [ 627.265601][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 627.265654][ T32] locks held by syz-executor/16922: 1, on CPU#0: [ 627.265666][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.265716][ T32] locks held by syz-executor/16926: 1, on CPU#1: [ 627.265729][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.265779][ T32] locks held by syz-executor/16930: 1, on CPU#1: [ 627.265792][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.265842][ T32] locks held by syz-executor/16942: 1, on CPU#1: [ 627.265855][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.265904][ T32] locks held by syz.1.2589/16955: 1, on CPU#0: [ 627.265917][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 627.266007][ T32] locks held by syz-executor/16961: 2, last CPU#0: [ 627.266020][ T32] #0: ffff88807cd8b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 627.266060][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 627.266106][ T32] locks held by syz-executor/16962: 1, on CPU#0: [ 627.266118][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.266169][ T32] locks held by syz-executor/16968: 1, on CPU#1: [ 627.266188][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.266238][ T32] locks held by syz-executor/16970: 1, on CPU#0: [ 627.266251][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.266301][ T32] locks held by syz-executor/16976: 1, on CPU#0: [ 627.266314][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.266369][ T32] locks held by syz-executor/16979: 1, on CPU#1: [ 627.266382][ T32] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 627.266431][ T32] locks held by syz-executor/16985: 4, last CPU#1: [ 627.266444][ T32] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 627.266492][ T32] #1: ffff88807ee9e540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 627.266534][ T32] #2: ffff88807ee99bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 627.266581][ T32] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 627.266631][ T32] locks held by syz-executor/16986: 2, last CPU#1: [ 627.266656][ T32] #0: ffff88807ee9c080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 627.266703][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 627.266760][ T32] locks held by syz-executor/16987: 1, last CPU#1: [ 627.266773][ T32] #0: ffff888069864d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 627.266817][ T32] [ 627.266822][ T32] ============================================= [ 627.266822][ T32] [ 627.266835][ T32] NMI backtrace for cpu 1 [ 627.266856][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 627.266876][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 627.266886][ T32] Call Trace: [ 627.266894][ T32] [ 627.266904][ T32] dump_stack_lvl+0xe8/0x150 [ 627.266932][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 627.266988][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 627.267018][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 627.267041][ T32] sys_info+0x135/0x170 [ 627.267058][ T32] watchdog+0xfd7/0x1030 [ 627.267093][ T32] ? watchdog+0x1c7/0x1030 [ 627.267119][ T32] kthread+0x38b/0x480 [ 627.267144][ T32] ? __pfx_watchdog+0x10/0x10 [ 627.267161][ T32] ? __pfx_kthread+0x10/0x10 [ 627.267180][ T32] ret_from_fork+0x514/0xb70 [ 627.267226][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 627.267252][ T32] ? __switch_to+0xc89/0x1420 [ 627.267279][ T32] ? __pfx_kthread+0x10/0x10 [ 627.267298][ T32] ret_from_fork_asm+0x1a/0x30 [ 627.267346][ T32] [ 627.267353][ T32] Sending NMI from CPU 1 to CPUs 0: [ 627.267382][ C0] NMI backtrace for cpu 0 [ 627.267395][ C0] CPU: 0 UID: 0 PID: 7201 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 627.267416][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 627.267428][ C0] Workqueue: krds_cp_wq#2/6 