last executing test programs: 2m51.110653636s ago: executing program 4 (id=1844): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000680)=""/154, 0x9a, 0x0, &(0x7f0000000740)=""/204, 0xcc}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0xd, 0x4, 0x48, @empty, @local, 0x8, 0x10, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b40500000080000079107d000000000005000000000000009500000000000000bf"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000008c0)=""/195, 0x41100, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x10001}, 0x10, r4}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000080)) bind$netlink(r6, &(0x7f00000005c0)={0x10, 0x0, 0x80000000, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004140}, 0x20008000) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20042014}, 0x80000) 2m50.007618763s ago: executing program 4 (id=1847): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x13, 0x602c}, 0x54) syz_emit_ethernet(0x20, &(0x7f0000000240)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", "b30800", 0x8828, "ed2810b6294bab4e2bbd"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000240)=""/184, 0xb8}], 0x4, &(0x7f0000000340)=""/223, 0xdf}, 0x40002020) 2m49.308056583s ago: executing program 4 (id=1851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffe6d) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000280)) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 2m48.892748586s ago: executing program 4 (id=1856): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006112200000000000950000000000ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x802}, 0x4000080) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x44}, 0x1, 0x1000000}, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xe67, 0x0, 0x1, 0xb, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2}, 0x50) (async, rerun: 32) r9 = socket(0x2b, 0x80801, 0x1) (rerun: 32) shutdown(r9, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1b, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @generic={0xc, 0xb, 0x0, 0x1, 0x9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x5, 0xcb, &(0x7f0000000c00)=""/203, 0x41100, 0x3, '\x00', r2, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x2, 0x3, 0x1a, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d40)=[{0x2, 0x3, 0xe, 0x8}, {0x2, 0x5, 0x0, 0x4}, {0x4, 0x1, 0x4, 0x3}, {0x1, 0x4, 0x6, 0x6}, {0x3, 0x1, 0x2, 0xa}, {0x0, 0xffffffff, 0x2, 0x1}], 0x10, 0xab7}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x8000) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x1, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15b, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x7, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r13, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) (async, rerun: 32) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4801000016000100000000000000000164010100000000000000000000000000ac1e00010000000000000000000000000003000000000003000080a06c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendto$packet(r0, &(0x7f0000000640)="e8b7", 0x2, 0x40, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 2m48.432007047s ago: executing program 4 (id=1860): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 2m47.765348796s ago: executing program 4 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000080000000c000000030000000100000082ec655a3bf5f4a0ef2cfdb6f65c95b44794d715cc6567339051f61d88934920175e02a0f207ba5b5f6dd8b6c30e5e9d687d4c43517bfddb33318bfd25d36a56685da8751f834b0c3834239efe028d7191ad303b03acb3efaf44e2b4fbdf0a1bafa91d0a96b36201919070430eb5a0834404567275e2e4cc6cbd1d5bd4a6ec137d8914624fe6418f8db81f8f5b54f0e27c1616900e03", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x800, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@newqdisc={0x110, 0x24, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xf, 0xe}, {0xfff2, 0xa}, {0xd, 0x6}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9f}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xda}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2f5d621dbb96768e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1add}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4040004}, 0x8880) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r8, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x49}, @generic={0x3, 0x4, 0x0, 0x3, 0x9}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x3ff, 0x6b, &(0x7f0000000200)=""/107, 0x40f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xc, 0x9f1, 0x1a0604ad}, 0x10, 0xd111, r6, 0x0, &(0x7f0000000380)=[r7, r8], 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 2m32.613168696s ago: executing program 32 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000080000000c000000030000000100000082ec655a3bf5f4a0ef2cfdb6f65c95b44794d715cc6567339051f61d88934920175e02a0f207ba5b5f6dd8b6c30e5e9d687d4c43517bfddb33318bfd25d36a56685da8751f834b0c3834239efe028d7191ad303b03acb3efaf44e2b4fbdf0a1bafa91d0a96b36201919070430eb5a0834404567275e2e4cc6cbd1d5bd4a6ec137d8914624fe6418f8db81f8f5b54f0e27c1616900e03", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x800, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@newqdisc={0x110, 0x24, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xf, 0xe}, {0xfff2, 0xa}, {0xd, 0x6}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9f}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xda}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2f5d621dbb96768e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1add}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4040004}, 0x8880) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r8, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x49}, @generic={0x3, 0x4, 0x0, 0x3, 0x9}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x3ff, 0x6b, &(0x7f0000000200)=""/107, 0x40f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xc, 0x9f1, 0x1a0604ad}, 0x10, 0xd111, r6, 0x0, &(0x7f0000000380)=[r7, r8], 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1m29.769362617s ago: executing program 5 (id=2116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) 1m29.378994663s ago: executing program 5 (id=2120): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m28.695811663s ago: executing program 5 (id=2124): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) socket$packet(0x11, 0x2, 0x300) 1m27.406670882s ago: executing program 5 (id=2129): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x5761, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000c00800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000400d3238e"], 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x400d0) unshare(0x200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) ioctl$FIOCLEX(r3, 0x5451) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0xc800) 1m26.142005502s ago: executing program 5 (id=2135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e24, 0x3, @private1, 0xffffffff}}, 0x0, 0x7ffe}, 0x90) 1m25.156269851s ago: executing program 5 (id=2138): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1f}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f72740000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r3, 0x8008b705, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m9.287626732s ago: executing program 33 (id=2138): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1f}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f72740000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r3, 0x8008b705, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m2.6180458s ago: executing program 2 (id=2202): r0 = socket$netlink(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f000003b000/0x1000)=nil, 0x1000, 0x1000009, 0x4008031, r0, 0x64636000) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) sendto$inet(r2, &(0x7f0000000540)="758009800501d10b9fad8d0794c8736cd95a03e0323941ee04041649833d357f04d109db6117aac8a42ff644fb7f29cc862f147b1b4fcb6a09b22a7e57b137d91b3a84a74fe7f0c5fa9dfe337b3a0689136abf87f96ee846b051aced526526ec99098aa1a268143d8fb38c202de4d5234e9c8be1727bc74a851f94bea8de8a8742abfc25", 0x84, 0x4004080, 0x0, 0x0) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r3, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x6, 0x0, 0x0, 0x2, 0x1, 0x3}}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a4abc08000300", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r7}, &(0x7f00000014c0), &(0x7f0000001500)=r6}, 0x20) (async) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) (async) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r9, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x30000001) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a1b868826ce387a7", @ANYBLOB="ca75df755ea774d52946ac08cfffb8d7c15e45c2d9ed497beded2af054e952a5837855850e4b0b9f597d454f7471f593b3a4f9111ee377b1828fdbe93ad65f0b62b3fb058685dc563d6107df8bd96026fceb750c73ecd621554a49b46846e93cca6cf24a6de2187fa9c08b31a6eb3c471c7ddc5541eb7b533bad5c324d", @ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="331651c2a850abaa7e55c2137b1103833ab4f2f66061bc588a9029366a74a599242387557256178b0dc718f3eb7fa909c336474909e88b7bf0956b409791061c60e5e7dcb655d97e42db1ea47225914a8703ef9038333713ca81fbc0118b08879ec83f51ce742dfec5f2b85b85bee31e932a8717b06ccbfec772d675f35929452e3b367c0aa2dd6c2145cf5f8e33bad197c2c88b56aa371c03910a408a38e1ed00243d89ae33eae5ea1549cb1550cd76e791f975d77e8c1e5cb81ccd66b8be757e8f061f938ba4262c7e7f5fb7df4989e6d960f4b4885e831cfe8ade1c8d4cfd9b82df4bf3f491806de0eb462170ca0cee60345d458de44d2cb143e129df06c0931aabdac0b859b9e1127bf3a1553c86f6d5939b7cf78302f030cee2fffce06d18fd53f8d699002a9a000022947854d50b2c13608f8e0b0a5eabc1070a2b56cbe40a5bbef3a8639412c782df565680d92d10aa29cdbbc842584c7db4330a31c5d0b65d609497e65c87a9447df0c50213a8a78ae169b2275daab1b7e4176d3ef24bbda3fcbdf0ddc79c6bbafab706d8e1581b02aaca28048a163fac7a1b18906cfc6ad6d6465bd6e3bce22b56027b61fd653e43ee4366ce8e3ff89ee887607fd14f6a677c84b5a0a6de21664df91c3f4e1700f8bf552fd904ee98dfebf2b8"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 1m2.090076642s ago: executing program 2 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004100010029bd70000400000003000000f5a419de100001800c001080050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x67, 0x0, &(0x7f0000000440)="7273ba40070f95c1b2969af7b70fb477eefeba5fda23aadf17c25af2fe4aad131ffb803e34430826703287ce3a018d097e2df6f4c465f8763ef524e62ec73faaaa3bfe12ff53c2944df72db11f9ae57bd1628af5e8df3c23ecddfc915ff47bddf436a4692480d7"}, 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_netfilter(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c0008800060b050028bd7000fcdbdf2502000004080095009ca58e7e6d65c32b7a3792a525a4d9998d173385eed3c62dc8c20a3a5bf10a9db54bd3fcac4b827997a74f376eb2757fc53684e6f10b7225bda634da9536a21629450eebcaf6446829d74509ed53319f9c587f843e1c2d760825bc3958b7492bb802bd415df31f21093fb0b92a803587141adec032d25935ff6c13f75337eafa6bac2fab12680eef9a88eb25734017e85776637900923fbfc1024c2b66fb591a", @ANYRES32=r9, @ANYBLOB="0a5c27de4f7f95e52e01e8d975e113abd9822f239dd8d2850101f0985897e1f0f7fee8fa823f144adb74c396e235045bbe4be60d4bc77b8c0e99e8d3a4130413fa035cc0e026d1bfe8209ef70ca5236d2100978004002a800400048070daf3c6d90d00360026252825232b392d000000000000003cd21492eaa7b1023063829d5dad2000408008008600", @ANYRES32=r8, @ANYBLOB="14001700fe8000000000000000000000000000370000"], 0xc0}, 0x1, 0x0, 0x0, 0x40000000}, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r3, @ANYBLOB="01980000050002002000128008000100677265001400028008000700ac1414bb08000100", @ANYRES32=r3], 0x40}}, 0x0) 1m1.760877146s ago: executing program 0 (id=2207): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) write$cgroup_int(r1, &(0x7f0000000040)=0xd22, 0x12) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000200)="01154e00010000112233000000bf", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x17, r6, 0x0, 0x0, 0x0}, 0x14) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) 1m0.593255974s ago: executing program 0 (id=2209): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x3) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000ca349b27000000000000000000000000040004800500030006000000"], 0x20}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080), 0x4) 1m0.423866618s ago: executing program 2 (id=2210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x3, 0x1003, 0x4, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x201}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x68e15c92fed553b5}, 0x4004040) 59.9742748s ago: executing program 2 (id=2211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000180)="0bbad24d4292f247ca49ee6f3fdcd646dc20e06797ce9a2e66ecdc3fcbdee311f7e84568f542cfd41747ef653a49e9d45d7c7e94e12318698851c2cdf47954c5c1f1450ac871a7877f76ba0ed21b0f596428a85d3d7f58b6d5e50733705c28848e64ef049fffbb8cb2c392ab6d273d595f127614a630e722704d0de78cfb68dbc003300081ada4ff70c6579b6cc257eb538192f21aa25f1e623d9f62469d52350b85839c1d99b7a55995083d6d959254122603a1cc9211", &(0x7f0000000240)=""/163, &(0x7f0000000340)="4ab67d4de12101ba3d4961580ca90df41db17257ae00ee118d536d09d7584006e25ec7f677c7f8ccb83c595b383745646047a8738b5f6a1cffe614c56981478ae80f9d840816c9efc6fdc477b42711da2649e8825d7bbd3329754eeb43f44fa3840a52907ea4875a55f2070cdb46e85851a3c6df59d619c9d9d669caeffb986c7a1d1cfb1dc0741cbb117ac022fca6f3a4339c89ba4078c53a1cb4cceb6e32159aac6a68de4ea528c0bcb82b", &(0x7f0000000400)="7b7e6dc664d9a24fea246c89ac65598549191d4ac1b130e83a07dffcea2fad17bd7d57b6a8925fb227877bc1276808d74905352bd6be5ce16e2c3f180cea17c7a5ea48cbd404b7164e215a439be4d219d8c94bcda330945ef2896594ea10cf8c72ce3533bd8bbe094e3480fa3166fa6b49c221c750e5eb286729dc1b8f47bdcb9dde6e87e9d5f71190674a4f64b13a355d3dcb94af5733bc5ab1e6795704d445e16c026e37fa84b2855e", 0x0, r3, 0x4}, 0x38) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) 59.841490398s ago: executing program 0 (id=2212): clock_gettime(0x23eaa8d54bacd65c, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe77761d"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @remote, r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0xfffffffffffffd4e) 59.455883978s ago: executing program 0 (id=2213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x2040400) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000efff01010300000000000000000500000806000740000200002000018006000340000300000c000280050001008efaf0458dc7d91100000006"], 0x3c}, 0x1, 0x0, 0x0, 0x3558c61658562d5c}, 0x20000000) (async) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r6}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "7d92b42d063115c362c8a907e5e9b3bd554d5648e059b7a508b4413ddadbe535", "2accccc59b52517872fe74aa06470fc45c044b1e418a7eba53196678ea9d18c6", "11ec925561e5180f4ca7c860aa9077967436795364e21ac7fb81e9091ebce89a", "b12fbfee5c7217523fde7f59954f153c26428aab505ae1b41e5f21a8f866882a", "4988f2d64c78be0d18597d12f5ffbbbeb551a98db17322b1bb0f3897ab7be1e7", "4e34f0db39b883accca5962e", 0x1, 0x0, 0x0, 0x0, 0x1}}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r8, 0x8004745a, &(0x7f0000000640)) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="e754a4181565c5311283a4c8a12057585939b0d7952aa1978c14a565aebe46c696d5", 0x22}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x2c8}, 0x4040008) 58.711256894s ago: executing program 2 (id=2215): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000001480)=0x80000000003, 0x12) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2b, 0x1, 0x0) listen(r5, 0x0) socketpair(0x5, 0x1, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000640)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r9, 0xaa0f4000) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x8a0, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x874, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5e, 0x1, 0x4, 0x0, 0x8, 0x2}, {0xd4, 0x3, 0x0, 0x1, 0x5, 0x1ff}, 0x0, 0x200, 0x115d}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x9, 0x3, 0x9, 0x6, 0x0, 0xffffffff, 0x9, 0xbe, 0x1, 0x8, 0x4000000, 0xdc3, 0x3, 0x4, 0x1000, 0xc4f, 0x6, 0x8, 0x0, 0x5, 0x0, 0x3, 0x80000000, 0x2, 0x8, 0x2, 0x5521274, 0x3ff, 0x123, 0x1800, 0x12, 0xfffffffd, 0x1, 0x7, 0x5, 0xa, 0xb, 0x8, 0x1ff, 0x40, 0x1, 0x9, 0x0, 0x9, 0x4, 0x72f3, 0x7ff, 0x3, 0x0, 0x280000, 0xc3b6, 0x99, 0x6, 0x8, 0xff, 0x1, 0x423, 0x7, 0x8, 0x5, 0x0, 0x9, 0x6, 0x5, 0x2, 0x5, 0x9, 0x9, 0xdc0, 0x764, 0x7f, 0x1ff, 0x8, 0xc000, 0x3, 0x8, 0x7, 0x3ff, 0x6, 0x0, 0x2, 0x7, 0x6e57, 0xffff6010, 0x4, 0x5, 0x9, 0x7ff, 0xc6, 0x7, 0x53d7, 0x40, 0x1, 0x8, 0x1, 0x4c17, 0x1, 0x6, 0x3d464023, 0x8, 0x4, 0x5, 0xc, 0x2fa41c6b, 0x7, 0xea0, 0x5, 0x5, 0x9, 0x80000000, 0x887c, 0x200, 0x4d1, 0xff, 0x8, 0x200, 0x7bec, 0x7, 0x8, 0x1, 0x8, 0x80, 0x9, 0x0, 0x6, 0x72b, 0x800, 0xf, 0xa, 0x0, 0x10001, 0xf, 0x7, 0x800, 0x6, 0x5, 0x4e, 0x62, 0x1, 0x1, 0x6, 0x4, 0x748, 0x8, 0x600000, 0x5, 0xc, 0x4, 0x5, 0x401, 0x1000, 0x0, 0x8, 0x4, 0x10001, 0x6, 0x1, 0x3, 0x4, 0x61, 0x6, 0x9, 0x7, 0x7, 0x1, 0x86080fb, 0x4, 0x5, 0xfffffffb, 0x5, 0x6, 0x2, 0x4, 0x5, 0x6, 0x0, 0x81, 0x1000, 0xc3, 0x7, 0xfff, 0x80, 0x1ff, 0x6, 0xd, 0x8, 0x0, 0xfffffffa, 0xffff, 0x1000, 0x0, 0x2, 0x2aa0, 0x5, 0x7fffffff, 0xfffffff7, 0xf, 0x1, 0x5, 0x2, 0x5, 0x3ff, 0x2, 0x9, 0xad, 0x5, 0x2, 0x8, 0x2, 0x0, 0x7, 0x796b, 0x100, 0xffff, 0x7fffffff, 0x4, 0x7, 0x3, 0x653, 0x2, 0x4, 0xfffffff7, 0x10ae, 0x3, 0x0, 0x7fff, 0x3, 0x18000, 0x0, 0x4, 0x2, 0xfffffff9, 0x8, 0x6eb9, 0x1000, 0x3, 0x0, 0x36000000, 0x10001, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x8, 0x8, 0x80, 0x117dd64c, 0x6, 0x2, 0x2, 0x100, 0xc, 0x8, 0xfffffffe]}, @TCA_TBF_PBURST={0x8, 0x7, 0x8bf}, @TCA_TBF_RTAB={0x404, 0x2, [0xfffffc00, 0x0, 0x2, 0x2000, 0x9, 0x0, 0x5, 0xc, 0x7, 0x4403, 0x6, 0x2, 0xfffffff9, 0x7, 0x6, 0xeb9b, 0x5, 0x2, 0x380000, 0xde180000, 0x34e, 0x3, 0x7e10ee8, 0x8, 0x3, 0x3, 0xffff9343, 0x5, 0xb, 0xd, 0xa4, 0x9, 0x5d6b, 0x100, 0x8, 0xbc0, 0x4, 0x7, 0xf, 0x8001, 0x10001, 0x2, 0xffff0406, 0x8, 0x3, 0x2000000, 0xe4, 0x4, 0x6, 0x3, 0xc5, 0x3, 0x5, 0x400, 0xc1d, 0x7, 0x10000, 0x7e, 0x9, 0x0, 0x3, 0xf, 0x0, 0x753, 0x3, 0x6, 0x0, 0x2, 0xffffffff, 0xad5d, 0x43, 0x1000, 0x9, 0x0, 0xd, 0x5e45, 0x1, 0x2, 0x8, 0x2ca, 0x1, 0x800, 0x80000001, 0x9, 0x8, 0x0, 0x400, 0xfffff63c, 0x9, 0x40, 0x401, 0xb, 0x9b7c5b2, 0x8, 