last executing test programs: 2m54.745055351s ago: executing program 0 (id=1501): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 2m54.597951077s ago: executing program 0 (id=1504): write(0xca, &(0x7f00000000c0)="040e0c0142209d6381fff9945863f4951673238b935f054b5cda10e28409bed35dc565804cd16e6c84ba6f3c6c0fbf5c8ba03a12b5f900ed9d62b07b6339ae5e7dcab71437e82e5d3933579c7a27bbf3a7de3dafe1d0fbcc64f1ed186e251a8f71a4582dabd2c30b0e0681fcf15f8c28770bbba18e27b02dc2cdf7c1c93d87af895ca152ae944660ef7669ddd02767345254ba39adcae8ee58d88eeaa3c9b45df158232799c5db", 0xa7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000300)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2, 0x0, @loopback}, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 2m54.132740732s ago: executing program 0 (id=1510): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c4789cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) 2m53.912382967s ago: executing program 0 (id=1513): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0x9, 0x5, 0x0, 0x30, 0x8}], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x29, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000006800010000000000000000000a00000000000000140006000000000000000000000000000000000108000500", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0xffffffffffffc000) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[], 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000bc0)={r0, &(0x7f0000000ac0)=')*//\x00', 0x400000, &(0x7f0000000b00)={@align=0x7f, {0x8, 0x85, 0x4, 0x80000000}}, 0xc0, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0x9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0x8}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x5}]}, @int={0x0, 0x0, 0x0, 0x1, 0x1, 0x15, 0x0, 0x6, 0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x3}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000009c0)=""/139, 0x93, 0x8b, 0x1, 0x4, 0x10000, @value=r6}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000d00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x9c, r9, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff64}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f40)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000f80)=r10, 0x12) sendmsg$nl_generic(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x134, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @generic="a4abfcc85190088bbb7ad3da010a9abbdf321e19c61aee8b0cc4a539ffce4d1ed87f6fb260fba1ba362dd437c173fbba79b910dc56725cbc316c7f20802a569365a22828be23f4c218027d0799ad198b3339030916b0544feb050d0a2cf1a9b0fd944d33923b1377bdb91e298f0e60ccc8fcbda9ddea32b294b6d921becdba9762bee8007ce02039ef645a83e49060025b55e56df01c9c6ec4ae166f", @nested={0x80, 0x2, 0x0, 0x1, [@nested={0x7c, 0xe4, 0x0, 0x1, [@nested={0x4, 0x13b}, @nested={0x6b, 0x10d, 0x0, 0x1, [@generic="29b89f3e3ddd407bd52f9e5cba4c2d308665bdfba28d73706552d881ba9270a8f25ffd4defe938b9b64293c7397f4203ffe732a6ec35c479cea2e4a8dfd71adbb5070df8090922e8c501e17894b44d21ae53b218e0d924be400d98b2c9dd33cdd95955bb194c49"]}, @typed={0x8, 0x118, 0x0, 0x0, @pid=r10}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf0703000000140009edfa800000d60d366ffa0e8f9f4800000069b8e7a018567896d5a7400400020000"], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x488c4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000800)={0x0, 0x74, &(0x7f0000000840)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x4, &(0x7f0000000640)=ANY=[@ANYRES32=r4], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000700)=""/185, &(0x7f00000007c0)=0xb9) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0100000301030000000000000000000a000000cc000d8014000500ff0100000000000000000000000000011400050000000000000000000000ffffac1414bb2c000380060001004e210000060002004e220000060002004e230000060002004e200000060001004e230000140005000000000000000000000000000000000014000400fe88000000000000000000000000000114000500fc01000000000000000000000000000114000500fc02000000000000000000000000000014000400ff02000000000000000000000000000108000100e000000208000200e00000013c000f800800034000000007080003400000000c08000340000000040800024000000005080003400000000308000240000000000800024000001295"], 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c00), r13) 2m53.294058533s ago: executing program 0 (id=1521): r0 = socket(0x11, 0xa, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r1, &(0x7f0000000500)}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)={0x2c, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001ac0)={"0b704133a0c3e31f73d46e41baf49ca3", 0x0, 0x0, {0x70d4ea21, 0x9318}, {0xb, 0x32d}, 0x7, [0x10, 0x1, 0x4, 0x1000, 0x4, 0xfffffffffffffffe, 0x10, 0x8000, 0x3, 0x4, 0x3, 0x1, 0x1639ef5a, 0x8, 0x7, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000580)={0x11, 0x7, {0xfffffffffffffffe, @struct={0x86, 0x401}, 0x0, 0x100000001, 0x2, 0x5, 0x1ee, 0x5, 0x80, @struct={0x1, 0x2}, 0x7fffffff, 0x0, [0x2, 0x5, 0x0, 0x3, 0xe66, 0xffff]}, {0x8, @usage=0xa41, 0x0, 0x0, 0x57b9, 0x4, 0x9, 0x7fffffffffffffff, 0x90, @usage=0x10000, 0x8, 0x6, [0xffffffff, 0x7fffffffffffffff, 0x10000, 0x8000000000000000, 0x9, 0x2]}, {0x2, @struct={0x4, 0x5}, 0x0, 0x1, 0x40, 0x0, 0x3, 0x4, 0xa2, @struct={0x7, 0xe}, 0x10, 0x5, [0x7, 0x91, 0x4, 0x506, 0x5, 0x101]}, {0x7, 0x0, 0x100000000}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000980)={{r6}, r7, 0x12, @unused=[0x5, 0xfffffffffffffffa, 0x6], @devid=r8}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r11, 0x10c, 0x7, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000300)=""/225, &(0x7f0000000400)=0xe1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x16, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000002480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000024c0), 0xffffffffffffffd2}, 0x48) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000200)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x4, r13}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfffff7b4, 0xc, 0x9, 0x0, r5, 0x2bac, '\x00', r13, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa}, 0x50) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) 2m53.003964057s ago: executing program 0 (id=1525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="00850000020000001400350073797a6b616c6c657230000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000480)={0x1d, r8, 0x8000000000000003, {0x0, 0xf0}}, 0x18) recvfrom$inet(r7, 0x0, 0x0, 0x40, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2m37.835622133s ago: executing program 32 (id=1525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="00850000020000001400350073797a6b616c6c657230000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000480)={0x1d, r8, 0x8000000000000003, {0x0, 0xf0}}, 0x18) recvfrom$inet(r7, 0x0, 0x0, 0x40, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2m32.976672402s ago: executing program 1 (id=1719): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000080)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r3, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000000fc0)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r2}, &(0x7f0000000100), &(0x7f0000001000)=r3}, 0x20) (async) close(r0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x58e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) 2m32.770597275s ago: executing program 1 (id=1722): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0xffffffffffffff8c, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m32.099064278s ago: executing program 1 (id=1726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2d, 0x2, 0x0) setsockopt(r1, 0x11d, 0x1, &(0x7f0000000040)="01000000", 0x4) ioctl(r1, 0x89e2, &(0x7f0000000240)='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000002c0)=@generic={0x2d, "000000000000080118000200"}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000380)='\x00\x00', 0x2}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m31.887867275s ago: executing program 1 (id=1729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x101, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$FITHAW(r3, 0xc0045878) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49811}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) 2m31.452761661s ago: executing program 1 (id=1732): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x200, 0x4}, 0x2000, 0x6e6bb5, 0x2, 0x0, 0x1}}, 0xb8}}, 0x24000080) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m31.066710599s ago: executing program 1 (id=1735): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2m16.029644489s ago: executing program 33 (id=1735): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 1m27.714176632s ago: executing program 2 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x70bd2a, 0x6, {0x2}, [@NDA_NH_ID={0x8, 0xd, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x20000080) 1m27.667260349s ago: executing program 2 (id=2104): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) 1m27.572000885s ago: executing program 2 (id=2105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e22, 0x5dfb, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1m27.431373411s ago: executing program 2 (id=2109): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f0000000280)="b0", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="9b", 0x29fff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) shutdown(r0, 0x1) 1m26.784703224s ago: executing program 2 (id=2123): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m26.598896147s ago: executing program 2 (id=2129): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0000000000000000000004080000000000000000000002000000008b6c5f61610030dc3000556521b5913edfdb053cc5eec9f1ba80873eec36c4d453d356a07ff96acc906c66ca32679866a43bb3d9bf535b0167d2172435a3bc3aea8f29102baa4e79762129f85c3383469d21b148d5a6ddb4e5606bef1d5c68b8a0fe9f51e69d8f97a8b334dd9f4331d292da820513285e72c4ddd0a7a6844a727b069c2002de90a1ce884f7be33789f0063a15ab349fa7880d775124e13e73212626ef610a41e9a2a0838b"], 0x0, 0x3a}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000007c0)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000012c0)={r1}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000001300)={0x0, 0x800, 0x0, 0x8, 0x1, 0x8, 0xa2}, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f", @ANYRESDEC=r1], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000001240)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000001280)="23000000010002", 0x7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r3}, 0x8) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x4, [@var={0xd, 0x0, 0x0, 0xe, 0x3, 0x3}, @typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0x10, [{0xc, 0x1, 0x9}, {0xd, 0x2, 0xe4}, {0xb, 0xd20, 0x9}, {0x7, 0x3, 0x10}, {0x5, 0x0, 0xfff}]}, @restrict={0xc}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @union={0x9, 0x3, 0x0, 0x5, 0x0, 0xff, [{0x6, 0x2, 0x2f0b}, {0x2, 0x1, 0x5e}, {0xf, 0x2, 0x10000}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x1}, {0xf}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000840)=""/35, 0xf0, 0x23, 0x1, 0x44a, 0x10000, @value=r11}, 0x28) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x0, 0x10, &(0x7f0000001140), 0xfffffffffffffffe}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0xffffffffffffffff}, 0xc) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0xd, 0x4, 0x2, 0x5, 0x68285, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @value=r12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xf, 0x27, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @alu={0x4, 0x1, 0x5, 0x8, 0x8, 0x30, 0x10}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001640)='GPL\x00', 0xffff9ff0, 0x5b, &(0x7f0000001680)=""/91, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0x10, 0x0, 0x43}, 0x10, 0x0, r13, 0x0, &(0x7f0000001b80)=[0xffffffffffffffff, r14, r15, r16], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r13, 0x702, 0xe, 0x0, &(0x7f0000001200)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1a00"], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) 1m11.218265362s ago: executing program 34 (id=2129): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0000000000000000000004080000000000000000000002000000008b6c5f61610030dc3000556521b5913edfdb053cc5eec9f1ba80873eec36c4d453d356a07ff96acc906c66ca32679866a43bb3d9bf535b0167d2172435a3bc3aea8f29102baa4e79762129f85c3383469d21b148d5a6ddb4e5606bef1d5c68b8a0fe9f51e69d8f97a8b334dd9f4331d292da820513285e72c4ddd0a7a6844a727b069c2002de90a1ce884f7be33789f0063a15ab349fa7880d775124e13e73212626ef610a41e9a2a0838b"], 0x0, 0x3a}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000007c0)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000012c0)={r1}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000001300)={0x0, 0x800, 0x0, 0x8, 0x1, 0x8, 0xa2}, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f", @ANYRESDEC=r1], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000001240)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000001280)="23000000010002", 0x7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r3}, 0x8) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x4, [@var={0xd, 0x0, 0x0, 0xe, 0x3, 0x3}, @typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0x10, [{0xc, 0x1, 0x9}, {0xd, 0x2, 0xe4}, {0xb, 0xd20, 0x9}, {0x7, 0x3, 0x10}, {0x5, 0x0, 0xfff}]}, @restrict={0xc}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @union={0x9, 0x3, 0x0, 0x5, 0x0, 0xff, [{0x6, 0x2, 0x2f0b}, {0x2, 0x1, 0x5e}, {0xf, 0x2, 0x10000}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x1}, {0xf}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000840)=""/35, 0xf0, 0x23, 0x1, 0x44a, 0x10000, @value=r11}, 0x28) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x0, 0x10, &(0x7f0000001140), 0xfffffffffffffffe}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0xffffffffffffffff}, 0xc) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0xd, 0x4, 0x2, 0x5, 0x68285, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @value=r12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xf, 0x27, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @alu={0x4, 0x1, 0x5, 0x8, 0x8, 0x30, 0x10}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001640)='GPL\x00', 0xffff9ff0, 0x5b, &(0x7f0000001680)=""/91, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0x10, 0x0, 0x43}, 0x10, 0x0, r13, 0x0, &(0x7f0000001b80)=[0xffffffffffffffff, r14, r15, r16], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r13, 0x702, 0xe, 0x0, &(0x7f0000001200)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1a00"], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) 1m11.201201685s ago: executing program 6 (id=2296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f0000000580)="b0", 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000600)="9b", 0x29fff, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1m10.978425767s ago: executing program 6 (id=2301): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000042000100020000000000000003010000c80000001200010000112233445566778899aabb080000000400028018000380140006800800010001000000080002"], 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x20004080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1m10.674972905s ago: executing program 6 (id=2304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xb0, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4002804}, 0x4008045) (async) socketpair(0x28, 0xa, 0x7, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000015c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f0000001600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000001700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) clock_gettime(0x0, &(0x7f0000006780)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006600)=[{{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001940)=""/51, 0x33}, {&(0x7f0000001980)=""/162, 0xa2}, {&(0x7f0000001a40)=""/204, 0xcc}, {&(0x7f0000001b40)=""/18, 0x12}, {&(0x7f0000001b80)=""/57, 0x39}, {&(0x7f0000001bc0)=""/249, 0xf9}, {&(0x7f0000001cc0)=""/201, 0xc9}, {&(0x7f0000001dc0)=""/84, 0x54}], 0x8, &(0x7f0000001ec0)=""/167, 0xa7}, 0xe2}, {{&(0x7f0000001f80)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002000)=""/84, 0x54}, {&(0x7f0000002080)=""/196, 0xc4}, {&(0x7f0000002180)=""/8, 0x8}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/112, 0x70}, {&(0x7f0000002280)=""/46, 0x2e}, {&(0x7f00000022c0)=""/97, 0x61}, {&(0x7f0000002340)=""/168, 0xa8}, {&(0x7f0000002400)=""/110, 0x6e}, {&(0x7f0000002480)=""/198, 0xc6}], 0xa, &(0x7f0000002640)=""/88, 0x58}, 0x7fff}, {{&(0x7f00000026c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002740)=""/207, 0xcf}, {&(0x7f0000002840)=""/122, 0x7a}], 0x2, &(0x7f0000002900)=""/17, 0x11}, 0x9}, {{&(0x7f0000002940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000029c0)=""/131, 0x83}, {&(0x7f0000002a80)=""/142, 0x8e}, {&(0x7f0000002b40)=""/236, 0xec}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/29, 0x1d}], 0x7}, 0x80000000}, {{&(0x7f0000004d40)=@tipc=@id, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004dc0)=""/12, 0xc}, {&(0x7f0000004e00)=""/232, 0xe8}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/35, 0x23}], 0x4, &(0x7f0000005f80)=""/7, 0x7}, 0x1}, {{&(0x7f0000005fc0)=@qipcrtr, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006040)=""/106, 0x6a}, {&(0x7f00000060c0)=""/16, 0x10}, {&(0x7f0000006100)=""/215, 0xd7}, {&(0x7f0000006200)=""/188, 0xbc}, {&(0x7f00000062c0)=""/250, 0xfa}, {&(0x7f00000063c0)=""/20, 0x14}, {&(0x7f0000006400)=""/176, 0xb0}], 0x7, &(0x7f0000006540)=""/131, 0x83}, 0x7f}], 0x6, 0x40, &(0x7f00000067c0)={r6, r7+60000000}) recvmsg(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000017c0)=""/81, 0x7ffff000}, {&(0x7f0000001840)=""/83, 0x20000253}], 0x2}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r8, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000001400)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001440)=r8, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m10.07610027s ago: executing program 6 (id=2307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0x2, 0x14, 0xf, 0x12, 0x4}}]}}]}, 0x148}}, 0x10000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000140)=0x40, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x3f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @broadcast}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)={0x118, 0x2d, 0x1, 0x2, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x6, 0xe9, 0x0, 0x0, @str='\xff\xff'}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$tun(r5, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "4a8d2b79c3648bf061121b3687dcce42c73c0ce3"}}, 0x36) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) 1m9.700375573s ago: executing program 6 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000640)={0x8000001, 0x6}, 0x8) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000840)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r7, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 1m8.734410823s ago: executing program 6 (id=2321): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 53.344894067s ago: executing program 35 (id=2321): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 6.321101291s ago: executing program 3 (id=2707): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080)=0x10, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000280)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000440)="01154e00010000112233445588fbca0100011614", 0x22, 0x44011, &(0x7f0000000480)={0x11, 0x0, r4, 0x0, 0x0, 0x0}, 0x14) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_etf={{0xfffffffffffffcac}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}, @TCA_RATE={0x0, 0x5, {0x6, 0xf}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x3}]}, 0x40}}, 0x0) 6.215316768s ago: executing program 3 (id=2709): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000080)={&(0x7f0000000040)=[{0x0, 0x1, 0x0, 0x5, 0xff}], 0x1, 0x28, 0x7, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xb8a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 6.153035435s ago: executing program 3 (id=2710): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) (async, rerun: 64) r1 = socket$inet6(0x10, 0x3, 0x0) (rerun: 64) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0xfffffffffffffffe, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0xb782a61b70111bd9) (async, rerun: 32) recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) (rerun: 32) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5.968407551s ago: executing program 3 (id=2712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x4, 0xf1, 0xd, 0xfffffff1, 0x67, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x40, 0x100, 0x5}}) sendto$packet(r1, &(0x7f0000000780)="2166ec05a4580f78357eaf2119247a9b9dde821c410a8891b4e75fe131a20b92dde78e82954b5330999d74a7f72ff8fc9ccfe7e33b3f928673ec915ff55f344f424fec6ed4a6007d392b1e58391bb5d957ef8057f96b7162cd3a68d569b7bb9a60610bf7254682791e979a46a678252eb0fd341f26794f7ae5e4e1eb41b95f6106061e51da83986b6014e419cb612af45bdd7153c6ce8fcb65643fffce68", 0x9e, 0x0, &(0x7f0000000900)={0x11, 0xf5, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) sendmsg(r1, &(0x7f0000002100)={&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x4, 0x2, {0xa, 0x4e20, 0x500, @local, 0x5}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c40)="45684b2168fb05f646fea9a56638dbee4c59bc61d3bb3ec8688a9d3dd2831dece3b18f57493b89eb11b5084d207182fe54e160eb1bd73345309e6b20cd", 0x3d}, {&(0x7f0000000c80)="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", 0xfb}, {&(0x7f0000000d80)="abf1cfc7cbef3764efd649", 0xb}, {&(0x7f0000000dc0)="667d36d9d6e9725f8b1ea4a6e8233eff3611af96e0757abacb58706efa90d6951cc3", 0x22}, {&(0x7f0000000e00)="56bda731b8bc4e80a1d249771783773178ddfda6fe8d30eab52925216d1dcd8450cb1ec0051d2f05457ad0cf75573d4b94cb5abeb7d80db7", 0x38}, {&(0x7f0000000e40)="65ff309b172c5f3df56dee77da5689ac8e6aca3e10922b4e93348c86d537f24b12a0656355a8987d379b3b026e43ee941be639852e910d3445b474b9636bd94a23b03ca750b0b09fc6efbfa9ef852b322be002ca6f10a8a96e8edcb7eeb7ba0016bfe1759b43821f2398b6e23c7f5323ea8f03ad443389d196ee825077049ec74ec72cd8f48b5a233b38a962e76e5ba99539690126526e8d6947faceced71efa96fa9a2b0a273a34d0f9661aae5f12ab606bba7b42220adb5a9115eba591c9a5371200fcf09cd74e760921d8f998cea81839af3b41c8ad07e2baa3cd0489ee", 0xdf}, {&(0x7f0000000f40)="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", 0xfa}], 0x7, &(0x7f00000010c0)=[{0x1010, 0x10c, 0x2, "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"}], 0x1010}, 0x400c0d0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000200)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000002140)=@sack_info={0x0, 0x49, 0x5}, &(0x7f0000002180)=0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10102}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x48}, 0x1, 0x8}, 0x4004885) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000740), 0x56) sendmsg$kcm(r6, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) close(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)={0x20, r12, 0x1, 0x70bdad, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x3c, r10, 0x1, 0x70bd2d, 0x65dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 5.872583651s ago: executing program 3 (id=2714): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x8000}) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 5.743474883s ago: executing program 3 (id=2717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1, 0x0, 