last executing test programs: 3m28.002904517s ago: executing program 2 (id=938): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000002c0)={r7, 0x3c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x7fffffff, @loopback, 0x7fffffff}]}, &(0x7f0000000300)=0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r9, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r9, 0x1) recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xd7, 0x10, 0x91d4, 0x4}, &(0x7f00000001c0)=0x18) r11 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r11, &(0x7f00000006c0)={&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/21, 0x1e}], 0x1, &(0x7f0000000600)=""/160, 0xfffffe1f}, 0x2) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r12, 0x81009431, &(0x7f0000000700)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000200)={r10, 0x178}, &(0x7f0000000240)=0x8) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x902) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 3m26.97177287s ago: executing program 2 (id=951): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r3, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r5, 0x4, r1}, 0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x9}]}, {0x0, [0x0, 0x61, 0x2e]}}, 0x0, 0x29}, 0x28) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0xffffffffffffff7f, 0x4, 0x1, 0x1, 0x5}) 3m26.620694446s ago: executing program 2 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x682}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x11f7b1c2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x48, r2, 0xb97534d5fe9704cf, 0x1, 0xffffffff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_WME={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 3m26.504058662s ago: executing program 2 (id=959): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) r1 = socket$inet(0x2, 0xa, 0xfffff7fd) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r7, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r5, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3m25.278957541s ago: executing program 2 (id=972): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="5a000300010003", 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000fcee6e25a796ff9fd144e8943ef8bc6c879aa575877401fc116b4b7348a4b26ab3fdff6a45dbd459dbd7d6612e1f2381d0bb48e1f819c9f8e3d5cdbe27df28f2755547451297ffbda0ef4a18fc", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000140001800e0001006574683a766c616e31000000"], 0x28}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0x22, 0x0, 0x0, 0x0) 3m25.061870121s ago: executing program 2 (id=977): r0 = socket$inet6(0xa, 0xa, 0xffffff83) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x4e21, 0x4, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200), 0x40000000000027f, 0x20008044) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 3m10.018029303s ago: executing program 32 (id=977): r0 = socket$inet6(0xa, 0xa, 0xffffff83) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x4e21, 0x4, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200), 0x40000000000027f, 0x20008044) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 2m37.196618325s ago: executing program 0 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f90780000000000000000248065580000000010"], 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x67}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2m36.825295617s ago: executing program 0 (id=1540): r0 = socket$netlink(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 2m36.330117318s ago: executing program 0 (id=1543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004700070128bd500000000000017c000007000480360a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) 2m35.948564413s ago: executing program 0 (id=1549): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket(0x15, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2, 0x1, 0x3, 0x4, 0x6, 0x64}, 0x20) getsockopt(r2, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000040)=0x1e) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r4, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x26) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, @l2tp={0x2, 0x0, @local, 0x2}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x7fff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='vcan0\x00', 0x0, 0x6, 0x1}) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 2m35.946462566s ago: executing program 0 (id=1552): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001240)={r2, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000c80)={r2, @in6={{0xa, 0x4e23, 0x9, @mcast1, 0x400}}, 0x5, 0xfff8, 0x8e25, 0x7, 0x4, 0x400, 0xa2}, 0x9c) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0xe, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1ce5ffff1a0001031dbd7002f4dbdf2520000000050067008b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fc0a0000000000006111500000000078a8f2040970eb7c009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0xf, @mcast1, 0x8b}, @in6={0xa, 0x4e23, 0x200, @loopback, 0xb217}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x9, @remote, 0xff}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x7}, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x7}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @remote}], 0xe8) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="b894000003000000290000000000ff0cffec1600100000000000008d503c9e46614d486a3ca79c82f1e2", @ANYRES32=0x0, @ANYBLOB="00000000180000000000000029000000040000003000000000000000"], 0x40}}], 0x1, 0x400c404) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000dc0)) (async) r7 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r7, &(0x7f0000000840)=""/146, 0x92, 0x10000, &(0x7f0000000900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r4) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000001080)=ANY=[@ANYBLOB="880000001fa17bab679a6347a1ed69654629f799fadd94c9beefafeb53474f6dd0b0f7866ac7d67743a9f389f34517e9df4b917d12ee4ef2f044ecd77a1707b76e69445e1479cf9b17dd02a99685f26d97e30a207619221fa2eeb38ccca6c8903d26ebb92eb6255a7a2b1ee51146183d4c77278643fc7aee07ce34e658e415764b2cab65a68bb52e45", @ANYRES16=r8, @ANYBLOB="200025bd7000ffdbdf25070000000c00028006000f000600000008000500d35b00000c000180060004004e21000008000600010000000800040004000000080006000900000024000280080005000010000005000d000100000006000b000a00000006000f0002000000100001800c000700040000003f00000008000500faffffff"], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000c00)={{0xffffffffffffffff, &(0x7f0000000000)='\xa2\x00', 0x101000, &(0x7f0000000e00)={@_ha_fsid={[0x9, 0x1400000]}, {0x10, 0x0, 0x9, 0x1}}, 0xffff4b8d, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000e40)=0x1}, 0x7, &(0x7f0000000b00)=[{0x3, 0x9, &(0x7f00000001c0)='\x00', &(0x7f0000000380)="e861448965489f3903f7ade7b59db77059807f0a60284cfbb3dfeca226250cb1d996325fb9663066bfe6d5c39256281a3f4b121ea096e0e5759ef7f2635a247cf852501369779f3a3d43b4a4018e9162917ce155083b14c08b7e9fc2a9e79791403b566bbf2a10c4efec7797b89585256222db55a63ed435f0def0a3a3581f2889c80b5411aeadf24034ec635b403041b80d37432ab45d696ef98dabd3952c4c0abec4b6a0ccc8d322ee7d38d21f10fb36db934d49cb652dd5", 0xb9, 0x2}, {0x1, 0x2, &(0x7f0000000440)='[-\x00', &(0x7f0000000480)="86b107fa758007650ad70929d7e0a12811f759335808aa6a1989b6c0ac91dd61fd5ba3b9ed2478ee49fd83784d50324a4c82621049ba96dd26b50f45e1d13344a5c0876bab7b7dc9ef1d0a9ffdca3613c4c5148459906442ff28194f76b0619f32287db01a516573fa55483f33f21f6c79f8411d60c353e59ed4d069d36a17136015e6e6b7fc09df481b661c06a4cfc0836e77da51bf3aab23e5fd50f4babfda49e3b67535e98d7eea4c9358287cf65061f661352cc46666d74df965b05c1f8635e994008b8af1262f4a78c6db63466f6518065a9d154c9de7424cb8", 0xdc}, {0x1, 0x2, &(0x7f0000000580)='\x00', &(0x7f0000000f80)="70032f30d27c0b175c8e4967a32947d294163ca17b1809425928bd680b716ed33d6795a4e7fb529a9a35c7e193a473ffe3cec5dfb1ef9d40a12ca23385fa61e166a5650a34563a4e101829b7725b6e406ca08de6d3e29d33b369894d583f2ac2dd5a74992f6491fe983668273e1012fd8ca14e44dad8de1af97f1dca11943361db74ecf3f74b6408c74e384cd850c8440df8880566d6ace813416b24ff308db9cb17f37c5c004feade65e4be7cff8cc09d85af30e9d0692aba3d6161d03096d6e6271978407a49765c", 0xc9}, {0x1, 0xe8, &(0x7f00000006c0)=':\x00', &(0x7f0000000700)="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", 0xfc, 0xa}, {0x2, 0x3, &(0x7f0000000800)='\x00', &(0x7f00000012c0)="b3af127d3cbd22542a5113e8fbdb83cfc847b299fb2a41797a5f5aff3562f4857322e39dbbcbcfdddec15bb40939ba27012dba269f37e42997d4676cba6221028f8a27e411d85f9f02d7e1c5c7dcc37858c4460877e7325acc7432bb1d93dd7d40698c3c05a755ad88cde547f96ba9fde68a25da59e979cedc166cd81fe494ceacce7cb61df79ed2b8a30d7c4fd975ae63c6d76f31b5a9ba8659c30a4189e9156a56f7aeddb89c35b6212616b625fc9a5f2cf777d204d153c8ff988bfdcee20431cd836ce4ee852b2bd918744cd3184e42d8e9000000000000000000", 0xdc, 0x30}, {0x1, 0x7, &(0x7f0000000940)='syzkaller\x00', &(0x7f0000000980)="054c09862b4b31b44f4b70d2eece9a40b20b9c769bdb79385e42660c274d0f67b374b92c725ab5ef612ada7574b7d5850c7bd447c9c729adbd7a84fda7a5b1027826750603abdf039e4324745ab56dd7035a217a0f2c454c43768f8ab2f17740afd74a46b04f6b17768e937b2ca8274dbf491c4ade83698cc362abac58", 0x7d, 0x2a}, {0x0, 0x7c, &(0x7f0000000a00)='\x01', &(0x7f0000000a40)="bcaf21793c0f635c6066211ce0f8f008f005c53d09b9f61299499dd9340222011b07c7b9840da16cc885f4c19958d92f2c856e94f296a23a13ac0973971d72406ab865fffbe4c35cd561a3cd4082b51ed86359f63954a859093bf22d0f3d59499e4013595e8a599d58f432ef8258b1c055f59fd62350d5d232b41c9c982518fc9ad53010e987543ee833f66f86e723", 0x8f, 0x8}]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b2000000950000000000000057c97f34b2dfdc428a28abb2ce1578971db171b9d4f4a707824df4ac11d052a64c297e2d7a893713fe89090cc1e4bfa853ad94aa0eac8b98ac8f5ce7a25f1e47d7058a156e025ff7c84d9f41849403bf2b624ef43747"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x94) 2m34.945515078s ago: executing program 0 (id=1565): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210700bd7000000000000a00000014000100fe8000000000000000000000000000bbadb250dcae20bfe82b37afbc66a51492baace0320d2d083cb0"], 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000180)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r3, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000cc0)="b2d48b8d96910ad86256b71f78c87437badb3f2cee8fe086e7ef2d654c2dfcf557109b30a79ea3b3bf572c9acea39b757b57", 0x32}, {&(0x7f0000000d00)="4baf74d049951b48e7c2ca76896d806c76428aa9b50adeab1f3d3d90970812b97d71b3703a4cd2831e6c1428d2538576c9bd5865c98de59ce3e6f35a7405391e3d70927ee86f7f427cec5a909ab732479117bdc6b98be39b43d5dcdae132a47c4220011ba3d4346fe805cf0befc172a0fc86cf341b9fbb7c48097219b8a36f4e74d627d9bd2970e80a9b", 0x8a}, {&(0x7f0000000dc0)="419d47f088f32c6d6e59673ad586c81e9cd0a19d8bce35bc2a02287234fd8a725a586ccaa1ccc0477f245583018b184f13b86a909de1c3d24185308b23a52446f00834d4c2ebe1018223549c7ed25584a2e440de8c069013a8b52f1c74b20982f544878938d09e5bc26a0c5a1f8e4f21d6a01b7daeadf69fd57aab22c030b40006fdf5aa4c242925ddc2d4cf24eb922325faeaab3e9dae615c2ae45f24", 0x9d}, {&(0x7f0000000e80)="20bce2027a9697a58198ffcf36087714cc5e232877310000680510018c8e75775752bcef4345", 0x26}, {&(0x7f0000000ec0)="dc3e3fcf40b69ffc538bbefcb17582dc2d32aee15052f99d115bf330659aea8833d2c02534cae484037cd453ae9eff8165f9db161694f5857f6931b711bb9bc191e082081201929c5ed99dc446a33ffd899476594b7b6f3f5ef2a5dbfdc48017698f5205cea88b5649c0cee7ff2842c6c6f1f43ddb2cf177348835111db770ea31d6290dc3f4dff59d3a252a81da955137678dc6fd62922102dbfc228679e88e607dc96d05af809b938075fe9d", 0xad}, {&(0x7f0000000f80)="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", 0x3bf}], 0x6}}], 0x2, 0x48014) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, 0x1f, 0x400, 0x70bd27, 0x25dfdbfc, {0x5}, [@generic="aa2cb387fc9207f6f8bbd4636b568d2add3c2d882477e14f39586af094617251fed3b247ab6282f17e2ad2c27018445c6c7d0fb06bdf49bad02feb6332d4d32bc0d1d6ca87d476c205b24f2df7d8e1ca3cad7736ccb482eb5da65d22555733022582790eabb5f4e71de68f907b6d4ccb80f0", @nested={0x1c, 0xe2, 0x0, 0x1, [@typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x5b}]}, @generic="e79be4393729429829ca309358cf199fbe0653d05e8fdb3b49030b83c97e1399c014af2ec9afba2ed3574c4218e1ba4da07160f4303084c09bd4c96ac4bc8f6c43e8570b2221b350fd08214fa2fa"]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x7fff, @loopback, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4000000) 