0x1000, 0x81, 0x4ac, 0x1c8, 0x6, 0x6, 0x1, 0x3, 0x8, 0x1000, 0x6967d921, 0xffffffff, 0x7, 0x7, 0x9, 0x80000001, 0x9, 0xe3, 0x3, 0xe7, 0x101, 0xf6d, 0x7, 0x44423333, 0x3ff, 0x8, 0x6, 0x6, 0x6, 0x6, 0x9, 0x2, 0x1ff, 0xd, 0xffffc3b3, 0x3ff, 0x2, 0x2, 0xbd9, 0xffff, 0x17a, 0x80, 0x4800000, 0xfffffff9, 0x9, 0x3ff, 0x40, 0x8000, 0x55b610c4, 0x4, 0x8001, 0xa84, 0xfffffffc, 0x8, 0x0, 0x5, 0x70, 0x7fffffff, 0x2, 0x9, 0x1, 0xd166, 0xfffffffa, 0x200, 0xc, 0xc5, 0x80000000, 0x529a, 0xe4, 0x3, 0x3429, 0x4, 0x1, 0x0, 0x3, 0x7, 0xdc, 0x5, 0x9, 0xe6, 0x4, 0xff, 0x1, 0x7, 0xe, 0x29d, 0x7f, 0xd9, 0x3, 0x8, 0xd, 0x9, 0x139320c5, 0x4, 0x3, 0xd74b, 0x400, 0x800, 0x4, 0x4, 0x2, 0x4, 0xc, 0xf, 0x3, 0x4f6a87bc, 0x9, 0x1000, 0x4, 0xffffffff, 0xfffffffd, 0x37d, 0xc9f, 0x8, 0x7, 0x2, 0xfffffff0, 0x9, 0x6, 0x1, 0x6, 0x7, 0x1, 0x7fff, 0x7, 0xfffff000, 0x6, 0x7, 0x8, 0x5, 0xd680, 0x72f112f3, 0xb963, 0x100, 0x7, 0x9, 0x9, 0x6, 0x4, 0x5, 0x6, 0xffffffff, 0xc02, 0x400, 0x1000, 0x100, 0x8, 0x3, 0x6ff1, 0xe, 0x7, 0x4, 0x9, 0x2, 0x1ff, 0x81, 0x0, 0xff, 0x800000, 0x3, 0x100, 0x8]}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0xdc, 0x0, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x0, 0xffff, 0xffffffc0}, 0xe5, 0x1, 0x1f9b}}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x860}, 0x20008000) openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f00004ad000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r10, 0x1000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r12, 0xe6905000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) 58.544524482s ago: executing program 0 (id=2216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/152, 0x98, 0x0, &(0x7f0000000300)=""/86, 0x56}, &(0x7f00000003c0)=0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) 57.965287756s ago: executing program 0 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x72, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x4b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID]}, 0x38}, 0x1, 0x0, 0x0, 0x8110}, 0x4000045) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 57.500400098s ago: executing program 2 (id=2219): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x80003, 0xffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f0000000100), 0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000000)=@random="ca72738dd2a60a9b2e5c61854295ace704e145f1e1", 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) 42.515113142s ago: executing program 34 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x72, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x4b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID]}, 0x38}, 0x1, 0x0, 0x0, 0x8110}, 0x4000045) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 42.320332902s ago: executing program 35 (id=2219): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x80003, 0xffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f0000000100), 0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000000)=@random="ca72738dd2a60a9b2e5c61854295ace704e145f1e1", 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) 37.041130524s ago: executing program 3 (id=2234): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@caif=@rfm={0x25, 0x7, "44b53f2e02ec970784f9c9cd9ea5a1a4"}, 0x80, &(0x7f0000000180)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r5, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff4}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x8, 0x5, 0x7, 0x8000}, {0x1, 0x2, 0x9, 0xfff, 0x3, 0x3}, 0xf7d, 0x2, 0x1ee3}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x8e, 0x0, 0xfffffbff, 0x5, 0x10000, 0xff, 0x3, 0x5, 0x140c, 0x3ff, 0xc08, 0x800, 0x0, 0x1, 0x2, 0xff, 0x9, 0x5, 0x4, 0x7, 0x4, 0x7, 0xfff, 0x40, 0xce, 0x8, 0x8, 0x7, 0x100, 0x7, 0x3, 0x2, 0x3cf, 0x0, 0x3, 0x1, 0x2f, 0xffffffc0, 0x4, 0x240, 0x6, 0x2, 0x7, 0x8, 0x7, 0x0, 0x1, 0x401, 0x10000, 0x9, 0x1, 0x3, 0x0, 0x9, 0xfff, 0x5, 0xed71, 0x65b4, 0xfffff248, 0x1, 0x3ff, 0x7, 0x0, 0xa, 0x9, 0x8, 0x7f, 0x267, 0x0, 0x1000, 0x5, 0x1, 0xfffffffb, 0x0, 0x9, 0x800, 0x9, 0x9, 0x8001, 0x9, 0x7ff, 0xfffffff9, 0xfffffff7, 0x3, 0x4, 0x80000401, 0x8, 0x8, 0x9, 0x1, 0x3, 0x3ff, 0x5, 0x7, 0x4, 0x3, 0x62b, 0xc, 0x5, 0xa60, 0xb4f0, 0x6, 0x9, 0xffff, 0x8, 0x5, 0xffffffff, 0xfd, 0x0, 0x9, 0xfffff0d0, 0x1, 0x3cfd, 0x10, 0x23, 0xfffffff9, 0xffffffff, 0x639, 0xffff, 0x81, 0x0, 0x10001, 0x10, 0x81, 0x0, 0x1, 0x3, 0x6, 0xffffffff, 0x200, 0x91b0, 0x0, 0x1, 0xfffffffb, 0x10000, 0x7, 0x8, 0x6, 0xa63, 0x3ff, 0x7, 0x4, 0x7fff, 0x9, 0xff, 0x401, 0x726d, 0x11, 0x9, 0x8, 0x1, 0x3, 0xffff8000, 0x0, 0xdb, 0xace, 0xb, 0x549a, 0x1e, 0x5, 0x4, 0x1ff, 0x38, 0x6, 0x8, 0x4, 0x1, 0x5, 0x7, 0x10, 0xd48d, 0x1, 0x1, 0x10, 0x5, 0xe3, 0x6, 0x3, 0x7, 0x9, 0x9, 0x9, 0xffffffff, 0x4, 0x8b01, 0xbf19, 0x7, 0xfffbff57, 0x80, 0x2, 0xff, 0x6, 0x5, 0x6, 0x423, 0x1, 0x80000001, 0x9, 0x80, 0xa0, 0x4, 0xb, 0x46, 0xa, 0x7033, 0x3, 0x2, 0x5a2, 0x2, 0xa6, 0x7, 0xffffffff, 0x3, 0x6, 0x3, 0x8cff, 0x7, 0x6, 0x2, 0x7, 0x6, 0x0, 0x2, 0x0, 0x7, 0x8, 0x1000, 0x5b, 0x8, 0x3, 0xfffffffc, 0x3285b265, 0x7, 0x2a, 0xa883acfe, 0x8, 0x7, 0xfffff000, 0x9, 0x10001, 0x9, 0x1c, 0xe, 0x400, 0x3, 0x2, 0x80, 0x15, 0xf, 0x403, 0x6, 0x9, 0xfffff800, 0x1, 0x25]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r6, 0x5) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300)={0x23, 0x1, 0xae, 0x1}, 0x69) accept$phonet_pipe(r6, 0x0, 0x0) connect$phonet_pipe(r7, &(0x7f0000000000)={0x23, 0xff, 0x6, 0x7}, 0x10) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400300, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000002c0)={'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) connect$inet6(r9, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='!w', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="d57f", 0x2}], 0x1}}], 0x2, 0x4400c800) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0x9c4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x4, 0x0, @multicast2, @multicast2}}}}) 35.367172461s ago: executing program 1 (id=2235): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/167, &(0x7f00000000c0)=0xa7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0), 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r5, 0xe0a) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) 34.9760336s ago: executing program 1 (id=2236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1409, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x4) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet6(0xa, 0x1, 0x100) 34.974877349s ago: executing program 3 (id=2237): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2, &(0x7f0000000200)=""/193, 0xc1}, 0x9}, {{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/52, 0x34}, {&(0x7f00000013c0)=""/136, 0x88}, {&(0x7f0000001480)=""/36, 0x24}, {&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/202, 0xca}, {&(0x7f0000002640)=""/122, 0x7a}, {&(0x7f00000026c0)=""/157, 0x9d}, {&(0x7f0000002780)=""/4096, 0x1000}], 0xa, &(0x7f0000003840)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004840)=@x25, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000048c0)=""/244, 0xf4}, {&(0x7f00000049c0)=""/228, 0xe4}, {&(0x7f0000004ac0)=""/220, 0xdc}], 0x3, &(0x7f0000004c00)=""/23, 0x17}, 0x80}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004c40)=""/250, 0xfa}, {&(0x7f0000004d40)=""/194, 0xc2}, {&(0x7f0000004e40)=""/167, 0xa7}], 0x3, &(0x7f0000004f40)=""/7, 0x7}, 0xffffffff}], 0x4, 0x80000000, &(0x7f0000005080)={0x77359400}) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000005200)={&(0x7f00000050c0), 0x10, &(0x7f00000051c0)={&(0x7f0000005140)={0x1, 0x0, 0x9, {r2, r3/1000+10000}, {0x77359400}, {0x0, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "d9b69fbc16aa03bfd68d3dc5f1f208614c31349ab0fe7175c1a1d7e3b5977a425572cd1efd71d9b2b9bc1c7832af461fcd17b4b76e9edb006ae27cf391883d20"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000810}, 0x8891) (async) sendmsg$can_bcm(r1, &(0x7f0000005200)={&(0x7f00000050c0), 0x10, &(0x7f00000051c0)={&(0x7f0000005140)={0x1, 0x0, 0x9, {r2, r3/1000+10000}, {0x77359400}, {0x0, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "d9b69fbc16aa03bfd68d3dc5f1f208614c31349ab0fe7175c1a1d7e3b5977a425572cd1efd71d9b2b9bc1c7832af461fcd17b4b76e9edb006ae27cf391883d20"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000810}, 0x8891) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005240)={0x0, @rand_addr, @local}, &(0x7f0000005280)=0xc) clock_gettime(0x0, &(0x7f0000005300)) (async) clock_gettime(0x0, &(0x7f0000005300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000005340)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000005440)={&(0x7f00000052c0)={0x1d, r4}, 0x10, &(0x7f0000005400)={&(0x7f0000005380)={0x6, 0x44a, 0x1000, {r5, r6/1000+60000}, {r7, r8/1000+60000}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x30, 0x0, 0x0, 0x0, "c459922555e0fa0251a4fb925fe9eb9fd1182fc04609ada846b85759a26fb6ae127d74ab502939780b1a6c79812bebab11df833a673e5c2ef8dceed65f425a65"}}, 0x80}, 0x1, 0x0, 0x0, 0x64050}, 0x4000000) (async) sendmsg$can_bcm(r1, &(0x7f0000005440)={&(0x7f00000052c0)={0x1d, r4}, 0x10, &(0x7f0000005400)={&(0x7f0000005380)={0x6, 0x44a, 0x1000, {r5, r6/1000+60000}, {r7, r8/1000+60000}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x30, 0x0, 0x0, 0x0, "c459922555e0fa0251a4fb925fe9eb9fd1182fc04609ada846b85759a26fb6ae127d74ab502939780b1a6c79812bebab11df833a673e5c2ef8dceed65f425a65"}}, 0x80}, 0x1, 0x0, 0x0, 0x64050}, 0x4000000) close(r1) sendto$inet(r1, &(0x7f0000005480)="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", 0x1000, 0x40000c0, &(0x7f0000006480)={0x2, 0x4e22, @remote}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f00000064c0)={0x1, 'veth1_to_bond\x00', {}, 0x7f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r10, &(0x7f00000065c0)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006580)={&(0x7f0000006540)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008094}, 0x24000004) (async) sendmsg$NFC_CMD_GET_SE(r10, &(0x7f00000065c0)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006580)={&(0x7f0000006540)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008094}, 0x24000004) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006600), 0xffffffffffffffff) r12 = accept4(r0, &(0x7f0000006640)=@ax25={{0x3, @rose}, [@rose, @null, @netrom, @rose, @null, @default, @rose, @rose]}, &(0x7f00000066c0)=0x80, 0x0) clock_gettime(0x4, &(0x7f0000006700)) getsockopt$inet6_mtu(r12, 0x29, 0x17, &(0x7f0000006740), &(0x7f0000006780)=0x4) socket(0x5, 0x1, 0x2) (async) r13 = socket(0x5, 0x1, 0x2) shutdown(r1, 0x0) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000006840)=@o_path={&(0x7f0000006800)='./file0\x00', 0x0, 0x0, r13}, 0x18) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000006b40)={0x17, 0x19, &(0x7f0000006880)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @ringbuf_query], &(0x7f0000006980)='GPL\x00', 0x50, 0x6, &(0x7f00000069c0)=""/6, 0x41000, 0x29, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000006a00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000006a40)={0x1, 0xd, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000006a80)=[0x1, r9, 0xffffffffffffffff], &(0x7f0000006ac0)=[{0x4, 0x4, 0x0, 0x7}, {0x4, 0x3, 0xe, 0x1}, {0x0, 0x3, 0x5, 0x6}, {0x1, 0x4, 0x6}, {0x4, 0x3, 0x2, 0x1}], 0x10, 0x3}, 0x94) sendmsg$nl_route(r12, &(0x7f0000006cc0)={&(0x7f00000067c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006c80)={&(0x7f0000006c00)=@bridge_dellink={0x64, 0x11, 0x200, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x30394, 0x20000}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r14}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r15}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_TXQLEN={0x8, 0xd, 0x7fff}, @IFLA_PHYS_SWITCH_ID={0x17, 0x24, "090430a2696036eebd961b47702c873b256da7"}]}, 0x64}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000011) r16 = socket$netlink(0x10, 0x3, 0x7) accept4(r16, &(0x7f0000006d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000006d80)=0x80, 0x80000) (async) r17 = accept4(r16, &(0x7f0000006d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000006d80)=0x80, 0x80000) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000006e80)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006e40)={&(0x7f0000006e00)={0x20, 0x3, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40) ioctl$XFS_IOC_EXCHANGE_RANGE(r12, 0x40285881, &(0x7f0000006ec0)={r13, 0x0, 0x7, 0x869, 0xffffffff, 0x1}) sendmsg$IPVS_CMD_GET_DAEMON(r12, &(0x7f0000006fc0)={&(0x7f0000006f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006f80)={&(0x7f0000006f40)={0x28, r11, 0x500, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xea}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0xc4) syz_genetlink_get_family_id$devlink(&(0x7f0000007040), r17) (async) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000007040), r17) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000072c0)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007280)={&(0x7f0000007080)={0x1c8, r18, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xffff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff9b}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x81}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6}, {0x8, 0x13, 0x5ea}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff5f8b}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xa}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0xc041) 34.358046077s ago: executing program 1 (id=2238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000500)="bc2854", 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 34.179191192s ago: executing program 3 (id=2239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0xc) (async) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xfffffffffffffcd4) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xfffffffffffffcd4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x6a, 0x1, 0x0, 0xc) (async) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x6a, 0x1, 0x0, 0xc) getsockopt$inet6_buf(r7, 0x29, 0x3d, &(0x7f00000000c0)=""/89, &(0x7f0000000140)=0x59) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000400)=0x6, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="64000000020605000000000000000000000000030e000300484fb672f90f6fa768337b9b4c4522686269746d61703a697000000005000400000000000900020073797a3100000000180007800c0001800800014000000000080006000000000005000500"], 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="64000000020605000000000000000000000000030e000300484fb672f90f6fa768337b9b4c4522686269746d61703a697000000005000400000000000900020073797a3100000000180007800c0001800800014000000000080006000000000005000500"], 0x64}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x4) 33.195103755s ago: executing program 3 (id=2240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = socket(0x1e, 0x4, 0x0) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x890}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) write$nbd(r3, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x39c, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) socket(0x1e, 0x4, 0x0) (async) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) (async) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x890}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) (async) write$nbd(r3, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x39c, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) 33.033758785s ago: executing program 1 (id=2241): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffff00, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2, 0x10}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x5, 0x0, 0x3, 'pptp\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x67, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x3d, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) socket$rds(0x15, 0x5, 0x0) (async) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffff00, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2, 0x10}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x5, 0x0, 0x3, 'pptp\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x67, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x3d, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) (async) 32.27378331s ago: executing program 1 (id=2242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x884) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 29.871969471s ago: executing program 3 (id=2243): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x11e, 0x66, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb92", 0x6a}], 0x5}], 0x1, 0x4814) recvmmsg(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000680)=""/246, 0xf6}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="394b457c13deb11b8026cc115e8df73f85b7f7226c2c0004c78390bf511b54f757f1ba002480cea8f7e3d2ca5fa57b145a83dff20c4e0eb324311511571197c195a1e391e3d6f61e3e41ac20dc8acbaaafa004095348d948561d191d91732a9a8666", 0x62) getpid() sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="13c000004000000008000a00", @ANYRES32=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x0) gettid() 22.477789556s ago: executing program 1 (id=2244): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40088c0}, 0x10) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9764fcb4fe45727e}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20080054}, 0x20044090) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02f9000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbfffc, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc434}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r8, 0x10e, 0xb, &(0x7f0000000240)=""/110, &(0x7f00000000c0)=0x6e) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 16.222100764s ago: executing program 3 (id=2245): r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x30, r4, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 5.681251157s ago: executing program 36 (id=2244): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40088c0}, 0x10) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9764fcb4fe45727e}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20080054}, 