0x0, "b4541ad8a719cce5b93390ffad119a9404ac75b6e76ffc40cd6cfca1e687ae4a5f6c45837f98c5b34fc0d75f81fba139a766f9329afdcdd828f6be7660e836c8bbbef6bdb946eee07a1baceb6cc5a31bbb9e74ced70674dca9251ebb0a639b0b01dfcd7055ac30cc78c567183410c70697781aea3b8f4b0e24aaa1538cce11f60ceac8341f6a803203a099f0a22d74224299d23fc8db20da8bec380ebbfdaad08cc2aa77cfeb986111181ca1fed46e32d8f1f3dffe14220bf67a40f3eb218081df885b8d8bc945cb2e26931e1b81fc48dacc77ab9fd4f4ef65f5fc185b6277df124525d82654e156682fe19d731de3978f71bb85f85daef3a1513a89bd25911d", 0x1, "2353a2ad8f792337b3610a014feea22617c1ecea"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e292ac39b9d3382f"}, 0xb}}]}, 0x154}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 3.039807591s ago: executing program 7 (id=2742): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x20040004) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}]}, 0x1c}}, 0x2c008000) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x24004000) (async) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x2, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) 2.746875568s ago: executing program 7 (id=2744): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0x4) r3 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x2, 0x0, {0xa, 0x4e22, 0x80, @mcast2, 0x7}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="86af64b2190f21ca25a4d623692e166ce850b642f8d5824dcc753083e8a024d755d38e12e0d8de5d1ce4e489dc2e89", 0x2f}], 0x2, &(0x7f0000000380)=[{0xe8, 0x11, 0x27, "5fcd7ec37cbccb5aca874c7f7d325ae4b17ef0d23741946a53d8e3143e116d0a101a7d85a4b2bc17dca10b4b4b5f48ac8caa59e410f68da45ef0a3fcd246cb11611ef088eb9f173e21a1d182d842800454e4d2e6fcd5d925eb665b3db82bee409b0727d809585350afb05c904d3b3eb7a032a4c5957a937900d13f34c531988da618583ceb134bb40bfdb951e4b840ff8e3e2f55900d7796409a6e7603c33330680f2a9912039730cfa81f9afe6eb8f0bc263e458de483e5963ec2f10e5f4ae340adaef66f7247be9363939aff8d9cfe8b958546a2c0"}, {0x38, 0x114, 0x2ae, "326f2d5c255e54a01998b6bf490db1b13b54c5937f9f2e650713e229ecb0c407f77595"}, {0x80, 0x119, 0x7, "5a0cc4aa5e36099fb38e5c427de7c4d6036529aced8d18cd09cde7176e90a0789f2be00ad8543f087c4bb9bb4b837567a03bfdd77d09c77dad40732a9a81f62c23c8f69a16709be3a3cac0f718abd20e00bcdc2eec4921a91ccb1227868af60a6efce1705a72c433b25417"}], 0x1a0}, 0x2404c050) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$int_out(r4, 0x5460, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2d, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'perf_event'}]}, 0x29) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x3, 0x6, "e28614", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[], {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1, 0x0, 0x7ff}}}}}}}, 0x0) 2.187524852s ago: executing program 8 (id=2749): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic='\x00\x00']}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic='\x00\x00']}, 0x18}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) 1.976066161s ago: executing program 8 (id=2751): sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20892) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x4e21, 0xb11, @mcast2, 0xffffffff}}, {{0xa, 0x4e1e, 0x8, @private0}}}, 0x108) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "f28359", 0x0, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x2}, @private1}}}}}}}, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000800)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xa) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x10, &(0x7f0000000fc0)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000001040)=0x10) 1.963018763s ago: executing program 7 (id=2752): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000081) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0x4e, 0x0, &(0x7f0000000000)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=0x2a0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe88c33b9231e8285}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000) r4 = socket(0xf, 0x5, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000200)={0xfffffffffffffffb, 0x30, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.677788622s ago: executing program 7 (id=2754): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f00000000c0)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000040), 0x18) r6 = socket$netlink(0x10, 0x3, 0x9) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast1, @initdev}, &(0x7f00000003c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$nl_route_sched_retired(r2, &(0x7f0000003e40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e00)={&(0x7f0000000cc0)=@deltfilter={0x3114, 0x2d, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1ffc4, 0xf}, {0xffe0, 0x5}, {0x2, 0xffff}}, [@f_rsvp={{0x9}, {0x710, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_ACT={0x6fc, 0x6, [@m_xt={0xec, 0x19, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x40, 0x6, {0x3, 'mangle\x00', 0x80, 0x7, "91757a9a74940411a7617a8316cc03624607d3510470"}}, @TCA_IPT_HOOK={0x8}]}, {0x56, 0x6, "f4fc2a5677c6fa6d9db015f8cff8acb3196858a58b888279295f7e23d49723c39cae06fc2ffb4f8b5693828415e2629c9832d69c03fae0577eed95e6d72eb4ddaf0faf67b57440407d54e6840fd0459df0d6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x174, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x17}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80, 0x7, 0x1, 0x8, 0x1}, 0x3}}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x888e}, @TCA_MPLS_PROTO={0x6, 0x4, 0x890d}]}, {0xf4, 0x6, "dadfaa9e2d82b388ae061d4566c03f9d8a01ed6ef8cee3fdf10f7e8d084af2e473dfbf431b4d76984728994398bc6c2f9acb3b8ed510ff227b83ee6f1a98577a0987374e6b927104e5747b95eabcfce971081c0ec99de2caa17fad8cd8d455f1643bb27b9100283348759731cc616f252709e8e0b1b2e5c0c8f384de375cace9afa3eb24d5ed6b6115397d7a2f035646541da5f9351bda0c558538545748fe41dfd1c81d4a3833ab90876084d9c457321933018fedfcff9f5823bf555a0285c062740493b701e5534d366c5656e2d5fa303a76a433481eb6951921db1650cdc85f8a62a39d3bed5f386c4b0f08cdb41a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x78, 0x0, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7fd}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7ff, 0x0, 0x20000000, 0x6, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdf}]}, {0x20, 0x6, "77c090771c0613362979e02d65a399d70755589dc80c43c96075edda"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x14c, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffffb, 0x6, 0x5, 0xffff}, 0x4, r8}}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x198, 0x1c, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x8d1, 0x0, 0x101}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x5e2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3, 0x5, 0x7, 0xd5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2e0, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x8, 0x1, 0x5, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x5, 0x3, 0x4, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x203, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9bbc, 0xfffffffa, 0x1, 0x7fffffff, 0x80}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x6, 0x4, 0x1ff}}]}, {0xb6, 0x6, "deb08e7afbd3c93993d780d03d80b6ad5bbdeb4c602961430f1f93cf3d8e25e0c4ec8024d1af5398f91d59315d62ceef8cb47b71aa1ce817f5aa2428e3c214d4b64e66174358da19aa43916e1a5047a137f39887f2219136ca1ea5a10b72a96016dcd2e9452902dc84e55ca2db007a8c9d0ef02c3f92b74e9fc2ae58a0ddf87830508880bf7a589dfa7780438c307ea711eb0f9488d2f3508fc5452aa4951098ac8097a1e599e185de3129e9f17ed866af7d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xdc, 0x8, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xa50, 0xe, 0x7, 0x22b, 0x8001}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x8, 0x1, 0x7, 0xfffffffd}}]}, {0x6b, 0x6, "aac76fb445508888fd448c78b173e2479a53efcdc0c0095a0a0446d72fa7b6b4d27cde26cdc593211cabda722cad5dd1a416bf13b59d44c0c842379e6a1baa7ca8be008da514a7fd0a97ce81837068444376878c89adf6b3b31d2aadcd67a3463fb9dbb90c515c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0x60, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x31, 0x6, "2be46e2f60b9e9637a5986b4c8ffe08b19802f01a25767be63bebb4ca698fb597d0ba1ff8bd28d0b77f495a43b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @f_rsvp={{0x9}, {0x2b0, 0x2, [@TCA_RSVP_ACT={0x24c, 0x6, [@m_ife={0x154, 0x11, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, {0xf4, 0x6, "5ed6be97865a13aca5d84f062c5765c86bff0b54b9428481063529fde6265bb3e87f8e8c6e8d7f4a996411f8ceec156f70595780d88d6d9465a312b12bc5442cef8b9c87ef2d20b621f11f269121ffc087bd51c33b7c1baff75bcefc5cdf65e5f2e8d109f2e6df7f6571e4983f4d30c4fac6491c5df963c35d75bb6234c0ecbd22684a0671a46c68dd2cf46732c99d63c4d7a6fc8b0115b9ec34d1d6571e07320d695b547d75bf4a41f662ff9990c4a68fa979fecd7f3765d70ebbe34175a2b2481e707da5bbad110941ef34655226700d84ca9efeb7f74febc3334f9326ec5245378df4f70be1da48edd9d71939675d"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xf4, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff851a, 0xccec, 0x7, 0x3, 0x9b}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x92, 0x7f, 0x3, 0x8, 0xf97a}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xf, 0x10000000, 0x5, 0xfffffff8}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x2, 0xe, 0x2}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x5, 0x5, 0x3}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x8, 0x800, 0xe}, 0x2}}]}, {0x1f, 0x6, "326809a6c4a15a38e978a47c2d1515f399473265b091e0ea331273"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x1}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0xf, 0x5}, {0x7, 0x98, 0x9}, 0x0, 0x4, 0x6}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffffa, 0x7, 0xb}, {0x8, 0x9569, 0x1}, 0x4, 0xb}}]}}, @f_tcindex={{0xc}, {0x270c, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x1ff}, @TCA_TCINDEX_POLICE={0x820, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x7, 0x9, 0x7, 0x84, 0x2, 0x8, 0x9d, 0xc, 0x10, 0x1, 0x2, 0x1387, 0x1, 0x4, 0xfffffffc, 0x1e29, 0x9, 0xfff, 0x3, 0x800, 0x0, 0x7, 0x5612, 0xc, 0x5c, 0x0, 0x4000, 0x6, 0xaf, 0x2, 0x3, 0xa, 0x7, 0x2, 0x3, 0xf, 0xcd, 0x7, 0x0, 0x10001, 0x0, 0xf, 0x2, 0x9, 0x1, 0x0, 0x10000, 0x8, 0xe, 0x81, 0x3, 0x0, 0xfffffffc, 0x723, 0x0, 0xd, 0xfffffffd, 0xfffffffc, 0x7, 0x8, 0x0, 0x0, 0x9fa, 0x6, 0x7fffffff, 0x7, 0x9, 0x8, 0x8, 0x3, 0xfffffffc, 0x2, 0x2, 0x8, 0x6, 0x7, 0xc, 0x9, 0x6, 0x401, 0x9, 0x3, 0x200, 0x3e, 0x3, 0x6e, 0x11, 0x8, 0xb, 0x7, 0x4, 0x200, 0x0, 0x8, 0x2, 0xd, 0xfffffff6, 0x1, 0x7, 0x0, 0x34, 0x5, 0xa5, 0x7fff, 0xff, 0x6, 0x7fffffff, 0x8, 0xdad, 0x36, 0x40, 0x5, 0x0, 0x565, 0x7fff, 0x1, 0x2, 0x3, 0x80000001, 0x2, 0xfffffffe, 0xa, 0x9, 0x8, 0x5, 0x5, 0xc, 0xc, 0x0, 0x9, 0xe98c, 0x3, 0x2, 0x5, 0x1, 0x7, 0x7ff, 0x4, 0x0, 0x6, 0x6, 0x4, 0xf94, 0x27c, 0x3, 0x8000, 0xffffffee, 0x7, 0x9, 0x4, 0x400, 0x2, 0x4, 0x800, 0x2, 0x2, 0x2, 0x10, 0x9, 0x70, 0x2, 0x2, 0x80a, 0x6, 0x6, 0x16f, 0x6, 0x7ff, 0x3, 0x5, 0x9, 0x2, 0x5, 0x1ff, 0x5, 0x2, 0xfffffffe, 0x8, 0x0, 0x1, 0x8, 0x5, 0x5, 0x54, 0x1, 0x401, 0xac87, 0x4, 0x4, 0x200, 0xe5f, 0x1, 0x5, 0x6, 0x76e84b4b, 0x40, 0x9, 0xffff0001, 0x6, 0xf, 0x3ff, 0x200, 0x0, 0xfffffff9, 0x9, 0x3, 0x0, 0x2f, 0x3, 0x3, 0x8, 0x620, 0x4, 0x1, 0x80, 0x5, 0x3, 0x9, 0x9, 0x4, 0x910a, 0x1, 0x0, 0x60a, 0x3, 0x124ec02f, 0x53729809, 0x2, 0x0, 0x8, 0x2, 0x8001, 0x9, 0x1, 0x8b4f, 0x1, 0x43, 0x4, 0x1ddc, 0xffffffff, 0x2, 0x3, 0xabe, 0x7f, 0x3, 0xe, 0x77, 0xfff, 0x5, 0x3f, 0x4, 0x45508f55, 0x200, 0x66f2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4a, 0x200, 0x9, 0x14d1, 0x4, 0x0, 0x6, 0x6, 0xb, 0x8, 0x1, 0x8, 0xffff, 0x88, 0x1, 0x8, 0x9, 0x1, 0x5, 0xffffffff, 0x4, 0x5, 0xbe9, 0x4, 0x400, 0x6, 0x4cf0, 0x8, 0x80000001, 0xf, 0x8, 0x402e748d, 0x3ae, 0x40, 0x1, 0x5, 0xffffffff, 0x4, 0x2, 0xae3, 0x1, 0x7, 0x7f, 0x3, 0xfff, 0x101, 0x4, 0x2, 0xffffffff, 0x4, 0x2, 0x8001, 0x7, 0x81, 0x4, 0x9, 0xfffffffb, 0x82, 0x6, 0x7c, 0xfffff1d2, 0x9, 0xb, 0x3, 0x0, 0xffffffff, 0x0, 0x9, 0x1, 0x4, 0x5, 0x7, 0xb, 0x9, 0x2, 0x6, 0x10, 0x8, 0x7, 0x7, 0x5, 0x1, 0x6, 0x67, 0x1, 0x9, 0x8, 0x7, 0x8, 0x0, 0x3, 0x9, 0x2, 0x2, 0x1, 0x2, 0x8, 0x4, 0x297, 0x41, 0xf, 0x2, 0x6, 0x2, 0x1, 0x8, 0x8000, 0x1, 0x8, 0x4, 0x9, 0x7, 0x4, 0x7, 0xffff, 0x1, 0xffff7fff, 0x5, 0x9, 0x7, 0xd, 0x0, 0x4, 0x8, 0x2, 0x3, 0x8001, 0x6, 0x2, 0x6, 0x401, 0x8000, 0x0, 0x0, 0x9, 0x7, 0x1ff, 0x1ff, 0x57, 0x4, 0x3, 0x5, 0x5, 0x2, 0xe2, 0x7, 0x40, 0x1, 0x3, 0x5, 0xffffff00, 0x2, 0xfffffffa, 0x80000000, 0x1ff, 0x728, 0xf733, 0x3, 0x56a2, 0x2, 0x5, 0x976, 0x1, 0x6, 0x0, 0x9, 0x5, 0x96a, 0x4, 0x202119c0, 0x5, 0x913, 0xf6, 0xfffffffb, 0x5, 0x10001, 0x7, 0x7f, 0x2, 0x1, 0x3, 0x7f, 0x772f, 0x3, 0xe, 0x6, 0x63, 0xf8, 0x9, 0x0, 0xef53, 0xa, 0x5, 0x8001, 0x10000, 0x200000, 0x7, 0xae, 0x0, 0x5, 0x8, 0x5, 0x101, 0x0, 0x1, 0x42, 0x5, 0x6, 0xf2, 0x7, 0x4, 0xfffffffe, 0x4, 0xfff, 0x401, 0x7, 0x9, 0xa8, 0x4, 0x3, 0x7a4c, 0x948b, 0x2, 0x1, 0x5, 0x1, 0x4, 0x3, 0x9, 0x8, 0x3, 0x6, 0x9, 0x0, 0x4, 0x5, 0x3, 0x101, 0x9, 0x7, 0x401, 0x5000000, 0x5, 0x7ff, 0x76, 0x66aa, 0x0, 0x401, 0x5, 0x7, 0x8, 0x0, 0x9, 0x2b06, 0xb, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9979}, @TCA_TCINDEX_POLICE={0x8f4, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x45}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x61, 0x6, 0x7, 0x80000000, 0x3, {0x0, 0x1, 0xc, 0x0, 0x4000, 0x7fffffff}, {0x5, 0x1, 0x4e1, 0x5, 0x6, 0x80000001}, 0x8, 0x5, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x3d27, 0x2, 0xfffffff0, 0x1, 0xf29, 0x4, 0x1, 0x6, 0x0, 0x2, 0x800, 0x3, 0x6, 0x8, 0xb, 0x0, 0xc, 0x0, 0xf58, 0x1, 0x2, 0x5e, 0x401, 0xc, 0x8, 0x2, 0xb8, 0x2, 0x80000001, 0x8, 0x2, 0xc, 0xff, 0x4, 0x3af2, 0x7, 0xb98c, 0x0, 0x6, 0x1, 0xfff, 0x3, 0x1ff, 0x0, 0xd5, 0x58, 0x7f, 0x7, 0xfffffffa, 0x9, 0x1, 0x400, 0x40000000, 0x2, 0x2, 0x400, 0x28000, 0xffff, 0x90, 0x7, 0x40, 0x9, 0x4, 0x4, 0x7, 0x8b, 0x2, 0x40, 0x86, 0x48, 0xff, 0x1ff, 0xd279, 0x0, 0x338a, 0x80, 0x5, 0x10000, 0x4, 0x9, 0x3, 0x0, 0x7, 0x3, 0x401, 0x7ff, 0x4, 0x2, 0x8, 0x1, 0x7, 0x5, 0x6, 0x101, 0xfffffffa, 0x6, 0x7, 0x80000001, 0xfe, 0xdb, 0x6, 0x7f, 0x5, 0x3, 0x10000, 0xc, 0x0, 0x6, 0xd478, 0x400, 0x400, 0x700, 0x6, 0xa4, 0x1, 0xfff, 0x200, 0x8, 0x3, 0x2, 0x732, 0xf7, 0x5, 0xf6, 0x3ff, 0x1, 0x9, 0x7, 0x1, 0x2, 0x80, 0x6000000, 0x5, 0xffffff7f, 0x80000000, 0x8, 0x3, 0x1abc, 0x3, 0x80000000, 0x7fff, 0xd25, 0x4, 0x200, 0x8, 0x5, 0x9, 0x6aab, 0xc8c, 0x287, 0xfffffff8, 0x8, 0x8, 0x100, 0xe29c, 0xb6a, 0x2, 0x44d, 0x1, 0x0, 0x8, 0x80, 0x1, 0xf, 0x1, 0x7f42, 0x7, 0x7, 0xdd, 0x10000, 0x98, 0x40, 0x5, 0x0, 0x5, 0x2, 0x5896, 0x75b, 0x1, 0x5, 0x4, 0x10000, 0x200, 0x6, 0x9, 0x7, 0x9f820000, 0x3, 0x2, 0x7, 0x38000, 0x6, 0x7, 0x0, 0x7, 0xc10, 0x3, 0x3, 0x94, 0xffffffff, 0x200, 0x80000000, 0xaf, 0x0, 0x1, 0x9, 0x6, 0x5, 0x3, 0x3, 0xfffffffc, 0x0, 0x2, 0x7, 0xa, 0x3, 0x80000001, 0xffff, 0x9, 0xb4f, 0x9, 0x800, 0x7, 0x1, 0x3, 0x4, 0x9, 0x7, 0x13, 0x5, 0xfffffff8, 0x7, 0xfff, 0x8, 0x4b4, 0x8, 0x2, 0xff, 0x80000000, 0x3, 0x401, 0x6, 0x5, 0xb42, 0xab19, 0xfff, 0x3, 0xfffffff7, 0x7fffffff, 0x0, 0x60000, 0x21d4de46, 0x2, 0xd791, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x7, 0x7, 0x4, {0x9, 0x1, 0x120, 0x31, 0x0, 0x100000}, {0x73, 0x3, 0x5, 0x6, 0x7f, 0x6}, 0xf, 0x1, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xca4d, 0x33, 0xe000, 0x1, 0x7, 0x1, 0x8, 0x8, 0x7a32, 0x5, 0xea3, 0x7f, 0x5, 0x6, 0x4, 0x7, 0x0, 0xffffffff, 0xe3, 0x0, 0x40, 0x123, 0x9, 0xff01, 0x5, 0x7fffffff, 0x7fffffff, 0x97, 0x1000, 0x4, 0x7fffffff, 0x400, 0x6, 0x1000, 0xfffffff8, 0x3ff, 0x5, 0xc5, 0x2, 0x3, 0x9, 0x3, 0x2, 0x3, 0xaed, 0x8, 0x9, 0x200, 0xd23d, 0xffffff06, 0x1, 0x2, 0x2, 0x6af4, 0x5, 0x8, 0x6, 0xffffd6af, 0xe, 0x80, 0x7, 0x7fffffff, 0x5, 0x1, 0x3, 0x9, 0x0, 0x7, 0x0, 0xfff, 0xffffffff, 0x1, 0xa, 0x4, 0x4, 0x7, 0x1, 0x4, 0x3, 0x1, 0x1000, 0x9, 0x7fff, 0x8, 0x9, 0x2, 0x3, 0x100, 0x9, 0x800, 0x2, 0x7, 0x9, 0x1, 0x0, 0x4, 0x10000, 0x4, 0x3, 0x40, 0x800, 0x3, 0xfffff084, 0x0, 0xfffffff2, 0x81, 0x8, 0x7f, 0x16, 0x6, 0x2, 0x80, 0x8000, 0x631, 0x6, 0x6, 0xfffffff8, 0x6, 0x5, 0x5c, 0x3, 0x0, 0x76, 0xa81, 0x1000, 0x4, 0xc93c, 0xbc, 0x0, 0x401, 0x401, 0x2, 0x4ea3, 0x28, 0x1, 0x7, 0xffff, 0x1b0, 0x7, 0x9, 0xe, 0x6, 0x80000000, 0x3, 0x6, 0x5, 0xfffffff5, 0xf61, 0xa28, 0x7, 0x4, 0x9, 0xe4, 0x5, 0x9, 0x1, 0x2, 0x2, 0x1ff, 0x1, 0x80000001, 0x8, 0x20, 0x4, 0xa4b, 0x1, 0x7ff, 0xfcd4, 0x8, 0xe, 0xdcc700, 0xe000000, 0x0, 0x6, 0x100, 0x7, 0x1, 0x10001, 0x5, 0xe, 0x80, 0x9000, 0x3, 0xe4b5, 0x6d1c, 0x718, 0x6, 0x4, 0x81, 0x1, 0x1, 0x65, 0x7, 0x6, 0x5, 0x3e31, 0xf3e, 0x7, 0x0, 0x4, 0xe, 0x800, 0x52, 0x5, 0x9e29, 0x8, 0xc99, 0x3, 0x140000, 0x2, 0xffff, 0x1, 0x2, 0x2, 0x7186, 0x9, 0x6, 0x55, 0x2, 0xfffffff9, 0x3, 0xe, 0x3, 0x2fe, 0xe, 0x8ec, 0x4, 0x5, 0xb0, 0x2, 0x7fff, 0x5, 0x5, 0xfff, 0xfffffffb, 0x5, 0x3000000, 0xfffffff7, 0x6, 0x8, 0x8, 0x3, 0x978, 0xfffffffc, 0xf, 0x3a30, 0x72, 0x9, 0x6, 0x8, 0xfffffffe, 0xfff, 0x8, 0x7, 0xf4000000, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffdffffff9, 0x8, 0x3, 0x2, {0x48, 0x0, 0x7, 0x1, 0x2, 0x10001}, {0x7f, 0x2, 0xfffc, 0x1, 0x4, 0x2}, 0x2, 0x0, 0xfff}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_ACT={0x15d4, 0x7, [@m_sample={0xd8, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x276e, 0xffff1f0d, 0xffffffffffffffff, 0x5, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb9}]}, {0x7b, 0x6, "354c9c97facd9c07871182896f0b6954b1eeaa2dbfce9a894759abb6f4df2f279266a884a85075f0669740b416eda8e89b75442bb4a7d54eef8c9923fe5a4ae549554697df01703ea48dc20f2097e0fec47c233c8ba71ccd7253f11deb9a24be1571e19ad65fdb6b446cd7fc3aacd9bb4f7acb0b8e8599"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x174, 0xc, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @random="76e91d598d40"}, @TCA_IFE_TYPE={0x6, 0x5, 0x5f3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffd, 0x5, 0x0, 0xe7, 0x6558}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}]}]}, {0xaa, 0x6, "c7612cb6799e44cd7e9209560cbf7b9038e6f32dd3a7e496dcacf16b6a29f21489efd0b76fb122a3b7de6f2359bf7328f6e3fee04af6c6f465cea80a50ee90fe4c19112371447b6fd2923b7488181e493b5ce8dce6e6fbb2dac5d52c67e41629164e466173e15d1b0e618fc7bbaad1913d58e1ba8a33d3033257fdb9e823b91c4aa3fb06e1a6e5fc014817aa370e6f5a2f40446b665330a43278f89fb5e603505b86efa40cd0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x11e4, 0x1d, 0x0, 0x0, {{0xb}, {0x1138, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1, 0x158, 0xa, 0x401, 0x4, 0x7, 0xc, 0x7, 0x2, 0xa, 0xffff, 0x7fffffff, 0x3, 0x9, 0x9, 0x200, 0x3800000, 0xfffff231, 0x200, 0x2, 0x2, 0x39b0, 0x3303, 0x4, 0x8001, 0x8, 0x2, 0x800, 0xbf77, 0x1ff, 0x8, 0x9, 0x9, 0x7fffffff, 0x7, 0x0, 0x84, 0x5, 0x7, 0x5, 0x7, 0xcc3b, 0xd0, 0x3, 0x2, 0x100, 0x6615, 0x4, 0x8, 0x5, 0x7, 0x7f, 0x3, 0x3, 0x38000000, 0x7, 0x80, 0x9, 0x10, 0x3, 0x547, 0x101, 0x1, 0x4, 0x1000, 0x8, 0x0, 0x0, 0x7baa, 0x2, 0x7, 0x100, 0xfffffffc, 0x1, 0x4, 0x8, 0x0, 0x1, 0x7fffffff, 0x5, 0x6, 0x401, 0x7f, 0x9, 0x8, 0x4, 0x74d8, 0x40, 0xde31, 0x9, 0x9, 0x38, 0x9, 0x1, 0x8, 0x200, 0x5, 0x8, 0x0, 0x6, 0xd, 0x6, 0x81, 0x8a, 0x6, 0x4, 0x80000000, 0x17, 0x5, 0x6, 0x5, 0x708, 0x784, 0x4, 0x78c2, 0x800, 0x9, 0x9, 0x6, 0x82e, 0x36e, 0x1, 0x1ff, 0x100, 0x200, 0x9, 0x80000001, 0x5, 0x3, 0x0, 0x0, 0xc0, 0x2, 0x9, 0x6, 0x8, 0x1, 0x3, 0x7, 0x2, 0x200, 0x5, 0x2, 0xb1, 0x8, 0x1ff, 0x7, 0x3, 0x400, 0x1, 0x3, 0x7, 0xfff, 0x7f, 0x0, 0x5, 0x0, 0x1c1d, 0x4, 0x47a0, 0x5, 0x101, 0x400, 0x0, 0x8090662, 0x5, 0xf, 0x5, 0xbe, 0x9, 0x80000000, 0xfffffff8, 0x9, 0x7, 0x4cd, 0xd7, 0x1000, 0x903, 0x8, 0x1ff, 0x7, 0x400, 0x0, 0x7, 0x0, 0x7, 0x7, 0x9, 0x81, 0x4, 0xc6, 0x4, 0x6000, 0x2, 0x0, 0x401, 0x7, 0x3, 0x2, 0x80000001, 0x3d, 0x6, 0x8, 0x8, 0xf5, 0x8028, 0x7, 0x6, 0x9, 0xffff, 0x6, 0x1, 0x8, 0x2, 0x0, 0xfffffffe, 0xffffffff, 0x4, 0x0, 0x0, 0x6, 0x2, 0x2, 0x6, 0xe7c, 0x4, 0x4, 0x7ff, 0x0, 0x5, 0x7, 0x400, 0x55, 0x3, 0x7, 0x9, 0x3, 0x1ff, 0x8, 0x2, 0x0, 0x9, 0x5, 0x6, 0x7, 0xa7cc773, 0x8000, 0x1, 0x2, 0x24fa, 0x8, 0xfffffff7, 0x6, 0x9, 0xe75a]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7fffffff, 0x0, 0x3, 0x40000000, 0x8b8, 0x1, 0x1200, 0x8, 0x4, 0x4, 0x2, 0x10001, 0x7, 0x8c2, 0x940, 0x5, 0x0, 0x8, 0x3ff, 0x80, 0xff, 0x5, 0x10000, 0x3, 0x1, 0xb, 0x1, 0x56a, 0x9, 0x7fffffff, 0x6, 0x3, 0x4, 0x1ff, 0x80000001, 0x5, 0xfffffff1, 0x7, 0x3, 0x3, 0x8, 0xaf, 0x1f, 0x3, 0xb, 0x56c0, 0x0, 0xfffffffd, 0xdc, 0x5, 0x9, 0x31383366, 0x2, 0x4, 0x101, 0x0, 0x8, 0x3, 0x4, 0x9d85, 0x8, 0x8, 0x81, 0xb0cbc8c, 0x2, 0xffff, 0x307b, 0x9, 0x2, 0x40, 0x99d, 0x2, 0x80000001, 0x7, 0x6, 0xffffff8e, 0x4, 0x2, 0x3, 0xfffffff8, 0x80000001, 0x5, 0x4, 0x81, 0x8, 0x96, 0x6, 0xfffffbe9, 0x7, 0xfff, 0x7ff, 0x8, 0x10000, 0x2, 0x3, 0x0, 0xfa, 0x7a, 0x5, 0x3, 0x4, 0x9, 0xbd, 0x3ff, 0x1, 0x1, 0x7, 0x7fffffff, 0x1, 0x5, 0x1, 0x6, 0x3, 0x6, 0xfffff801, 0x80, 0xfff, 0x5, 0x3, 0x9, 0x1, 0x9, 0xfffffffe, 0x6, 0xc13, 0x8ed, 0x8001, 0x0, 0xc2, 0x3, 0x6, 0x0, 0x1, 0x200, 0x6, 0x9f90, 0x2, 0x8863, 0x57c, 0xa139, 0x800, 0x0, 0x1, 0x6, 0x8, 0xf, 0x7, 0x1, 0x9aaf, 0x1ec, 0x9, 0x1, 0xc, 0x4cd, 0xff, 0x7, 0x3, 0x1ff, 0xffff8001, 0x5, 0x5, 0x80, 0xc126, 0x9, 0x9, 0x9e7, 0x0, 0x4, 0x8001, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4, 0x3, 0xc, 0x80000000, 0x3, 0xf, 0x1, 0xb, 0x3, 0x80, 0x3, 0x80000000, 0x4, 0x9, 0x193, 0xe44, 0x3, 0x563, 0x1, 0x3, 0x4, 0xff, 0x6, 0x101, 0x7, 0x636c931e, 0x6, 0x3, 0x10, 0xd15, 0xf2b, 0x7, 0x2, 0xd9, 0x2, 0xffffffff, 0x5, 0x3, 0x10001, 0x6, 0x26, 0xa, 0x8, 0x7ff, 0x80, 0x401, 0x1, 0x1, 0x3a, 0x8, 0x2, 0x0, 0x1, 0x400, 0x7f, 0xffff, 0x0, 0x7, 0xfed2, 0x9, 0x8001, 0x3, 0x8, 0x4, 0x1000, 0x8, 0x0, 0x7, 0x5e94, 0x8, 0x40, 0xfffff502, 0x7, 0x3, 0x5, 0x1, 0x100, 0x8, 0x8000, 0x3]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x63, 0xf, 0x6, 0x90aad106, 0x3ff, 0x0, 0x8, 0xd, 0x345, 0x5, 0x7fffffff, 0x6, 0x8, 0x3, 0x8000, 0x0, 0x5, 0x6, 0xfffffff7, 0x7fffffff, 0x8, 0x8, 0x0, 0x6, 0x576, 0x1, 0x0, 0x5, 0x6, 0x7, 0x8, 0xffff7fff, 0x2, 0x9, 0x1, 0x70829dff, 0x0, 0xc, 0x554f, 0x9, 0x3, 0x0, 0xef8, 0xd, 0x7d9f, 0x0, 0xfff, 0x4, 0x81, 0x0, 0x0, 0x7, 0x6, 0x8, 0x17560e7b, 0x4, 0x1bd, 0x80, 0xfffffffb, 0x5, 0xfffffff7, 0x3, 0x6, 0x67a, 0x4b0c, 0x7, 0x5, 0x101, 0xa, 0x3, 0x3, 0x8, 0x5, 0x33, 0x5, 0x7, 0x40000000, 0x3, 0x4, 0x4, 0x1, 0x3, 0x5, 0x0, 0x6, 0x81, 0x10000, 0x8d79, 0x3, 0x1, 0xff, 0xa4b, 0x7, 0x3cb6, 0xffffff70, 0x6, 0x8, 0x0, 0x1f8f, 0x9, 0x0, 0x2, 0x9, 0x8094, 0x1, 0x8, 0x5, 0x4, 0xd, 0xa, 0xff, 0x6, 0x401, 0x0, 0x57e, 0x400, 0x6, 0xd46f, 0x9, 0x7, 0x4, 0x3, 0x3, 0x7ff, 0x3, 0x5a, 0x1, 0x4, 0x3c3e, 0x1, 0x6, 0x0, 0x8, 0x7, 0xfffffffc, 0x7f, 0xfffffffa, 0x5, 0x0, 0x3, 0x8, 0x4, 0x2, 0x2, 0x101, 0x2, 0x0, 0x6410, 0x6, 0x0, 0x7, 0x1ff, 0x80000001, 0x9, 0x1, 0x6, 0x87, 0x0, 0x7, 0x3, 0x9, 0x8, 0x6d7, 0x3, 0x0, 0x4, 0x8001, 0x1d, 0x2, 0x80, 0x3ff8, 0x5, 0x5, 0x5, 0x4, 0xff, 0x9, 0x595, 0x8, 0x6aef, 0x0, 0x0, 0x2, 0xfffffffa, 0xb7ae, 0x3c1e, 0x2, 0x7, 0x4, 0x8, 0x7bc, 0x2, 0x1, 0xfffffffe, 0x9, 0x7, 0x2, 0xa, 0x8, 0x128, 0x7ff, 0x0, 0xff, 0xc0, 0x4, 0xff, 0x3, 0xc8d2, 0x3, 0x400, 0x7fff, 0x6, 0x2, 0xe, 0x7, 0x3, 0xe, 0x76, 0x1000, 0x5, 0xfffffffb, 0x4, 0x3, 0xf, 0x7c78, 0x3b83, 0x40, 0xb052, 0x3, 0x5, 0x8, 0x9, 0x1, 0x7fff, 0x7ff, 0x1000, 0xc4d, 0xc, 0x6, 0x3, 0xffffffff, 0x7, 0x5, 0x1, 0x333, 0x58b, 0x0, 0x72b2, 0x5, 0x0, 0xa, 0xffffff8b, 0x101, 0x4, 0xc]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xce}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x5, 0xffff, 0x6, 0x981, 0x1, 0x7664c732, 0x6, 0xffff, 0x28, 0x8, 0x4, 0x7, 0x6, 0x9, 0x231, 0x2, 0x5, 0x7, 0x12, 0x5, 0x6da4, 0xffffffff, 0x7f, 0x10000, 0xffffda88, 0xbe1, 0xfffffffc, 0x8, 0x7, 0x6, 0xfffffffd, 0x7, 0x5, 0x3, 0xfffffbff, 0x4, 0xffff, 0x3, 0x8, 0x1000, 0x4, 0x7, 0x0, 0x0, 0x9, 0x800, 0x4, 0x4, 0x2, 0x4, 0x1, 0x1a56, 0x4, 0x7f, 0x1, 0xfffffffe, 0x7fffffff, 0xffffffc0, 0x50a, 0x5, 0x7, 0x6, 0x3f71, 0x80000000, 0x1, 0x4, 0x3, 0x3, 0x1, 0x9, 0x7fff, 0x10, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0xe, 0x0, 0x5, 0x9, 0x2, 0x4, 0x9, 0x10, 0x81, 0xf, 0x17, 0x4, 0x9, 0x7f, 0x3, 0xbb1, 0x5, 0x4f7b7850, 0x0, 0x5, 0x1ff, 0x100, 0x7, 0x9, 0x3, 0x80000001, 0x3, 0x6, 0x7, 0x8, 0x9, 0x3, 0x800, 0xfffffffb, 0x80, 0x80, 0x3, 0x2d, 0x1e7, 0xffffffff, 0x6, 0x6, 0x8, 0x6, 0xc, 0x2, 0x9, 0xffffff81, 