2m19.911175661s ago: executing program 33 (id=1565): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210700bd7000000000000a00000014000100fe8000000000000000000000000000bbadb250dcae20bfe82b37afbc66a51492baace0320d2d083cb0"], 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000180)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r3, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000cc0)="b2d48b8d96910ad86256b71f78c87437badb3f2cee8fe086e7ef2d654c2dfcf557109b30a79ea3b3bf572c9acea39b757b57", 0x32}, {&(0x7f0000000d00)="4baf74d049951b48e7c2ca76896d806c76428aa9b50adeab1f3d3d90970812b97d71b3703a4cd2831e6c1428d2538576c9bd5865c98de59ce3e6f35a7405391e3d70927ee86f7f427cec5a909ab732479117bdc6b98be39b43d5dcdae132a47c4220011ba3d4346fe805cf0befc172a0fc86cf341b9fbb7c48097219b8a36f4e74d627d9bd2970e80a9b", 0x8a}, {&(0x7f0000000dc0)="419d47f088f32c6d6e59673ad586c81e9cd0a19d8bce35bc2a02287234fd8a725a586ccaa1ccc0477f245583018b184f13b86a909de1c3d24185308b23a52446f00834d4c2ebe1018223549c7ed25584a2e440de8c069013a8b52f1c74b20982f544878938d09e5bc26a0c5a1f8e4f21d6a01b7daeadf69fd57aab22c030b40006fdf5aa4c242925ddc2d4cf24eb922325faeaab3e9dae615c2ae45f24", 0x9d}, {&(0x7f0000000e80)="20bce2027a9697a58198ffcf36087714cc5e232877310000680510018c8e75775752bcef4345", 0x26}, {&(0x7f0000000ec0)="dc3e3fcf40b69ffc538bbefcb17582dc2d32aee15052f99d115bf330659aea8833d2c02534cae484037cd453ae9eff8165f9db161694f5857f6931b711bb9bc191e082081201929c5ed99dc446a33ffd899476594b7b6f3f5ef2a5dbfdc48017698f5205cea88b5649c0cee7ff2842c6c6f1f43ddb2cf177348835111db770ea31d6290dc3f4dff59d3a252a81da955137678dc6fd62922102dbfc228679e88e607dc96d05af809b938075fe9d", 0xad}, {&(0x7f0000000f80)="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", 0x3bf}], 0x6}}], 0x2, 0x48014) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, 0x1f, 0x400, 0x70bd27, 0x25dfdbfc, {0x5}, [@generic="aa2cb387fc9207f6f8bbd4636b568d2add3c2d882477e14f39586af094617251fed3b247ab6282f17e2ad2c27018445c6c7d0fb06bdf49bad02feb6332d4d32bc0d1d6ca87d476c205b24f2df7d8e1ca3cad7736ccb482eb5da65d22555733022582790eabb5f4e71de68f907b6d4ccb80f0", @nested={0x1c, 0xe2, 0x0, 0x1, [@typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x5b}]}, @generic="e79be4393729429829ca309358cf199fbe0653d05e8fdb3b49030b83c97e1399c014af2ec9afba2ed3574c4218e1ba4da07160f4303084c09bd4c96ac4bc8f6c43e8570b2221b350fd08214fa2fa"]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x7fff, @loopback, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4000000) 1m32.784702252s ago: executing program 5 (id=2291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9], 0x3c}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x2) 1m32.263612931s ago: executing program 5 (id=2299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r1, 0x411, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x40084) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0xa, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_cmd={0x48, 0x7ff, 0x2, 0x6, 0xe, 0x5, 0x5c, 0x2, 0x1, 0x22, 0x7, 0xb1e, 0x401, 0x2, 0x80, 0x3, [0x2, 0x1]}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x3, 0x6, 0x4, 0x5, 0x80, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x63, &(0x7f0000000400)=""/99, 0x41000, 0x764a0384630a9f6b, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x0, 0x4, 0x8, 0x8}, {0x0, 0x4, 0x9, 0xa}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m32.125111918s ago: executing program 5 (id=2300): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "597b616c94d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c7abde06fbf19", '\x00', "000000e4ff00"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="07000000010006", 0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x143b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x909}]}, @CTA_PROTOINFO={0x54, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x50, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8000000000000000}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffc}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0xa0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m32.080254003s ago: executing program 5 (id=2303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000280012800b00010067656e65766500001800028014001200fc"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000005c0)={0x1d8, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x1b9, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x3, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x4a00, @random=0x1, 0x81, @void, @val={0x1, 0x1, [{0xc, 0x1}]}, @val={0x3, 0x1, 0x89ce1d27c7267eba}, @val={0x4, 0x6, {0x7, 0x0, 0xd968, 0xfff8}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x7f, 0x68}}, [{0xdd, 0x7b, "e83ba484d11116b52dc4d06d26ea38daed41429a534fe27ba285d239bfdb9632ab7a5a068e63c8cfcbf692726b1cb74ed7ba1c1bca64be27e479c1d9869e7a8ad80c3f03759aeb8d4d65788303f84c3a862169a614e8cf37b85d8e318d6c7486ebfe9177b6d47100f9f306570c8892d5ef71b767813d6fc5e7c0d7"}, {0xdd, 0xe2, "225769641bfd6bf2999a4167bdd4a30bcab64a78d53ef05d6740fe3accffb3ff458bdfc010294cc29486c56d7c6edb0e8f4c8c003b45db4d33b5849cb9400043d3f24332a8f562fcbe4d4fb5ba5ce8ddaa8c87408d1f1c3523d23645f79d09003e739c31640e8782a57a33ee51c3887dfdcd713f7c4ef58f5a0dba063f30de21497b5e233b3af0651b0aa27ae08b46d6036a0b00db576ae9494b33111668a5a930eb17b6eaafad2fdf15a66bf2ba1f34460786235bf41cdbc9cee19f494927617d5968afb8ac6e8e03dbfbd92a6cf2a61cf838ae2bda74ee03582dc6283751eddc64"}, {0xdd, 0x13, "cf2bed05c1c47b1e5777a57e830e25e6ecb725"}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="82ebd4a35089"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="983262e62457"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aebcf05a4460"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="db8162e3cfaf"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bf7de21359a8"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1f39dd74c748"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4c36b7b5dffa"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x2, 0x804000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3, 0x30}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x3d}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) 1m31.136120521s ago: executing program 5 (id=2313): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r2, 0x0, 0x0) (async) accept(r2, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x94, r3, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x67, 0xe, {{}, 0x0, @default, 0x1, @val={0x0, 0x20, @random="0cac597b71e1ff4b03c0468f947df88307aad86906ea0418b538e69c5151464d"}, @void, @val={0x3, 0x1, 0xb3}, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xa, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xbe, 0x2e, 0x4}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x39db77225c63fa4c) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x94, r3, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x67, 0xe, {{}, 0x0, @default, 0x1, @val={0x0, 0x20, @random="0cac597b71e1ff4b03c0468f947df88307aad86906ea0418b538e69c5151464d"}, @void, @val={0x3, 0x1, 0xb3}, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xa, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xbe, 0x2e, 0x4}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x39db77225c63fa4c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002002000000008000500000000002c0004800800010000000002200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket(0xa, 0x3, 0x3a) (async) r7 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r7, 0x89e0, 0x0) (async) ioctl$SIOCPNADDRESOURCE(r7, 0x89e0, 0x0) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000fba0000000000849078ac1e0101ffffffffdd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c9426cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4ac3dcc9c3273b39a100"/4040], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000031c0)={r0, 0x0, 0x7, 0x81, &(0x7f00000001c0)="fe171e242d8d60", &(0x7f0000000280)=""/129, 0x7, 0x0, 0x4, 0x1000, &(0x7f0000000340)="92431cfa", &(0x7f00000021c0)="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", 0x3, 0x0, 0x9}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xa841, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xa841, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r9) (async) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r9) socket(0x10, 0x803, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r12, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000400)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) 1m30.905525715s ago: executing program 5 (id=2316): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m15.851539709s ago: executing program 34 (id=2316): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 4.826891071s ago: executing program 1 (id=3203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r3 = accept4(r1, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80, 0x80000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x33}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r6, 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x74, r7, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x9}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @crypto_settings=[@NL80211_ATTR_PMK={0x37, 0xfe, "fa5881feec6f8bb50b709830b0e3f66440058fae48bd42b39fe0eeeff0aeef00f5cd2adf98d543b637936a992e7ac9790f8d1b"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}]]}, 0x74}}, 0x4040000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ef48e36991dd"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4c}, @NL80211_ATTR_PMKID={0x14, 0x55, "e9d64d7e34ae15916024a556700ad9c5"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4050}, 0x40) 4.637224655s ago: executing program 3 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000280012800b00010067656e65766500001800028014001200fc"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, &(0x7f00000007c0)) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000005c0)={0x1c0, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1a4, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x3, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x4a00, @random=0x1, 0x81, @void, @val={0x1, 0x1, [{0xc, 0x1}]}, @val={0x3, 0x1, 0x89ce1d27c7267eba}, @val={0x4, 0x6, {0x7, 0x0, 0xd968, 0xfff8}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x7f, 0x68}}, [{0xdd, 0x7b, "e83ba484d11116b52dc4d06d26ea38daed41429a534fe27ba285d239bfdb9632ab7a5a068e63c8cfcbf692726b1cb74ed7ba1c1bca64be27e479c1d9869e7a8ad80c3f03759aeb8d4d65788303f84c3a862169a614e8cf37b85d8e318d6c7486ebfe9177b6d47100f9f306570c8892d5ef71b767813d6fc5e7c0d7"}, {0xdd, 0xe2, "225769641bfd6bf2999a4167bdd4a30bcab64a78d53ef05d6740fe3accffb3ff458bdfc010294cc29486c56d7c6edb0e8f4c8c003b45db4d33b5849cb9400043d3f24332a8f562fcbe4d4fb5ba5ce8ddaa8c87408d1f1c3523d23645f79d09003e739c31640e8782a57a33ee51c3887dfdcd713f7c4ef58f5a0dba063f30de21497b5e233b3af0651b0aa27ae08b46d6036a0b00db576ae9494b33111668a5a930eb17b6eaafad2fdf15a66bf2ba1f34460786235bf41cdbc9cee19f494927617d5968afb8ac6e8e03dbfbd92a6cf2a61cf838ae2bda74ee03582dc6283751eddc64"}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="82ebd4a35089"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="983262e62457"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aebcf05a4460"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="db8162e3cfaf"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bf7de21359a8"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1f39dd74c748"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4c36b7b5dffa"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x2, 0x804000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3, 0x30}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x3d}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) 3.366003989s ago: executing program 1 (id=3216): socket$inet6_tcp(0xa, 0x1, 0x0) 3.26259927s ago: executing program 6 (id=3217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000680)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x2044004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000001900)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x18}}], 