0x20044090) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02f9000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbfffc, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc434}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r8, 0x10e, 0xb, &(0x7f0000000240)=""/110, &(0x7f00000000c0)=0x6e) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 0s ago: executing program 37 (id=2245): r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x30, r4, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) kernel console output (not intermixed with test programs): cklog [ 169.434671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.445410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.599191][ T8301] xt_nfacct: accounting object `syz0' does not exist [ 169.726565][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.910305][ T8307] Bluetooth: MGMT ver 1.23 [ 169.966166][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 169.983399][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 170.023404][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.626'. [ 170.227160][ T8313] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 170.298325][ T8315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 170.361015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.441102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.449384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.458366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.761516][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.149098][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 171.196151][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 171.276461][ T8336] xt_nfacct: accounting object `syz0' does not exist [ 171.339775][ T8339] netlink: 'syz.3.637': attribute type 13 has an invalid length. [ 171.392252][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 171.554687][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.564506][ T8339] netlink: 'syz.3.637': attribute type 13 has an invalid length. [ 171.642885][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.657019][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 171.745045][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.809104][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.183794][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'. [ 172.201728][ T8365] netlink: 'syz.3.642': attribute type 4 has an invalid length. [ 173.374477][ T8406] xt_nfacct: accounting object `syz0' does not exist [ 173.399390][ T30] audit: type=1804 audit(1786050820.517:3): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.656" name="/newroot/131/cgroup.controllers" dev="tmpfs" ino=686 res=1 errno=0 [ 173.499949][ T30] audit: type=1800 audit(1786050820.567:4): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.656" name="cgroup.controllers" dev="tmpfs" ino=686 res=0 errno=0 [ 173.807874][ T8421] __nla_validate_parse: 3 callbacks suppressed [ 173.807894][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.659'. [ 173.906215][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 174.346080][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 174.521038][ C0] net_ratelimit: 19 callbacks suppressed [ 174.521058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.600910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.609193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.618877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.923573][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.182324][ T8464] xt_nfacct: accounting object `syz0' does not exist [ 175.432816][ T8467] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 175.561060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.642210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.650479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.660854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.804904][ T8477] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 175.967861][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.329390][ T8496] gretap0: entered promiscuous mode [ 176.360059][ T8496] vlan3: entered promiscuous mode [ 176.694299][ T8497] netlink: 165 bytes leftover after parsing attributes in process `syz.3.681'. [ 176.729618][ T8498] vlan3: entered promiscuous mode [ 176.888659][ T8500] syzkaller0: entered promiscuous mode [ 176.907448][ T8500] syzkaller0: entered allmulticast mode [ 177.249969][ T8529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.687'. [ 177.655827][ T8537] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 177.677345][ T8535] ip6tnl1: entered allmulticast mode [ 177.758209][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 177.791266][ T8539] netlink: 'syz.0.691': attribute type 7 has an invalid length. [ 178.032454][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'. [ 178.108385][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 178.895851][ T8586] netlink: 14 bytes leftover after parsing attributes in process `syz.3.702'. [ 179.197513][ T8599] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.706'. [ 179.236464][ T8599] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 179.363503][ T8599] bridge1: entered promiscuous mode [ 179.394313][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 179.424026][ T8599] bridge1: entered allmulticast mode [ 179.517937][ T8599] team0: Port device bridge1 added [ 179.586386][ T8609] bridge0: port 3(team0) entered blocking state [ 179.629763][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 179.667001][ T8609] bridge0: port 3(team0) entered disabled state [ 179.713918][ T8609] team0: entered allmulticast mode [ 179.721035][ C0] net_ratelimit: 20 callbacks suppressed [ 179.721051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.747746][ T8609] team_slave_0: entered allmulticast mode [ 179.778027][ T8609] team_slave_1: entered allmulticast mode [ 179.800963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.809331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.818723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.839707][ T8609] geneve1: entered allmulticast mode [ 179.896442][ T8609] team0: entered promiscuous mode [ 179.907974][ T8609] team_slave_0: entered promiscuous mode [ 179.935745][ T8609] team_slave_1: entered promiscuous mode [ 179.950190][ T8609] geneve1: entered promiscuous mode [ 179.958809][ T8609] bridge0: port 3(team0) entered blocking state [ 179.966419][ T8609] bridge0: port 3(team0) entered forwarding state [ 179.999813][ T8631] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 180.020824][ T8631] netlink: 208 bytes leftover after parsing attributes in process `syz.2.712'. [ 180.133851][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.168613][ T8624] team_slave_0 (unregistering): left promiscuous mode [ 180.183218][ T8624] team_slave_0 (unregistering): left allmulticast mode [ 180.194413][ T8624] team0: Port device team_slave_0 removed [ 180.538660][ T8648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.628475][ T8648] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 180.761068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.773847][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.718'. [ 180.840960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.849309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.858723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.112027][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 181.442460][ T8673] netlink: 'syz.0.723': attribute type 11 has an invalid length. [ 181.509648][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.723'. [ 182.026387][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.729'. [ 182.089411][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.729'. [ 182.164338][ T8694] netlink: 'syz.2.729': attribute type 32 has an invalid length. [ 182.175647][ T8701] netlink: 'syz.4.732': attribute type 30 has an invalid length. [ 182.187798][ T8699] netlink: 'syz.1.730': attribute type 5 has an invalid length. [ 182.448108][ T8711] : renamed from dummy0 (while UP) [ 182.898149][ T8726] bond0: entered promiscuous mode [ 182.911246][ T8726] bond_slave_0: entered promiscuous mode [ 182.943232][ T8726] bond_slave_1: entered promiscuous mode [ 183.036012][ T8726] gretap0: entered promiscuous mode [ 183.076689][ T8726] hsr1: entered promiscuous mode [ 184.353948][ T8780] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 184.450771][ T8780] netlink: 'syz.0.754': attribute type 2 has an invalid length. [ 184.498486][ T8780] netlink: 'syz.0.754': attribute type 2 has an invalid length. [ 184.593388][ T8784] x_tables: duplicate underflow at hook 3 [ 184.844430][ T30] audit: type=1804 audit(1786050831.957:5): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.759" name="/newroot/138/cgroup.controllers" dev="tmpfs" ino=725 res=1 errno=0 [ 184.887696][ T8793] netlink: 'syz.4.760': attribute type 10 has an invalid length. [ 184.921020][ C0] net_ratelimit: 26 callbacks suppressed [ 184.921039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.956015][ T30] audit: type=1800 audit(1786050831.957:6): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.759" name="cgroup.controllers" dev="tmpfs" ino=725 res=0 errno=0 [ 185.000869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.009148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.018492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.096079][ T8793] team0: Device veth0_macvtap failed to register rx_handler [ 185.401911][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.526840][ T8806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.801323][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.961119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.041034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.049398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.565450][ T8845] __nla_validate_parse: 7 callbacks suppressed [ 186.565468][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 186.616975][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 186.764525][ T8845] geneve2: entered promiscuous mode [ 186.793701][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 186.904728][ T8850] bridge0: entered promiscuous mode [ 186.947834][ T8850] bridge0: entered allmulticast mode [ 187.009811][ T8859] Cannot find add_set index 4 as target [ 187.122547][ T8839] bridge0: port 3(team0) entered disabled state [ 187.129115][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.262940][ T8874] tipc: Failed to remove unknown binding: 66,0,0/134353152:1610321981/1610321982 [ 187.289293][ T8875] netlink: 'syz.1.777': attribute type 21 has an invalid length. [ 187.332044][ T8875] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 187.347258][ T8877] netlink: 170676 bytes leftover after parsing attributes in process `syz.0.778'. [ 187.485452][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.780'. [ 187.757468][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 187.869347][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.900154][ T8891] bridge_slave_0 (unregistering): left allmulticast mode [ 187.910445][ T8891] bridge_slave_0 (unregistering): left promiscuous mode [ 187.925971][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.298013][ T8909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.787'. [ 189.307746][ T8909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.787'. [ 189.940553][ T8859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.121037][ C0] net_ratelimit: 21 callbacks suppressed [ 190.121054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.200910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.209186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.221972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.282956][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.368541][ T8925] syzkaller0: entered promiscuous mode [ 190.402444][ T8925] syzkaller0: entered allmulticast mode [ 190.494294][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 190.577123][ T8933] netlink: NAT attribute has 5 unknown bytes [ 190.604822][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.631553][ T8933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.773093][ T8941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.792032][ T8941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.036199][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 192.008744][ T8975] tipc: Enabling of bearer rejected, media not registered [ 192.043968][ T8980] tipc: Enabling of bearer rejected, media not registered [ 192.218754][ T8982] netlink: 516 bytes leftover after parsing attributes in process `syz.2.810'. [ 192.258787][ T8984] nftables ruleset with unbound set [ 192.541701][ T8990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.812'. [ 192.557171][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 192.644399][ T5644] Bluetooth: hci4: command 0x0405 tx timeout [ 193.014669][ T9003] netlink: 'syz.1.817': attribute type 8 has an invalid length. [ 193.359496][ T9013] netlink: 'syz.4.821': attribute type 16 has an invalid length. [ 193.391251][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.821'. [ 193.566542][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.822'. [ 193.610532][ T9021] netlink: 'syz.0.822': attribute type 7 has an invalid length. [ 193.656426][ T9021] netlink: 'syz.0.822': attribute type 8 has an invalid length. [ 193.715098][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 194.129160][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479463][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 194.820083][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 195.241368][ C0] net_ratelimit: 26 callbacks suppressed [ 195.241387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.320992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.400959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.409389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.418922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.804191][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.866201][ T9109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.943407][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 195.991294][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'. [ 196.264005][ T9124] netlink: 'syz.1.849': attribute type 8 has an invalid length. [ 196.280800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.345870][ T9124] netlink: 'syz.1.849': attribute type 2 has an invalid length. [ 196.362502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.386451][ T9124] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 196.436397][ T9124] netlink: 'syz.1.849': attribute type 2 has an invalid length. [ 196.441144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.483156][ T9124] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 196.552201][ T9124] netlink: 'syz.1.849': attribute type 2 has an invalid length. [ 197.285511][ T9161] __nla_validate_parse: 1 callbacks suppressed [ 197.285529][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 197.506331][ T9168] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 197.580796][ T9172] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.861'. [ 197.918921][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 197.948187][ T9176] bridge0: port 3(vlan3) entered blocking state [ 197.989525][ T9176] bridge0: port 3(vlan3) entered disabled state [ 198.016979][ T9176] vlan3: entered allmulticast mode [ 198.061166][ T9176] dummy0: entered allmulticast mode [ 198.119149][ T9176] vlan3: entered promiscuous mode [ 198.133297][ T9176] dummy0: entered promiscuous mode [ 198.179802][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 198.392754][ T9200] netlink: 9 bytes leftover after parsing attributes in process `syz.3.870'. [ 198.393135][ T9199] netlink: 9 bytes leftover after parsing attributes in process `syz.3.870'. [ 198.462773][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 198.539346][ T9199] gretap0: entered promiscuous mode [ 199.085161][ T9227] validate_nla: 1 callbacks suppressed [ 199.085198][ T9227] netlink: 'syz.4.881': attribute type 4 has an invalid length. [ 199.261706][ T9226] team0: No ports can be present during mode change [ 199.568429][ T9243] syzkaller0: entered promiscuous mode [ 199.582282][ T9243] syzkaller0: entered allmulticast mode [ 199.744739][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 200.012610][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 200.044111][ T9256] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 200.355880][ T9267] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 200.521060][ C0] net_ratelimit: 33 callbacks suppressed [ 200.521079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.545288][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.600871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.609187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.618754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.899529][ T9272] macvtap1: entered allmulticast mode [ 201.002610][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.015253][ T9281] macvtap2: entered allmulticast mode [ 201.159375][ T9288] bond3: (slave bridge3): making interface the new active one [ 201.174017][ T9302] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 201.198075][ T9288] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 201.214981][ T9302] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 201.561019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.640850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.649204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.658705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.300829][ T9339] __nla_validate_parse: 4 callbacks suppressed [ 202.300848][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 202.746166][ T9352] vlan4: entered allmulticast mode [ 202.763514][ T9352] bond0: entered allmulticast mode [ 202.768762][ T9352] bond_slave_0: entered allmulticast mode [ 202.785334][ T9352] bond_slave_1: entered allmulticast