0x1, 0x1, 0x7, 0x4, 0x3e1, 0x81, 0x7, 0x5, 0x21a69716, 0x3, 0x2, 0x101, 0x8, 0x0, 0xfffffff7, 0xa, 0x0, 0x800, 0x6, 0x7, 0x3, 0x7fff, 0x0, 0x3, 0x9, 0x6, 0x1, 0x0, 0x10000, 0x1000, 0x3, 0x7, 0x3, 0x2, 0x0, 0x80000000, 0xfffff3e5, 0x80000000, 0x9, 0x56e8, 0x8, 0x2, 0x5, 0xaef, 0x8, 0xa2, 0x1, 0x7, 0x9, 0x4, 0xffff0fc4, 0xe62, 0xc8d, 0x101, 0x9d, 0x6, 0xe, 0x9, 0x80, 0x7, 0x3, 0xfffffffc, 0x9, 0x0, 0x4, 0x1, 0x91, 0x100, 0x506fd357, 0x1, 0x4, 0x0, 0x7, 0xe2, 0x3d, 0x200, 0x0, 0xe6, 0xe, 0x4, 0x3, 0xffffffff, 0x253, 0x4, 0x3, 0x0, 0x5, 0x3, 0x2, 0x8, 0x20, 0x9, 0xfffffffa, 0xffffffff, 0x6, 0xc3, 0x5, 0x4, 0xda5, 0x7, 0x2, 0x10000, 0x7, 0x7, 0x0, 0x1, 0xfffffffc, 0x9, 0x5, 0x7fff, 0x3, 0x8a, 0x9, 0x92, 0xf2, 0x2, 0x7d33, 0x18, 0x0, 0x6, 0x80000000, 0x3ff, 0x8, 0x9, 0x994, 0x7, 0xff, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x9, 0x5, 0x55f, {0x4, 0x2, 0x8, 0x2, 0x7}, {0x6, 0x1, 0x6ec6, 0x6, 0xd6a0, 0xb}, 0x9, 0x10, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x5, 0x7, 0x3, 0x8, {0x0, 0x2, 0x400, 0x10, 0xbc, 0x7818}, {0x3, 0x0, 0x6, 0x4, 0x4, 0x9}, 0x8, 0x3fb, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x6, 0xfffffff9, 0x100, {0x94, 0x6, 0x1ff, 0xd8a, 0xb4, 0x3}, {0xf, 0x1, 0x9, 0x10, 0x0, 0xfffffffd}, 0xffffffff, 0xfffffff5, 0x2}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}]]}, {0x84, 0x6, "90e5a46121b2ac775d05106a5a56d31a919c3b5162f03ad524aa5580a61971024a6d8865a426e04e35e791816284f5bba93e0cabdb595695920b04a66949cdb3131cd29a142b0c76c8b17e44056191803cfebc65cdf8bf59a2dad407a9593ae7ebe9469356ae01322036cb0ae6e979c1abac933a6bd65298659598cd9032c71f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xa0, 0x16, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0xb2b0, 0xffffffffffffffff, 0x0, 0x1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x37, 0x6, "011c9114edba648c5adda5a11887f73fc142edec34517d2ca95f0d439479deb3c72580bb86964030f8ede2ae44b230fa16b56c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ct={0x100, 0x6, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0xfff}]}, {0xb6, 0x6, "5c0a6482b0d68c8cafa14d890c4e56bfc1138e2a52986e5e90b803e237a8f156e0f2cfd6116abd3312cda53bee476dd21455489d3cf176d07d7d9fe5e75470356a94ef5884dc6297d6232c50bb0e1a407f1882fedbb616f4a567188c5a4400a05efde260f385433fa8f5de37c312dedfe4312100cccd4d9e5aa80972abb0dd7720858cd88df9b26a63dc070e04e0057cf24cf3a55e5607aec17d8eda47db6d07ac5ff1258c3853c3b312b4e5577a442343a5"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2}]}}]}, 0x3114}, 0x1, 0x0, 0x0, 0x4044840}, 0x20004800) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000406010100000080362c0000000000040900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x44081) r9 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0x40106183, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x4}, 0x8) 1.620496213s ago: executing program 4 (id=2755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)='%pS \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0900000004000000020000000500000000000000", @ANYRES32, @ANYBLOB="0000d768000016d127000000000000000000000011d9e5201d46fae9f5fa566671f7d390e8d5b15fdae0b5b6fd4ba311dd26328d13c64752716a405632000002e7f74e4f0a5468ee2dc058e0e55e4b73454e2fcf4c698d61ce22d31d5387eb4942c364c043db3638703306c2e461c30bae4e1663e7457de61ae630d4d220ecab47e5dd599174baf0cd22d5b918fe00745168f444635d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x0, 0x1000, @empty}}, 0xfffd, 0x2000}, 0x90) sendmmsg$inet(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000b00)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)="02", 0x1}], 0x1}}], 0x1, 0x20048041) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000600), &(0x7f0000000640)=""/10, 0x2}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pB \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2100000000000000000000002100000000000700c2435b444d073c29081b182b6abac80490f6013afd9983e67cc8f88884660d", @ANYRES32, @ANYBLOB="d5ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0xd7, &(0x7f00000003c0)=""/215, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xd, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r3, r4, r6, r7, r8, r9], &(0x7f0000000900)=[{0x1, 0x1, 0x2, 0xc}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0x1, 0x3}, {0x2, 0x1, 0xf, 0xc}], 0x10, 0x2}, 0x94) 1.503569077s ago: executing program 5 (id=2756): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x885}, 0x48080) 1.22830618s ago: executing program 5 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x48c0}, 0x2404c810) 1.21298816s ago: executing program 4 (id=2758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x9) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000280000000000069078ac1414bbac1414aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000180)=@id, 0x10) shutdown(r4, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000000000000014100000018001700000000000000006574683a7465616d300000006d6f0078c04fd4c083261d13cee6f340275d"], 0x34}}, 0x20042000) 1.180889659s ago: executing program 5 (id=2759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) 1.088889565s ago: executing program 8 (id=2760): syz_emit_ethernet(0x96, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x60, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x7, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056"}]}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000003c0)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 939.131162ms ago: executing program 5 (id=2761): r0 = socket$inet6(0xa, 0x4, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private0, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x9, 0x4) socket$inet6(0xa, 0x4, 0x401) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private0, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x9, 0x4) (async) 834.272242ms ago: executing program 7 (id=2762): ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x1, 0xd5, "c6543b0d6e7f01b97bb72ad9f9e5db31b2c7348471b2191db3072bcb8a816f8e6c8ca6563fab16b650a331f6cf81640220fad7f028ad4466542a96095ae0ba11e969b6d03ab0a64aed39b65ecc9750edb83d3dc3058863f5c84417693e17dd7b8c167e868cd0e2d325d389a85d1f8f9c7d0423b9fb79b82fbaf89aad8b01116ea00feb860c08d3f2727fb43f82da1c5268099a6ea3a3712ac05732b8e93c71e61d3c781b39e4bbe2034eccfd4af236daa63634fd5207c5f3042a1a840d191e168a10ad97aceb0aca2fb7bcd96de6e6426f3744e7a2"}, &(0x7f0000000140)=0xdd) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000180)={r0, @in6={{0xa, 0x4e21, 0x2c, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x15}}, 0x129a, 0x6, 0x92e}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000540)=0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000580)={r0, @in6={{0xa, 0x4e24, 0xd2, @rand_addr=' \x01\x00', 0x81}}, 0x4, 0x7f, 0x5dbb}, 0x90) close(r2) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000640)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000b40)=0xe8) r5 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000b80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000cc0)=0xe8) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000700)="85cfdd85eaf03cebdba42ba269c86f354d9a6db6da415845a19306fb3aae8d8d8fe88440607b06950b8802e6936b272f9a3c98ba543a8a2cad41bff841ff72eef5c3bc645aca001637d0dc51725e4e2101990878e710a3d6ae77e1dedaa02e970d58e3a270a62b0f510b0b899acf5c3871bce28663c6e8d26bd7eece1af2d3c4a1ee5169977cb0cf50fbde4080", 0x8d}, {&(0x7f00000007c0)="27caa577637bc8bc7a11326b97164a950ff0b6150bd956f24ba3c40b4212a2", 0x1f}, {&(0x7f0000000800)="02f4d560bf8e4187bcde7e071d01de085a8e6333be51e9c6b1094c038ba5d3a0d617067d71138c716c853700ccd01adefa316ea81000f4bcd35319a221877d1ce997a13e0dcd4213ebb7521b596a338ac5df5775ce12f156c47bb8e27a0aa5ef0df462667c53696231fb843ced43bef6f78d4677be5c685a8e7fb4696986283d738652ce1c168091940ab986dea7e4d9bf73d7a7a394c71be462696cc0ca21aeacf8d640e73d8e5309c00c54619dedffe3faaec2b6d90aacc9e9a4cea559b2", 0xbf}, {&(0x7f00000008c0)="c186313cbce9b7f79464fe13f44a29c86da5361f175379bbf3ba565523399ca7fe577db5348e25a5dc48ce9768c1edfab848828a666a6822d0971b58c2bac1cb540faa18a9f7b47a86f01de1009c8d0848f7dcd6830eb4ad4ca998d1802566558eed1a7ed9b0f322604e47b1d9f67e22f7e52b4e50187cf666b3f8193b7dbbd71028332f2419bde81c7ab6312ad4a17490db44871ca1903a599ccf88cbdb12c7eae12910524889a95356894f563c86fdf9e94c968043847b77b125d56e6e009d7e4c938a070e2fca4c12507c15df24a0aab65b5ec7883d6476eb030aa02be14889ac5b3552ba70d11530f94599ff3497e8122bc3e2b9f573887c8aaf37", 0xfd}], 0x4, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x34, 0x1, 0x1, [r2, r1, r1, r1, r1, r2, r8, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}], 0xf0, 0x40010}, 0x4000014) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x8080) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r11, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r13, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r11) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x14c, r14, 0xc0614aca557feac5, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ea}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1b9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa8, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x200}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffff80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5f99}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x17a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x376c}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000013c0)=0x8) sendmsg$nl_xfrm(r2, &(0x7f00000014c0)={&(0x7f0000001400), 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@newspdinfo={0x34, 0x24, 0x0, 0x70bd26, 0x25dfdbfc, 0x7fff, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x10000}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x10000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xff30}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) 705.019505ms ago: executing program 5 (id=2763): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000240)={0x0, 0xea60}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000000380)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000280)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, r5, 0xb97534d5fe9704cf, 0x70bd29, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012"], 0x68}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="120000001c000001"], 0x22) r8 = epoll_create1(0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ppoll(&(0x7f00000000c0)=[{r8, 0x4}, {r9, 0x1481}], 0x2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000080)={0x8000000000000001, 0x0, 0x80}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000c70000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ffffffff000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff7fffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002dbd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 515.491921ms ago: executing program 4 (id=2764): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@map=r0, r1, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f00000002c0)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000400), &(0x7f0000000440)=@tcp=r2, 0x2}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19c, 0x19c, 0x4, [@struct={0x7, 0x8, 0x0, 0x4, 0x1, 0x800, [{0x3, 0x0, 0xfff}, {0x8, 0x1, 0x80}, {0x8, 0x1, 0x2}, {0x7, 0x3, 0x7fff}, {0xa, 0x5, 0x9e7}, {0xe, 0x1, 0xfffffffb}, {0x1, 0x5, 0x3}, {0xc, 0x2, 0x9}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @union={0x3, 0x7, 0x0, 0x5, 0x0, 0x200, [{0x4, 0x2, 0xf8a}, {0x5, 0x1, 0x3}, {0x9, 0x0, 0x10}, {0x3, 0x0, 0x6}, {0x9, 0x2, 0xa}, {0x8, 0x4, 0x8}, {0xa, 0x0, 0xb8e4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x4}}, @enum64={0x7, 0x9, 0x0, 0x13, 0x0, 0xf, [{0x10, 0x2, 0x8}, {0x3, 0x9b9, 0x81}, {0xf, 0xa88, 0xd}, {0x5, 0xdfa, 0xc2}, {0xf, 0xf8, 0x70e43bcf}, {0x2, 0x0, 0x6}, {0x6, 0x4, 0xf}, {0x2, 0x6, 0x4}, {0x10, 0x9, 0xa5}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x6}, {0xc, 0x6}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000840)=""/159, 0x1b8, 0x9f, 0x0, 0x7}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x17, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5}, [@generic={0xb, 0x0, 0xd, 0x4fd5, 0x1}]}, &(0x7f0000000a80)='syzkaller\x00', 0x2, 0x7e, &(0x7f0000000ac0)=""/126, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0xe, 0x7, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0x1, 0x1], &(0x7f0000000c00)=[{0x3, 0x1, 0xf, 0x4}, {0x0, 0x2, 0x0, 0x8}, {0x5, 0x1, 0x2, 0x6}, {0x0, 0x4, 0xe, 0x2}], 0x10, 0x20d5}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000d40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r9}, &(0x7f0000000f00), &(0x7f0000000f40)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f80)={r9, &(0x7f0000000fc0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x20, 0x12, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x6, 0xb, 0x2, 0xfffffffffffffff8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0xa7dd, 0xc3, &(0x7f0000000580)=""/195, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x31, r3, 0x8, &(0x7f0000000940)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xf, 0x5, 0x18}, 0x10, r4, r5, 0x0, &(0x7f0000001000)=[r6, r7, r9], 0x0, 0x10, 0x1}, 0x94) 515.173095ms ago: executing program 8 (id=2765): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'team_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000880)=@ethtool_coalesce={0x33}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f00000000c0), &(0x7f0000000100)=""/6, 0x2}, 0x20) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) 514.492409ms ago: executing program 7 (id=2766): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005000)=[{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000023c0)="512c0a8d", 0x4}], 0x1, 0x0, 0x0, 0x10010}], 0x1, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x50) (async) socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r4 = socket$inet6(0xa, 0x800, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000000180)=[{{&(0x7f0000000880)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000900)="f5", 0x1}], 0x1}}], 0x1, 0x40) (async) shutdown(r4, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e22, 0x0, @mcast2, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x92, 0x4, 0x1}, &(0x7f0000000a00)=0x9c) close(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x71826000) (async) shutdown(0xffffffffffffffff, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x80001, 0x10001) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000740)={'nat\x00', 0x0, [0x7, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f00000007c0)=0x54) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000800)={0x0, 0x18000, 0x30}, &(0x7f0000000840)=0xc) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0xffffffffffffffe0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r6}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x800}) (async) socket$kcm(0x2, 0x3, 0x2) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101100, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000380)={'vcan0\x00', @random="2f6be059e567"}) 469.057211ms ago: executing program 4 (id=2767): r0 = socket(0x1, 0x76bb2cc2c590543, 0x4) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) socket(0x1, 0x76bb2cc2c590543, 0x4) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) (async) 396.271414ms ago: executing program 5 (id=2768): syz_emit_ethernet(0x46, &(0x7f0000002300)=ANY=[@ANYBLOB="9ee44900e2b5aaaaaaaaaaaabbbbbbbbbbbb08004700003800000000000192780a010102ac1414aa4408061000000004040090780100e00045000000000000000011000000000000000000003cffddce5dedc89ecd36aa96ca142b2d46b112ed6b23ace61d03164d8968fbe8ae7be2ff7a2fcbbaac"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003b40)=@generic={&(0x7f0000003b80)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003bc0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000003c00)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003c40), 0x100, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000002c0)=0x4bc, 0x4) bind$nfc_llcp(r2, &(0x7f0000003a00)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x1, 0x0, &(0x7f0000003a80)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000034c0)={'ip6gretap0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003780)={r0, 0x20, &(0x7f0000003740)={&(0x7f0000003580)=""/218, 0xda, 0x0, &(0x7f0000003680)=""/138, 0x8a}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', 0x0, r0, 0x2, 0x4, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003840)={0x1b, 0x0, 0x0, 0x5b, 0x0, r0, 0x100, '\x00', 0x0, r0, 0x5, 0x1, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003940)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000002380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call, @exit, @alu={0x4, 0x1, 0x8, 0x5, 0x0, 0xfffffffffffffff0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002480)='GPL\x00', 0x9, 0x1000, &(0x7f00000024c0)=""/4096, 0x41100, 0x10, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000003500)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003540)={0x3, 0x6, 0x4, 0xfffffffe}, 0x10, r7, 0x0, 0x2, &(0x7f00000038c0)=[r0, r5, r0, r0, r0, r8, r9], &(0x7f0000003900)=[{0x0, 0x2, 0x6, 0x9}, {0x1, 0x2, 0x4, 0x9}], 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000002240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002280), 0x0, 0x10, &(0x7f00000022c0), 0xf000000}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x13d8, [0x200000000cc0, 0x0, 0x0, 0x200000000cf0, 0x200000000d20], 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"]}, 0x1450) 339.920626ms ago: executing program 4 (id=2769): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000003c0)="5200000023000101f4020600"/41, 0x29) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200)=0xcc3e, 0x8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) poll(&(0x7f0000000400)=[{r2, 0x482}, {r2, 0x8288}, {r0, 0x404}, {r3, 0x4}, {r3, 0x10}, {r4, 0x20}], 0x6, 0x2f6f) 302.71688ms ago: executing program 8 (id=2770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000240)="0d03f76f", &(0x7f0000000580)=@udp6}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a010400000000000000000a0000040900010073797a310000000038000480340001800b0001006e756d67656e0000240002800800014000000012080003400000000108000440fffffffa08000240000082960900020073797a3200000000140000000100010000000000000000000a00000aba6a432eae79e4e9f962645647b53ede85d4fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x40}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240000d0}, 0x44011) r7 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1) getsockname$packet(r3, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d40)=0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x11, 0x4, [0x25a, 0x10, 0x0, 0x6]}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r3}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8}, 0x94) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10) sendmsg(r10, &(0x7f0000000780)={&(0x7f0000000b40)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1a, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x101, 0x4}]}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000100)={0x6, 'tunl0\x00', {0x1}, 0x2}) 169.84371ms ago: executing program 4 (id=2771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000500)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x3, 0x30, 0x8}]}, &(0x7f0000000540)='syzkaller\x00', 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x52}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000580)={r3, 0x0, 0xffff, 0x401}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000005c0)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 0s ago: executing program 8 (id=2772): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) kernel console output (not intermixed with test programs): 'syz.3.1419': attribute type 2 has an invalid length. [ 286.682957][T11253] netlink: 'syz.3.1419': attribute type 2 has an invalid length. [ 287.643023][T11303] syzkaller0: entered promiscuous mode [ 287.643048][T11303] syzkaller0: entered allmulticast mode [ 287.668267][T11303] tipc: Enabled bearer , priority 0 [ 287.669529][T11302] tipc: Resetting bearer [ 287.731026][T11302] tipc: Disabling bearer [ 287.778465][T11309] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.799778][T11309] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.851276][T11309] .