rds_connect_worker [ 627.267489][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 627.267514][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 26 2a a8 03 66 0f 1f 44 00 [ 627.267530][ C0] RSP: 0000:ffffc90000007e50 EFLAGS: 00000046 [ 627.267545][ C0] RAX: 000000000000000f RBX: ffff8880b8423c80 RCX: 0000000000000838 [ 627.267558][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000838 [ 627.267569][ C0] RBP: ffffc90000007f08 R08: 0000000000000100 R09: 0000000000000001 [ 627.267581][ C0] R10: 0000000000000003 R11: ffffffff81757510 R12: ffffffff81757510 [ 627.267594][ C0] R13: 1ffff11017084799 R14: 0000000000000000 R15: ffff8880b8423ccc [ 627.267607][ C0] FS: 0000000000000000(0000) GS:ffff888123ad0000(0000) knlGS:0000000000000000 [ 627.267622][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.267635][ C0] CR2: 00007f793d95f020 CR3: 00000000769e2000 CR4: 00000000003526f0 [ 627.267652][ C0] Call Trace: [ 627.267658][ C0] [ 627.267664][ C0] lapic_next_event+0x11/0x20 [ 627.267683][ C0] clockevents_program_event+0x44e/0x630 [ 627.267712][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 627.267741][ C0] ? tick_program_event+0x8f/0x120 [ 627.267762][ C0] hrtimer_run_softirq+0x255/0x2e0 [ 627.267793][ C0] handle_softirqs+0x226/0x860 [ 627.267818][ C0] ? do_softirq+0x77/0xd0 [ 627.267849][ C0] ? __inet6_bind+0x301/0xf30 [ 627.267875][ C0] do_softirq+0x77/0xd0 [ 627.267897][ C0] [ 627.267903][ C0] [ 627.267909][ C0] __local_bh_enable_ip+0x100/0x140 [ 627.267933][ C0] __inet6_bind+0x301/0xf30 [ 627.267964][ C0] kernel_bind+0x13e/0x1c0 [ 627.267986][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 627.268014][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 627.268042][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 627.268074][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 627.268104][ C0] ? lock_acquire+0x115/0x350 [ 627.268129][ C0] rds_connect_worker+0x1d8/0x290 [ 627.268148][ C0] ? process_scheduled_works+0x97a/0x1630 [ 627.268173][ C0] process_scheduled_works+0xc3d/0x1630 [ 627.268213][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 627.268240][ C0] ? assign_work+0x3cf/0x5d0 [ 627.268265][ C0] worker_thread+0xa47/0xfb0 [ 627.268304][ C0] kthread+0x38b/0x480 [ 627.268320][ C0] ? __pfx_worker_thread+0x10/0x10 [ 627.268342][ C0] ? __pfx_kthread+0x10/0x10 [ 627.268360][ C0] ret_from_fork+0x514/0xb70 [ 627.268389][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 627.268418][ C0] ? __switch_to+0xc89/0x1420 [ 627.268443][ C0] ? __pfx_kthread+0x10/0x10 [ 627.268461][ C0] ret_from_fork_asm+0x1a/0x30 [ 627.268496][ C0] [ 627.269385][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 629.984967][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 629.994075][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 630.004131][ T32] Call Trace: [ 630.007498][ T32] [ 630.010430][ T32] vpanic+0x56d/0xa60 [ 630.014508][ T32] ? __pfx_vpanic+0x10/0x10 [ 630.019019][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 630.024568][ T32] panic+0xc5/0xd0 [ 630.028298][ T32] ? __pfx_panic+0x10/0x10 [ 630.032801][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 630.037872][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 630.044375][ T32] watchdog+0x1030/0x1030 [ 630.048716][ T32] ? watchdog+0x1c7/0x1030 [ 630.053129][ T32] kthread+0x38b/0x480 [ 630.057202][ T32] ? __pfx_watchdog+0x10/0x10 [ 630.061864][ T32] ? __pfx_kthread+0x10/0x10 [ 630.066448][ T32] ret_from_fork+0x514/0xb70 [ 630.071052][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 630.076172][ T32] ? __switch_to+0xc89/0x1420 [ 630.080852][ T32] ? __pfx_kthread+0x10/0x10 [ 630.085438][ T32] ret_from_fork_asm+0x1a/0x30 [ 630.090208][ T32] [ 630.093656][ T32] Kernel Offset: disabled [ 630.097988][ T32] Rebooting in 86400 seconds..