mode [ 203.128057][ T9367] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 203.207477][ T9367] bond4 (unregistering): Released all slaves [ 203.232545][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 203.667362][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 203.682275][ T9396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.929'. [ 203.933290][ T9405] netlink: 'syz.1.930': attribute type 39 has an invalid length. [ 204.021893][ T9408] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20003 [ 204.148774][ T9407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.933'. [ 204.220100][ T9406] netlink: 44 bytes leftover after parsing attributes in process `syz.2.933'. [ 204.405752][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 204.546950][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.936'. [ 204.562895][ T9425] netlink: 'syz.4.938': attribute type 11 has an invalid length. [ 205.168330][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'. [ 205.579711][ T9453] netlink: 'syz.0.946': attribute type 1 has an invalid length. [ 205.721110][ C0] net_ratelimit: 18 callbacks suppressed [ 205.721130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.800888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.809249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.819196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.960762][ T9459] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.030604][ T9459] bond4: (slave lo): Enslaving as an active interface with an up link [ 206.113993][ T9459] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 206.202761][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.293583][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.302316][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.314506][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 206.446680][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 206.453871][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 206.453898][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 206.459933][ T5646] Bluetooth: hci0: command 0x0406 tx timeout [ 206.761114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.841819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.256771][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.284594][ T9508] : renamed from bond0 (while UP) [ 207.305555][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.383719][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.458239][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.590750][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.616086][ T9516] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 207.658140][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.671844][ T9516] netlink: 'syz.0.965': attribute type 5 has an invalid length. [ 207.725566][ T9519] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 207.736166][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.800848][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.843257][ T9524] netlink: 'syz.4.968': attribute type 21 has an invalid length. [ 207.889957][ T9524] netlink: 'syz.4.968': attribute type 22 has an invalid length. [ 207.920682][ T9524] netlink: 'syz.4.968': attribute type 23 has an invalid length. [ 207.957138][ T9524] netlink: 'syz.4.968': attribute type 25 has an invalid length. [ 207.993437][ T9524] netlink: 'syz.4.968': attribute type 26 has an invalid length. [ 208.027325][ T9524] __nla_validate_parse: 2 callbacks suppressed [ 208.027341][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.968'. [ 208.148604][ T9534] veth5: entered allmulticast mode [ 208.180077][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 208.364163][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 208.430326][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 208.482513][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 208.506321][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 208.567321][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 208.585433][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 208.892253][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 208.950984][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 209.509127][ T9585] netlink: 'syz.4.982': attribute type 2 has an invalid length. [ 209.595082][ T9588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.921018][ C0] net_ratelimit: 33 callbacks suppressed [ 210.921038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.001516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.009957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.019582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.475012][ T9655] xt_nfacct: accounting object `syz0' does not exist [ 211.486827][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.718017][ T9661] ip6gre1: entered promiscuous mode [ 211.750677][ T9661] ip6gre1: entered allmulticast mode [ 211.858907][ T9664] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 211.872917][ T9664] bond0 (unregistering): Released all slaves [ 211.955863][ T9676] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 211.961613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.040972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.049163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.057512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.067622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.833299][ T9710] sctp: [Deprecated]: syz.1.1015 (pid 9710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.833299][ T9710] Use struct sctp_sack_info instead [ 212.888918][ T9706] xt_hashlimit: size too large, truncated to 1048576 [ 212.979857][ T9707] syzkaller1: entered promiscuous mode [ 213.031523][ T9725] __nla_validate_parse: 25 callbacks suppressed [ 213.031541][ T9725] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1015'. [ 213.093118][ T9707] syzkaller1: entered allmulticast mode [ 213.554503][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 214.305188][ T9758] bond4 (unregistering): Released all slaves [ 214.813008][ T9783] netlink: 'syz.1.1033': attribute type 21 has an invalid length. [ 214.968575][ T9783] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 214.998553][ T9783] bond0 (unregistering): Released all slaves [ 215.024704][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 215.053292][ T9791] netlink: 'syz.0.1035': attribute type 29 has an invalid length. [ 215.076761][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 215.175755][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 215.191891][ T9793] netlink: 'syz.0.1035': attribute type 29 has an invalid length. [ 215.233471][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 215.430224][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 215.631746][ T9801] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 215.775928][ T9801] bridge0: port 4(ipvlan3) entered blocking state [ 215.817566][ T9801] bridge0: port 4(ipvlan3) entered disabled state [ 215.844325][ T9801] ipvlan3: entered allmulticast mode [ 215.888809][ T9801] ipvlan3: left allmulticast mode [ 216.018942][ T9824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.065443][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.099129][ T9824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.122808][ C0] net_ratelimit: 19 callbacks suppressed [ 216.122825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.203053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.211427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.223075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.394680][ T9835] nbd: socks must be embedded in a SOCK_ITEM attr [ 216.681107][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.161006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.207562][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.240869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.249129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.258527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.094904][ T9895] __nla_validate_parse: 6 callbacks suppressed [ 218.094924][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'. [ 218.306149][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 218.321593][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 218.815642][ T5748] IPVS: starting estimator thread 0... [ 218.829028][ T9911] netlink: 'syz.0.1072': attribute type 1 has an invalid length. [ 218.907943][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 218.950828][ T9915] IPVS: using max 25 ests per chain, 60000 per kthread [ 219.215272][ T9925] bridge3: entered promiscuous mode [ 219.274532][ T9928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 219.313268][ T9925] bond4: (slave bridge3): making interface the new active one [ 219.365950][ T9925] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 219.682730][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 219.845295][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 219.869231][ T9946] netlink: 'syz.4.1081': attribute type 21 has an invalid length. [ 219.884899][ T9948] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1083'. [ 219.896331][ T9946] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1081'. [ 220.370352][ T9969] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 220.440259][ T9969] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 220.509427][ T9966] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 220.587676][ T9966] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 221.060575][ T9993] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1090'. [ 221.219246][ T9996] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 221.309998][ T9993] syzkaller0: entered promiscuous mode [ 221.321114][ C0] net_ratelimit: 23 callbacks suppressed [ 221.321131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.354433][ T9993] syzkaller0: entered allmulticast mode [ 221.400942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.409276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.419703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.962051][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.979975][T10023] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 222.033925][T10026] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1099'. [ 222.050515][T10028] nbd: must specify at least one socket [ 222.229742][T10032] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20003 [ 222.361176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.386613][T10044] openvswitch: netlink: IPv4 tun info is not correct [ 222.432417][T10041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.441439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.441798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.513092][T10041] netlink: 'syz.1.1102': attribute type 4 has an invalid length. [ 222.769946][T10060] sch_fq: defrate 0 ignored. [ 223.299071][T10088] __nla_validate_parse: 3 callbacks suppressed [ 223.299089][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1111'. [ 223.648761][T10092] nbd: must specify a device to reconfigure [ 223.683009][T10095] TCP: TCP_TX_DELAY enabled [ 223.729072][T10095] netlink: 'syz.4.1115': attribute type 58 has an invalid length. [ 223.793942][T10095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1115'. [ 223.919815][T10113] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1119'. [ 224.174343][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'. [ 224.336444][T10125] xt_nfacct: accounting object `syz0' does not exist [ 224.463021][T10131] netlink: 'syz.1.1126': attribute type 2 has an invalid length. [ 224.507818][T10131] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1126'. [ 224.557419][T10133] tipc: Can't bind to reserved service type 1 [ 225.011991][T10131] macsec1: entered promiscuous mode [ 225.479223][T10162] syzkaller0: entered promiscuous mode [ 225.491146][T10162] syzkaller0: entered allmulticast mode [ 225.706453][T10173] xt_nfacct: accounting object `syz0' does not exist [ 225.849986][T10178] syzkaller0: left promiscuous mode [ 225.874734][T10178] syzkaller0: left allmulticast mode [ 225.887129][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 226.600838][ C0] net_ratelimit: 21 callbacks suppressed [ 226.600868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.614944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.624485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.633441][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 226.799955][T10200] netlink: 'syz.0.1149': attribute type 1 has an invalid length. [ 227.633716][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.640989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.649378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.659162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.680930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.689279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.698667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.183832][T10199] vlan0: left allmulticast mode [ 229.189104][T10199] veth0_vlan: left allmulticast mode [ 229.194906][T10199] vlan0: left promiscuous mode [ 229.398980][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.489116][T10203] dvmrp1: entered allmulticast mode [ 229.499325][T10200] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 229.511856][ T3320] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.692234][ T1017] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.703114][T10226] xt_nfacct: accounting object `syz0' does not exist [ 229.707705][ T1017] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.745598][ T1017] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.965828][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 230.030178][T10225] netlink: 'syz.4.1153': attribute type 5 has an invalid length. [ 230.105399][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 230.155455][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 230.642447][T10249] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 230.980492][T10270] xt_nfacct: accounting object `syz0' does not exist [ 231.128965][T10272] pim6reg: entered allmulticast mode [ 231.171152][T10276] pim6reg: left allmulticast mode [ 231.529001][T10283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.543618][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 231.566180][T10283] bond5: entered promiscuous mode [ 231.573632][T10293] sctp: [Deprecated]: syz.1.1173 (pid 10293) Use of int in maxseg socket option. [ 231.573632][T10293] Use struct sctp_assoc_value instead [ 231.592951][T10283] bond5: entered allmulticast mode [ 231.606820][T10283] bond0: (slave bond5): Enslaving as an active interface with an up link [ 231.721087][ C0] net_ratelimit: 13 callbacks suppressed [ 231.721106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.738399][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.800863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.809145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.818620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.883404][T10294] xt_CT: No such helper "netbios-ns" [ 231.960270][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'. [ 232.298206][T10319] xt_nfacct: accounting object `syz0' does not exist [ 232.363677][T10312] netlink: 'syz.2.1179': attribute type 4 has an invalid length. [ 232.442857][T10323] netlink: 'syz.2.1179': attribute type 4 has an invalid length. [ 232.521606][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.761001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.841539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.849846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.859463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.922167][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 233.494940][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 233.874505][T10377] netlink: 'syz.4.1198': attribute type 39 has an invalid length. [ 234.486710][T10399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.511946][T10390] x_tables: duplicate underflow at hook 3 [ 234.598931][T10401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1204'. [ 234.715614][T10403] syzkaller0: entered promiscuous mode [ 234.736249][T10403] syzkaller0: entered allmulticast mode [ 234.874361][T10403] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 234.985948][T10403] tipc: Enabled bearer , priority 0 [ 235.066752][T10402] tipc: Resetting bearer [ 235.286360][T10402] tipc: Disabling bearer [ 235.734285][T10444] tunl0: entered promiscuous mode [ 235.845015][T10444] netlink: 'syz.1.1215': attribute type 3 has an invalid length. [ 235.950688][T10444] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1215'. [ 236.921070][ C0] net_ratelimit: 18 callbacks suppressed [ 236.921091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.935583][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.000956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.009263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.018518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.483536][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.584737][T10469] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1223'. [ 237.961036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.969344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.040861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.049136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.048528][T10491] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1227'. [ 239.417733][T10491] syzkaller0: entered promiscuous mode [ 239.433210][T10491] syzkaller0: entered allmulticast mode [ 239.488009][T10503] macsec0: entered promiscuous mode [ 239.602975][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1230'. [ 242.121006][ C0] net_ratelimit: 18 callbacks suppressed [ 