0x2, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@bridge_setlink={0x470, 0x13, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x0, 0x100}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x264, 0x16, 0x0, 0x1, [{0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x140000, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x401, 0x9, 0x80000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @random="a99ab129288a"}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x3c00}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @local}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6c5, 0x9}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe3e, 0x1de, 0x7, 0x4080}}, {0x14, 0x1, {0xcc9b, 0xc53, 0x0, 0x88a8}}, {0x14, 0x1, {0x0, 0x70e, 0x60, 0x8100}}, {0x14, 0x1, {0x8001, 0xa61, 0x40, 0x8100}}, {0x14, 0x1, {0x6, 0x1e3, 0x1, 0x8100}}]}]}, {0x98, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffffe}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x40, 0x8001}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x2, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x43, 0x34a, 0x80000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x6b7, 0x4d35, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfa, 0xf98}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffffffff, 0x8}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_VLAN={0x10, 0x2, {0x1f, 0x724, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x9, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xea1, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x21, 0xa0a, 0x3, 0x8100}}, {0x14, 0x1, {0x7, 0x783, 0x7, 0x88a8}}, {0x14, 0x1, {0x4, 0x402, 0x8, 0x8100}}, {0x14, 0x1, {0xfffff801, 0x721, 0xcafa3085, 0x8100}}, {0x14, 0x1, {0x1, 0x625, 0x5, 0x199f8}}, {0x14, 0x1, {0x6, 0xe0c, 0x6, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x681a}}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_AF_SPEC={0xe8, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x16, 0x0, 0x0, 0x46}, {0x8, 0x1b, 0x0, 0x0, 0xb2a4}]}}, @AF_INET6={0x9c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x82}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfd}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @AF_MPLS={0x4}]}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x8e2b}, @IFLA_EVENT={0x8, 0x2c, 0xd}, @IFLA_VF_PORTS={0xcc, 0x18, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "aee9a704dd3c12ad5690eeb470bca240"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9bbed8cd9a50b69a2b544c74c6d4e579"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cda5e365408c5efa5641ab74bd39cca8"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "947b00"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7e1835552ddc0026f12870b6b2b1c12b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7ed7fe69c2709a95597373174e97aaef"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa3}]}]}]}, 0x470}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000010c0)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000680)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x2044004) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000001900)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x18}}], 0x2, 0x4040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@bridge_setlink={0x470, 0x13, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x0, 0x100}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x264, 0x16, 0x0, 0x1, [{0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x140000, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x401, 0x9, 0x80000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @random="a99ab129288a"}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x3c00}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @local}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6c5, 0x9}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe3e, 0x1de, 0x7, 0x4080}}, {0x14, 0x1, {0xcc9b, 0xc53, 0x0, 0x88a8}}, {0x14, 0x1, {0x0, 0x70e, 0x60, 0x8100}}, {0x14, 0x1, {0x8001, 0xa61, 0x40, 0x8100}}, {0x14, 0x1, {0x6, 0x1e3, 0x1, 0x8100}}]}]}, {0x98, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffffe}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x40, 0x8001}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x2, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x43, 0x34a, 0x80000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x6b7, 0x4d35, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfa, 0xf98}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffffffff, 0x8}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_VLAN={0x10, 0x2, {0x1f, 0x724, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x9, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xea1, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x21, 0xa0a, 0x3, 0x8100}}, {0x14, 0x1, {0x7, 0x783, 0x7, 0x88a8}}, {0x14, 0x1, {0x4, 0x402, 0x8, 0x8100}}, {0x14, 0x1, {0xfffff801, 0x721, 0xcafa3085, 0x8100}}, {0x14, 0x1, {0x1, 0x625, 0x5, 0x199f8}}, {0x14, 0x1, {0x6, 0xe0c, 0x6, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x681a}}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_AF_SPEC={0xe8, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x16, 0x0, 0x0, 0x46}, {0x8, 0x1b, 0x0, 0x0, 0xb2a4}]}}, @AF_INET6={0x9c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x82}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfd}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @AF_MPLS={0x4}]}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x8e2b}, @IFLA_EVENT={0x8, 0x2c, 0xd}, @IFLA_VF_PORTS={0xcc, 0x18, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "aee9a704dd3c12ad5690eeb470bca240"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9bbed8cd9a50b69a2b544c74c6d4e579"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cda5e365408c5efa5641ab74bd39cca8"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "947b00"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7e1835552ddc0026f12870b6b2b1c12b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7ed7fe69c2709a95597373174e97aaef"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa3}]}]}]}, 0x470}}, 0x4000040) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) (async) 3.134383258s ago: executing program 1 (id=3219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000}}}]}, 0x38}}, 0x4c840) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="c40000000206010800000000000000000500000a0d000300096173683a6d61630000000005000100070000003c00078008001240000000061800000064020240ff0200000000000000000000000000010500030024000000080008400000801800018014000240fc010000000000000000000000000001050014000900000008000a40fffffffe08000b40000000080c000180080001400a010100080013400000000905000400000000000900020073797a3000"/196], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0xcd0, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0x3, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc60, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x401}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}, @TCA_FLOW_POLICE={0xc44, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x45, 0xd, 0x10, 0x9, 0xf0, 0x4, 0xe, 0x9, 0x40, 0x2, 0x1, 0x9, 0x4, 0x1, 0x5, 0xc, 0xfffffffb, 0xd9f9, 0x80000000, 0x9, 0x7, 0x10000, 0x8, 0x54d, 0x2, 0x7, 0x6, 0xfffffffe, 0x4, 0x8, 0x0, 0x48bf, 0xffffffff, 0x71d, 0x7c3, 0x9, 0x9d45a49, 0x400, 0xdb5, 0x4, 0x0, 0xbb43, 0x4, 0x1, 0x8, 0x8, 0x0, 0x1a, 0xff27, 0x1, 0x800, 0xfffffff9, 0x6, 0xfff, 0x9, 0x5, 0x3ff, 0xff, 0x7, 0x4, 0x124ada3b, 0x1, 0x1, 0x4, 0x5, 0x8d, 0x2, 0x78000, 0x3ff, 0xffffffb0, 0x9, 0x401, 0x4, 0x7, 0x1, 0x5892febd, 0x8001, 0xc, 0x2, 0x88, 0x3c6e, 0x2, 0x1ff, 0xfffeffff, 0x80000000, 0x0, 0xd, 0x52a0dec7, 0x4dbf9d08, 0x9, 0x5, 0x7fff, 0x6, 0x3f, 0x7, 0xf, 0x1, 0x131, 0x6, 0x0, 0x9, 0x0, 0x8, 0x97cd, 0x1, 0x7, 0xffffffff, 0x5, 0x8, 0x800, 0x8, 0x3e7e6909, 0x81, 0x4, 0x9, 0x7ff, 0x10001, 0x2, 0x9, 0x94e8, 0x7, 0x8, 0x0, 0xd, 0x7930, 0x8078, 0x0, 0x6, 0x5, 0x0, 0xa, 0x47e, 0x1, 0x4, 0x1ff, 0xffff, 0x8, 0xb, 0x101, 0x7, 0x2800000, 0x5, 0x5, 0xfffffff9, 0xffffffff, 0x3, 0xd62, 0xffffffff, 0x5, 0x8, 0x43ca1c20, 0x2, 0x80000000, 0x6, 0x6, 0xd, 0x1ba, 0xfffffbff, 0x6a, 0xa, 0xe, 0xfffffffa, 0x8, 0x6, 0x7, 0x73, 0x8, 0x4, 0x2, 0x2, 0x336, 0x8, 0x3, 0x5, 0x4, 0x80000001, 0x80, 0x5, 0x8, 0x4, 0x0, 0x2, 0xb, 0x5, 0xffff0001, 0x21e5, 0x1, 0x44e, 0x5, 0x5, 0x8, 0xff, 0xf3, 0x460c, 0x2, 0x6000000, 0x9, 0xedea, 0x0, 0x5, 0x7fffffff, 0x9, 0x9, 0x33, 0x76, 0xc62, 0x7, 0x0, 0x1d04, 0x6, 0x3ff, 0x101, 0x8550, 0x10, 0x0, 0x9, 0x8, 0x3, 0x443, 0x7, 0x8000, 0x8, 0x7fffffff, 0x3ff, 0x7fff, 0x0, 0x9640, 0x0, 0x8, 0x0, 0xbf, 0x10001, 0xe2, 0x10, 0x5, 0x401, 0xfffffffb, 0x8, 0xfffffff8, 0x40, 0x7d0, 0x3, 0x6, 0xfffff36a, 0xe0680000, 0x0, 0xfffffffe, 0x2, 0x4, 0xfffffe01, 0x4, 0x763, 0x6, 0x6, 0x7, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9760}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x2, 0x0, 0x7f, 0x80000000, 0x80, 0x1, 0x4, 0x0, 0x0, 0x4, 0xb, 0x5, 0xad, 0x80000000, 0x0, 0x3, 0xff, 0x2, 0x7fffffff, 0xcd, 0x8, 0x8, 0x4, 0x2, 0xffff, 0x9, 0x0, 0x10001, 0xd, 0x4, 0x7fff, 0x3, 0x9, 0x1, 0x638a, 0x9, 0x9, 0x1, 0xfffffffa, 0x3d0, 0x7fff, 0x5, 0x0, 0x3ff, 0xa, 0xfffffff8, 0x1000, 0x1, 0x6, 0x200, 0x7, 0x7, 0x2, 0x1000, 0x8001, 0x10, 0xffff, 0x3, 0xd, 0x5, 0x8, 0x0, 0x8, 0x7c31, 0x5, 0x28000, 0xf, 0x6, 0x800, 0x562, 0x6, 0x2, 0x0, 0x101, 0xb, 0x80f, 0x0, 0x3, 0x9, 0xffffffff, 0x6, 0x2, 0x4, 0xfff, 0x1, 0x6, 0xffffffff, 0x1, 0xffffffff, 0xfffffffe, 0x6, 0xff, 0x7f00, 0xa, 0x4, 0x7a00, 0x7, 0x9, 0x800, 0x1, 0x7, 0x7e, 0x4, 0x7ff, 0xffffffff, 0x1000, 0x7, 0x5, 0x3, 0x8, 0x7, 0x9, 0x2, 0x7fffffff, 0x786e4209, 0xffffffff, 0x1, 0x2, 0x2, 0x5, 0x6, 0x9, 0x8, 0x5, 0xffffffff, 0xfffffff8, 0x0, 0xff, 0x6, 0x6, 0x3, 0x2, 0xf, 0x5, 0xfffffff6, 0x10000, 0x8, 0xfffffff9, 0x9, 0x7, 0x2, 0x40, 0x4, 0x9, 0x78, 0x4150, 0x10, 0x405, 0x800, 0x0, 0x7fffffff, 0xae6, 0x8, 0x3, 0x2, 0x3, 0x40, 0xffff, 0x9, 0xd080, 0x5, 0xc3, 0x7, 0xf, 0x8000000, 0x2, 0x237, 0xb, 0x8, 0x400, 0xffff, 0x8d8, 0x8, 0x43, 0xb, 0x7, 0x5, 0xfffffff9, 0x7f, 0x0, 0x5, 0x0, 0x5, 0xb5, 0x5, 0x662f, 0x7, 0x6, 0x7d84, 0x1, 0x10, 0x10, 0x7, 0x9, 0x4, 0xffffff00, 0x0, 0x3, 0x6, 0x0, 0xfffffffa, 0x10001, 0x1, 0x931f, 0x8, 0xd, 0x81, 0x0, 0x1, 0x6, 0x4, 0xf, 0x1, 0xa0d3, 0x4, 0x48, 0x7ff, 0xffffffff, 0x8000, 0x0, 0x7, 0x2, 0xfffffffc, 0x7, 0x37c3, 0xfffffffc, 0x6, 0x4, 0x8, 0x5, 0xd, 0x3, 0x2, 0x3, 0x100, 0x9, 0x4, 0x1, 0x2e, 0x7f, 0xd8f8, 0x4, 0xfffffffa, 0x3, 0x2, 0xa, 0x7, 0x9, 0x7, 0x4, 0x8, 0xe, 0x4, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xffffffff, 0x6, 0x11, 0x10, 0x9, 0x8, 0x3, 0x4, 0xdb, 0x0, 0x848e, 0x8, 0xffffcfa9, 0x0, 0x1, 0x0, 0x0, 0x81, 0x101, 0xff, 0x3, 0x3, 0x8, 0x8000, 0xc, 0xe, 0x0, 0x2, 0xffffff5b, 0xa, 0x6, 0x8f8a, 0x8, 0x7, 0x0, 0x1, 0x0, 0xad0, 0x2, 0xc8, 0x8, 0x0, 0xff, 0x2635, 0x9, 0xe, 0xa1, 0x9, 0x81, 0x9, 0xfff, 0xffff, 0x754, 0x3, 0x103b, 0x362, 0x6, 0x1ff, 0x3, 0x7, 0x0, 0x1, 0x7fff, 0xd1bc, 0x8001, 0x4, 0x0, 0xa, 0x4, 0x2, 0x1000, 0x2, 0x5, 0x739, 0x0, 0x7, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffc, 0x39, 0x1, 0x2, 0x5, 0x6, 0x4, 0x50000, 0x6, 0x5, 0x4, 0x1000, 0x6, 0x5, 0x7, 0x0, 0x80000000, 0x81, 0x400, 0x7, 0x8, 0x7, 0x4, 0x81, 0x3, 0x4, 0xfff, 0x3a72, 0x4, 0x6, 0x40, 0x7, 0x8, 0x6, 0x242, 0x5, 0x4b1f45ae, 0x6, 0x81, 0x4, 0x3, 0xffff, 0x9, 0x7, 0x2, 0x3ff, 0x4, 0x9, 0x4, 0x2, 0x5, 0x8, 0x0, 0xff, 0x9, 0x5c, 0x5, 0xfffffff9, 0x6, 0x4, 0x4, 0xb, 0x1ff, 0x0, 0x7ff, 0x1000, 0x2, 0x6, 0x0, 0x10000, 0x10001, 0x1, 0x4, 0x2, 0x8, 0x9, 0x0, 0xfffffff9, 0xfffffff9, 0x8, 0x6, 0xfffffeff, 0x6, 0x6dc4, 0x2, 0x85, 0x24, 0xff, 0x0, 0x7, 0x10, 0x8, 0x1, 0x10000, 0x6c3c, 0x6, 0x7, 0x49d94495, 0x3, 0xcc0a, 0x120, 0x8, 0xf0b6, 0x4a, 0x1, 0x6, 0xfffffffa, 0x6, 0x3, 0x9, 0x1, 0x4f62, 0x7f, 0xfffffffc, 0x0, 0x100, 0x8a, 0x0, 0x9, 0x2, 0x8, 0x80000000, 0xf, 0x2, 0x9, 0x78d, 0xb, 0x10001, 0x1, 0x401, 0x7, 0xbae, 0x8, 0x66f, 0x6, 0x4, 0x2, 0xffffffff, 0x66, 0x9, 0x81, 0x7, 0x26676189, 0x9c, 0x5, 0xd81, 0xbe2a, 0x0, 0x2, 0x0, 0x6a, 0xffffffff, 0x8, 0x2b, 0x8, 0x3, 0xa, 0x0, 0x4, 0x0, 0x3, 0x4, 0x2, 0xd42, 0x6, 0x1, 0x5, 0x4, 0x1000, 0x0, 0xd712, 0x10, 0xff20, 0x6, 0xfff, 