` (unregistering): Released all slaves [ 287.952021][T11322] netlink: 'syz.1.1435': attribute type 11 has an invalid length. [ 288.263188][T11334] team0: Port device macvlan0 added [ 288.498939][T11344] __nla_validate_parse: 23 callbacks suppressed [ 288.498964][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 288.499512][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 288.531819][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1444'. [ 288.737642][T11352] netlink: 'syz.3.1442': attribute type 39 has an invalid length. [ 288.737768][T11351] netlink: 'syz.3.1442': attribute type 39 has an invalid length. [ 288.875652][T11347] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1441'. [ 288.951961][T11364] ip_tables: iptables: counters copy to user failed while replacing table [ 289.280134][T11377] netlink: 'syz.1.1450': attribute type 21 has an invalid length. [ 289.280171][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 289.280997][T11377] netlink: 'syz.1.1450': attribute type 21 has an invalid length. [ 289.281021][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 289.459891][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 289.513336][T11382] veth2: entered promiscuous mode [ 289.513365][T11382] veth2: entered allmulticast mode [ 289.599464][T11393] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 289.760207][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 289.917243][T11410] bond16: (slave bridge4): making interface the new active one [ 289.917902][T11410] bond16: (slave bridge4): Enslaving as an active interface with an up link [ 290.221686][T11423] syzkaller0: entered promiscuous mode [ 290.221717][T11423] syzkaller0: entered allmulticast mode [ 290.252220][T11428] ip_tables: iptables: counters copy to user failed while replacing table [ 290.398221][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 290.748067][T11458] syzkaller0: entered promiscuous mode [ 290.748094][T11458] syzkaller0: entered allmulticast mode [ 290.858629][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.880406][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 290.897611][T11463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.090685][T11474] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.436870][T11485] bridge_slave_0: default FDB implementation only supports local addresses [ 292.295422][ T1295] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.295473][ T1295] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.295509][ T1295] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.295543][ T1295] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.352476][T11538] ieee802154 phy0 wpan0: encryption failed: -126 [ 292.452928][T11538] bond5 (unregistering): Released all slaves [ 292.520184][T11534] netdevsim0: mtu less than device minimum [ 292.671936][T11550] Illegal XDP return value 4294967274 on prog (id 397) dev N/A, expect packet loss! [ 293.027762][T11569] veth0: entered promiscuous mode [ 293.028354][T11569] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.090366][T11569] netlink: 'syz.4.1494': attribute type 7 has an invalid length. [ 293.113895][T11566] xt_NETMAP: bad MAP_IPS. [ 293.145858][T11568] veth0: left promiscuous mode [ 293.593225][T11605] netlink: 'syz.1.1506': attribute type 49 has an invalid length. [ 293.719691][T11614] __nla_validate_parse: 9 callbacks suppressed [ 293.719711][T11614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1504'. [ 293.741309][T11609] ip_tables: iptables: counters copy to user failed while replacing table [ 293.760196][T11605] ip6gretap0: entered promiscuous mode [ 293.760224][T11605] ip6gretap0: entered allmulticast mode [ 293.899555][T11620] netlink: 'syz.4.1508': attribute type 19 has an invalid length. [ 293.899581][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 293.899837][T11620] netlink: 'syz.4.1508': attribute type 19 has an invalid length. [ 293.899855][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 294.089634][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 294.123843][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.178350][T11633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.271962][T11641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.342313][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 294.408279][T11653] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1513'. [ 294.408309][T11653] openvswitch: netlink: Flow key attr not present in new flow. [ 294.411582][T11653] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 294.809300][T11660] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 294.809327][T11660] syzkaller1: group set to 0 [ 295.302764][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 295.929946][T11729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.929976][T11729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.931028][T11729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.931052][T11729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.304570][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'. [ 296.826716][T11763] netlink: 'syz.3.1543': attribute type 34 has an invalid length. [ 296.826742][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 296.879492][T11766] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1542'. [ 296.960504][T11768] openvswitch: netlink: Duplicate or invalid key (type 0). [ 296.960543][T11768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.080343][T11780] sctp: [Deprecated]: syz.1.1546 (pid 11780) Use of int in maxseg socket option. [ 297.080343][T11780] Use struct sctp_assoc_value instead [ 297.362679][T11794] syzkaller0: entered promiscuous mode [ 297.362704][T11794] syzkaller0: entered allmulticast mode [ 297.494949][T11798] netlink: 'syz.1.1551': attribute type 13 has an invalid length. [ 297.586478][T11801] gretap0: entered promiscuous mode [ 297.589123][T11801] vlan2: entered promiscuous mode [ 297.648133][T11805] vlan2: entered promiscuous mode [ 297.929447][T11817] netlink: 'syz.2.1556': attribute type 17 has an invalid length. [ 297.957919][T11817] erspan0: entered promiscuous mode [ 297.960147][T11817] gretap0: entered promiscuous mode [ 298.357426][T11840] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 298.722733][T11860] pim6reg: entered allmulticast mode [ 298.733076][T11860] smc: net device team0 applied user defined pnetid SYZ2 [ 299.101533][T11873] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 299.101561][T11873] __nla_validate_parse: 7 callbacks suppressed [ 299.101585][T11873] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1572'. [ 299.101604][T11873] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 299.257418][T11878] bond0: invalid NS target ff00:: specified for addition [ 299.257450][T11878] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 299.336982][T11881] bond5: entered allmulticast mode [ 299.339818][T11881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.452526][T11890] xt_policy: neither incoming nor outgoing policy selected [ 299.571275][T11897] block nbd1: NBD_DISCONNECT [ 299.571306][T11897] block nbd1: Send disconnect failed -32 [ 299.571327][T11897] block nbd1: Send disconnect failed -32 [ 299.571348][T11897] block nbd1: shutting down sockets [ 299.766498][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 299.766524][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1578'. [ 300.253664][T11934] IPVS: sed: FWM 3 0x00000003 - no destination available [ 300.296874][T11934] xt_ecn: cannot match TCP bits for non-tcp packets [ 300.372049][T11933] syzkaller0: entered promiscuous mode [ 300.372078][T11933] syzkaller0: entered allmulticast mode [ 300.810254][T11967] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 300.902098][T11967] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.035567][T11979] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 301.035910][T11979] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 301.035928][T11979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1599'. [ 301.073409][T11980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1600'. [ 301.086149][T11979] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 301.086171][T11979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1599'. [ 301.086476][T11986] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 301.647171][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1603'. [ 301.647416][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1603'. [ 303.219341][T11996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1602'. [ 303.387569][T12015] netlink: 'syz.1.1606': attribute type 58 has an invalid length. [ 303.387596][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1606'. [ 303.471399][T12019] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 303.715924][T12035] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 303.736169][T12035] openvswitch: netlink: Flow key attr not present in new flow. [ 303.812900][T12040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.153507][T12056] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 304.331636][T12064] IPVS: length: 4096 != 24 [ 304.607407][T12079] __nla_validate_parse: 1 callbacks suppressed [ 304.607431][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1619'. [ 305.151251][T12102] bond7: entered allmulticast mode [ 305.151898][T12102] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.644015][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 305.651933][T12131] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 305.710825][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1631'. [ 305.729490][T12129] team0: Port device dummy0 removed [ 305.744771][T12129] bridge_slave_0: left allmulticast mode [ 305.744798][T12129] bridge_slave_0: left promiscuous mode [ 305.745023][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.775659][T12129] bridge_slave_1: left promiscuous mode [ 305.776240][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.845628][T12129] bond0: (slave bond_slave_0): Releasing backup interface [ 305.873163][T12129] bond0: (slave bond_slave_1): Releasing backup interface [ 305.953771][T12129] team0: Port device team_slave_0 removed [ 306.007338][T12129] team0: Port device team_slave_1 removed [ 306.008471][T12129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.008497][T12129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.038234][T12129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.038265][T12129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.060802][T12129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.119482][T12131] bond7: entered promiscuous mode [ 306.120071][T12131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.170618][T12134] team0: Port device xfrm0 added [ 306.190763][T12135] vlan2: entered allmulticast mode [ 306.190780][T12135] bond7: entered allmulticast mode [ 306.205110][T12138] tipc: Enabled bearer , priority 0 [ 306.331838][T12155] bond7: (slave bridge5): making interface the new active one [ 306.331864][T12155] bridge5: entered promiscuous mode [ 306.332040][T12155] bridge5: entered allmulticast mode [ 306.362365][T12155] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 306.418280][T12161] nbd: must specify an index to disconnect [ 306.692544][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1640'. [ 306.692573][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 306.806932][T12191] ip_tables: iptables: counters copy to user failed while replacing table [ 306.882086][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1643'. [ 307.083135][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 307.250877][T12216] ip_tables: iptables: counters copy to user failed while replacing table [ 307.539203][T12230] xt_NETMAP: bad MAP_IPS. [ 307.626513][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 308.052697][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1655'. [ 308.604800][T12272] syzkaller1: entered promiscuous mode [ 308.604827][T12272] syzkaller1: entered allmulticast mode [ 308.945964][T12280] openvswitch: netlink: Multiple metadata blocks provided [ 308.965836][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 308.967866][T12283] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 309.191630][T12287] netlink: 'syz.1.1665': attribute type 10 has an invalid length. [ 309.191657][T12287] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1665'. [ 309.437485][T12303] FAULT_INJECTION: forcing a failure. [ 309.437485][T12303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.437526][T12303] CPU: 0 UID: 0 PID: 12303 Comm: syz.4.1667 Not tainted syzkaller #0 PREEMPT(full) [ 309.437558][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.437598][T12303] Call Trace: [ 309.437609][T12303] [ 309.437620][T12303] dump_stack_lvl+0xe8/0x150 [ 309.437663][T12303] should_fail_ex+0x410/0x560 [ 309.437706][T12303] _copy_from_iter+0x1d3/0x1660 [ 309.437743][T12303] ? __alloc_skb+0x27a/0x7a0 [ 309.437784][T12303] ? __alloc_skb+0x27a/0x7a0 [ 309.437825][T12303] ? __alloc_skb+0x27a/0x7a0 [ 309.437863][T12303] ? __pfx__copy_from_iter+0x10/0x10 [ 309.437897][T12303] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 309.437925][T12303] ? __alloc_skb+0x27a/0x7a0 [ 309.437960][T12303] ? __alloc_skb+0x27a/0x7a0 [ 309.438006][T12303] ? netlink_sendmsg+0x650/0xb40 [ 309.438036][T12303] ? skb_put+0x112/0x210 [ 309.438064][T12303] netlink_sendmsg+0x6c0/0xb40 [ 309.438108][T12303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.438152][T12303] ? apparmor_socket_sendmsg+0x98/0x360 [ 309.438190][T12303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.438222][T12303] sock_sendmsg_nosec+0x13a/0x180 [ 309.438261][T12303] ____sys_sendmsg+0x54e/0x850 [ 309.438295][T12303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.438335][T12303] ? import_iovec+0x73/0xa0 [ 309.438379][T12303] ___sys_sendmsg+0x2a5/0x360 [ 309.438404][T12303] ? __lock_acquire+0x747/0x2de0 [ 309.438437][T12303] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.438509][T12303] ? __fget_files+0x2a/0x420 [ 309.438532][T12303] ? __fget_files+0x3a2/0x420 [ 309.438576][T12303] __x64_sys_sendmsg+0x1b1/0x290 [ 309.438608][T12303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.438661][T12303] do_syscall_64+0x166/0x520 [ 309.438691][T12303] ? trace_irq_disable+0x3b/0x140 [ 309.438719][T12303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.438745][T12303] ? clear_bhb_loop+0x70/0xc0 [ 309.438777][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.438802][T12303] RIP: 0033:0x7f5df719e559 [ 309.438826][T12303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.438848][T12303] RSP: 002b:00007f5df8069028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.438875][T12303] RAX: ffffffffffffffda RBX: 00007f5df7426090 RCX: 00007f5df719e559 [ 309.438894][T12303] RDX: 0000000000008040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 309.438911][T12303] RBP: 00007f5df8069090 R08: 0000000000000000 R09: 0000000000000000 [ 309.438927][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.438942][T12303] R13: 00007f5df7426128 R14: 00007f5df7426090 R15: 00007ffea41bcec8 [ 309.438982][T12303] [ 309.898361][T12306] tipc: Can't bind to reserved service type 1 [ 309.946791][T12306] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 310.147520][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 310.607823][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.612454][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.613270][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.640057][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.641226][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.698696][ T4934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.699109][ T4934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.702936][ T4934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.747458][ T4934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.748208][ T4934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.391770][T12368] syz.1.1682 (12368) used greatest stack depth: 18176 bytes left [ 311.425649][T12373] netlink: NAT attribute has 8 unknown bytes [ 311.425687][T12373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.454602][T12372] xt_LOG: prefix is not null-terminated [ 311.685409][T12390] ebt_limit: overflow, try lower: 0/0 [ 311.779570][T12394] xt_MASQUERADE: bad MAP_IPS. [ 312.018920][T12332] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.023129][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1687'. [ 312.059610][T12403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1687'. [ 312.182480][T12403] bond_slave_0: entered promiscuous mode [ 312.182516][T12403] bond_slave_0: entered allmulticast mode [ 312.212463][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 312.295326][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1691'. [ 312.599822][T12426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 312.600061][T12426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 312.628280][T12427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1694'. [ 312.648405][T12427] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 312.650251][T12427] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 312.693318][T12427] 0ªî{X¹¦: entered promiscuous mode [ 312.707058][T12427] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 312.707195][T12427] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 312.735607][T12427] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1694'. [ 312.759423][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 312.802298][T12432] vlan3: entered promiscuous mode [ 312.802325][T12432] bond0: entered promiscuous mode [ 312.802340][T12432] bond_slave_0: entered promiscuous mode [ 312.802565][T12432] bond_slave_1: entered promiscuous mode [ 312.840059][T12435] netlink: 'syz.4.1696': attribute type 83 has an invalid length. [ 312.843822][ T5627] Bluetooth: hci5: command tx timeout [ 313.032756][T12332] wg0 speed is unknown, defaulting to 1000 [ 313.133760][T12443] netlink: 'syz.4.1698': attribute type 10 has an invalid length. [ 313.218405][T12443] team0: Device wg2 is of different type [ 313.249253][T12451] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.671799][T12471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.701600][T12471] xt_ecn: cannot match TCP bits for non-tcp packets [ 314.923810][ T5627] Bluetooth: hci5: command tx timeout [ 315.151597][T12332] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.156159][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.156357][T12332] bridge_slave_0: entered allmulticast mode [ 315.167280][T12332] bridge_slave_0: entered promiscuous mode [ 315.198095][T12332] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.198204][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.198369][T12332] bridge_slave_1: entered allmulticast mode [ 315.218062][T12332] bridge_slave_1: entered promiscuous mode [ 315.345345][T12332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.363420][T12332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.415562][T12332] team0: Port device team_slave_0 added [ 315.418562][T12332] team0: Port device team_slave_1 added [ 315.473049][T12332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.473069][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.473098][T12332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.476153][T12332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.476408][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.476497][T12332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.562072][T12578] __nla_validate_parse: 7 callbacks suppressed [ 315.562124][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1722'. [ 315.735242][T12332] hsr_slave_0: entered promiscuous mode [ 315.736310][T12332] hsr_slave_1: entered promiscuous mode [ 315.737073][T12332] debugfs: 'hsr0' already exists in 'hsr' [ 315.737094][T12332] Cannot create hsr debugfs directory [ 315.849651][T12545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.170837][T12598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.243940][T12602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1727'. [ 316.244955][T12602] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 316.360867][T12602] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.431148][T12613] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1730'. [ 316.431184][T12613] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1730'. [ 316.698395][T12622] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 316.799814][T12624] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1732'. [ 316.969301][T12332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.993727][T12332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.997749][T12332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.004413][ T5627] Bluetooth: hci5: command tx timeout [ 317.028462][T12332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.032970][T12332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.066662][T12332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.072455][T12332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 317.107768][T12332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.168015][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.271962][T12651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1735'. [ 317.272000][T12651] netlink: 'syz.1.1735': attribute type 7 has an invalid length. [ 317.272017][T12651] netlink: 'syz.1.1735': attribute type 8 has an invalid length. [ 317.272031][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 317.322994][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'. [ 317.359018][T12651] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 317.402699][T12651] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 317.423068][T12651] erspan0: entered promiscuous mode [ 317.448698][T12651] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 317.698001][T12332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.759264][T12332] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.779636][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.779749][T11131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.812515][T12667] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1740'. [ 317.833455][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.833644][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.137555][T12682] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 318.137581][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 319.086953][ T5627] Bluetooth: hci5: command tx timeout [ 320.810679][T12672] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 320.938642][T12701] __nla_validate_parse: 1 callbacks suppressed [ 320.938665][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 320.938681][T12701] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1744'. [ 321.691953][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.691978][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.718771][T12737] IPv6: addrconf: prefix option has invalid lifetime [ 322.239440][T12332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.464956][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 322.526046][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1753'. [ 323.130120][T12332] veth0_vlan: entered promiscuous mode [ 323.148179][T12332] veth1_vlan: entered promiscuous mode [ 323.268095][T12332] veth0_macvtap: entered promiscuous mode [ 323.302546][T12332] veth1_macvtap: entered promiscuous mode [ 323.347889][T12332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.379318][T12332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.425647][ T1032] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.425887][ T1032] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.425928][ T1032] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.425966][ T1032] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.580918][T12811] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1765'. [ 324.014589][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 324.017696][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.017719][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.078147][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 324.098882][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 324.128379][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 324.147480][T11131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.147503][T11131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.328567][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.328714][T12836] bridge0: port 2(bridge_slave_1) entered listening state [ 324.329033][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.329165][T12836] bridge0: port 1(bridge_slave_0) entered listening state [ 324.599145][T12855] gre1: entered promiscuous mode [ 324.678985][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'. [ 324.700693][T12861] tipc: Started in network mode [ 324.700731][T12861] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 324.700909][T12861] tipc: Enabled bearer , priority 10 [ 324.702384][T12861] netlink: 'syz.3.1776': attribute type 9 has an invalid length. [ 325.268598][T12890] netlink: 'syz.4.1785': attribute type 2 has an invalid length. [ 325.431412][T12894] lo: entered promiscuous mode [ 325.446658][T12894] tunl0: entered promiscuous mode [ 325.468020][T12894] gre0: entered promiscuous mode [ 325.618369][T12898] ip_tables: iptables: counters copy to user failed while replacing table [ 325.818257][T12894] erspan0: entered promiscuous mode [ 325.848479][T12894] ip_vti0: entered promiscuous mode [ 325.908211][ T5769] tipc: Node number set to 10136234 [ 326.057379][T12903] netlink: 'syz.4.1790': attribute type 26 has an invalid length. [ 326.063022][T12903] netlink: 'syz.4.1790': attribute type 1 has an invalid length. [ 326.462792][T12915] ip6t_ah: unknown flags 5 [ 326.462946][T12915] ip6t_ah: unknown flags 5 [ 326.463065][T12915] ip6t_ah: unknown flags 5 [ 326.463182][T12915] ip6t_ah: unknown flags 5 [ 326.463295][T12915] ip6t_ah: unknown flags 5 [ 326.463430][T12915] ip6t_ah: unknown flags 5 [ 326.471592][T12915] ip6t_ah: unknown flags 5 [ 326.476530][T12915] ip6t_ah: unknown flags 5 [ 326.476841][T12915] ip6t_ah: unknown flags 5 [ 326.477175][T12915] ip6t_ah: unknown flags 5 [ 327.354612][T12951] syzkaller0: entered promiscuous mode [ 327.354638][T12951] syzkaller0: entered allmulticast mode [ 327.819251][T12965] netlink: 'syz.4.1805': attribute type 9 has an invalid length. [ 327.916215][T12972] netlink: 'syz.4.1805': attribute type 9 has an invalid length. [ 328.178624][T12980] Bluetooth: MGMT ver 1.23 [ 328.178662][T12980] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 328.927750][T13000] __nla_validate_parse: 1 callbacks suppressed [ 328.927773][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1813'. [ 