242.121026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.134868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.200894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.209199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.218825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.161048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.174636][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.240872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.249123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.259456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.612068][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1234'. [ 246.407175][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 247.275006][ T3320] net_ratelimit: 17 callbacks suppressed [ 247.275028][ T3320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.321083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.334549][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.400977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.409223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.466901][T10564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1243'. [ 247.616466][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 247.692803][T10565] openvswitch: netlink: Key type 71 is out of range max 32 [ 248.361017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.372394][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.440847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.449115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.663340][T10604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1254'. [ 249.774253][T10604] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 249.816122][T10604] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1254'. [ 249.890428][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 249.920547][T10609] netlink: 'syz.0.1255': attribute type 21 has an invalid length. [ 250.021008][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1255'. [ 250.230576][T10611] netlink: 'syz.3.1256': attribute type 49 has an invalid length. [ 250.506610][ T30] audit: type=1804 audit(1786050897.627:7): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1257" name="/newroot/255/cgroup.controllers" dev="tmpfs" ino=1313 res=1 errno=0 [ 250.647882][ T30] audit: type=1800 audit(1786050897.657:8): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1257" name="cgroup.controllers" dev="tmpfs" ino=1313 res=0 errno=0 [ 250.738422][T10622] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 250.774869][T10622] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 251.585189][T10634] xt_nfacct: accounting object `syz0' does not exist [ 251.896335][T10643] netlink: 'syz.1.1266': attribute type 83 has an invalid length. [ 252.193538][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 252.252270][T10654] netlink: 'syz.2.1269': attribute type 7 has an invalid length. [ 252.362229][T10654] netlink: 'syz.2.1269': attribute type 8 has an invalid length. [ 252.492336][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 252.520982][ C0] net_ratelimit: 23 callbacks suppressed [ 252.521001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.584896][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.597526][T10658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.601300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.614689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.624416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.870736][T10659] bridge6: entered promiscuous mode [ 252.943290][T10659] bridge6: entered allmulticast mode [ 253.089911][ T3298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.144549][T10659] team0: Port device bridge6 added [ 253.251135][T10662] bridge0: port 4(team0) entered blocking state [ 253.341452][T10662] bridge0: port 4(team0) entered disabled state [ 253.449031][T10662] team0: entered allmulticast mode [ 253.497105][T10662] team_slave_0: entered allmulticast mode [ 253.560964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.572378][T10662] team_slave_1: entered allmulticast mode [ 253.640938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.649191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.686516][T10662] team0: entered promiscuous mode [ 253.758911][T10662] team_slave_0: entered promiscuous mode [ 253.803255][T10662] team_slave_1: entered promiscuous mode [ 254.023050][T10665] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 255.568539][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.735645][T10726] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 256.843575][ T3320] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 257.641083][ C0] net_ratelimit: 19 callbacks suppressed [ 257.641101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.665512][T10752] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 257.720998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.733859][ T36] wlan1: Trigger new scan to find an IBSS to join [ 257.800889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.809161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.818746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.883165][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.895359][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 258.680933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.761067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.780820][ T3014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.797453][T10756] No such timeout policy " " [ 258.840862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.845674][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 259.959799][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1300'. [ 260.943688][T10787] syzkaller0: entered promiscuous mode [ 260.954361][T10787] syzkaller0: entered allmulticast mode [ 261.012583][T10764] syzkaller1: entered promiscuous mode [ 261.035789][T10764] syzkaller1: entered allmulticast mode [ 261.226595][T10791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1305'. [ 261.342467][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1305'. [ 261.427517][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 261.675325][T10807] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 261.721784][ T6434] wlan1: Trigger new scan to find an IBSS to join [ 261.753539][T10807] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 261.779077][T10807] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 261.816904][T10807] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 261.862614][T10807] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 262.269766][T10817] netlink: 'syz.3.1311': attribute type 32 has an invalid length. [ 262.414905][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 262.596413][T10817] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 262.777921][T10829] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 262.832151][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.920984][ C0] net_ratelimit: 22 callbacks suppressed [ 262.921003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.000848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.009111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.020438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.099059][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 263.243089][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.317108][T10843] pim6reg: entered allmulticast mode [ 263.961055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.040943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.049293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.057962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.344124][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.707065][T10867] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 264.732447][T10867] team0: Device ipvlan2 is already an upper device of the team interface [ 266.057546][T10880] xt_hashlimit: size too large, truncated to 1048576 [ 266.082569][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1329'. [ 266.104623][T10880] xt_hashlimit: max too large, truncated to 1048576 [ 266.141944][T10880] xt_hashlimit: invalid rate [ 266.337115][T10889] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1332'. [ 266.746530][T10902] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 267.009159][T10911] netlink: 'syz.3.1336': attribute type 8 has an invalid length. [ 267.404037][T10902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.583719][T10908] bond2: (slave geneve2): making interface the new active one [ 267.675386][T10908] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 268.040897][ C0] net_ratelimit: 23 callbacks suppressed [ 268.040919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.120953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.201268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.209578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.218996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.336801][T10903] syzkaller0: entered promiscuous mode [ 268.357255][T10903] syzkaller0: entered allmulticast mode [ 268.367001][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.375933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.533200][ T3320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.682964][ T3320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.160974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.326888][ C0] net_ratelimit: 21 callbacks suppressed [ 273.326908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.401028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.409328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.418837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.450437][ T3014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.139006][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.280945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.361039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.440845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.449099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.855357][T10934] gre0: left promiscuous mode [ 276.982850][T10934] gretap0: left promiscuous mode [ 277.121841][T10934] sit0: left promiscuous mode [ 277.354558][T10934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.430730][T10934] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.617918][T10934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.960512][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 278.000064][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 278.052337][T10934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.104358][T10934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.195048][T10934] veth1_vlan: left promiscuous mode [ 278.236447][T10934] veth0_vlan: left promiscuous mode [ 278.267074][T10934] veth0_vlan: entered promiscuous mode [ 278.324425][T10934] veth1_vlan: entered promiscuous mode [ 278.381797][T10934] veth1_macvtap: left promiscuous mode [ 278.415256][T10934] veth0_macvtap: left promiscuous mode [ 278.443051][T10934] veth0_macvtap: entered promiscuous mode [ 278.464583][T10934] veth1_macvtap: entered promiscuous mode [ 278.521302][ C0] net_ratelimit: 24 callbacks suppressed [ 278.521320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.563726][T10934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.594359][T10934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.601693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.601812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.612083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.679504][T10934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.772503][T10934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.884366][T10934] vlan0: entered allmulticast mode [ 278.904144][T10934] veth0_vlan: entered allmulticast mode [ 278.942645][T10934] vlan0: entered promiscuous mode [ 278.958133][T10934] macvtap1: left promiscuous mode [ 278.971179][T10934] vlan0: left promiscuous mode [ 279.251954][ T3014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.299201][T10934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.331519][T10934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.402309][T10934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.453058][T10934] geneve2: left promiscuous mode [ 279.473975][T10934] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 279.531412][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.561164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.565432][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.640855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.649200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.658522][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.659163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.665722][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.912170][ T6434] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.940752][ T6434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.337615][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 280.771494][T10990] bridge4: entered promiscuous mode [ 280.880336][T10990] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 280.994474][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.159889][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.182732][T11012] x_tables: unsorted entry at hook 2 [ 281.677919][T11005] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1359'. [ 282.104596][ T6422] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.207149][T11023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1363'. [ 282.270810][ T6422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.012877][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 283.640791][ C0] net_ratelimit: 23 callbacks suppressed [ 283.640826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.721237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.801522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.809863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.821783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.974819][ T3320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.476923][T11063] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 284.680928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.762949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.840938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.849401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.186186][T11073] pim6reg527: entered allmulticast mode [ 285.368380][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 286.636776][T11102] pimreg: entered allmulticast mode [ 286.856994][T11105] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1380'. [ 288.363808][T11078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.920969][ C0] net_ratelimit: 23 callbacks suppressed [ 288.920985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.000946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.009246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.018998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.054731][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 289.241392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.251329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.732039][ T3320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.794747][T11161] ipt_REJECT: TCP_RESET invalid for non-tcp [ 289.960995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.040936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.049229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.865718][T11193] sock: sock_timestamping_bind_phc: sock not bind to device [ 291.057933][T11199] netlink: 'syz.4.1402': attribute type 21 has an invalid length. [ 291.111930][T11199] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 291.524678][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 291.696247][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1404'. [ 291.725958][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 291.842053][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1404'. [ 292.242148][T11208] macsec1: entered promiscuous mode [ 292.364660][T11208] dummy0: entered promiscuous mode [ 292.457329][T11208] macsec1: entered allmulticast mode [ 292.580842][T11208] dummy0: entered allmulticast mode [ 292.810131][T11208] dummy0: left allmulticast mode [ 293.108218][T11210] macsec1: entered promiscuous mode [ 293.123654][T11210] macsec1: entered allmulticast mode [ 293.135452][T11210] dummy0: entered allmulticast mode [ 293.190709][T11210] dummy0: left allmulticast mode [ 293.444635][ T5636] dummy0: left promiscuous mode [ 293.969978][ T6416] net_ratelimit: 18 callbacks suppressed [ 293.970000][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.095233][ T5289] veth1_vlan: left promiscuous mode [ 294.121009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.201101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.209511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.218969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.308951][T11250] netlink: 'syz.4.1413': attribute type 4 has an invalid length. [ 294.331949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.379321][T11251] geneve3: entered promiscuous mode [ 294.434151][T11255] netlink: 'syz.4.1413': attribute type 4 has an invalid length. [ 294.516299][ T24] hid-generic 0005:15C1:5506.0001: collection stack underflow [ 294.589282][ T24] hid-generic 0005:15C1:5506.0001: item 0 2 0 12 parsing failed [ 294.659428][ T24] hid-generic 0005:15C1:5506.0001: probe with driver hid-generic failed with error -22 [ 294.738776][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.201598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.241595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.250559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.300206][ T3288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.558386][T11268] IPv6: sit1: Disabled Multicast RS [ 296.626277][T11298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 298.238562][T11329] ip6t_srh: unknown srh invflags 4000 [ 298.307125][T11333] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1430'. [ 