0x32f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x19a}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xfc}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffff00}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073030000000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r0, 0x7, 0x3, &(0x7f00000000c0)="2d3afeed8c2ba43ceaf0879bf30e05476d49998cc8ea1d3e571b88a37c6bdeaa49968e9427c89ed3e6a721c30cb197aa4ee3bc8e7bb58843e7cca16a48e0054eecff7af61b15d3a1ee75fa7f0ac9004c66fda72ce8abb13d197976e0c5134c51fb5e5759881d119e637a78549f978434f7c0298e8d0c3415169643ddbd784a7bac0865ea91fad10333f87a3eb50354ad97c7d213df77961f1e533a24969c6b00c4888f4bf69d3df3d313d4dc85aec59b9ccc3a", 0xb3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, r7, 0x705, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004844) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000021404002cbd7000fbdbdfdc991e491913fd250900020073797a3100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x440d0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) 3.103367244s ago: executing program 7 (id=3220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x14, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="68000000e983142fd49980fa81eada46e31f0f30a2e013a1a20320e7229ab2f13c898117fdee781c6addfdbc4d79aec5bfe9e03a4507c4fa92971b83692fb87a2b08b00c1774ab3cb4cc41465d3f7b1d937dcdc3af5f38bd001495a786b3345448925cbc904fb6f516df791de17d543c39cee4a78002d27a01d9c5d7b2a28085596d44c7aecf39c02cdcc686358b45efbdbf", @ANYRES16=r5, @ANYBLOB="000227bd7000fedbdf25440000001c0024000336e00b9800120b0489891683830682b6890184858904852400238006000c000000000008001c0003000000060016000300000006001800060000000400bf000a001800030303030303000004000801"], 0x68}, 0x1, 0x0, 0x0, 0x94}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.94073738s ago: executing program 4 (id=3221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x80}}, 0x400c801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 2.714952143s ago: executing program 1 (id=3222): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) unshare(0x46000480) 2.695183318s ago: executing program 3 (id=3223): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2.520594841s ago: executing program 6 (id=3224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x212a}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000140)={r4, 0x8001, 0x0, 0x9, 0x100000001}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @loopback, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000300)='\x00', 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x1, 0x2, 0x0, {0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9}, [@RTA_FLOW={0x8, 0xb, 0x3}]}, 0x24}}, 0x4008000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 2.450938653s ago: executing program 3 (id=3225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0xb, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010100}}, 0x24) bind$rxrpc(r1, &(0x7f0000000280)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x24) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8084) 2.407494503s ago: executing program 4 (id=3226): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f000000a240)=0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000004000"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r6 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2}, "d33cffd98794e48a"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, r9, 0xc2c00000) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x10000) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xebc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe88, 0x2, [@TCA_MATCHALL_ACT={0xe84, 0x2, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb, [{0x5, 0x2, 0x0, 0x0, 0x0, 0x800}]}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0xfffffffe, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xebc}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r7, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 2.331314468s ago: executing program 3 (id=3227): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r1, 0x84, 0x24, &(0x7f0000000080), 0x4) 2.201903863s ago: executing program 4 (id=3228): socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 2.107103878s ago: executing program 3 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d700020000280080002400000001b0c00038005000100ef000000080001400000000f0900010073797a300000"], 0xcc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x29, 0x21, 0x1, 0xfffffffd, 0x70, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7157, 0x3, 0xd}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="4573ed35", 0x4}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="04a0f47904135e18513a54a1f3a3848ba292ad3e47dfd883f7fcd0d53aefdc1702d80c4a96a0c9f962b744ac6a83b925cce135d2c879064259e272d72e0f70f65e253c664ad00de0e5e20f2e007a8602e12649d9c2f8fbdb05739736594577e131c839fd5eb26b9d3c857b9e6ade416e49f2ab362c500bbc68", 0x79}, {&(0x7f0000000200)="43be92475fb9103f219d2c4e313bffad38c5197b71fe21bca47b7f1831daa94e38a944df2a2e64c1585b2324e8fa096acec7e5b6375f5638389d120a115c2243808d710ee2e22705a157015ad5b09b6b9face2c4e9fd895053d7d7d655147b240b9885043e4cb6e3f2089b948f09d1d145b7c7f4a34dcd0a02d13bfef9c9e7a6a7d9f60d1ca5aff0a8899676be97f4fc55fda3ffb253ea611f6fb2647a527c812f59ad", 0xa3}, {&(0x7f0000000340)="119a839deb29caba30f9a96a4d2486de92023716b010a2cf74ef7aafde4aa892fefe5ea4fd6173b35841f6f3413f7376a34b87dd50855d40a33e83acafacb3ac3a373a7c67241a4940cada3567069e87000b7ede5355358e7997def3e347984084e94aa8a283fdd6e4527d0eeb9bf6cc6c41f2", 0x73}, {&(0x7f00000003c0)="40dab2", 0x3}, {&(0x7f0000000400)="8738ecb3104ff802c952f446983e3076ece650b486383769bfeafbaeb5aeb2b27f973b4772d568fe4c74427804e1ad48af2eda6cd7b984af9de01c", 0x3b}, {&(0x7f0000000440)="e61689f4a87a3369a9942d20fe5d13c1c8a90d2a2a53081e3d910293f6b8a82af0bbaa0869eb3c139ac89951d7f7547d6ba5e1bb88e63859e0562a410b921df38cedbbcae572554e370cb011d238b5566b97", 0x52}], 0x6, &(0x7f0000000540)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="2b8278d3b5c78dd5d2c9576418e83cae21096d45df67f0a75ee5f5a1c0b1e196e10738513f60eb811713ff5f21eb1e7abab64d6adeabd297ab47d7b60c7a3be31a9719af29cd134d6251ebfc656fad1261ed044ac13333b612ff3bc5e65009b3526d3e695e358dd347f3ddcfc58c7cf283a7571dae8ab1e4eba306fb6f764c1f8df320c88ae77d9e2574bab45cd01c47a03f8f0fe8eaabf856b0fece1b1c2da318ff91faf2c936d7e429ac5ffaa8ac", 0xaf}], 0x1, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x5d, 0x1, 0xd, [{@loopback, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@remote, 0x4a39}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x9a, [@dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @local]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x8, "1dbb0c8d3075"}, {0x2, 0xe, "5df9e3d32964591efbd86c3d"}, {0x7, 0xb, "69fb1bc692fe2db994"}, {0x2, 0x2}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x27, [@multicast1, @broadcast]}, @timestamp={0x44, 0x1c, 0xb8, 0x0, 0x4, [0xfffff162, 0x1, 0x29, 0x5, 0x9, 0x9]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4b3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @remote}}}], 0x198}}, {{&(0x7f0000000c80)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="98535851011b84db4f0f39e33780120d75558ca0764541789af404b6c5cc28c22d1f64861b5c331931c45e27385383875ad69cba0e0b3e9e8ffc9b8eb28246811d0a97b33ad76123b87d412e22856a841974a0639ec3b2efd133bb27e6633cc84a38f795a778bb002eb17ee540f97c28adcaf478db6ec020881ddeeaad0012e36523562355d3bd95eab32a890f857931f2337355", 0x94}, {&(0x7f0000000d80)="1b4a723af6f24de0c326032140c8cc7107bd15e8e4e6358d80992d7cc8678b707a3e889af2a5d6a0e0310b585e54983e10ffcd49690569818f43312e3675d8528fdabe57f5f6c58a7fffb6ef68498b42442e1aa97b425eb8b8c7a044fd41055c067a5fc0d82c7e1897b69381d7a8c123eee9faf8817df811ff62f818aa4c703a87181a298bc9ff651ae8489efe4e80f39dd1147984207b6020a5ef618b528c4e93cc90731cd8", 0xa6}], 0x2, &(0x7f0000000ec0)}}, {{&(0x7f0000000f00)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000f40)="e2489a0f2030200227113bb095468579ad55320f184ff9cf86f0e70dbda4351176ac03034106656fbf84f8e63cbf08db4f090334a648a47ac1f7d4c6c6adde", 0x3f}, {&(0x7f0000000f80)="1be3d15a3d85ad6b118c59be70ec48d024cc20511cf32bdf66fa0c7da6c6775131d32dfbd554406f29d3399bc1cf53498c265ef132d616be3c0c08f8ec89aac9448b2a5336c0d69240e13083772ad37daa0ac42d642f6dda3bd18e2fe4e579ac397e5b4729a576ac7f18c50afde6442395df1cf5bcda93e5afc507d9d99efe7f27a52570efa9deea1005a3a2141ba004388af1ee77c44be1b04812f69d97e961efa3d2086fa99c5b3c472098b4b5b36cec3d", 0xb2}, {&(0x7f0000001040)="f1c6975798d85f89aa8bcd0fc2b1480c16682aa56873e9468dd47b9bf360214ca4de77207594ccc7978622abbeaf8f943b4720e4ebc383715ed4a4cc678a5d639889f048560e75128b62a9df9feeb554e21851f47055792f2543febcb2970b329ea965e852ba7b43da716144c530be15cee2fc122122f2e1e28ec28a2869d47491546e20a7b97a94", 0x88}, {&(0x7f0000001100)}, {&(0x7f0000001140)="395ff3f79edc1bf6b5f8fe6c0fed9baf8027f356c0466b6b4009f05cc5b01d5f6b8d0a4ab74d75c8817dc4a99fb05bbf23149bac33c268fdac3f8b67dd5111a783812c54d16e4ab8adaf7a7e2f8a7f037a092eb9deb7596ea80b96abe43566c066c7ca5425a0083d09bc2816e817df0b1c93b1edcb76e5c363f66d6d7a0c303aba37e4f741f7177104dea24242609199590a2f0452249de9f1e2588c3773b4", 0x9f}, {&(0x7f0000001200)="862bf7914a015dcc2cb16f6b49bdfe0f88d918355e6fe3ffd17f79932ef3dde9b12c5681bc73e6536cb2177b779f287df3833b79f69572b8126dde0ddce3b70e5ab0e5167e993ff4f12fa3705d14298e9bbec909d0c65804588e92c5cb2fcf4433154c555d66c156e447fb34b9c944b421ebcb65a3c8d577d9b188f3bef6ec05d45e674c9f29db2d51c18191d16f7b5eb9", 0x91}], 0x6, 0xffffffffffffffff}}], 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="9aa1c641", @ANYRES16=r7, @ANYBLOB="010009000000ffdbdf25250000070e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 1.996807796s ago: executing program 4 (id=3230): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff35, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x4c}}, 0x0) 1.794621722s ago: executing program 7 (id=3231): r0 = socket$inet6(0xa, 0x1, 0x1) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) 1.790887714s ago: executing program 3 (id=3232): socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x230}}, 0x20040804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01006a35a7973714fdb29d00000008000300", @ANYRES32=r4, @ANYBLOB="04005b"], 0x20}}, 0x4810) 1.674191477s ago: executing program 4 (id=3233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000280012800b00010067656e65766500001800028014001200fc"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, &(0x7f00000007c0)) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000005c0)={0x1c0, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1a4, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x3, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x4a00, @random=0x1, 0x81, @void, @val={0x1, 0x1, [{0xc, 0x1}]}, @val={0x3, 0x1, 0x89ce1d27c7267eba}, @val={0x4, 0x6, {0x7, 0x0, 0xd968, 0xfff8}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x7f, 0x68}}, [{0xdd, 0x7b, "e83ba484d11116b52dc4d06d26ea38daed41429a534fe27ba285d239bfdb9632ab7a5a068e63c8cfcbf692726b1cb74ed7ba1c1bca64be27e479c1d9869e7a8ad80c3f03759aeb8d4d65788303f84c3a862169a614e8cf37b85d8e318d6c7486ebfe9177b6d47100f9f306570c8892d5ef71b767813d6fc5e7c0d7"}, {0xdd, 0xe2, "225769641bfd6bf2999a4167bdd4a30bcab64a78d53ef05d6740fe3accffb3ff458bdfc010294cc29486c56d7c6edb0e8f4c8c003b45db4d33b5849cb9400043d3f24332a8f562fcbe4d4fb5ba5ce8ddaa8c87408d1f1c3523d23645f79d09003e739c31640e8782a57a33ee51c3887dfdcd713f7c4ef58f5a0dba063f30de21497b5e233b3af0651b0aa27ae08b46d6036a0b00db576ae9494b33111668a5a930eb17b6eaafad2fdf15a66bf2ba1f34460786235bf41cdbc9cee19f494927617d5968afb8ac6e8e03dbfbd92a6cf2a61cf838ae2bda74ee03582dc6283751eddc64"}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="82ebd4a35089"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="983262e62457"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aebcf05a4460"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="db8162e3cfaf"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bf7de21359a8"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1f39dd74c748"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4c36b7b5dffa"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x2, 0x804000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3, 