328.927811][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1813'. [ 328.933158][T12999] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1812'. [ 329.154907][T13007] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.190429][T13010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1818'. [ 329.190456][T13010] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1818'. [ 329.232169][T13010] veth5: entered promiscuous mode [ 329.375120][T13013] netlink: 5260 bytes leftover after parsing attributes in process `syz.4.1819'. [ 329.375199][T13013] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 329.659309][T13022] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.672452][T13022] openvswitch: netlink: IP tunnel TTL not specified. [ 330.609153][T13042] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 331.222890][T13060] SET target dimension over the limit! [ 331.404499][T13064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.440093][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1831'. [ 331.440121][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1831'. [ 331.495255][T13064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.520302][T13064] bond2: (slave bond0): making interface the new active one [ 331.569279][T13064] bond2: (slave bond0): Enslaving as an active interface with an up link [ 331.638781][T13074] bond2 (unregistering): (slave bond0): Releasing active interface [ 331.681284][T13074] bond2 (unregistering): Released all slaves [ 332.306785][T13093] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1840'. [ 332.408822][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.421559][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.432595][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.442586][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.443261][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.883966][T13112] xt_LOG: prefix is not null-terminated [ 332.987965][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 333.550262][T13127] netlink: 'syz.5.1846': attribute type 16 has an invalid length. [ 333.550289][T13127] netlink: 'syz.5.1846': attribute type 17 has an invalid length. [ 333.636292][T13127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.956301][T13127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.998188][T13141] bond5: option mode: unable to set because the bond device is up [ 334.101997][T13141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.115343][T13141] bond5: (slave macvlan2): Enslaving as an active interface with a down link [ 334.116938][T13094] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.154524][T13141] __nla_validate_parse: 1 callbacks suppressed [ 334.154549][T13141] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1848'. [ 334.249661][T13142] bond5: (slave ip6gretap1): making interface the new active one [ 334.279534][T13142] ip6gretap1: entered promiscuous mode [ 334.279994][T13142] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 334.529043][ T4934] Bluetooth: hci6: command tx timeout [ 334.903831][T13094] wg0 speed is unknown, defaulting to 1000 [ 335.608532][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.608728][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.609146][T13094] bridge_slave_0: entered allmulticast mode [ 335.611285][T13094] bridge_slave_0: entered promiscuous mode [ 335.620182][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.620357][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.620487][T13094] bridge_slave_1: entered allmulticast mode [ 335.627742][T13094] bridge_slave_1: entered promiscuous mode [ 335.688536][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.692774][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.830353][T13094] team0: Port device team_slave_0 added [ 335.836692][T13094] team0: Port device team_slave_1 added [ 335.881674][T13094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.881694][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.881723][T13094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.887683][T13094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.887726][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.887794][T13094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.075061][T13094] hsr_slave_0: entered promiscuous mode [ 336.076094][T13094] hsr_slave_1: entered promiscuous mode [ 336.076822][T13094] debugfs: 'hsr0' already exists in 'hsr' [ 336.076841][T13094] Cannot create hsr debugfs directory [ 336.392604][T13094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.404387][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.405376][T13094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.409242][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.410142][T13094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.413084][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.415618][T13094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.451719][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.542450][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.567078][T13094] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.572264][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.572357][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.604666][ T4934] Bluetooth: hci6: command tx timeout [ 336.606155][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.606266][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.007803][T13094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.270538][T13094] veth0_vlan: entered promiscuous mode [ 337.282284][T13094] veth1_vlan: entered promiscuous mode [ 337.314487][T13094] veth0_macvtap: entered promiscuous mode [ 337.318274][T13094] veth1_macvtap: entered promiscuous mode [ 337.346716][T13094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.364243][T13094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.455148][ T1032] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.455198][ T1032] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.455235][ T1032] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.455288][ T1032] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.517796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.517813][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.563018][ T1295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.563042][ T1295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.685434][ T4934] Bluetooth: hci6: command tx timeout [ 340.763779][ T4934] Bluetooth: hci6: command tx timeout [ 345.354527][ T1272] ip6gretap1: left promiscuous mode [ 354.924236][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 354.924387][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 358.127044][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.921739][T13195] sctp: [Deprecated]: syz.4.1855 (pid 13195) Use of int in max_burst socket option deprecated. [ 360.921739][T13195] Use struct sctp_assoc_value instead [ 361.171849][T13209] openvswitch: netlink: EtherType 500 is less than min 600 [ 361.236932][T13214] xt_TCPMSS: Only works on TCP SYN packets [ 361.287261][T13213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1860'. [ 361.508555][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.508687][T13223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.511741][T13223] bridge0: port 1(1¾x9ÿ) entered blocking state [ 361.511890][T13223] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 361.586787][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 361.647683][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 361.648569][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 361.649215][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 361.767308][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 361.905940][T13245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1870'. [ 361.906727][T13245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1870'. [ 361.976053][T13246] bond0: (slave bond_slave_1): Releasing backup interface [ 362.013891][T13251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.054245][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 362.155230][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 362.555290][T13283] netlink: 'syz.3.1878': attribute type 2 has an invalid length. [ 362.822574][T13293] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 362.872324][T13287] syzkaller0: entered promiscuous mode [ 362.872352][T13287] syzkaller0: entered allmulticast mode [ 363.000423][T13296] bond8 (unregistering): Released all slaves [ 363.351151][T13326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.479655][T13349] tipc: Started in network mode [ 365.479682][T13349] tipc: Node identity , cluster identity 4711 [ 365.479700][T13349] tipc: Failed to obtain node identity [ 365.479740][T13349] tipc: Enabling of bearer rejected, failed to enable media [ 365.481599][T13349] syzkaller0: entered promiscuous mode [ 365.481621][T13349] syzkaller0: entered allmulticast mode [ 365.987065][T13382] netlink: Unknown conntrack attr (0) [ 366.140113][T13391] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 366.392621][ T1272] IPVS: starting estimator thread 0... [ 366.465766][T13413] __nla_validate_parse: 13 callbacks suppressed [ 366.465791][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1915'. [ 366.494406][T13404] IPVS: using max 26 ests per chain, 62400 per kthread [ 366.867949][T13435] netlink: NAT attribute has 1 unknown bytes [ 366.867986][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.884741][T13435] netlink: NAT attribute has 1 unknown bytes [ 366.884813][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.886098][T13435] netlink: NAT attribute has 1 unknown bytes [ 366.886159][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.892894][T13435] netlink: NAT attribute has 1 unknown bytes [ 366.892991][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.966799][T13435] netlink: NAT attribute has 1 unknown bytes [ 366.966835][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.382178][T13447] x_tables: unsorted entry at hook 1 [ 367.537436][T13459] netlink: 'syz.5.1927': attribute type 1 has an invalid length. [ 367.537459][T13459] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1927'. [ 367.540242][T13458] netlink: 'syz.2.1928': attribute type 2 has an invalid length. [ 367.624941][ T1295] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.625914][ T1295] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.625959][ T1295] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.625996][ T1295] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.633056][T13466] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 367.696253][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'. [ 367.696280][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'. [ 367.728477][T13466] syzkaller0: entered promiscuous mode [ 367.728504][T13466] syzkaller0: entered allmulticast mode [ 367.731566][T13468] vlan0: entered promiscuous mode [ 368.156839][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1933'. [ 368.373813][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.413214][T13502] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 368.486547][T13502] bond10: entered promiscuous mode [ 368.488438][T13502] 8021q: adding VLAN 0 to HW filter on device bond10 [ 368.563725][T13506] bond10: (slave bridge8): making interface the new active one [ 368.563752][T13506] bridge8: entered promiscuous mode [ 368.565184][T13506] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 368.657701][T13510] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1941'. [ 368.755175][T13512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1942'. [ 368.821956][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1942'. [ 369.179704][T13534] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.1947'. [ 371.746162][T13514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.916599][T13557] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1957'. [ 371.993739][T13558] nbd: must specify at least one socket [ 372.270031][T13573] lo: entered promiscuous mode [ 372.292460][T13573] netlink: 'syz.3.1962': attribute type 2 has an invalid length. [ 372.292485][T13573] net_ratelimit: 56 callbacks suppressed [ 372.292498][T13573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.403888][T13575] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 372.405687][ T13] IPVS: starting estimator thread 0... [ 372.514634][T13582] IPVS: using max 29 ests per chain, 69600 per kthread [ 372.630768][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1968'. [ 373.099633][T13612] tipc: Started in network mode [ 373.099667][T13612] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 373.099932][T13612] tipc: Enabled bearer , priority 0 [ 373.100326][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.100780][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.101259][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.101725][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.102168][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.102618][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.103106][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.186517][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.187508][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.188002][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.188602][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.189048][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.189493][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.189941][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.190373][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.190826][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.191277][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.191730][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.192182][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.192622][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.193060][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.250854][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.252408][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.272353][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.292827][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.312726][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.341534][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.358743][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.359240][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.389759][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.390227][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.391450][T13612] tipc: Enabling of bearer rejected, already enabled [ 373.493102][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.898200][T13633] syzkaller1: entered promiscuous mode [ 373.898228][T13633] syzkaller1: entered allmulticast mode [ 374.216106][ T923] tipc: Node number set to 11578026 [ 374.597567][T13669] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1988'. [ 374.750579][T13677] netlink: 'syz.5.1992': attribute type 8 has an invalid length. [ 374.750604][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1992'. [ 374.753265][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.756001][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.812099][T13680] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1991'. [ 374.814491][T13680] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 374.852294][T13680] 0ªX¹¦Dö»: entered allmulticast mode [ 374.870062][T13680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1991'. [ 375.503903][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 375.600750][T13726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2007'. [ 375.616349][T13726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2007'. [ 375.616383][T13726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2007'. [ 375.768422][T13735] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 377.283760][T13808] __nla_validate_parse: 15 callbacks suppressed [ 377.283783][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2026'. [ 377.310529][T13808] xfrm1: entered promiscuous mode [ 377.310553][T13808] xfrm1: entered allmulticast mode [ 377.357961][T13808] netlink: 'syz.5.2026': attribute type 10 has an invalid length. [ 377.381306][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2026'. [ 377.496884][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 377.572755][T13821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.739723][T13834] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.836116][T13837] IPv6: Can't replace route, no match found [ 378.144331][T13851] vlan4: entered allmulticast mode [ 378.144356][T13851] veth0_vlan: entered allmulticast mode [ 378.611503][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.956555][T13901] ip_tables: iptables: counters copy to user failed while replacing table [ 379.132813][T13909] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 379.295648][T13916] netlink: 83 bytes leftover after parsing attributes in process `syz.5.2075'. [ 379.371999][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 380.195335][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 380.622193][T13988] IPVS: dh: FWM 3 0x00000003 - no destination available [ 381.318745][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2122'. [ 381.332840][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2122'. [ 381.716153][T14044] veth1_macvtap: left promiscuous mode [ 381.814424][T14054] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2134'. [ 381.818162][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 381.849978][T14055] vlan2: entered promiscuous mode [ 381.850003][T14055] bond0: entered promiscuous mode [ 381.850017][T14055] bond_slave_0: entered promiscuous mode [ 381.850233][T14055] bond_slave_1: entered promiscuous mode [ 382.097088][T14070] netlink: 'syz.4.2138': attribute type 2 has an invalid length. [ 382.311428][T14080] __nla_validate_parse: 4 callbacks suppressed [ 382.311451][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 382.312545][T14080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.345799][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 382.486499][T14093] netlink: 'syz.6.2144': attribute type 1 has an invalid length. [ 382.486527][T14093] netlink: 'syz.6.2144': attribute type 2 has an invalid length. [ 382.486542][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2144'. [ 382.538912][T14099] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 382.688532][T14102] ¾x9ÿ: left allmulticast mode [ 382.688553][T14102] ¾x9ÿ: left promiscuous mode [ 382.688697][T14102] bridge0: port 1(1¾x9ÿ) entered disabled state [ 382.728033][T14102] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.770010][T14102] team0: Port device team_slave_0 removed [ 382.800643][T14102] team0: Port device team_slave_1 removed [ 382.802124][T14102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.802152][T14102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.822890][T14102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.822917][T14102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.852306][T14102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.907932][T14105] team0: Port device xfrm0 added [ 382.910803][T14106] tipc: Enabled bearer , priority 0 [ 383.012066][T14120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 383.186281][T14131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2153'. [ 383.255682][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 383.436903][T14145] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 383.829633][T14167] 0: reclassify loop, rule prio 0, protocol 03 [ 383.902639][T14174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2166'. [ 384.129809][T14186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2165'. [ 385.009111][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.009135][ C0] bridge0: topology change detected, propagating [ 385.009458][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.009480][ C0] bridge0: topology change detected, propagating [ 385.181744][T14214] ip_tables: iptables: counters copy to user failed while replacing table [ 385.576786][T14226] netlink: 'syz.4.2181': attribute type 11 has an invalid length. [ 387.119967][T14224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.410614][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 387.440053][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2187'. [ 387.483201][T14252] bond8: entered promiscuous mode [ 387.483272][T14252] bond8: entered allmulticast mode [ 387.507387][T14252] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.539419][T14262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2191'. [ 387.555045][T14255] bond9: entered promiscuous mode [ 387.555071][T14255] bond9: entered allmulticast mode [ 387.555502][T14255] 8021q: adding VLAN 0 to HW filter on device bond9 [ 387.650773][T14258] netlink: 193 bytes leftover after parsing attributes in process `syz.3.2191'. [ 387.688095][T14270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2193'. [ 387.688124][T14270] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2193'. [ 387.688142][T14270] netlink: 'syz.4.2193': attribute type 5 has an invalid length. [ 387.688157][T14270] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2193'. [ 387.766409][T14273] netlink: 'syz.5.2194': attribute type 2 has an invalid length. [ 387.766432][T14273] netlink: 626 bytes leftover after parsing attributes in process `syz.5.2194'. [ 387.907341][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 387.911038][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 387.934522][T14279] bridge_slave_0 (unregistering): left allmulticast mode [ 387.934552][T14279] bridge_slave_0 (unregistering): left promiscuous mode [ 387.934643][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.415621][T14302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.653280][T14315] openvswitch: netlink: IPv4 tun info is not correct [ 388.792048][T14322] netlink: 'syz.6.2208': attribute type 11 has an invalid length. [ 389.277500][T14344] netlink: Unknown conntrack attr (0) [ 389.512703][T14356] pimreg3: entered allmulticast mode [ 389.908890][T14382] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 389.929843][T14382] bond10 (unregistering): Released all slaves [ 390.059305][T14387] x_tables: duplicate entry at hook 2 [ 390.171350][T14392] netlink: 'syz.6.2229': attribute type 2 has an invalid length. [ 390.171377][T14392] netlink: 'syz.6.2229': attribute type 2 has an invalid length. [ 390.217623][T14397] netlink: 'syz.6.2229': attribute type 2 has an invalid length. [ 390.217649][T14397] netlink: 'syz.6.2229': attribute type 2 has an invalid length. [ 390.378585][T14411] 8021q: VLANs not supported on ip6tnl0 [ 390.423171][T14414] x_tables: duplicate underflow at hook 1 [ 391.063156][T14447] openvswitch: netlink: Missing key (keys=40, expected=100) [ 391.360682][T14466] openvswitch: netlink: Key type 16128 is out of range max 32 [ 391.533175][T14477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.569987][T14480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.429338][T14514] lo speed is unknown, defaulting to 1000 [ 392.429529][T14514] lo speed is unknown, defaulting to 1000 [ 392.464329][T14514] lo speed is unknown, defaulting to 1000 [ 392.467196][T14514] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 392.467262][T14514] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 