298.826767][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 298.960313][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 299.125167][T11353] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 299.176338][T11343] xt_nfacct: accounting object `syz0' does not exist [ 299.372584][ T99] net_ratelimit: 14 callbacks suppressed [ 299.372602][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.400957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.409186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.573965][T11353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.731933][ T6422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.076622][T11378] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 300.122069][T11378] netlink: 'syz.4.1440': attribute type 2 has an invalid length. [ 300.200310][T11374] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.233914][T11378] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 300.235334][T11386] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.263746][T11391] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 300.268247][T11387] Cannot find add_set index 4 as target [ 300.298736][T11374] bond0: (slave bond8): Enslaving as an active interface with an up link [ 300.318189][T11378] netlink: 'syz.4.1440': attribute type 2 has an invalid length. [ 300.380300][T11378] netlink: 'syz.4.1440': attribute type 2 has an invalid length. [ 301.192447][T11401] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 301.504384][T11409] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 302.172521][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 304.351811][T11456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1458'. [ 305.583200][T11492] x_tables: duplicate underflow at hook 2 [ 305.907666][T11492] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 305.964364][T11498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1471'. [ 306.108323][T11498] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.447548][T11498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'. [ 307.350715][T11518] xt_bpf: check failed: parse error [ 307.861599][T11531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1475'. [ 310.437804][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1489'. [ 310.891418][T11593] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1493'. [ 312.950619][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 314.932038][T11679] netlink: 768 bytes leftover after parsing attributes in process `syz.4.1513'. [ 315.275981][T11689] bond0: entered promiscuous mode [ 315.282650][T11692] netlink: 'syz.0.1515': attribute type 3 has an invalid length. [ 315.365650][T11689] bond_slave_0: entered promiscuous mode [ 315.422668][T11689] bond_slave_1: entered promiscuous mode [ 315.441789][T11692] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 315.554067][T11692] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1515'. [ 315.581073][T11689] batadv0: entered promiscuous mode [ 315.662803][T11689] debugfs: 'hsr1' already exists in 'hsr' [ 315.693284][T11689] Cannot create hsr debugfs directory [ 315.736037][T11697] openvswitch: netlink: Missing key (keys=40, expected=100) [ 315.745478][T11689] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 315.789277][T11689] bond0: left promiscuous mode [ 315.839038][T11689] bond_slave_0: left promiscuous mode [ 315.867336][T11689] bond_slave_1: left promiscuous mode [ 315.942201][T11689] batadv0: left promiscuous mode [ 316.149632][T11697] bond0: option miimon: invalid value (18446744071829782528) [ 316.175566][T11697] bond0: option miimon: allowed values 0 - 2147483647 [ 316.488908][T11711] netlink: 'syz.0.1521': attribute type 63 has an invalid length. [ 316.534499][T11711] netlink: 'syz.0.1521': attribute type 63 has an invalid length. [ 316.818305][T11713] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1522'. [ 316.963960][T11723] netlink: 'syz.1.1525': attribute type 2 has an invalid length. [ 317.007738][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.135141][T11728] netlink: 'syz.1.1525': attribute type 6 has an invalid length. [ 317.943842][T11739] bridge5: entered promiscuous mode [ 317.992777][T11739] bridge5: entered allmulticast mode [ 318.089470][T11739] team0: Port device bridge5 added [ 318.176253][T11746] bridge0: port 1(team0) entered blocking state [ 318.219409][T11746] bridge0: port 1(team0) entered disabled state [ 318.275549][T11746] team0: entered allmulticast mode [ 318.338440][T11746] team_slave_0: entered allmulticast mode [ 318.393126][T11746] team_slave_1: entered allmulticast mode [ 318.418653][T11746] team0: entered promiscuous mode [ 318.430791][T11746] team_slave_0: entered promiscuous mode [ 318.530910][T11746] team_slave_1: entered promiscuous mode [ 318.597496][T11746] bridge0: port 1(team0) entered blocking state [ 318.604007][T11746] bridge0: port 1(team0) entered forwarding state [ 318.874827][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 319.574838][T11767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.208620][T11792] netlink: 'syz.1.1539': attribute type 63 has an invalid length. [ 320.289094][T11794] netlink: 'syz.1.1539': attribute type 63 has an invalid length. [ 321.268660][T11809] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 321.281689][T11809] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 321.309972][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 321.377441][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 321.572464][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 321.705053][T11817] netlink: 'syz.2.1546': attribute type 1 has an invalid length. [ 321.911981][T11827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1546'. [ 322.113028][T11817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.167290][T11839] x_tables: unsorted underflow at hook 4 [ 322.312468][T11842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1546'. [ 322.377239][T11834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1546'. [ 322.515300][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 322.573021][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 322.640245][T11817] bond6: (slave geneve2): making interface the new active one [ 322.746576][T11817] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 323.489693][T11860] netlink: 'syz.4.1555': attribute type 83 has an invalid length. [ 323.772108][T11864] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 323.781134][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 324.175836][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 324.634039][T11879] veth0_macvtap: left promiscuous mode [ 326.818429][T11914] team0: Device is already in use. [ 326.880392][T11922] netlink: 'syz.2.1570': attribute type 12 has an invalid length. [ 326.905879][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'. [ 326.933835][T11922] netlink: 'syz.2.1570': attribute type 29 has an invalid length. [ 326.993228][T11925] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1569'. [ 327.031127][T11922] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1570'. [ 327.127509][T11922] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1570'. [ 327.245305][ T6422] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.287157][T11933] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1573'. [ 327.530180][T11941] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 327.762278][T11945] netlink: 'syz.4.1576': attribute type 3 has an invalid length. [ 327.785535][T11945] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1576'. [ 327.867541][T11945] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1576'. [ 328.507433][T11963] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 328.621849][T11963] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 328.719550][T11967] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 329.249822][T11986] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 330.416473][T12011] ip6gre2: entered allmulticast mode [ 330.490240][T12017] block nbd0: not configured, cannot reconfigure [ 330.564647][ T3320] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 331.358199][T12035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.422505][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 331.592372][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1599'. [ 332.512626][T12037] team0 (unregistering): Port device team_slave_0 removed [ 332.606171][T12037] team0 (unregistering): Port device team_slave_1 removed [ 332.696345][T12038] syzkaller0: entered promiscuous mode [ 332.714750][T12038] syzkaller0: entered allmulticast mode [ 333.050297][T12063] netlink: 'syz.1.1603': attribute type 5 has an invalid length. [ 333.123341][T12063] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1603'. [ 333.219973][T12063] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 333.268563][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'. [ 333.293846][T12066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 333.838144][T12073] netlink: 'syz.3.1606': attribute type 14 has an invalid length. [ 335.160947][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 335.847784][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 336.633581][T12109] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1614'. [ 337.431423][T12124] netlink: 'syz.4.1617': attribute type 8 has an invalid length. [ 337.652120][T12131] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 338.202791][T12141] gre0: entered promiscuous mode [ 338.213608][T12141] gre0: entered allmulticast mode [ 339.842930][T12175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1635'. [ 339.875819][T12176] netlink: 'syz.2.1634': attribute type 12 has an invalid length. [ 340.219506][T12180] syzkaller0: left promiscuous mode [ 340.241012][T12180] syzkaller0: left allmulticast mode [ 340.383392][T12180] syzkaller0: entered promiscuous mode [ 340.411408][T12180] syzkaller0: entered allmulticast mode [ 340.560797][T12191] syzkaller0: entered promiscuous mode [ 340.584784][T12191] syzkaller0: entered allmulticast mode [ 341.408239][ T5733] page_pool_release_retry() stalled pool shutdown: id 57, 1 inflight 60 sec [ 341.453278][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 341.511386][T12205] netlink: 'syz.1.1643': attribute type 10 has an invalid length. [ 341.511828][T12207] sctp: [Deprecated]: syz.4.1644 (pid 12207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.511828][T12207] Use struct sctp_sack_info instead [ 341.563556][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 341.632176][T12207] sctp: [Deprecated]: syz.4.1644 (pid 12207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.632176][T12207] Use struct sctp_sack_info instead [ 342.139353][T12205] geneve2: entered promiscuous mode [ 342.176625][T12205] geneve2: entered allmulticast mode [ 342.388547][T12216] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 343.466277][T12236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.497765][T12238] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1653'. [ 344.077498][T12260] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 344.095127][T12255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1656'. [ 344.520903][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.295420][T12285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1664'. [ 345.477067][T12289] netlink: 'syz.1.1666': attribute type 58 has an invalid length. [ 345.527348][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'. [ 345.622132][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 346.202785][T12306] IPVS: length: 8 != 1152 [ 346.644579][T12312] nbd: must specify an index to disconnect [ 346.813984][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1671'. [ 347.927433][T12334] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 348.493762][T12334] 8021q: adding VLAN 0 to HW filter on device bond7 [ 348.512381][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 349.166561][T12359] nbd: must specify a size in bytes for the device [ 349.183193][T12362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1685'. [ 349.473832][T12375] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1687'. [ 349.563987][T12377] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 349.765377][T12380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1688'. [ 349.953776][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 350.056912][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 350.609510][T12384] bridge6: entered promiscuous mode [ 350.697179][T12384] bond4: (slave bridge6): making interface the new active one [ 350.730089][T12384] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 351.177842][T12407] SET target dimension over the limit! [ 351.220145][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 351.261005][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1694'. [ 351.325295][T12413] netlink: 'syz.0.1697': attribute type 1 has an invalid length. [ 351.427147][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 352.195714][ T6422] tipc: Subscription rejected, illegal request [ 352.455833][T12431] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1701'. [ 352.634101][T12426] pimreg: entered allmulticast mode [ 354.738992][T12464] geneve3: entered promiscuous mode [ 354.761296][T12464] geneve3: entered allmulticast mode [ 354.814271][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 354.846116][ T6424] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 354.935547][ T6424] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 354.974058][ T6424] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 355.186849][T12474] __nla_validate_parse: 1 callbacks suppressed [ 355.186953][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1713'. [ 355.398921][ T30] audit: type=1800 audit(1786051002.517:9): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1714" name="memory.events" dev="tmpfs" ino=1798 res=0 errno=0 [ 355.522785][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 356.358570][T12491] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 356.416399][T12491] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1718'. [ 356.490271][T12491] netlink: 'syz.3.1718': attribute type 2 has an invalid length. [ 356.557483][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 357.025632][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1721'. [ 358.484704][T12507] syzkaller0: entered promiscuous mode [ 358.558131][T12507] syzkaller0: entered allmulticast mode [ 359.244595][ T6416] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 362.449018][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.391761][T12535] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 363.895363][T12543] netlink: 'syz.1.1731': attribute type 1 has an invalid length. [ 368.768307][T12543] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 369.652828][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1733'. [ 370.252268][T12564] bond5: option min_links: invalid value (18446744073709551614) [ 370.291553][T12564] bond5: option min_links: allowed values 0 - 2147483647 [ 370.323488][T12569] netlink: 'syz.3.1737': attribute type 1 has an invalid length. [ 370.411037][T12569] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1737'. [ 370.439848][T12564] bond5 (unregistering): Released all slaves [ 371.047891][T12592] xt_ecn: cannot match TCP bits for non-tcp packets [ 371.915856][T12612] netlink: zone id is out of range [ 371.939051][T12612] netlink: del zone limit has 4 unknown bytes [ 372.006032][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'. [ 372.068769][T12612] block nbd0: Unsupported socket: should be TCP or UNIX. [ 373.218229][T12639] netlink: Unknown conntrack attr (type=32, max=9) [ 373.282106][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 375.735176][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 376.928653][T12720] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 377.051611][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'. [ 377.246097][T12724] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1771'. [ 377.763884][T12720] 8021q: adding VLAN 0 to HW filter on device bond10 [ 377.848630][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1775'. [ 377.946302][T12727] bond10: (slave geneve3): making interface the new active one [ 377.985958][T12727] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 378.446539][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.559097][T12755] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 378.843759][T12761] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1782'. [ 379.542709][T12780] netlink: 'syz.3.1785': attribute type 1 has an invalid length. [ 380.160547][T12780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 380.355697][T12786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.573137][T12791] netlink: 'syz.0.1787': attribute type 17 has an invalid length. [ 380.603706][T12786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.651697][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 380.718461][T12786] bond6: (slave batadv_slave_0): Enslaving as a backup interface with an up link [ 380.728500][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 380.808684][T12795] IPVS: set_ctl: invalid protocol: 94 172.30.2.1:20003 [ 381.137601][T12792] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.145241][T12792] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.798525][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 382.195780][T12823] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1796'. [ 382.266234][T12824] team0: Device is already in use. [ 382.293273][T12823] 8021q: VLANs not supported on ip_vti0 [ 382.306603][T12828] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1796'. [ 382.667965][T12836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1800'. [ 383.596320][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 383.681405][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 383.793012][T12848] netlink: 'syz.3.1803': attribute type 12 has