0x30}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x3d}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) 1.498498286s ago: executing program 6 (id=3234): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x1}, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)="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", 0x1e5, 0x0, &(0x7f0000000640)={0x2, 0xfd, {0x0, 0xc, 0x3c, "1da66b5ac89ea154ba5c42ee184a7925deb67e7d5c8502b8438638074c254e7fd857ab5642ad431831206a80fe880cb2567ac86a0a0b32fbf92bdec5", 0xb4, "7e7eb576071046f56eb464d0318e06edc6b18bc7de949c2cae169c680c784818a8031179bbf3943fbc3c63cad7b103f6e98befac9e0209668b8c8a77893d3fb0eedcfaf2682a5a0e26a2ae4faee7663f09dae369b3906418c0992ee33bb2b1142b6dfc9de865acdc040497153dec52a9e6cd5366fd4c68438f1201020b121f24c3b0bf15a6197fddfdc960d3d83960b6c084ad075b69b0baf17b07c9e8d1974c45d7c0a6b446e33c5a69f1eda76c5a542c3ffac3"}, 0x74, "46765375a23665514247096481a177bceb3eb1d58b0668ebdadd6bf5410e2d91e359e2cc87d86ab39bd9683dd6bf12c1b283cb26d2232fb3c09dc02d9ee0c87cdbe7edda65bb443245e482531e538e219ef020c2c8ee4dc2cd1efb0ef326082497fd301e81279b7382f490f0f920a0b91e8a1197"}, 0x17d}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) 1.347613221s ago: executing program 1 (id=3235): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x41, 0x1, 0x70bd26, 0x4, {0x1}, [@nested={0x4, 0x1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8018) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x440, 0x100000c, 0x2c0, 0x1f0, 0x2c0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x0, 0x4, 0x63, 0x100081, 0xfffffffb, 0x3, 0x84, 0xfff, 0x20}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0xff, 'syz_tun\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x9, 0x2e, 0xb, 0x3c, 0x2d, 0x20, 0x21, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x24, 0x5, 0x33, 0x1d], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x800, 0x8, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x2, 0x6, 0x1, 0x7f, 0x1, 0x6]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x1ff, 0x81, {{0x4a, 0x4, 0x0, 0x2b, 0x128, 0x65, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@noop, @end, @ssrr={0x89, 0xb, 0x1b, [@broadcast, @empty]}, @rr={0x7, 0x2b, 0x76, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010101, @remote, @empty, @multicast2, @multicast2, @multicast1, @loopback, @multicast2]}, @lsrr={0x83, 0x7, 0xf8, [@multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x4, [{@multicast1}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x65}]}, @rr={0x7, 0x27, 0x6e, [@rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @private=0xa010102, @loopback, @rand_addr=0x64010102, @multicast1, @loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0x5, [@local, @multicast1, @local, @multicast2, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "052617155e6922571d"}]}, @timestamp_prespec={0x44, 0x54, 0xa6, 0x3, 0xa, [{@multicast1, 0x200}, {@loopback, 0xffffff80}, {@multicast1}, {@remote, 0x6}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0xff}, {@rand_addr=0x64010100}, {@multicast1, 0x8}, {@private=0xa010100, 0x545}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r10, 0x89e1, &(0x7f00000000c0)='lapb0') sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x420}, 0x420}}, 0x40000) 1.130778885s ago: executing program 6 (id=3236): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0x12504000) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x800, 0x0, 0x0, 0x8, 0x1, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x514e, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100180004000083"], 0x88}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="040000000000000000b700000000000000000000002afc1eaeff34cd18434a15373457c63b70716a67b051ce6ba1ba11dd6b9e572013fe0af5f8a720748ec4d086ca1b99bb530ca3f724db9a71110c1754b5940221bcfae86a4db259dc0ef14eee5f87d82835f2807e4e90edc16d5af4f3f39e03200c7621adf070e5ed80e7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000300000000000000000018150000", @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008900000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010003704005fac00000000000000000061358aa51fe5f56487cad3f3651a2bd050030698d434e0b4d08ca281a6d1960854b6e4fb26c9a2d6fe86af3d48f16c44c004186bc948df1cd861049831abf66f240b", @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e0000180002800400120006000200010000000800040000000400"], 0x48}}, 0x88890) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007007f0000017f00000184"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 990.938815ms ago: executing program 7 (id=3237): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) (rerun: 64) 866.279214ms ago: executing program 7 (id=3238): r0 = socket(0xf, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="03c9cabad239f088ccae00000000bc463bfe4630a781d3195124f840d5a50b2caafe3cd9", @ANYRES16=r4, @ANYBLOB="7b2826bd7000fcdbdf251e00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r11) (async) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010500002300fbdbdf2500000000e039a4d340cbd4e6d9976028a3d41fbb4970bafb716208f56b34f59a7b555478e50839aa30c652ce", @ANYRES32=r12, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRESOCT=r8], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40848c0) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000080)={@mcast1, 0x62, r12}) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000740)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="0000000000000000000000000000000000000000000000000500000000000800000000000000000000000000000000000500000000000000fbffffffffffffff0b0000000000000000000000000040000000000000000002000000000000000002000000000000000200000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delqdisc={0x2c, 0x25, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0x5}, {0x2, 0xd}, {0xb, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @broadcast}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ip6gre0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x240000, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x86, &(0x7f00000009c0)=""/134}, 0x94) 774.237202ms ago: executing program 1 (id=3239): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c894) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev, @mcast2, {[@routing={0x0, 0x0, 0xf5}]}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x34}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r13, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r14 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r14, 0x400448c8, &(0x7f0000000280)={r13, r13, 0xc, 0x1c, &(0x7f0000000100)='\x00', 0xb, 0x1, 0xb57, 0x6, 0x9, 0x1, 0x3, 'syz0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 674.44539ms ago: executing program 6 (id=3240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0}) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendto(r3, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x94}, 0x9}, 0x80) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 416.452147ms ago: executing program 7 (id=3241): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="10", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 386.568578ms ago: executing program 6 (id=3242): syz_80211_inject_frame(&(0x7f0000000840), &(0x7f0000000880)=@ctrl_frame=@cf_end_cf_ack={{}, {0xd}, @device_a, @broadcast}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) syz_80211_inject_frame(&(0x7f0000001480)=@device_b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) nanosleep(&(0x7f0000001f80)={r1, r2+60000000}, 0x0) (async) nanosleep(&(0x7f0000001f80)={r1, r2+60000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c000180060006"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) socket(0xa, 0x3, 0x3a) (async) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) syz_80211_inject_frame(&(0x7f0000002000)=@broadcast, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000007c0), 0x10) clock_gettime(0x0, &(0x7f00000022c0)) (async) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000140)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000140)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) nanosleep(&(0x7f0000000180)={r7, r8+10000000}, 0x0) syz_80211_inject_frame(&(0x7f0000002380)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000002380)=@broadcast, 0x0, 0x0) 258.016669ms ago: executing program 7 (id=3243): socketpair(0x15, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x5, 0x1, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x80, 0x8, 0x2}}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x3, {0x0, 0x1, 0x1}, 0xff}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x301, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x164}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008084}, 0x20008000) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000300)=0x81, 0x4) close(r0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000340)="7b6a323f4e8f76602294df40b74423f6072d79165c33c90f8e472b5efe6b0bc3881edb11d4c0d56aef4c018560aedcd60967d88d6b3a2098e9993ab19802e1414ce86c03c925e168dca3f4da30da1700d8c4df717f3c52976068315222fcfd6f8ce97db2c6ff3d195c5d09df9dd28eea86c0e03e3625557f79be625c587d11e138807ab69bba531e3fb85c76de05c030a112b8d0ff104cbec3202030c95c545d2eefe0f2220dc72b1b5c9dcf28cfd95c3a3d31f37fa736a1ef82f347a66eb896ab1044367a", 0xc5) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x118, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x44094}, 0x840) bind$can_j1939(r0, &(0x7f0000000680)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x1}, 0x1}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000800), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004880}, 0x24040000) r8 = socket(0xa, 0x800, 0xd) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe0, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf323}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6a4d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4b, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x221b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000000bc0)={'icmp\x00'}, &(0x7f0000000c00)=0x1e) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) accept4$inet6(r8, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000d00)=0x1c, 0x80800) r10 = socket$inet6(0xa, 0x80000, 0x7a4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d40)={'wlan1\x00'}) 0s ago: executing program 4 (id=3244): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, 0x0}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r10 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="d14390ccdec53f3a8e9a83b400ffffffff0000791048ff000000006104480000000000950000004d4fd540978d0d248dbb36e63887b5c2a26cbaed3252ba4994368c2ac0aa6b3543bf6fb7fba03ce4e91466"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="d14390ccdec53f3a8e9a83b400ffffffff0000791048ff000000006104480000000000950000004d4fd540978d0d248dbb36e63887b5c2a26cbaed3252ba4994368c2ac0aa6b3543bf6fb7fba03ce4e91466"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$key(0xf, 0x3, 0x2) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x6, 0x0, 0x6, 0x3}, {0x102, 0x5, 0xc7, 0x3}, {0x1, 0x7, 0xf, 0x2}, {0xf7, 0x9, 0x8c, 0x6}, {0x3, 0x9, 0x1, 0x12}, {0x7ff, 0x6, 0x4, 0x8db3}]}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) (async) r12 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r12, &(0x7f0000000480), 0x10) kernel console output (not intermixed with test programs): ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.704876][T11607] ? clear_bhb_loop+0x70/0xc0 [ 200.704901][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.704920][T11607] RIP: 0033:0x7fe0cf55e9ce [ 200.704945][T11607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.704962][T11607] RSP: 002b:00007fe0d03b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.704983][T11607] RAX: ffffffffffffffda RBX: 00007fe0d03b36c0 RCX: 00007fe0cf55e9ce [ 200.704998][T11607] RDX: 000000000000000f RSI: 00007fe0d03b30a0 RDI: 0000000000000003 [ 200.705014][T11607] RBP: 00007fe0d03b3090 R08: 0000000000000000 R09: 0000000000000000 [ 200.705026][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.705038][T11607] R13: 00007fe0cf826038 R14: 00007fe0cf825fa0 R15: 00007ffc7621ef38 [ 200.705068][T11607] [ 200.762036][T11609] netlink: 