392.467317][T14514] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 392.555492][T14514] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 392.610199][T14514] lo speed is unknown, defaulting to 1000 [ 392.612188][T14514] lo speed is unknown, defaulting to 1000 [ 392.633605][T14514] lo speed is unknown, defaulting to 1000 [ 392.655063][T14514] lo speed is unknown, defaulting to 1000 [ 392.698853][T14514] lo speed is unknown, defaulting to 1000 [ 392.701074][T14514] lo speed is unknown, defaulting to 1000 [ 392.703194][T14514] lo speed is unknown, defaulting to 1000 [ 394.638564][T14522] __nla_validate_parse: 269 callbacks suppressed [ 394.638675][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 394.663319][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 394.879524][T14537] IPv6: sit1: Disabled Multicast RS [ 394.979333][T14547] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2269'. [ 394.979452][T14547] 0ªX¹¦Dö»: renamed from gretap0 [ 394.983235][T14547] 0ªX¹¦Dö»: entered allmulticast mode [ 395.189909][T14556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.351755][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2276'. [ 395.352732][T14564] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2276'. [ 395.479907][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 395.508115][T14572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2278'. [ 395.535622][T14570] bond11: Invalid ad_actor_system MAC address. [ 395.535644][T14570] bond11: option ad_actor_system: invalid value (1) [ 395.541915][T14570] bond11 (unregistering): Released all slaves [ 396.309589][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2288'. [ 396.491682][T14611] netdevsim netdevsim3 : renamed from netdevsim0 [ 396.538251][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2293'. [ 396.947091][T14636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2297'. [ 397.152317][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 397.162049][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 397.162916][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 397.183791][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 397.184499][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 397.831807][T14677] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 398.313462][T14646] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.544341][T14700] netlink: 'syz.4.2312': attribute type 4 has an invalid length. [ 398.548764][T14700] netlink: 'syz.4.2312': attribute type 42 has an invalid length. [ 398.720008][T14646] wg0 speed is unknown, defaulting to 1000 [ 398.915013][T14726] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 398.940893][T14726] l2tp_ppp: sess 2/0: no socket in recv [ 398.941521][T14726] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 399.002291][T14646] lo speed is unknown, defaulting to 1000 [ 399.075629][T14729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.243711][ T4934] Bluetooth: hci7: command tx timeout [ 399.579639][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.579836][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.580240][T14646] bridge_slave_0: entered allmulticast mode [ 399.582232][T14646] bridge_slave_0: entered promiscuous mode [ 399.612008][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.612189][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.612631][T14646] bridge_slave_1: entered allmulticast mode [ 399.638987][T14646] bridge_slave_1: entered promiscuous mode [ 399.750199][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.768191][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.810985][T14646] team0: Port device team_slave_0 added [ 399.820418][T14646] team0: Port device team_slave_1 added [ 399.872862][T14757] __nla_validate_parse: 12 callbacks suppressed [ 399.872888][T14757] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2325'. [ 399.945908][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.945928][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.945960][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.950756][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.950776][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.950808][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.098630][T14646] hsr_slave_0: entered promiscuous mode [ 400.100667][T14646] hsr_slave_1: entered promiscuous mode [ 400.117219][T14646] debugfs: 'hsr0' already exists in 'hsr' [ 400.117243][T14646] Cannot create hsr debugfs directory [ 400.117880][T14761] raw_sendmsg: syz.3.2328 forgot to set AF_INET. Fix it! [ 400.172311][T14765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2329'. [ 400.224873][T14768] netlink: 'syz.5.2330': attribute type 2 has an invalid length. [ 400.292490][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 400.679211][T14646] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 400.696325][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.698367][T14646] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.727479][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.728728][T14646] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.762441][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.771716][T14646] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.785848][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.871291][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 400.959903][T14794] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 400.998895][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.034764][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.058987][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.059075][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.098175][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.098283][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.329350][ T4934] Bluetooth: hci7: command tx timeout [ 401.671669][T14823] tipc: Started in network mode [ 401.671703][T14823] tipc: Node identity c20f68cd433b, cluster identity 4711 [ 401.671861][T14823] tipc: Enabled bearer , priority 0 [ 401.711376][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 401.712964][T14825] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2347'. [ 401.713202][T14826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2347'. [ 401.760284][T14822] tipc: Disabling bearer [ 402.026080][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2352'. [ 402.102852][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2352'. [ 402.169445][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.336345][T14860] tipc: Enabling of bearer rejected, failed to enable media [ 402.507444][T14869] Bluetooth: MGMT ver 1.23 [ 402.739585][T14646] veth0_vlan: entered promiscuous mode [ 402.762955][T14646] veth1_vlan: entered promiscuous mode [ 402.812644][T14875] syzkaller0: entered promiscuous mode [ 402.812668][T14875] syzkaller0: entered allmulticast mode [ 402.853171][T14646] veth0_macvtap: entered promiscuous mode [ 402.872928][T14646] veth1_macvtap: entered promiscuous mode [ 402.979645][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.007850][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.068544][T14887] x_tables: duplicate underflow at hook 2 [ 403.080769][ T1284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.080815][ T1284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.080851][ T1284] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.080887][ T1284] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.339464][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.339489][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2364'. [ 403.373198][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.384397][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.386782][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.387747][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.389983][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.391098][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.409923][ T4934] Bluetooth: hci7: command tx timeout [ 403.470480][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.483262][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.496227][T14894] netlink: 'syz.5.2364': attribute type 17 has an invalid length. [ 403.501575][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.501596][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.652137][ T1295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.652160][ T1295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.028948][T14913] IPv6: sit1: Disabled Multicast RS [ 404.204538][T14924] ipt_REJECT: TCP_RESET invalid for non-tcp [ 404.273349][T14926] tipc: Enabled bearer , priority 0 [ 404.678510][T14949] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 404.678626][T14949] syzkaller1: linktype set to 823 [ 404.717113][T14949] 8021q: adding VLAN 0 to HW filter on device bond10 [ 404.901931][T14963] __nla_validate_parse: 138 callbacks suppressed [ 404.901952][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'. [ 404.978295][ T1278] IPVS: starting estimator thread 0... [ 404.999067][T14971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2386'. [ 405.075267][T14970] IPVS: using max 27 ests per chain, 64800 per kthread [ 405.137179][T14977] : entered promiscuous mode [ 405.270919][T14985] ip_tables: iptables: counters copy to user failed while replacing table [ 405.484676][ T4934] Bluetooth: hci7: command tx timeout [ 405.669560][T14997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.993390][T15016] syzkaller0: entered promiscuous mode [ 405.993417][T15016] syzkaller0: entered allmulticast mode [ 406.130882][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 406.130907][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 406.731078][T15058] trusted_key: syz.4.2411 sent an empty control message without MSG_MORE. [ 406.771104][T15059] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2410'. [ 407.110103][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2413'. [ 407.150098][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2413'. [ 407.509293][T15084] macvtap0: entered allmulticast mode [ 407.509316][T15084] veth0_macvtap: entered allmulticast mode [ 407.513194][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2414'. [ 407.542792][T15085] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 407.543422][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2414'. [ 407.585160][T15084] hsr_slave_1 (unregistering): left promiscuous mode [ 407.651987][T15091] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2416'. [ 407.797053][T15100] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 407.819793][T15100] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 408.647783][T15139] openvswitch: netlink: Message has 1 unknown bytes. [ 408.708543][T15142] validate_nla: 60 callbacks suppressed [ 408.708564][T15142] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 408.892653][T15153] netlink: 'syz.7.2438': attribute type 64 has an invalid length. [ 408.958879][T15157] netlink: 'syz.7.2440': attribute type 10 has an invalid length. [ 408.995942][T15157] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 409.003124][T15157] team0: Port device wlan0 added [ 409.024009][T15164] netlink: 'syz.7.2440': attribute type 10 has an invalid length. [ 409.347961][T15189] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 409.736427][T15202] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 409.925038][T15216] __nla_validate_parse: 8 callbacks suppressed [ 409.925060][T15216] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2449'. [ 410.114858][T15223] netlink: 'syz.7.2451': attribute type 8 has an invalid length. [ 410.114882][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2451'. [ 410.119734][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.120409][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.309869][T15232] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 410.334463][T15211] syzkaller1: entered promiscuous mode [ 410.334488][T15211] syzkaller1: entered allmulticast mode [ 410.469477][T15238] netlink: 'syz.5.2456': attribute type 1 has an invalid length. [ 410.546894][T15241] netlink: 'syz.5.2456': attribute type 10 has an invalid length. [ 410.546918][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 410.589802][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2455'. [ 410.616755][T15238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.620843][T15241] dummy0: entered promiscuous mode [ 410.621430][T15241] netlink: 'syz.5.2456': attribute type 10 has an invalid length. [ 410.621449][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 410.621628][T15241] netlink: 'syz.5.2456': attribute type 10 has an invalid length. [ 410.621644][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 410.621916][T15241] netlink: 'syz.5.2456': attribute type 10 has an invalid length. [ 410.621932][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 410.622105][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 410.622283][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 410.622815][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 411.100909][T15275] bridge0: port 3(veth1_to_bridge) entered blocking state [ 411.101122][T15275] bridge0: port 3(veth1_to_bridge) entered disabled state [ 411.101290][T15275] veth1_to_bridge: entered allmulticast mode [ 411.103920][T15275] veth1_to_bridge: entered promiscuous mode [ 411.565739][T15303] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 411.719540][T15287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.746356][T15292] syzkaller1: entered promiscuous mode [ 411.746381][T15292] syzkaller1: entered allmulticast mode [ 411.920565][T15287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.095900][T15287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.120735][T15317] syzkaller0: entered promiscuous mode [ 412.120761][T15317] syzkaller0: entered allmulticast mode [ 412.144274][T15317] tipc: Bearer : already 2 bearers with priority 0 [ 412.144295][T15317] tipc: Enabling of bearer rejected, cannot adjust to lower [ 412.181972][T15287] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.407907][T15336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 412.471176][T15336] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 412.567951][ T38] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.568078][ T38] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.624976][ T1295] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.625336][ T1295] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.922663][T15356] syzkaller0: entered promiscuous mode [ 412.922693][T15356] syzkaller0: entered allmulticast mode [ 413.143265][T15371] ip_tables: iptables: counters copy to user failed while replacing table [ 413.313124][T15378] bond3: invalid ARP target 0.0.0.0 specified for addition [ 413.313152][T15378] bond3: option arp_ip_target: invalid value (0) [ 413.335456][T15378] bond3 (unregistering): Released all slaves [ 413.442191][T15386] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 413.529364][T15389] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 414.942665][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 414.969761][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 414.971604][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 414.991271][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 414.993694][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 416.228847][T15430] __nla_validate_parse: 68 callbacks suppressed [ 416.228869][T15430] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2513'. [ 416.538826][T15414] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.606179][T15450] set match dimension is over the limit! [ 416.798279][T15414] wg0 speed is unknown, defaulting to 1000 [ 417.051916][T15468] validate_nla: 65 callbacks suppressed [ 417.051938][T15468] netlink: 'syz.5.2527': attribute type 1 has an invalid length. [ 417.084120][ T5627] Bluetooth: hci8: command tx timeout [ 417.112421][T15468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.121324][T15414] lo speed is unknown, defaulting to 1000 [ 417.149041][T15468] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 417.284273][T15484] netlink: 'syz.3.2529': attribute type 8 has an invalid length. [ 417.480407][T15493] netlink: 'syz.5.2531': attribute type 2 has an invalid length. [ 417.510779][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804bb89c00: rx timeout, send abort [ 417.511009][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804bb89c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 417.541035][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2531'. [ 417.687000][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2533'. [ 417.818225][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'. [ 417.819691][T15414] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.819914][T15414] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.820054][T15414] bridge_slave_0: entered allmulticast mode [ 417.822038][T15414] bridge_slave_0: entered promiscuous mode [ 417.868388][T15414] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.868820][T15414] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.869309][T15414] bridge_slave_1: entered allmulticast mode [ 417.871487][T15414] bridge_slave_1: entered promiscuous mode [ 417.945383][T15414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.950533][T15414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.010192][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'. [ 418.029308][T15414] team0: Port device team_slave_0 added [ 418.045551][T15414] team0: Port device team_slave_1 added [ 418.142071][T15512] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2535'. [ 418.155263][T15414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.155281][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.155310][T15414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.161096][T15414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.161112][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.161141][T15414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.391236][T15515] netlink: 400 bytes leftover after parsing attributes in process `syz.4.2538'. [ 418.414015][T15515] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2538'. [ 418.414370][T15414] hsr_slave_0: entered promiscuous mode [ 418.415496][T15414] hsr_slave_1: entered promiscuous mode [ 418.416972][T15414] debugfs: 'hsr0' already exists in 'hsr' [ 418.416993][T15414] Cannot create hsr debugfs directory [ 418.418853][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 418.437902][T15515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2538'. [ 418.531541][T15521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.650730][T15521] netlink: 'syz.5.2541': attribute type 1 has an invalid length. [ 418.650755][T15521] netlink: 'syz.5.2541': attribute type 1 has an invalid length. [ 419.163623][ T5627] Bluetooth: hci8: command tx timeout [ 419.192122][T15414] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 419.214739][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.218895][T15414] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 419.247657][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.252242][T15414] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 419.291112][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.291992][T15414] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 419.337959][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.718960][T15414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.765108][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.790645][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.790757][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.832886][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.833011][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.874316][T15589] Bluetooth: hci0: unsupported parameter 5161 [ 419.874343][T15589] Bluetooth: hci0: unsupported parameter 8192 [ 419.874358][T15589] Bluetooth: hci0: unsupported parameter 5161 [ 419.874380][T15589] Bluetooth: hci0: unsupported parameter 8192 [ 420.119853][T15596] bond11: (slave bond_slave_0): Device is not bonding slave [ 420.119878][T15596] bond11: option active_slave: invalid value (bond_slave_0) [ 420.122565][T15596] bond11 (unregistering): Released all slaves [ 420.317652][T15608] set match dimension is over the limit! [ 420.492926][T15617] netlink: 'syz.4.2564': attribute type 64 has an invalid length. [ 420.581608][T15620] syz_tun: entered allmulticast mode [ 420.721590][T15623] siw: device registration error -23 [ 421.221633][T15658] FAULT_INJECTION: forcing a failure. [ 421.221633][T15658] name failslab, interval 1, probability 0, space 0, times 0 [ 421.221685][T15658] CPU: 1 UID: 0 PID: 15658 Comm: syz.3.2572 Not tainted syzkaller #0 PREEMPT(full) [ 421.221711][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.221730][T15658] Call Trace: [ 421.221743][T15658] [ 421.221752][T15658] dump_stack_lvl+0xe8/0x150 [ 421.221801][T15658] should_fail_ex+0x410/0x560 [ 421.221905][T15658] should_failslab+0xa8/0x100 [ 421.221938][T15658] ? __nf_conntrack_alloc+0x81/0x3e0 [ 421.221963][T15658] kmem_cache_alloc_noprof+0xa1/0x600 [ 421.221988][T15658] ? nf_ct_pernet+0x45/0x270 [ 421.222011][T15658] ? __nf_conntrack_alloc+0x81/0x3e0 [ 421.222043][T15658] __nf_conntrack_alloc+0x81/0x3e0 [ 421.222075][T15658] init_conntrack+0x170/0x1080 [ 421.222113][T15658] ? __pfx_init_conntrack+0x10/0x10 [ 421.222148][T15658] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 421.222171][T15658] ? do_xdp_generic+0x168/0x12f0 [ 421.222202][T15658] ? __siphash_unaligned+0x25c/0x3e0 [ 421.222240][T15658] nf_conntrack_in+0xc13/0x1600 [ 421.222291][T15658] ? __pfx_nf_conntrack_in+0x10/0x10 [ 421.222326][T15658] ? ipt_do_table+0x2b9/0x15d0 [ 421.222364][T15658] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 421.222395][T15658] ? ip_sabotage_in+0x57/0x270 [ 421.222424][T15658] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 421.222478][T15658] nf_hook_slow+0xc5/0x220 [ 421.222518][T15658] NF_HOOK+0x21f/0x3c0 [ 421.222547][T15658] ? __pfx_ip_rcv_finish+0x10/0x10 [ 421.222571][T15658] ? NF_HOOK+0x9e/0x3c0 [ 421.222595][T15658] ? __pfx_NF_HOOK+0x10/0x10 [ 421.222633][T15658] ? __pfx_ip_rcv_finish+0x10/0x10 [ 421.222667][T15658] ? netif_receive_skb+0x102/0xbf0 [ 421.222697][T15658] ? __pfx_ip_rcv+0x10/0x10 [ 421.222720][T15658] netif_receive_skb+0x45b/0xbf0 [ 421.222758][T15658] ? __pfx_netif_receive_skb+0x10/0x10 [ 421.222800][T15658] ? rcu_is_watching+0x16/0xb0 [ 421.222829][T15658] ? tun_rx_batched+0x185/0x790 [ 421.222931][T15658] tun_rx_batched+0x1de/0x790 [ 421.222988][T15658] ? __pfx_tun_rx_batched+0x10/0x10 [ 421.223020][T15658] ? lock_acquire+0x115/0x350 [ 421.223055][T15658] ? tun_get_user+0x1d3f/0x4450 [ 421.223086][T15658] ? __local_bh_enable_ip+0xd6/0x140 [ 421.223123][T15658] tun_get_user+0x2bb1/0x4450 [ 421.223163][T15658] ? tun_get_user+0x27a6/0x4450 [ 421.223210][T15658] ? aa_file_perm+0x4ed/0x15f0 [ 421.223266][T15658] ? __pfx_tun_get_user+0x10/0x10 [ 421.223301][T15658] ? __lock_acquire+0x747/0x2de0 [ 421.223344][T15658] ? ref_tracker_alloc+0x341/0x4b0 [ 421.223404][T15658] ? lock_acquire+0x115/0x350 [ 421.223430][T15658] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 421.223468][T15658] ? lock_acquire+0x115/0x350 [ 421.223491][T15658] ? tun_get+0x1c/0x2f0 [ 421.223527][T15658] ? tun_get+0x1c/0x2f0 [ 421.223556][T15658] ? tun_get+0x1c/0x2f0 [ 421.223591][T15658] tun_chr_write_iter+0x113/0x200 [ 