an invalid length. [ 383.927459][T12848] netlink: 'syz.3.1803': attribute type 11 has an invalid length. [ 384.146625][T12859] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1804'. [ 384.608888][T12873] netlink: 'syz.0.1809': attribute type 3 has an invalid length. [ 384.641516][T12871] netlink: 'syz.3.1810': attribute type 2 has an invalid length. [ 384.828875][T12876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.599720][T12897] xt_l2tp: v2 doesn't support IP mode [ 386.896474][T12895] macsec1: entered promiscuous mode [ 387.088101][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 387.479966][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 387.675364][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.143564][T12934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.099753][T12947] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 389.161502][T12947] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1832'. [ 389.793575][T12962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.412895][T12967] ip6gre3: entered allmulticast mode [ 390.452210][T12970] netlink: 'syz.1.1839': attribute type 2 has an invalid length. [ 390.477329][T12972] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 390.512134][T12968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1837'. [ 390.544417][T12970] pim6reg: entered allmulticast mode [ 391.233492][T12978] erspan0: entered promiscuous mode [ 391.260596][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.327372][T12978] erspan0: entered allmulticast mode [ 392.431654][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1846'. [ 394.976032][T13063] lo speed is unknown, defaulting to 1000 [ 395.122279][T13063] lo speed is unknown, defaulting to 1000 [ 395.210171][T13063] lo speed is unknown, defaulting to 1000 [ 396.573066][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 397.410107][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1878'. [ 398.112901][T13063] infiniband syz2: set active [ 398.157067][ T5636] lo speed is unknown, defaulting to 1000 [ 398.171072][T13063] infiniband syz2: added lo [ 398.404191][T13063] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 398.592035][T13063] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 398.633618][T13063] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 398.982469][T13063] RDS/IB: syz2: added [ 399.005687][T13063] smc: adding ib device syz2 with port count 1 [ 399.049070][T13063] smc: ib device syz2 port 1 has no pnetid [ 399.169963][ T5763] lo speed is unknown, defaulting to 1000 [ 399.213070][T13063] lo speed is unknown, defaulting to 1000 [ 399.295748][T13151] netlink: ct family unspecified [ 399.329272][T13151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.561279][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.521869][T13162] netlink: Invalid conntrack timeout [ 400.530484][T13164] bond4: (slave lo): Releasing backup interface [ 400.551800][T13162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.627473][T13164] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 400.687431][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 400.778670][T13164] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.342344][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 401.460900][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 401.668411][T13063] lo speed is unknown, defaulting to 1000 [ 402.475297][T13202] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1904'. [ 402.533351][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'. [ 402.868859][T13209] raw_sendmsg: syz.0.1905 forgot to set AF_INET. Fix it! [ 403.022993][T13203] bridge0: port 4(team0) entered blocking state [ 403.029466][T13203] bridge0: port 4(team0) entered listening state [ 403.036179][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.043390][T13203] bridge0: port 2(bridge_slave_1) entered listening state [ 403.050862][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.058076][T13203] bridge0: port 1(bridge_slave_0) entered listening state [ 403.530324][T13214] Cannot find del_set index 4 as target [ 403.576000][T13202] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 403.843255][T13063] lo speed is unknown, defaulting to 1000 [ 404.071637][T13224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1910'. [ 404.190117][T13225] netlink: 'syz.0.1910': attribute type 3 has an invalid length. [ 404.665400][T13239] sctp: [Deprecated]: syz.2.1914 (pid 13239) Use of int in max_burst socket option deprecated. [ 404.665400][T13239] Use struct sctp_assoc_value instead [ 405.324440][T13247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'. [ 405.932503][T13063] lo speed is unknown, defaulting to 1000 [ 407.122090][T13268] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 407.425907][T13268] bond11 (unregistering): Released all slaves [ 407.595809][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1923'. [ 407.702253][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 407.824562][T13277] netlink: 'syz.2.1925': attribute type 5 has an invalid length. [ 407.910569][T13277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1925'. [ 408.025208][T13063] lo speed is unknown, defaulting to 1000 [ 409.589503][T13302] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 410.144017][T13317] bond0: Device is already in use. [ 410.227012][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1938'. [ 410.325781][T13320] netlink: 'syz.3.1938': attribute type 7 has an invalid length. [ 410.386782][T13320] netlink: 'syz.3.1938': attribute type 8 has an invalid length. [ 410.472092][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 410.976896][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.114869][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.125631][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.148546][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.181886][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.793078][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1943'. [ 411.867207][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 412.595141][T13363] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1946'. [ 412.645874][T13364] openvswitch: netlink: Message has 8 unknown bytes. [ 412.738646][T13364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.933205][T13355] 8021q: adding VLAN 0 to HW filter on device bond12 [ 413.214169][T13355] bond12 (unregistering): Released all slaves [ 413.321857][ T50] Bluetooth: hci5: command tx timeout [ 414.166344][T13369] tipc: Enabling of bearer rejected, failed to enable media [ 414.328830][T13388] netlink: 'syz.3.1951': attribute type 5 has an invalid length. [ 415.145157][T13409] sock: sock_set_timeout: `syz.0.1956' (pid 13409) tries to set negative timeout [ 415.187750][T13326] lo speed is unknown, defaulting to 1000 [ 415.222101][T13410] openvswitch: netlink: Missing valid actions attribute. [ 415.286259][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.401230][ T50] Bluetooth: hci5: command tx timeout [ 415.603358][T13413] bond8: Unable to set up delay as MII monitoring is disabled [ 415.724239][T13413] bond8 (unregistering): Released all slaves [ 417.277861][T13442] netlink: 'syz.0.1968': attribute type 2 has an invalid length. [ 417.319312][T13442] netlink: 'syz.0.1968': attribute type 2 has an invalid length. [ 417.492496][ T50] Bluetooth: hci5: command tx timeout [ 417.790365][T13451] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1969'. [ 417.979444][T13461] netlink: zone id is out of range [ 418.113425][T13461] netlink: zone id is out of range [ 418.185278][T13461] netlink: zone id is out of range [ 418.346720][T13461] netlink: zone id is out of range [ 418.487776][T13471] SET target dimension over the limit! [ 418.558433][T13461] netlink: zone id is out of range [ 418.607400][T13461] netlink: zone id is out of range [ 418.689887][T13461] netlink: zone id is out of range [ 418.954677][T13473] tunl0: entered promiscuous mode [ 419.192780][T13473] netlink: 'syz.0.1974': attribute type 4 has an invalid length. [ 419.288768][T13473] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1974'. [ 419.360216][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 419.429800][T13474] netlink: 'syz.0.1974': attribute type 4 has an invalid length. [ 419.552106][T13474] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1974'. [ 419.571834][ T50] Bluetooth: hci5: command tx timeout [ 420.033465][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 420.263609][T13487] IPVS: Unknown mcast interface: vcan0 [ 420.719176][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 420.868592][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 421.144314][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.212753][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.275378][T13326] bridge_slave_0: entered allmulticast mode [ 421.338898][T13326] bridge_slave_0: entered promiscuous mode [ 421.397852][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.434614][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.466849][T13326] bridge_slave_1: entered allmulticast mode [ 421.528675][T13326] bridge_slave_1: entered promiscuous mode [ 421.904449][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.956851][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.137409][T13326] team0: Port device team_slave_0 added [ 422.166689][T13326] team0: Port device team_slave_1 added [ 422.289342][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.310661][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.370659][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.406001][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.430680][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.480662][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.750370][T13326] hsr_slave_0: entered promiscuous mode [ 422.800520][T13326] hsr_slave_1: entered promiscuous mode [ 422.823353][T13326] debugfs: 'hsr0' already exists in 'hsr' [ 422.829133][T13326] Cannot create hsr debugfs directory [ 423.252093][ T6424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.626057][T13326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.667871][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.693905][T13326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.763221][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.796468][T13326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.873948][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.936788][T13326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 424.001791][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.822424][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.960334][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.098331][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.105711][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.185759][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.193003][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.831860][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.938410][T13326] veth0_vlan: entered promiscuous mode [ 428.002865][T13326] veth1_vlan: entered promiscuous mode [ 428.180777][T13326] veth0_macvtap: entered promiscuous mode [ 428.228824][T13326] veth1_macvtap: entered promiscuous mode [ 428.347032][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.429825][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.645667][ T3014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.671069][ T3014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.741744][ T3014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.057153][ T6422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.371800][ T6422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.438199][ T6422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.821341][ T3320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.876792][ T3320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.747248][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'. [ 433.485869][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 433.494299][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 433.501638][ C1] bridge0: port 4(team0) entered learning state [ 441.771713][T13567] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 443.075149][T13589] net_ratelimit: 2 callbacks suppressed [ 443.075258][T13589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.624397][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1999'. [ 444.630386][T13615] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2003'. [ 444.738008][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'. [ 445.206167][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2008'. [ 445.283358][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2008'. [ 448.145610][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2020'. [ 449.483375][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'. [ 449.959164][T13730] netlink: zone id is out of range [ 449.980707][T13730] netlink: zone id is out of range [ 450.017793][T13730] netlink: zone id is out of range [ 450.025488][T13734] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 450.294333][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 450.694612][T13741] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 453.709011][T13743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.252991][ T99] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.270215][T13832] netlink: 'syz.5.2059': attribute type 1 has an invalid length. [ 457.883941][T13832] veth5: entered allmulticast mode [ 457.923239][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 458.395978][T13847] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 458.430678][T13847] netlink: 15958 bytes leftover after parsing attributes in process `syz.1.2062'. [ 458.465699][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2062'. [ 460.513404][T13861] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2065'. [ 460.809209][T13850] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2063'. [ 460.908920][T13855] geneve2: entered promiscuous mode [ 460.941772][T13855] geneve2: entered allmulticast mode [ 460.997193][ T6422] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 461.242381][ T6422] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 461.558592][ T3288] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 461.591786][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2066'. [ 461.692467][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 462.914716][T13896] syzkaller0: entered promiscuous mode [ 463.029066][T13896] syzkaller0: entered allmulticast mode [ 463.410039][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2075'. [ 463.570703][ C1] bridge0: port 4(team0) entered forwarding state [ 463.577216][ C1] bridge0: topology change detected, propagating [ 463.583970][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.591254][ C1] bridge0: topology change detected, propagating [ 463.597802][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.605094][ C1] bridge0: topology change detected, propagating [ 464.558792][T13923] netlink: 'syz.3.2077': attribute type 4 has an invalid length. [ 464.688490][T13922] netlink: 'syz.3.2077': attribute type 4 has an invalid length. [ 464.807032][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2077'. [ 464.831951][T13922] netlink: 'syz.3.2077': attribute type 4 has an invalid length. [ 466.255087][T13951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2086'. [ 466.332742][T13954] netlink: 'syz.3.2087': attribute type 2 has an invalid length. [ 466.349828][T13951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'. [ 466.363370][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 466.393219][T13951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2086'. [ 466.415407][T13958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.429693][T13951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'. [ 466.464152][T13955] tipc: Failed to remove unknown binding: 66,0,0/0:1517111437/1517111438 [ 466.487989][T13951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2086'. [ 466.511897][T13954] tipc: Failed to remove unknown binding: 66,0,0/0:1517111437/1517111438 [ 466.974807][ T808] hid-generic 0005:04F3:5505.0002: collection stack underflow [ 467.041842][ T808] hid-generic 0005:04F3:5505.0002: item 0 2 0 12 parsing failed [ 467.073144][ T808] hid-generic 0005:04F3:5505.0002: probe with driver hid-generic failed with error -22 [ 467.907120][T13980] xt_TCPMSS: Only works on TCP SYN packets [ 468.600126][T13991] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 468.663649][T13991] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 469.337075][T13962] xt_l2tp: v2 doesn't support IP mode [ 469.479472][T14006] netlink: 'syz.5.2103': attribute type 16 has an invalid length. [ 469.585164][T14006] netlink: 'syz.5.2103': attribute type 17 has an invalid length. [ 469.701359][T14009] netlink: 'syz.3.2102': attribute type 10 has an invalid length. [ 469.871559][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 469.899195][T14011] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2103'. [ 470.081707][T14011] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2103'. [ 470.199971][T14011] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2103'. [ 471.699932][T14032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2108'. [ 472.023415][T14044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2112'. [ 472.254909][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880669a4c00: rx timeout, send abort [ 472.755346][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a29bc00: rx timeout, send abort [ 472.765407][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880669a4c00: abort rx timeout. Force session deactivation [ 472.840256][T14057] xt_nfacct: accounting object `syz0' does not exist [ 473.067486][T14063] netlink: 'syz.3.2119': attribute type 7 has an invalid length. [ 473.109455][T14063] netlink: 'syz.3.2119': attribute type 8 has an invalid length. [ 