'syz.0.1540': attribute type 1 has an invalid length. [ 200.944359][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 201.012587][T11609] bond0: (slave bridge5): making interface the new active one [ 201.013211][T11609] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 201.473017][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 201.473062][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 201.473117][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 201.704842][T11663] sctp: [Deprecated]: syz.0.1552 (pid 11663) Use of int in maxseg socket option. [ 201.704842][T11663] Use struct sctp_assoc_value instead [ 202.018505][T11678] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 202.255803][T11685] batadv_slave_0: Caught tx_queue_len zero misconfig [ 202.284210][T11691] netlink: 'syz.1.1560': attribute type 9 has an invalid length. [ 202.512137][T11706] netlink: 'syz.5.1564': attribute type 1 has an invalid length. [ 202.608400][T11710] hsr_slave_1 (unregistering): left promiscuous mode [ 202.873811][T11730] bond8 (unregistering): Released all slaves [ 203.233888][T11735] __nla_validate_parse: 9 callbacks suppressed [ 203.233909][T11735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 203.479997][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.480206][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.480391][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.480559][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.480726][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.480934][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.481098][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.481261][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.565250][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 203.648480][T11770] IPVS: length: 139 != 8 [ 203.717910][T11773] xt_l2tp: invalid flags combination: 8 [ 204.312989][T11764] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 204.506122][T11798] sock: sock_timestamping_bind_phc: sock not bind to device [ 205.228036][ C0] net_ratelimit: 40 callbacks suppressed [ 205.228059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.228320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.228575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.230884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.231184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.231592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.232088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.236888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.268321][ T5618] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 205.307302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.307659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.464697][T11861] 8021q: adding VLAN 0 to HW filter on device bond8 [ 207.066914][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.170848][T11912] xt_NFQUEUE: number of total queues is 0 [ 207.530657][T11926] Bluetooth: MGMT ver 1.23 [ 207.907789][T11948] xt_hashlimit: size too large, truncated to 1048576 [ 207.911776][T11949] netlink: 'syz.5.1640': attribute type 1 has an invalid length. [ 207.995311][T11949] bond1: entered promiscuous mode [ 207.995700][T11949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.013808][T11950] bond1: (slave bridge1): making interface the new active one [ 208.013837][T11950] bridge1: entered promiscuous mode [ 208.014584][T11950] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 208.370631][T11977] x_tables: duplicate underflow at hook 2 [ 208.979529][T12007] __nla_validate_parse: 70 callbacks suppressed [ 208.979548][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1655'. [ 209.145048][T12021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1657'. [ 209.149004][T12021] ipt_ECN: cannot use operation on non-tcp rule [ 209.454050][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 209.484165][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1666'. [ 209.518007][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1666'. [ 209.531827][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 209.548221][ T52] Bluetooth: hci5: command 0x0c3a tx timeout [ 209.550896][ T5618] Bluetooth: hci5: Opcode 0x0c3a failed: -110 [ 209.648413][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 209.650850][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 209.705088][T12051] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.1668'. [ 209.707524][ T5616] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 209.887972][T12061] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 210.200590][T12079] ip6tnl0: Caught tx_queue_len zero misconfig [ 210.267752][ C1] net_ratelimit: 9 callbacks suppressed [ 210.267773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.268035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.269012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.269282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.270232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.270569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.270874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.271039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.346921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.347241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.781779][T12098] syz.4.1684 (12098) used greatest stack depth: 18088 bytes left [ 210.988604][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1687'. [ 212.202966][T12179] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.203634][T12179] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 212.973462][ T31] audit: type=1800 audit(1791267323.951:4): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1718" name="memory.events" dev="tmpfs" ino=1898 res=0 errno=0 [ 212.975238][ T31] audit: type=1804 audit(1791267323.951:5): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1718" name="/newroot/366/memory.events" dev="tmpfs" ino=1898 res=1 errno=0 [ 214.368451][T12300] __nla_validate_parse: 4 callbacks suppressed [ 214.368470][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 214.368606][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 214.762721][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 214.820268][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 214.850160][T12314] bridge0: port 4(batadv3) entered blocking state [ 214.852011][T12314] bridge0: port 4(batadv3) entered disabled state [ 214.852187][T12314] batadv3: entered allmulticast mode [ 214.854208][T12314] batadv3: entered promiscuous mode [ 215.178416][T12331] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1742'. [ 215.195058][T12331] sit1: entered promiscuous mode [ 215.195080][T12331] sit1: entered allmulticast mode [ 215.306743][ C1] net_ratelimit: 6 callbacks suppressed [ 215.306768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.306935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.307136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.307811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.309071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.309231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.309552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.309890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.310156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.326816][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 215.326835][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 215.374187][T12342] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1745'. [ 215.386690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.594753][T12351] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.645071][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1749'. [ 215.684638][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 215.741526][T12356] netlink: 'syz.4.1749': attribute type 6 has an invalid length. [ 215.770336][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 216.156900][T12378] x_tables: duplicate underflow at hook 1 [ 216.195605][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1761'. [ 216.219673][T12392] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 216.560746][T12406] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 216.577957][T12406] bond2 (unregistering): Released all slaves [ 216.629085][T12411] syzkaller1: entered promiscuous mode [ 216.629108][T12411] syzkaller1: entered allmulticast mode [ 216.631751][T12411] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 216.933204][T12432] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 216.944669][T12432] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 217.826864][T12477] syzkaller0: entered promiscuous mode [ 217.826888][T12477] syzkaller0: entered allmulticast mode [ 217.856985][T12477] simple: /dev/video#_3 [ 217.857006][T12477] simple: /dev/video#_6 [ 217.857020][T12477] simple: /dev/video#_9 [ 217.858284][T12477] simple: /dev/video#_12 [ 217.858298][T12477] simple: /dev/video#_15 [ 217.858309][T12477] simple: /dev/video#_18 [ 217.858318][T12477] simple: /dev/video#_21 [ 217.858328][T12477] simple: /dev/video#_24 [ 217.858338][T12477] simple: /dev/video#_27 [ 217.858381][T12477] simple: /dev/video#_30 [ 217.858390][T12477] simple: /dev/video#_33 [ 217.858400][T12477] simple: /dev/video#_36 [ 217.858410][T12477] simple: /dev/video#_39 [ 217.858420][T12477] simple: /dev/video#_42 [ 217.858430][T12477] simple: /dev/video#_45 [ 217.858439][T12477] simple: /dev/video#_48 [ 217.858448][T12477] simple: /dev/video#_51 [ 217.858458][T12477] simple: /dev/video#_54 [ 217.858467][T12477] simple: /dev/video#_57 [ 217.858478][T12477] simple: /dev/video#_60 [ 217.858488][T12477] simple: /dev/video#_63 [ 217.858497][T12477] simple: /dev/video#_66 [ 217.858507][T12477] simple: /dev/video#_69 [ 217.858516][T12477] simple: /dev/video#_72 [ 217.858527][T12477] simple: /dev/video#_75 [ 217.858536][T12477] simple: /dev/video#_78 [ 217.858546][T12477] simple: /dev/video#_81 [ 217.858555][T12477] simple: /dev/video#_84 [ 217.858566][T12477] simple: /dev/video#_87 [ 217.858575][T12477] simple: /dev/video#_90 [ 217.858583][T12477] simple: /dev/video#_93 [ 217.858592][T12477] simple: /dev/video#_96 [ 217.976332][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.980729][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.982739][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.985235][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.988273][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.088551][ T1999] block nbd0: Possible stuck request ffff888027225080: control (read@0,4096B). Runtime 30 seconds [ 218.635167][T12511] 8021q: adding VLAN 0 to HW filter on device bond8 [ 219.750111][ T5618] Bluetooth: hci5: Malformed Event: 0x02 [ 219.842805][T12572] __nla_validate_parse: 8 callbacks suppressed [ 219.842826][T12572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1811'. [ 219.884274][T12567] bond9: option lp_interval: invalid value (0) [ 219.884299][T12567] bond9: option lp_interval: allowed values 1 - 2147483647 [ 219.893990][T12567] bond9 (unregistering): Released all slaves [ 220.028133][ T5618] Bluetooth: hci6: command tx timeout [ 220.084314][T12580] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 220.084336][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1812'. [ 220.276923][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.277059][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.277202][T12481] bridge_slave_0: entered allmulticast mode [ 220.279701][T12481] bridge_slave_0: entered promiscuous mode [ 220.309905][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.310077][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.310219][T12481] bridge_slave_1: entered allmulticast mode [ 220.312802][T12481] bridge_slave_1: entered promiscuous mode [ 220.346831][ C1] net_ratelimit: 12 callbacks suppressed [ 