421.223626][T15658] vfs_write+0x612/0xba0 [ 421.223660][T15658] ? __pfx_vfs_write+0x10/0x10 [ 421.223697][T15658] ? __fget_files+0x2a/0x420 [ 421.223729][T15658] ksys_write+0x150/0x270 [ 421.223757][T15658] ? __pfx_ksys_write+0x10/0x10 [ 421.223804][T15658] do_syscall_64+0x166/0x520 [ 421.223831][T15658] ? trace_irq_disable+0x3b/0x140 [ 421.223857][T15658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.223881][T15658] ? clear_bhb_loop+0x70/0xc0 [ 421.223909][T15658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.223932][T15658] RIP: 0033:0x7f64b195ed8e [ 421.223954][T15658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.223973][T15658] RSP: 002b:00007f64b2840fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.223997][T15658] RAX: ffffffffffffffda RBX: 00007f64b28416c0 RCX: 00007f64b195ed8e [ 421.224014][T15658] RDX: 0000000000000036 RSI: 0000200000000640 RDI: 00000000000000c8 [ 421.224029][T15658] RBP: 00007f64b2841090 R08: 0000000000000000 R09: 0000000000000000 [ 421.224043][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.224057][T15658] R13: 00007f64b1c26038 R14: 00007f64b1c25fa0 R15: 00007fffdea04d98 [ 421.224094][T15658] [ 421.244519][ T5627] Bluetooth: hci8: command tx timeout [ 422.055519][T15671] __nla_validate_parse: 5 callbacks suppressed [ 422.055541][T15671] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2575'. [ 422.148394][T15414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.322080][T15686] Bluetooth: hci0: unsupported parameter 5161 [ 422.322119][T15686] Bluetooth: hci0: unsupported parameter 8192 [ 422.322134][T15686] Bluetooth: hci0: unsupported parameter 5161 [ 422.322148][T15686] Bluetooth: hci0: unsupported parameter 8192 [ 422.379824][T15688] netlink: 'syz.7.2578': attribute type 9 has an invalid length. [ 422.490901][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2578'. [ 422.845232][T15414] veth0_vlan: entered promiscuous mode [ 422.878810][T15414] veth1_vlan: entered promiscuous mode [ 422.950766][T15414] veth0_macvtap: entered promiscuous mode [ 422.969352][T15414] veth1_macvtap: entered promiscuous mode [ 423.015679][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.078958][T15414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.183703][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.183752][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.183788][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.183823][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.324863][ T5627] Bluetooth: hci8: command tx timeout [ 423.327388][T15717] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2581'. [ 423.734646][T15724] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 423.746935][T15730] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 423.776493][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.776516][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.779416][T15726] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 423.988831][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.988857][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.301274][T15749] SET target dimension over the limit! [ 424.319727][T15745] sctp: [Deprecated]: syz.8.2589 (pid 15745) Use of int in maxseg socket option. [ 424.319727][T15745] Use struct sctp_assoc_value instead [ 424.329106][T15746] netlink: 524 bytes leftover after parsing attributes in process `syz.4.2587'. [ 424.837282][ T5627] block nbd1: Receive control failed (result -32) [ 424.887192][ T4934] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 424.903180][ T4934] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 424.913075][ T4934] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 424.921749][ T4934] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 424.933893][ T4934] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.487066][T15801] syzkaller1: entered promiscuous mode [ 425.487085][T15801] syzkaller1: entered allmulticast mode [ 426.062466][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 426.062501][T15827] netlink: 'syz.8.2604': attribute type 30 has an invalid length. [ 426.111979][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 426.112014][T15827] netlink: 'syz.8.2604': attribute type 30 has an invalid length. [ 426.145922][ T1032] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.147128][T11131] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.147330][T11131] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.147360][T11131] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.195005][T15772] rxe_eth0 speed is unknown, defaulting to 1000 [ 426.218410][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 426.218445][T15836] netlink: 'syz.8.2604': attribute type 30 has an invalid length. [ 426.218528][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 426.218550][T15831] netlink: 'syz.8.2604': attribute type 30 has an invalid length. [ 426.347319][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2607'. [ 426.401482][T15840] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 426.583100][T15844] netlink: 'syz.7.2608': attribute type 1 has an invalid length. [ 426.591945][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2608'. [ 426.715684][ T5627] block nbd2: Receive control failed (result -32) [ 426.717258][ T5623] block nbd3: Receive control failed (result -32) [ 426.722070][ T4934] block nbd2: Receive control failed (result -32) [ 426.730054][ T52] block nbd3: Receive control failed (result -32) [ 426.858316][T15772] wg0 speed is unknown, defaulting to 1000 [ 427.006085][ T5623] Bluetooth: hci9: command tx timeout [ 427.159844][T15855] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2612'. [ 427.162342][T15854] openvswitch: netlink: IP tunnel dst address not specified [ 427.162374][T15854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.297795][T15772] lo speed is unknown, defaulting to 1000 [ 427.459651][T15867] gre1: entered promiscuous mode [ 427.802868][T15880] FAULT_INJECTION: forcing a failure. [ 427.802868][T15880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.802904][T15880] CPU: 0 UID: 0 PID: 15880 Comm: syz.3.2620 Not tainted syzkaller #0 PREEMPT(full) [ 427.802929][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 427.802944][T15880] Call Trace: [ 427.802952][T15880] [ 427.802962][T15880] dump_stack_lvl+0xe8/0x150 [ 427.803001][T15880] should_fail_ex+0x410/0x560 [ 427.803038][T15880] _copy_from_iter+0x1d3/0x1660 [ 427.803168][T15880] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 427.803204][T15880] ? __pfx_policy_nodemask+0x10/0x10 [ 427.803238][T15880] ? lock_acquire+0x115/0x350 [ 427.803263][T15880] ? __pfx__copy_from_iter+0x10/0x10 [ 427.803298][T15880] ? alloc_pages_mpol+0x256/0x390 [ 427.803340][T15880] copy_page_from_iter+0x219/0x2d0 [ 427.803378][T15880] tun_get_user+0x20b7/0x4450 [ 427.803414][T15880] ? tun_get_user+0x6de/0x4450 [ 427.803462][T15880] ? aa_file_perm+0x4ed/0x15f0 [ 427.803484][T15880] ? __pfx_tun_get_user+0x10/0x10 [ 427.803517][T15880] ? __lock_acquire+0x747/0x2de0 [ 427.803558][T15880] ? ref_tracker_alloc+0x341/0x4b0 [ 427.803589][T15880] ? lock_acquire+0x115/0x350 [ 427.803615][T15880] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 427.803651][T15880] ? lock_acquire+0x115/0x350 [ 427.803676][T15880] ? tun_get+0x1c/0x2f0 [ 427.803712][T15880] ? tun_get+0x1c/0x2f0 [ 427.803742][T15880] ? tun_get+0x1c/0x2f0 [ 427.803777][T15880] tun_chr_write_iter+0x113/0x200 [ 427.803812][T15880] vfs_write+0x612/0xba0 [ 427.803845][T15880] ? __pfx_vfs_write+0x10/0x10 [ 427.803880][T15880] ? __fget_files+0x2a/0x420 [ 427.803912][T15880] ksys_write+0x150/0x270 [ 427.803938][T15880] ? __pfx_ksys_write+0x10/0x10 [ 427.803975][T15880] do_syscall_64+0x166/0x520 [ 427.804001][T15880] ? trace_irq_disable+0x3b/0x140 [ 427.804026][T15880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.804050][T15880] ? clear_bhb_loop+0x70/0xc0 [ 427.804078][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.804108][T15880] RIP: 0033:0x7f64b195ed8e [ 427.804130][T15880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.804149][T15880] RSP: 002b:00007f64b2840fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.804173][T15880] RAX: ffffffffffffffda RBX: 00007f64b28416c0 RCX: 00007f64b195ed8e [ 427.804190][T15880] RDX: 0000000000000042 RSI: 0000200000000340 RDI: 00000000000000c8 [ 427.804205][T15880] RBP: 00007f64b2841090 R08: 0000000000000000 R09: 0000000000000000 [ 427.804220][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.804233][T15880] R13: 00007f64b1c26038 R14: 00007f64b1c25fa0 R15: 00007fffdea04d98 [ 427.804270][T15880] [ 427.945083][T15876] lo speed is unknown, defaulting to 1000 [ 428.079551][T15879] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2619'. [ 428.079578][T15879] openvswitch: netlink: Flow key attr not present in new flow. [ 428.240783][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 428.240809][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 428.265686][T15884] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 428.267513][T15884] bond1 (unregistering): Released all slaves [ 428.326936][T15876] lo speed is unknown, defaulting to 1000 [ 428.327942][T15876] lo speed is unknown, defaulting to 1000 [ 428.428056][T15772] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.429849][T15772] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.430047][T15772] bridge_slave_0: entered allmulticast mode [ 428.459198][T15772] bridge_slave_0: entered promiscuous mode [ 428.502480][T15772] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.502654][T15772] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.502848][T15772] bridge_slave_1: entered allmulticast mode [ 428.534094][T15772] bridge_slave_1: entered promiscuous mode [ 428.585363][T15899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.743065][T11131] IPVS: starting estimator thread 0... [ 428.808599][T15772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.834595][T15907] IPVS: using max 24 ests per chain, 57600 per kthread [ 428.835080][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 428.871802][T15772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.999997][T15900] : entered promiscuous mode [ 429.000517][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 429.069643][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 429.073285][T15772] team0: Port device team_slave_0 added [ 429.088464][ T5623] Bluetooth: hci9: command tx timeout [ 429.103263][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 429.112870][T15772] team0: Port device team_slave_1 added [ 429.139917][T15914] tipc: Failed to remove unknown binding: 66,0,0/0:1245382690/1245382691 [ 429.141915][T15914] tipc: Failed to remove unknown binding: 66,0,0/0:1245382690/1245382691 [ 429.155930][T15876] infiniband syz0: set active [ 429.156178][T15876] infiniband syz0: added lo [ 429.185871][T15876] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 429.185910][T15876] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 429.185953][T15876] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 429.290369][T15876] RDS/IB: syz0: added [ 429.290428][T15876] smc: adding ib device syz0 with port count 1 [ 429.290481][T15876] smc: ib device syz0 port 1 has no pnetid [ 429.318099][ T5823] lo speed is unknown, defaulting to 1000 [ 429.321722][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 429.388142][T14892] lo speed is unknown, defaulting to 1000 [ 429.388348][T15876] lo speed is unknown, defaulting to 1000 [ 429.391178][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 429.399022][T15772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.399063][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.401689][T15772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.441803][T15772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.441846][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.441919][T15772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.458936][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 429.491574][T15900] netlink: 'syz.5.2623': attribute type 2 has an invalid length. [ 429.706684][T15772] hsr_slave_0: entered promiscuous mode [ 429.711265][T15772] hsr_slave_1: entered promiscuous mode [ 429.725689][T15772] debugfs: 'hsr0' already exists in 'hsr' [ 429.725711][T15772] Cannot create hsr debugfs directory [ 429.772816][T15931] tipc: Enabled bearer , priority 10 [ 429.923351][T15930] rxe_eth0 speed is unknown, defaulting to 1000 [ 430.148402][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2633'. [ 430.225212][T15876] lo speed is unknown, defaulting to 1000 [ 430.257287][T15950] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 430.260249][T15944] ip_tables: iptables: counters copy to user failed while replacing table [ 430.338234][T15944] ip_tables: iptables: counters copy to user failed while replacing table [ 430.488990][T15772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 430.489030][T15772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.489061][T15772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 430.641469][T15772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 430.641508][T15772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.641536][T15772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 430.704995][T15930] wg0 speed is unknown, defaulting to 1000 [ 430.783027][T15772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 430.783067][T15772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.783095][T15772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 430.965563][T15876] lo speed is unknown, defaulting to 1000 [ 431.133161][T15930] lo speed is unknown, defaulting to 1000 [ 431.165632][ T5623] Bluetooth: hci9: command tx timeout [ 431.202742][T15772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.215496][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.218699][T15772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.225420][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.229201][T15772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.262610][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.274722][T15772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.281344][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.390784][T15930] lo speed is unknown, defaulting to 1000 [ 431.429447][T15772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.459078][T15772] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.472404][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.472537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.493035][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.493176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.653861][T15876] lo speed is unknown, defaulting to 1000 [ 432.113846][T15876] lo speed is unknown, defaulting to 1000 [ 432.336133][T15772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.377335][T15876] lo speed is unknown, defaulting to 1000 [ 432.622592][T15876] lo speed is unknown, defaulting to 1000 [ 432.738878][T15772] veth0_vlan: entered promiscuous mode [ 432.755251][T15772] veth1_vlan: entered promiscuous mode [ 432.795603][T15772] veth0_macvtap: entered promiscuous mode [ 432.811030][T15772] veth1_macvtap: entered promiscuous mode [ 432.833405][T15772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.862038][T15772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.880501][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.880739][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.908676][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.908723][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.054220][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.054240][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.090370][T15876] lo speed is unknown, defaulting to 1000 [ 433.123283][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.123307][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.244911][ T5623] Bluetooth: hci9: command tx timeout [ 433.366167][T15876] lo speed is unknown, defaulting to 1000 [ 433.584731][T15876] lo speed is unknown, defaulting to 1000 [ 437.007161][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 440.057764][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.814647][T16021] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2639'. [ 456.882312][T16028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2640'. [ 456.979190][T16035] netlink: 'syz.8.2638': attribute type 1 has an invalid length. [ 457.003377][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2638'. [ 457.074338][T16027] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.074378][T16027] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.128488][T16041] FAULT_INJECTION: forcing a failure. [ 457.128488][T16041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.128524][T16041] CPU: 0 UID: 0 PID: 16041 Comm: syz.3.2643 Not tainted syzkaller #0 PREEMPT(full) [ 457.128549][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.128563][T16041] Call Trace: [ 457.128572][T16041] [ 457.128582][T16041] dump_stack_lvl+0xe8/0x150 [ 457.128622][T16041] should_fail_ex+0x410/0x560 [ 457.128661][T16041] _copy_to_user+0x31/0xb0 [ 457.128770][T16041] simple_read_from_buffer+0xe1/0x170 [ 457.128814][T16041] proc_fail_nth_read+0x1bb/0x230 [ 457.128841][T16041] ? common_file_perm+0x20e/0x2b0 [ 457.128912][T16041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.128944][T16041] ? rw_verify_area+0x24a/0x4c0 [ 457.128966][T16041] ? tun_chr_write_iter+0x18a/0x200 [ 457.128999][T16041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.129026][T16041] vfs_read+0x213/0xa80 [ 457.129055][T16041] ? __pfx___mutex_lock+0x10/0x10 [ 457.129088][T16041] ? __pfx_vfs_read+0x10/0x10 [ 457.129113][T16041] ? __fget_files+0x2a/0x420 [ 457.129140][T16041] ? __fget_files+0x3a2/0x420 [ 457.129160][T16041] ? __fget_files+0x2a/0x420 [ 457.129192][T16041] ksys_read+0x150/0x270 [ 457.129219][T16041] ? __pfx_ksys_read+0x10/0x10 [ 457.129256][T16041] do_syscall_64+0x166/0x520 [ 457.129283][T16041] ? trace_irq_disable+0x3b/0x140 [ 457.129309][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.129340][T16041] ? clear_bhb_loop+0x70/0xc0 [ 457.129369][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.129390][T16041] RIP: 0033:0x7f64b195ed8e [ 457.129409][T16041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.129428][T16041] RSP: 002b:00007f64b2840fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.129451][T16041] RAX: ffffffffffffffda RBX: 00007f64b28416c0 RCX: 00007f64b195ed8e [ 457.129468][T16041] RDX: 000000000000000f RSI: 00007f64b28410a0 RDI: 0000000000000004 [ 457.129482][T16041] RBP: 00007f64b2841090 R08: 0000000000000000 R09: 0000000000000000 [ 457.129496][T16041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.129510][T16041] R13: 00007f64b1c26038 R14: 00007f64b1c25fa0 R15: 00007fffdea04d98 [ 457.129547][T16041] [ 457.487290][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 457.517690][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 457.591137][T16027] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.591178][T16027] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.769845][T16051] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 457.841289][T16027] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.841331][T16027] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.992691][T16027] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.992733][T16027] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.142955][T16079] v: renamed from veth0_vlan (while UP) [ 458.336425][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2657'. [ 458.362800][T16092] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 458.393845][ T60] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.393882][ T60] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.453245][ T1272] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.453282][ T1272] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.454095][ T1272] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.454128][ T1272] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.464706][ T1278] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.464791][ T1278] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.833425][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'. [ 459.038541][T16126] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 459.107016][T16137] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 459.159991][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2672'. [ 459.162854][T16140] netlink: 'syz.8.2674': attribute type 1 has an invalid length. [ 459.162874][T16140] netlink: 'syz.8.2674': attribute type 2 has an invalid length. [ 459.203184][T16140] lo: entered promiscuous mode [ 459.226434][T16140] tunl0: entered promiscuous mode [ 459.228575][T16140] gre0: entered promiscuous mode [ 459.254603][T16140] gretap0: entered promiscuous mode [ 459.261177][T16140] erspan0: entered promiscuous mode [ 459.278870][T16140] ip_vti0: entered promiscuous mode [ 459.280959][T16140] ip6_vti0: entered promiscuous mode [ 459.296418][T16140] sit0: entered promiscuous mode [ 459.300423][T16140] ip6tnl0: entered promiscuous mode [ 459.303185][T16140] ip6gre0: entered promiscuous mode [ 459.337257][T16140] syz_tun: entered promiscuous mode [ 459.355962][T16140] ip6gretap0: entered promiscuous mode [ 459.360831][T16140] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.361586][T16140] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.362705][T16140] bridge0: entered promiscuous mode [ 459.378963][T16140] vcan0: entered promiscuous mode [ 459.395495][T16140] bond0: entered promiscuous mode [ 459.395555][T16140] bond_slave_0: entered promiscuous mode [ 459.397518][T16140] bond_slave_1: entered promiscuous mode [ 459.427345][T16140] team0: entered promiscuous mode [ 459.427368][T16140] team_slave_0: entered promiscuous mode [ 459.427888][T16140] team_slave_1: entered promiscuous mode [ 459.432172][T16140] dummy0: entered promiscuous mode [ 459.459953][T16140] nlmon0: entered promiscuous mode [ 459.462344][T16140] batadv0: entered promiscuous mode [ 459.477441][T16140] vxcan0: entered promiscuous mode [ 459.478428][T16140] vxcan1: entered promiscuous mode [ 459.479341][T16140] veth0: entered promiscuous mode [ 459.481863][T16140] veth1: entered promiscuous mode [ 459.507045][T16140] wg0: entered promiscuous mode [ 459.509052][T16140] wg1: entered promiscuous mode [ 459.510986][T16140] wg2: entered promiscuous mode [ 459.512554][T16140] veth0_to_bridge: entered promiscuous mode [ 459.545229][T16140] veth1_to_bridge: entered promiscuous mode [ 459.550119][T16140] veth0_to_bond: entered promiscuous mode [ 459.551423][T16140] veth1_to_bond: entered promiscuous mode [ 459.562757][T16140] veth0_to_team: entered promiscuous mode [ 459.588564][T16140] veth1_to_team: entered promiscuous mode [ 459.594195][T16140] veth0_to_batadv: entered promiscuous mode [ 459.602670][T16140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.602813][T16140] batadv_slave_0: entered promiscuous mode [ 459.619487][T16140] veth1_to_batadv: entered promiscuous mode [ 459.631869][T16140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.631926][T16140] batadv_slave_1: entered promiscuous mode [ 459.636777][T16140] xfrm0: entered promiscuous mode [ 459.642897][T16140] veth0_to_hsr: entered promiscuous mode [ 459.667625][T16140] veth1_to_hsr: entered promiscuous mode [ 459.681393][T16140] hsr0: entered promiscuous mode [ 459.693036][T16140] veth1_virt_wifi: entered promiscuous mode [ 459.703456][T16140] veth0_virt_wifi: entered