473.260014][T14063] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2119'. [ 473.263666][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a29bc00: abort rx timeout. Force session deactivation [ 473.425921][T14069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'. [ 473.729248][T14074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2123'. [ 474.357575][T14087] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2128'. [ 474.514139][T14091] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 474.579151][T14080] IPVS: length: 222 != 24 [ 475.721130][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 475.858933][T14102] xt_nfacct: accounting object `syz0' does not exist [ 476.120015][T14097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 476.333986][T14109] __nla_validate_parse: 1 callbacks suppressed [ 476.334006][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 476.543688][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 476.705409][T14120] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 477.420187][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 477.456934][T14134] xt_hashlimit: size too large, truncated to 1048576 [ 477.528294][T14132] netlink: NAT attribute has 5 unknown bytes [ 477.681961][T14132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.807998][T14164] openvswitch: netlink: Missing valid actions attribute. [ 480.968219][T14164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.094327][T14169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2145'. [ 481.178417][T14169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2145'. [ 483.086652][T14198] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 483.119855][T14198] syzkaller1: group set to 0 [ 483.187278][T14203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2155'. [ 485.838747][T14226] ksmbd: Unknown IPC event: 1, ignore. [ 487.258328][ T3288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 488.206691][T14240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.754676][T14245] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 488.942056][T14245] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2167'. [ 489.253725][T14245] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 490.859225][T14273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2178'. [ 490.911022][T14275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2179'. [ 491.077485][T14279] netlink: 'syz.1.2180': attribute type 1 has an invalid length. [ 491.184014][T14279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2180'. [ 491.296635][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 493.671169][T14307] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2184'. [ 494.277522][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 494.415164][T14313] lo: entered promiscuous mode [ 494.511803][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.538300][T14313] tunl0: entered promiscuous mode [ 494.544882][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.559592][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.587375][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.607736][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.659653][T14313] gre0: entered promiscuous mode [ 494.963505][T14313] erspan0: left allmulticast mode [ 495.017032][T14313] ip_vti0: entered promiscuous mode [ 496.369633][T14337] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 496.623786][T14337] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 496.680820][ T50] Bluetooth: hci1: command tx timeout [ 498.406796][T14364] netlink: 'syz.1.2195': attribute type 1 has an invalid length. [ 498.762787][ T50] Bluetooth: hci1: command tx timeout [ 498.797404][ T3288] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.122192][T14364] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 499.633912][ T3288] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.238288][ T3288] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.360209][T14315] lo speed is unknown, defaulting to 1000 [ 500.642233][T14405] openvswitch: netlink: IP tunnel dst address not specified [ 500.794176][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 500.841134][ T50] Bluetooth: hci1: command tx timeout [ 500.971926][ T3288] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.130355][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 501.428594][T14409] syzkaller0: left promiscuous mode [ 501.485989][T14409] syzkaller0: left allmulticast mode [ 502.920731][ T50] Bluetooth: hci1: command tx timeout [ 503.072942][T14428] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 503.098736][T14428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2213'. [ 503.211549][T14423] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 504.161573][ T30] audit: type=1804 audit(1786051151.277:10): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2215" name="/newroot/451/cgroup.controllers" dev="tmpfs" ino=2313 res=1 errno=0 [ 504.294019][T14438] tipc: Enabling of bearer rejected, media not registered [ 504.428157][ T30] audit: type=1800 audit(1786051151.277:11): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2215" name="cgroup.controllers" dev="tmpfs" ino=2313 res=0 errno=0 [ 505.080236][T14460] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2219'. [ 506.136131][T14478] SET target dimension over the limit! [ 506.243172][T14480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2223'. [ 507.765034][T14462] bridge0: port 1(team0) entered disabled state [ 507.772143][T14462] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.715187][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 515.237003][T14462] vlan0: left allmulticast mode [ 515.340964][T14462] veth0_vlan: left allmulticast mode [ 519.351391][ T6422] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.396386][ T6422] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.501569][ T6422] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.675219][ T6422] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.091430][ T6422] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.150466][ T6422] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.299825][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'. [ 520.367074][ T3288] bridge_slave_1: left allmulticast mode [ 520.417225][ T3288] bridge_slave_1: left promiscuous mode [ 520.459780][ T3288] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.628775][ T3288] bridge_slave_0: left allmulticast mode [ 520.654253][ T3288] bridge_slave_0: left promiscuous mode [ 520.692062][ T3288] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.713303][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.726628][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.736956][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.749529][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.760630][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.312311][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 521.332081][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 521.354373][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 521.385231][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 521.403532][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 523.002204][ T50] Bluetooth: hci5: command tx timeout [ 523.482296][ T50] Bluetooth: hci6: command tx timeout [ 524.552196][ T3288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.741093][ T3288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.836805][ T3288] bond0 (unregistering): Released all slaves [ 525.081985][ T50] Bluetooth: hci5: command tx timeout [ 525.321756][ T3298] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.437525][ T3298] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.580725][ T50] Bluetooth: hci6: command tx timeout [ 527.162944][ T50] Bluetooth: hci5: command tx timeout [ 527.642376][ T50] Bluetooth: hci6: command tx timeout [ 529.243611][ T50] Bluetooth: hci5: command tx timeout [ 529.248238][T14526] lo speed is unknown, defaulting to 1000 [ 529.713598][T14610] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 529.721343][ T50] Bluetooth: hci6: command tx timeout [ 529.754899][T14610] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 532.329175][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 535.490588][ C1] sched: DL replenish lagged too much [ 551.638926][T14315] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.184703][T14639] block nbd0: Unsupported socket: should be TCP or UNIX. [ 553.971516][T14315] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.979078][T14315] bridge_slave_0: entered allmulticast mode [ 558.964097][T14315] bridge_slave_0: entered promiscuous mode [ 566.245339][ T3288] hsr_slave_0: left promiscuous mode [ 570.060191][ T3288] hsr_slave_1: left promiscuous mode [ 571.562730][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.841010][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.984753][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.840874][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.761755][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.791922][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.842772][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 581.566208][T14650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 581.592771][T14650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.931240][T14650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 581.938768][T14650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.997797][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.323353][T14651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.334594][T14651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.793046][ T3288] veth1_macvtap: left promiscuous mode [ 584.601638][T14651] Bluetooth: hci0: command tx timeout [ 584.607850][T14651] Bluetooth: hci2: command tx timeout [ 584.751749][ T3288] veth0_macvtap: left promiscuous mode [ 586.176679][ T3288] veth1_vlan: left promiscuous mode [ 586.652868][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 586.680930][ T5644] Bluetooth: hci2: command tx timeout [ 586.686416][ T5644] Bluetooth: hci0: command tx timeout [ 586.818323][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 586.980120][ T3288] veth0_vlan: left promiscuous mode [ 587.502390][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 587.532984][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 587.544619][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 588.796097][ T5631] Bluetooth: hci0: command tx timeout [ 588.801939][ T5631] Bluetooth: hci2: command tx timeout [ 590.549707][ T5631] Bluetooth: hci7: command tx timeout [ 590.845617][ T5631] Bluetooth: hci0: command tx timeout [ 591.000716][ T5631] Bluetooth: hci2: command tx timeout [ 592.601992][ T5631] Bluetooth: hci7: command tx timeout [ 595.020656][ T5631] Bluetooth: hci7: command tx timeout [ 597.201138][ T5631] Bluetooth: hci7: command tx timeout [ 598.762445][T14651] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 598.971698][T14651] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 599.680675][T14651] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 599.731429][T14651] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 599.777781][T14651] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 602.493740][ T5631] Bluetooth: hci8: command tx timeout [ 603.083091][ T5644] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 604.003365][ T5644] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 604.023388][ T5644] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 604.036176][ T5644] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 604.330809][ T5644] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 604.531467][T14651] Bluetooth: hci8: command tx timeout [ 606.441379][T14651] Bluetooth: hci9: command tx timeout [ 606.601715][T14651] Bluetooth: hci8: command tx timeout [ 608.554287][T14651] Bluetooth: hci9: command tx timeout [ 608.701362][T14651] Bluetooth: hci8: command tx timeout [ 610.611477][T14651] Bluetooth: hci9: command tx timeout [ 612.682049][T14651] Bluetooth: hci9: command tx timeout [ 634.440763][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 639.496693][T14651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 639.781649][T14651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 639.802164][T14651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 640.102671][T14651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 640.261749][T14651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.511465][T14651] Bluetooth: hci1: command tx timeout [ 644.264448][ T5644] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 644.500840][ T5644] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 644.514675][ T5644] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 644.522053][ T5644] Bluetooth: hci1: command tx timeout [ 644.611750][ T5631] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 644.642750][ T5631] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 645.952694][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 646.325543][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 646.341906][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 646.361893][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 646.380198][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 646.601432][ T50] Bluetooth: hci1: command tx timeout [ 646.684215][ T5644] Bluetooth: hci10: command tx timeout [ 646.763698][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 646.774973][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 648.691360][T14650] Bluetooth: hci1: command tx timeout [ 648.870846][T14650] Bluetooth: hci10: command tx timeout [ 650.980804][T14651] Bluetooth: hci10: command tx timeout [ 651.098301][ T5631] Bluetooth: hci11: command tx timeout [ 653.220709][ T5631] Bluetooth: hci10: command tx timeout [ 653.226260][ T5631] Bluetooth: hci11: command tx timeout [ 655.241269][ T5631] Bluetooth: hci11: command tx timeout [ 657.340655][ T5631] Bluetooth: hci11: command tx timeout [ 670.257326][T14650] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 670.478988][ T5644] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 670.882211][ T5644] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 670.893513][ T5644] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 670.949416][ T5644] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 670.962256][ T5644] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 671.126514][ T5644] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 671.143761][ T5644] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 671.321348][ T5644] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 671.482431][T14650] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 673.416572][T14650] Bluetooth: hci13: command tx timeout [ 674.216715][T14650] Bluetooth: hci12: command tx timeout [ 675.491792][T14650] Bluetooth: hci13: command tx timeout [ 676.280681][T14650] Bluetooth: hci12: command tx timeout [ 677.560653][T14650] Bluetooth: hci13: command tx timeout [ 678.361052][T14650] Bluetooth: hci12: command tx timeout [ 679.651309][T14650] Bluetooth: hci13: command tx timeout [ 680.467256][T14650] Bluetooth: hci12: command tx timeout [ 704.552875][ T5631] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 704.602004][ T5631] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 704.612507][ T5631] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 704.623839][ T5631] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 705.084320][ T5631] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 707.161315][T14651] Bluetooth: hci14: command tx timeout [ 708.270573][T14651] Bluetooth: hci2: command 0x0406 tx timeout [ 708.276714][T14651] Bluetooth: hci0: command 0x0406 tx timeout [ 708.809610][ T5644] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 708.823168][ T5644] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 708.834982][ T5644] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 709.310696][ T5644] Bluetooth: hci14: command tx timeout [ 709.427047][ T5644] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 709.443785][ T5644] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 710.310665][ T31] INFO: task dhcpcd:5288 blocked for more than 143 seconds. [ 710.532721][T14651] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 711.411550][ T5644] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 711.420451][ T5644] Bluetooth: hci14: command tx timeout [ 711.427243][T14725] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 711.761604][ T31] Not tainted syzkaller #0 [ 711.766790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.960586][ T31] task:dhcpcd state:D stack:24552 pid:5288 tgid:5288 ppid:1 task_flags:0x400140 flags:0x00080000 [ 713.171776][ T5644] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 713.550726][ T5644] Bluetooth: hci7: command 0x0406 tx timeout [ 713.556940][ T5644] Bluetooth: hci14: command tx timeout [ 713.563511][T14725] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 713.721605][ T5631] Bluetooth: hci15: command tx timeout [ 714.060659][ T31] Call Trace: [ 714.064187][ T31] [ 714.067216][ T31] __schedule+0x17d9/0x56c0 [ 714.407357][ T31] ? __lock_acquire+0x683/0x2cf0 [ 714.710566][ T31] ? __lock_acquire+0x683/0x2cf0 [ 714.728831][ T31] ? do_syscall_64+0x174/0x580 [ 715.463412][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.912394][ T5644] Bluetooth: hci15: command tx timeout [ 715.918949][ T31] ? __pfx___schedule+0x10/0x10 [ 716.585904][ T31] ? schedule+0x90/0x2b0 [ 716.590232][ T31] schedule+0x164/0x2b0 [ 716.610538][ T31] schedule_preempt_disabled+0x13/0x30 [ 716.627974][ T31] __mutex_lock+0x7bf/0x1550 [ 717.608684][ T31] ? __mutex_lock+0x5d4/0x1550 [ 718.241314][ T5644] Bluetooth: hci15: command tx timeout [ 718.836574][ T31] ? vlan_ioctl_handler+0xf0/0x630 [ 720.301859][ T5644] Bluetooth: hci15: command tx timeout [ 720.311301][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 720.316459][ T31] vlan_ioctl_handler+0xf0/0x630