220.346851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.346864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.347091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.347297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.347352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.348093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.348319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.350347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.350500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.390146][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.394140][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.434200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.482889][T12481] team0: Port device team_slave_0 added [ 220.493220][T12481] team0: Port device team_slave_1 added [ 220.602116][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.602134][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.602158][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.604007][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.604020][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.604054][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.788907][T12481] hsr_slave_0: entered promiscuous mode [ 220.789899][T12481] hsr_slave_1: entered promiscuous mode [ 220.790593][T12481] debugfs: 'hsr0' already exists in 'hsr' [ 220.790612][T12481] Cannot create hsr debugfs directory [ 220.896920][T12617] bond0: Error: Cannot enslave bond to itself. [ 221.092295][T12628] netlink: 'syz.3.1828': attribute type 3 has an invalid length. [ 221.092317][T12628] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 221.092329][T12628] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1828'. [ 221.202859][T12634] netlink: 'syz.4.1831': attribute type 11 has an invalid length. [ 221.440068][T12481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.471108][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.483358][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 221.505781][T12481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.521133][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.521981][T12481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.546102][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.554452][T12481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.568891][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.751726][T12658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1835'. [ 221.769175][T12481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.783157][T12658] veth4: entered promiscuous mode [ 221.783178][T12658] veth4: entered allmulticast mode [ 221.872388][T12481] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.889599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.889689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.920186][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.920300][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.107777][ T5618] Bluetooth: hci6: command tx timeout [ 222.458853][T12694] erspan0: entered allmulticast mode [ 222.553456][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1846'. [ 222.553495][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1846'. [ 222.553520][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 222.595008][T12695] netlink: 'syz.1.1844': attribute type 4 has an invalid length. [ 222.943982][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1851'. [ 223.022176][ T5618] Bluetooth: hci4: link tx timeout [ 223.022196][ T5618] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.066727][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.165511][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1850'. [ 223.200323][T12481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.292428][T12730] netlink: 'syz.3.1855': attribute type 9 has an invalid length. [ 223.297863][T12732] netlink: 'syz.3.1855': attribute type 9 has an invalid length. [ 223.399321][T12732] syzkaller1: entered promiscuous mode [ 223.399344][T12732] syzkaller1: entered allmulticast mode [ 224.028521][T12481] veth0_vlan: entered promiscuous mode [ 224.052783][T12481] veth1_vlan: entered promiscuous mode [ 224.187629][ T5616] Bluetooth: hci6: command tx timeout [ 224.240439][T12481] veth0_macvtap: entered promiscuous mode [ 224.245121][T12481] veth1_macvtap: entered promiscuous mode [ 224.273865][T12481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.294011][T12481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.389706][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.428219][ T7809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.447715][ T7809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.516800][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.670642][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.670665][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.962078][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.962100][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.001126][T12802] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 225.072952][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 225.120833][T12802] 8021q: adding VLAN 0 to HW filter on device bond9 [ 225.210045][T12807] bond9: (slave veth0_to_bond): making interface the new active one [ 225.229188][T12807] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 225.321135][T12821] __nla_validate_parse: 9 callbacks suppressed [ 225.321154][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'. [ 225.387016][ C0] net_ratelimit: 15 callbacks suppressed [ 225.387037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.387156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.387306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.387562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.387831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.387981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.388272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.388577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.473667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.473947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.575203][T12820] can: request_module (can-proto-0) failed. [ 226.212606][T12852] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 226.267436][ T5618] Bluetooth: hci6: command tx timeout [ 226.420708][T12862] batman_adv: batadv0: Adding interface: macvtap1 [ 226.420727][T12862] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.420758][T12862] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 226.825252][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1890'. [ 226.876634][T12873] syzkaller0: entered promiscuous mode [ 226.876659][T12873] syzkaller0: entered allmulticast mode [ 227.122060][T12898] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1895'. [ 227.614107][T12913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 229.603860][T12917] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 229.836763][T12940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1901'. [ 229.901320][T12952] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1906'. [ 230.426863][ C0] net_ratelimit: 8 callbacks suppressed [ 230.426887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.427180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.427452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.428465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.428834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.429254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.429451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.437030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.506919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.507184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.615535][T12998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.740362][T12998] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1912'. [ 230.801343][T13006] xt_l2tp: missing protocol rule (udp|l2tpip) [ 231.301937][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1919'. [ 231.301966][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1919'. [ 231.640226][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1924'. [ 231.857802][T13050] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 231.969611][T13052] syzkaller0: entered promiscuous mode [ 231.969634][T13052] syzkaller0: entered allmulticast mode [ 232.093012][T13062] netlink: 'syz.6.1929': attribute type 1 has an invalid length. [ 232.265198][T13071] Cannot find add_set index 4 as target [ 232.494014][T13076] can: request_module (can-proto-4) failed. [ 232.650728][T13062] veth3: entered promiscuous mode [ 232.755038][T13096] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1934'. [ 233.203822][T13119] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1939'. [ 233.345022][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1941'. [ 233.389772][T13123] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1940'. [ 233.935053][T13154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1947'. [ 233.954458][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 234.059084][T13160] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 234.362266][T13172] netlink: 'syz.6.1951': attribute type 3 has an invalid length. [ 234.730896][T13194] netlink: 'syz.5.1958': attribute type 153 has an invalid length. [ 234.731727][T13194] netlink: 'syz.5.1958': attribute type 39 has an invalid length. [ 234.968279][T13203] nbd: nbd0 already in use [ 235.007079][T13208] gretap0: entered promiscuous mode [ 235.032747][T13208] netlink: 'syz.5.1963': attribute type 25 has an invalid length. [ 235.085227][T13210] tipc: Enabling of bearer rejected, failed to enable media [ 235.355006][T13227] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 235.467040][ C0] net_ratelimit: 10 callbacks suppressed [ 235.467060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.467320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.467588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.467960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.468180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.468495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.468815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.469115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.553526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.553786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.151306][T13277] __nla_validate_parse: 5 callbacks suppressed [ 236.151327][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 236.151342][T13277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 236.231871][T13281] bond0: (slave bond_slave_1): Releasing backup interface [ 236.256193][T13283] bridge_slave_0: left allmulticast mode [ 236.256219][T13283] bridge_slave_0: left promiscuous mode [ 236.256517][T13283] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.304859][T13281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.327941][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1988'. [ 236.327963][T13281] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1988'. [ 236.386413][T13281] veth5: entered promiscuous mode [ 236.494188][T13299] trusted_key: syz.6.1995 sent an empty control message without MSG_MORE. [ 236.562408][T13304] netlink: 'syz.1.1993': attribute type 12 has an invalid length. [ 236.562431][T13304] netlink: 'syz.1.1993': attribute type 29 has an invalid length. [ 236.562444][T13304] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1993'. [ 236.624191][T13307] netlink: 'syz.5.1996': attribute type 4 has an invalid length. [ 236.749485][T13313] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1999'. [ 236.941282][T13323] syzkaller0: entered promiscuous mode [ 236.941297][T13323] syzkaller0: entered allmulticast mode [ 237.390243][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 237.620588][T13354] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 237.649407][T13357] netlink: 'syz.6.2013': attribute type 1 has an invalid length. [ 237.714631][T13365] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2013'. [ 237.987770][ T5618] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 237.987802][ T5618] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 238.145205][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2019'. [ 