promiscuous mode [ 459.708887][T16140] virt_wifi0: entered promiscuous mode [ 459.732016][T16140] vlan0: entered promiscuous mode [ 459.740656][T16140] vlan1: entered promiscuous mode [ 459.751140][T16140] macvlan0: entered promiscuous mode [ 459.759515][T16140] macvlan1: entered promiscuous mode [ 459.762518][T16140] ipvlan0: entered promiscuous mode [ 459.762685][T16140] ipvlan1: entered promiscuous mode [ 459.788256][T16140] macvtap0: entered promiscuous mode [ 459.791223][T16140] macsec0: entered promiscuous mode [ 459.807931][T16140] geneve0: entered promiscuous mode [ 459.811623][T16140] geneve1: entered promiscuous mode [ 459.836690][T16140] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 459.853010][T16140] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 459.862266][T16140] bridge1: entered promiscuous mode [ 459.862520][T16140] vxlan0: entered promiscuous mode [ 459.867829][T16140] vxlan1: entered promiscuous mode [ 459.873233][T16140] vxlan2: entered promiscuous mode [ 459.879160][T16140] vxlan3: entered promiscuous mode [ 459.892674][T16140] netdevsim netdevsim8 eth0: entered promiscuous mode [ 459.892863][T16140] netdevsim netdevsim8 eth1: entered promiscuous mode [ 459.893029][T16140] netdevsim netdevsim8 eth2: entered promiscuous mode [ 459.893212][T16140] netdevsim netdevsim8 eth3: entered promiscuous mode [ 459.904950][ T1278] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.905075][ T1278] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.916586][ T1278] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.916676][ T1278] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.916990][ T1278] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.917088][ T1278] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.917263][ T1278] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.917292][ T1278] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.161775][T16153] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 460.172611][T16153] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 460.281869][T16162] x_tables: duplicate underflow at hook 1 [ 460.312467][T16164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2682'. [ 460.519898][T16175] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 460.541251][T16179] netlink: 'syz.4.2685': attribute type 1 has an invalid length. [ 460.554685][T16180] Unknown options in mask 4 [ 460.561513][T16184] netlink: 'syz.5.2690': attribute type 1 has an invalid length. [ 460.561534][T16184] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2690'. [ 460.625647][T16188] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 460.685576][T16177] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2689'. [ 460.700095][T16190] netlink: 'syz.7.2691': attribute type 24 has an invalid length. [ 460.778739][T16195] netlink: zone id is out of range [ 460.778755][T16195] netlink: zone id is out of range [ 460.778765][T16195] netlink: zone id is out of range [ 460.778774][T16195] netlink: zone id is out of range [ 460.778782][T16195] netlink: zone id is out of range [ 460.778791][T16195] netlink: zone id is out of range [ 460.779078][T16195] netlink: zone id is out of range [ 460.779088][T16195] netlink: zone id is out of range [ 460.870573][T16200] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 460.987076][ T5823] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0 [ 460.987116][ T5823] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0 [ 461.039765][ T5823] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 461.165561][T16213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.188227][T16217] x_tables: duplicate underflow at hook 1 [ 461.206572][T16217] pimreg: entered allmulticast mode [ 461.230163][T16214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.240327][T16214] bond2: (slave bond0): making interface the new active one [ 461.255549][T16214] bond2: (slave bond0): Enslaving as an active interface with an up link [ 461.256173][T16214] netlink: 'syz.7.2696': attribute type 4 has an invalid length. [ 461.285104][T16214] .`: renamed from bond0 [ 461.320242][ T12] bond2: (slave .`): link status definitely down, disabling slave [ 461.322728][ T12] bond2: now running without any active interface! [ 461.638491][T16238] x_tables: duplicate underflow at hook 3 [ 461.852971][T16248] __nla_validate_parse: 9 callbacks suppressed [ 461.852994][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2708'. [ 461.987281][T16254] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.2710'. [ 462.105203][T16261] sctp: [Deprecated]: syz.3.2712 (pid 16261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.105203][T16261] Use struct sctp_sack_info instead [ 462.105861][T16261] syzkaller0: entered promiscuous mode [ 462.105880][T16261] syzkaller0: entered allmulticast mode [ 462.149813][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'. [ 462.409900][T16275] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2719'. [ 462.425930][T16274] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 462.431051][T16275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.588653][T16278] validate_nla: 1 callbacks suppressed [ 462.588674][T16278] netlink: 'syz.5.2720': attribute type 2 has an invalid length. [ 462.712464][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.726426][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.730283][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.748527][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.749199][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.118889][T16297] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2724'. [ 463.231644][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2725'. [ 463.505913][T16309] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2728'. [ 463.505946][T16309] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2728'. [ 463.747743][T16283] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.356664][T16283] wg0 speed is unknown, defaulting to 1000 [ 464.633436][T16283] lo speed is unknown, defaulting to 1000 [ 464.647747][T16283] lo speed is unknown, defaulting to 1000 [ 464.684978][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 464.748343][T16354] netlink: 'syz.8.2738': attribute type 11 has an invalid length. [ 464.845319][ T5623] Bluetooth: hci0: command tx timeout [ 465.097505][T16359] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2741'. [ 465.098735][T16359] 8021q: VLANs not supported on ip6gre0 [ 465.101265][T16359] xt_HMARK: spi-set and port-set can't be combined [ 465.200698][T16359] batman_adv: batadv0: Adding interface: syzkaller0 [ 465.200718][T16359] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.200754][T16359] batman_adv: batadv0: Interface activated: syzkaller0 [ 465.322448][T16358] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 465.357734][T16358] batman_adv: batadv0: Removing interface: syzkaller0 [ 466.187897][T16283] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.188082][T16283] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.188516][T16283] bridge_slave_0: entered allmulticast mode [ 466.190513][T16283] bridge_slave_0: entered promiscuous mode [ 466.199729][T16283] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.201633][T16283] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.202031][T16283] bridge_slave_1: entered allmulticast mode [ 466.207848][T16283] bridge_slave_1: entered promiscuous mode [ 466.341575][T16283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.365533][T16283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.443256][T16283] team0: Port device team_slave_0 added [ 466.463323][T16283] team0: Port device team_slave_1 added [ 466.611363][T16283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.611384][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.611412][T16283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.621061][T16283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.623343][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.623431][T16283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.887178][T16283] hsr_slave_0: entered promiscuous mode [ 466.888443][T16283] hsr_slave_1: entered promiscuous mode [ 466.892879][T16283] debugfs: 'hsr0' already exists in 'hsr' [ 466.892903][T16283] Cannot create hsr debugfs directory [ 466.925211][ T5623] Bluetooth: hci0: command tx timeout [ 467.059802][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2760'. [ 467.088771][T16430] bridge_slave_0: left allmulticast mode [ 467.088799][T16430] bridge_slave_0: left promiscuous mode [ 467.089039][T16430] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.123867][T16430] bridge_slave_1: left allmulticast mode [ 467.123895][T16430] bridge_slave_1: left promiscuous mode [ 467.124104][T16430] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.161405][T16430] bond0: (slave bond_slave_0): Releasing backup interface [ 467.183163][T16430] bond0: (slave bond_slave_1): Releasing backup interface [ 467.200768][T16430] team0: Port device team_slave_0 removed [ 467.221964][T16430] team0: Port device team_slave_1 removed [ 467.231540][T16430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.231564][T16430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.242566][T16430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.242629][T16430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.272334][T16430] net_ratelimit: 500 callbacks suppressed [ 467.272355][T16430] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.272476][T16434] bridge_slave_1: left allmulticast mode [ 467.272718][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.318401][T16434] bridge_slave_0: left allmulticast mode [ 467.318583][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.406657][T16435] team0: Port device xfrm0 added [ 467.406899][T16436] tipc: Started in network mode [ 467.406927][T16436] tipc: Node identity 72a45ceaecf, cluster identity 4711 [ 467.408741][T16436] tipc: Enabled bearer , priority 0 [ 467.464770][T16445] Bluetooth: MGMT ver 1.23 [ 467.680685][T16452] ipt_ah: unknown flags FF [ 468.016902][T16283] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.207872][ T31] INFO: task syz.1.1735:12649 blocked for more than 143 seconds. [ 468.207901][ T31] Not tainted syzkaller #0 [ 468.207913][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.207923][ T31] task:syz.1.1735 state:D stack:25984 pid:12649 tgid:12642 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 468.207990][ T31] Call Trace: [ 468.207998][ T31] [ 468.208014][ T31] __schedule+0x17db/0x58f0 [ 468.208066][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 468.208096][ T31] ? __alloc_skb+0x2c1/0x7a0 [ 468.208131][ T31] ? nfsd_nl_listener_get_doit+0x30/0x610 [ 468.208280][ T31] ? __pfx___schedule+0x10/0x10 [ 468.208316][ T31] ? schedule+0x90/0x2b0 [ 468.208345][ T31] schedule+0x164/0x2b0 [ 468.208372][ T31] schedule_preempt_disabled+0x13/0x30 [ 468.208396][ T31] __mutex_lock+0x7c1/0x1550 [ 468.208430][ T31] ? __mutex_lock+0x5d4/0x1550 [ 468.208461][ T31] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 468.208498][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 468.208534][ T31] ? __nlmsg_put+0xef/0x1b0 [ 468.208565][ T31] ? genlmsg_put+0x137/0x2e0 [ 468.208604][ T31] nfsd_nl_listener_get_doit+0x104/0x610 [ 468.208640][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 468.208707][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 468.208757][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 468.208803][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.208876][ T31] genl_rcv_msg+0x614/0x7a0 [ 468.208921][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.208956][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 468.209009][ T31] netlink_rcv_skb+0x226/0x4a0 [ 468.209041][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.209079][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.209125][ T31] ? down_read+0x2be/0x330 [ 468.209160][ T31] genl_rcv+0x28/0x40 [ 468.209192][ T31] netlink_unicast+0x8ef/0xa80 [ 468.220481][ T31] netlink_sendmsg+0x813/0xb40 [ 468.220630][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.220733][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 468.220824][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.220913][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 468.220999][ T31] ____sys_sendmsg+0x54e/0x850 [ 468.221081][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.221175][ T31] ? import ** replaying previous printk message ** [ 468.221175][ T31] ? import_iovec+0x73/0xa0 [ 468.221277][ T31] ___sys_sendmsg+0x2a5/0x360 [ 468.221338][ T31] ? __lock_acquire+0x747/0x2de0 [ 468.221425][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.221498][ T31] ? futex_wake+0x51b/0x5f0 [ 468.221653][ T31] ? __fget_files+0x2a/0x420 [ 468.221704][ T31] ? __fget_files+0x3a2/0x420 [ 468.221794][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 468.221913][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.250968][ T31] do_syscall_64+0x166/0x520 [ 468.251071][ T31] ? trace_irq_disable+0x3b/0x140 [ 468.251143][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.251205][ T31] ? clear_bhb_loop+0x70/0xc0 [ 468.251285][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.251356][ T31] RIP: 0033:0x7f1bb079e559 [ 468.251409][ T31] RSP: 002b:00007f1bb170d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.251472][ T31] RAX: ffffffffffffffda RBX: 00007f1bb0a25fa0 RCX: 00007f1bb079e559 [ 468.251515][ T31] RDX: 0000000004000880 RSI: 00002000000001c0 RDI: 0000000000000041 [ 468.251556][ T31] RBP: 00007f1bb0835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 468.251596][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.251628][ T31] R13: 00007f1bb0a26038 R14: 00007f1bb0a25fa0 R15: 00007fffeea86298 [ 468.251722][ T31] [ 468.251999][ T31] [ 468.251999][ T31] Showing all locks held in the system: [ 468.252011][ T31] locks held by kworker/u8:0/12: 2, last CPU#0: [ 468.252028][ T31] #0: ffff888023b91140 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.252099][ T31] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.252163][ T31] locks held by pr/ttyS0/16: 4, last CPU#1: [ 468.252178][ T31] #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 468.252236][ T31] #1: ffffc90000a18cc0 ((&q->adapt_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 468.252296][ T31] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: fq_pie_timer+0x4d/0x5a0 [ 468.252351][ T31] #3: ffff88807f760170 (&sch->root_lock_key#35){+.-.}-{3:3}, at: fq_pie_timer+0x195/0x5a0 [ 468.273884][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 468.273947][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 468.274117][ T31] locks held by kworker/u8:3/50: 3, last CPU#0: [ 468.274158][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.274325][ T31] #1: ffffc90000bb7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.274463][ T31] #2: ffff888036d35258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 468.274656][ T31] locks held by kworker/u8:7/1032: 1, last CPU#0: [ 468.274929][ T31] #0: ffff888035eab940 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.274996][ T31] locks held by kworker/u8:8/1272: 2, on CPU#0: [ 468.275012][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.275073][ T31] #1: ffffc900057cfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.275150][ T31] locks held by getty/5376: 2, on CPU#0: [ 468.275166][ T31] #0: ffff888034fdb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 468.275326][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 468.275403][ T31] locks held by kworker/u8:13/11131: 3, last CPU#0: [ 468.275419][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 468.289766][ T31] #1: ffff8880b8424408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 468.289968][ T31] #2: ffff8880b8426118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 468.290111][ T31] locks held by syz.0.1525/11701: 2, on CPU#0: [ 468.290159][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 468.290324][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 468.290490][ T31] locks held by syz.1.1735/12649: 2, on CPU#1: [ 468.290530][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 468.290700][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 468.409579][ T31] locks held by syz.2.2129/14040: 2, on CPU#1: [ 468.409629][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 468.409794][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 468.410064][ T31] locks held by syz.6.2321/14742: 3, on CPU#1: [ 468.410106][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 468.410325][ T31] #1: ffff88807ff556e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 468.410791][ T31] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 468.424538][ T31] locks held by syz-executor/15414: 1, last CPU#0: [ 468.424586][ T31] #0: ffff888054668460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 468.424781][ T31] locks held by syz-executor/16283: 8, last CPU#0: [ 468.424822][ T31] #0: ffff8880348e4460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 468.424987][ T31] #1: ffff88803e4c8480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 468.425247][ T31] #2: ffff88802a2b9e18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 468.425531][ T31] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 468.425604][ T31] #4: ffff888079385128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 468.425710][ T31] #5: ffff88802eb7c258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 468.425781][ T31] #6: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 468.425847][ T31] #7: ffff888079911e48 (&net->mpls.platform_mutex){+.+.}-{4:4}, at: mpls_dev_notify+0x82/0xd30 [ 468.425908][ T31] locks held by syz.7.2766/16456: 1, last CPU#0: [ 468.437689][ T31] #0: ffff88807ec81bc0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 468.437931][ T31] locks held by syz.5.2768/16464: 3, last CPU#0: [ 468.437949][ T31] #0: ffff888032650460 (sb_writers#5){.+.+}-{0:0}, at: vfs_fallocate+0x5e0/0x7e0 [ 468.438012][ T31] #1: ffff88803b0cacc0 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_fallocate+0x17c/0xf10 [ 468.438121][ T31] #2: ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 468.438180][ T31] locks held by syz.5.2768/16470: 2, on CPU#0: [ 468.438195][ T31] #0: ffff888032650460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 468.438257][ T31] #1: ffff88803b0cacc0 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: process_measurement+0x443/0x1c10 [ 468.438422][ T31] locks held by syz.4.2771/16474: 1, on CPU#0: [ 468.438438][ T31] #0: ffff88807bbc9d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x393/0x1710 [ 468.438498][ T31] locks held by kworker/u8:8/16480: 1, last CPU#0: [ 468.438514][ T31] #0: ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 468.438763][ T31] [ 468.438771][ T31] ============================================= [ 468.438771][ T31] [ 468.438789][ T31] NMI backtrace for cpu 0 [ 468.438804][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 468.438829][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.438850][ T31] Call Trace: [ 468.438858][ T31] [ 468.438868][ T31] dump_stack_lvl+0xe8/0x150 [ 468.438904][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 468.438939][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 468.438978][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 468.439085][ T31] sys_info+0x135/0x170 [ 468.439183][ T31] watchdog+0xfd7/0x1030 [ 468.439266][ T31] ? watchdog+0x1c7/0x1030 [ 468.439352][ T31] kthread+0x38b/0x480 [ 468.439416][ T31] ? __pfx_watchdog+0x10/0x10 [ 468.439476][ T31] ? __pfx_kthread+0x10/0x10 [ 468.439539][ T31] ret_from_fork+0x514/0xb70 [ 468.439603][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 468.439663][ T31] ? __switch_to+0xc89/0x1420 [ 468.439754][ T31] ? __pfx_kthread+0x10/0x10 [ 468.439823][ T31] ret_from_fork_asm+0x1a/0x30 [ 468.439929][ T31] [ 468.440062][ T31] Sending NMI from CPU 0 to CPUs 1: [ 468.440157][ C1] NMI backtrace for cpu 1 [ 468.440170][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 468.440191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.440204][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 468.440292][ C1] Code: e8 de 6b 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 4b c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 35 77 06 cc 44 89 f9 80 e1 07 [ 468.440309][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 468.440325][ C1] RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000 [ 468.440345][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 468.440357][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 468.440369][ C1] R10: dffffc0000000000 R11: ffffffff8574a450 R12: dffffc0000000000 [ 468.440384][ C1] R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000 [ 468.440396][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 468.440412][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.440425][ C1] CR2: 0000000000000008 CR3: 00000000775ca000 CR4: 00000000003526f0 [ 468.440441][ C1] Call Trace: [ 468.440448][ C1] [ 468.440457][ C1] wait_for_lsr+0x184/0x2f0 [ 468.440486][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 468.440512][ C1] serial8250_console_write+0xa7e/0x1200 [ 468.440544][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 468.440570][ C1] ? __schedule+0x17f1/0x58f0 [ 468.440597][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 468.440630][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 468.440656][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 468.440687][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 468.440707][ C1] nbcon_kthread_func+0x679/0x880 [ 468.440732][ C1] ? nbcon_kthread_func+0x163/0x880 [ 468.440753][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 468.440778][ C1] ? __kthread_parkme+0x71/0x1f0 [ 468.440806][ C1] ? __kthread_parkme+0x199/0x1f0 [ 468.440837][ C1] kthread+0x38b/0x480 [ 468.440856][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 468.440876][ C1] ? __pfx_kthread+0x10/0x10 [ 468.440895][ C1] ret_from_fork+0x514/0xb70 [ 468.440914][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 468.440931][ C1] ? __switch_to+0xc89/0x1420 [ 468.440959][ C1] ? __pfx_kthread+0x10/0x10 [ 468.440978][ C1] ret_from_fork_asm+0x1a/0x30 [ 468.441004][ C1] [ 468.460150][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 469.531450][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 469.540629][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.550714][ T31] Call Trace: [ 469.554019][ T31] [ 469.556984][ T31] vpanic+0x56d/0xa60 [ 469.561014][ T31] ? __pfx___schedule+0x10/0x10 [ 469.565901][ T31] ? __pfx_vpanic+0x10/0x10 [ 469.570462][ T31] panic+0xc5/0xd0 [ 469.574228][ T31] ? __pfx_panic+0x10/0x10 [ 469.578683][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 469.584181][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 469.589594][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 469.595794][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 469.602026][ T31] watchdog+0x1030/0x1030 [ 469.606402][ T31] ? watchdog+0x1c7/0x1030 [ 469.610865][ T31] kthread+0x38b/0x480 [ 469.614972][ T31] ? __pfx_watchdog+0x10/0x10 [ 469.619684][ T31] ? __pfx_kthread+0x10/0x10 [ 469.624310][ T31] ret_from_fork+0x514/0xb70 [ 469.629077][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 469.634225][ T31] ? __switch_to+0xc89/0x1420 [ 469.638957][ T31] ? __pfx_kthread+0x10/0x10 [ 469.643592][ T31] ret_from_fork_asm+0x1a/0x30 [ 469.648406][ T31] [ 469.652087][ T31] Kernel Offset: disabled [ 469.656426][ T31] Rebooting in 86400 seconds..