238.163450][T13382] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2020'. [ 238.634883][T13388] bond2 (unregistering): Released all slaves [ 239.509480][T13443] netlink: 'syz.4.2035': attribute type 15 has an invalid length. [ 239.517719][T13443] netlink: 'syz.4.2035': attribute type 15 has an invalid length. [ 239.578549][ T5992] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 239.581063][ T7788] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 239.581105][ T7788] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 239.581138][ T7788] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 239.922554][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922575][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922584][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922594][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922603][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922613][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922622][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922631][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922641][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.922652][T13455] tc action pedit offset must be on 32 bit boundaries [ 239.924687][T13455] netlink: 'syz.3.2040': attribute type 8 has an invalid length. [ 240.079209][T13470] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 240.080758][T13459] IPVS: stopping backup sync thread 13470 ... [ 240.265433][T13473] sctp: [Deprecated]: syz.3.2044 (pid 13473) Use of int in maxseg socket option. [ 240.265433][T13473] Use struct sctp_assoc_value instead [ 240.295949][T13473] sctp: [Deprecated]: syz.3.2044 (pid 13473) Use of int in maxseg socket option. [ 240.295949][T13473] Use struct sctp_assoc_value instead [ 240.506751][ C0] net_ratelimit: 14 callbacks suppressed [ 240.506774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.506948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.507045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.507305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.509722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.510015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.510310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.510462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.586878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.587123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.379039][T13527] __nla_validate_parse: 41 callbacks suppressed [ 241.379060][T13527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2062'. [ 241.379272][T13527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2062'. [ 241.445203][T13533] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2063'. [ 241.540361][T13538] raw_sendmsg: syz.4.2065 forgot to set AF_INET. Fix it! [ 241.540683][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 241.792476][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2071'. [ 241.951363][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2073'. [ 241.951391][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2073'. [ 241.951406][T13568] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2073'. [ 241.952549][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 242.021878][T13566] syzkaller1: entered promiscuous mode [ 242.021903][T13566] syzkaller1: entered allmulticast mode [ 242.151748][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2076'. [ 242.767027][T13624] bond_slave_0: entered allmulticast mode [ 242.816308][ T7809] bond9: (slave veth0_to_bond): link status definitely down, disabling slave [ 242.839177][ T7809] bond9: now running without any active interface! [ 243.484912][T13653] Bluetooth: hci1: too big key_count value 32778 [ 243.868149][T13671] netlink: 'syz.5.2099': attribute type 32 has an invalid length. [ 244.137989][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.138034][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.138068][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.138100][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.394479][T13717] RDS: rds_bind could not find a transport for 2800::, load rds_tcp or rds_rdma? [ 244.901466][T13754] netlink: 'syz.1.2113': attribute type 20 has an invalid length. [ 244.901841][T13754] netlink: 'syz.1.2113': attribute type 20 has an invalid length. [ 245.013946][T13760] veth7: entered allmulticast mode [ 245.539452][T13781] netlink: 'syz.6.2120': attribute type 1 has an invalid length. [ 245.552524][ C0] net_ratelimit: 10 callbacks suppressed [ 245.552539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.552622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.552705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.556808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.558887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.559268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.559577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.626752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.626929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.627108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.652681][T13781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.680011][T13787] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 245.828492][T13797] syzkaller0: entered promiscuous mode [ 245.828517][T13797] syzkaller0: entered allmulticast mode [ 246.290579][T13822] tc action pedit 'at' offset -2147483645 out of bounds [ 246.419681][T13830] __nla_validate_parse: 24 callbacks suppressed [ 246.419701][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2131'. [ 246.480961][T13837] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 246.480961][T13837] Please contact the netfilter-devel mailing list or update your nftables rules. [ 246.904308][T13863] bond9: option all_slaves_active: invalid value (179) [ 246.906078][T13863] bond9 (unregistering): Released all slaves [ 246.930498][T13864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2139'. [ 246.935796][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 246.965192][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 247.149137][T13880] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2143'. [ 247.173546][T13885] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2147'. [ 247.309211][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 247.345465][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 247.389107][T13902] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2152'. [ 247.389299][T13902] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2152'. [ 247.891068][T13937] bond0: entered allmulticast mode [ 247.891084][T13937] : entered allmulticast mode [ 248.672485][ T1999] block nbd0: Possible stuck request ffff888027225080: control (read@0,4096B). Runtime 60 seconds [ 250.238801][T13887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.239340][T13919] netlink: 'syz.5.2155': attribute type 11 has an invalid length. [ 250.587464][ C0] net_ratelimit: 8 callbacks suppressed [ 250.588832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.589074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.589240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.589651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.590356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.590676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.591039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.666672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.666856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.667004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.113240][T14006] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 251.279368][T14018] netlink: 'syz.5.2181': attribute type 1 has an invalid length. [ 251.340576][T14018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.403258][T14018] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 251.453847][T14018] bond2: (slave veth0_to_bond): making interface the new active one [ 251.469342][T14018] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 251.491463][T14024] bond2: entered promiscuous mode [ 251.491489][T14024] veth0_to_bond: entered promiscuous mode [ 251.491693][T14024] bond2: entered allmulticast mode [ 251.491707][T14024] veth0_to_bond: entered allmulticast mode [ 252.090599][T14055] netlink: 'syz.5.2188': attribute type 9 has an invalid length. [ 252.231227][T14059] __nla_validate_parse: 36 callbacks suppressed [ 252.231240][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 253.146860][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.790393][ T1088] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 254.094252][T14007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.309138][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 255.626898][ C0] net_ratelimit: 9 callbacks suppressed [ 255.626913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.627096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.627575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.628025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.628174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.628475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.628777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.630482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.636784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.707117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.713273][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.654780][T14105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.810423][T14140] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 257.854217][T14140] xt_hashlimit: size too large, truncated to 1048576 [ 257.896499][T14142] netlink: 'syz.6.2212': attribute type 58 has an invalid length. [ 257.896520][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2212'. [ 257.938214][T14153] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2217'. [ 257.967727][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 257.970039][T14153] netlink: 'syz.4.2217': attribute type 39 has an invalid length. [ 258.055681][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2218'. [ 258.300261][T14169] netlink: 'syz.3.2222': attribute type 10 has an invalid length. [ 258.427707][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2224'. [ 258.450109][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2224'. [ 258.523841][T14189] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2226'. [ 258.599990][T14189] netlink: 508 bytes leftover after parsing attributes in process `syz.6.2226'. [ 258.800038][ T12] IPVS: starting estimator thread 0... [ 258.886691][T14209] IPVS: using max 33 ests per chain, 79200 per kthread [ 258.899485][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 259.023682][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2232'. [ 259.312040][T14243] unsupported nlmsg_type 40 [ 259.585157][T14259] netlink: 'syz.1.2243': attribute type 21 has an invalid length. [ 260.418114][T14310] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 260.638057][T14318] Cannot find add_set index 65532 as target [ 260.666801][ C1] net_ratelimit: 10 callbacks suppressed [ 260.666822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.666835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.667043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.667307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.686780][ T4984] udevd[4984]: worker [10938] /devices/virtual/block/nbd0 is taking a long time [ 260.746840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.747029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.747303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.747575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.978496][T14344] netlink: 'syz.1.2261': attribute type 2 has an invalid length. [ 261.035629][T14348] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.087666][T14344] : entered promiscuous mode [ 261.096251][T14346] netlink: 'syz.3.2264': attribute type 3 has an invalid length. [ 261.254618][T14351] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 261.471231][T14374] netlink: 'syz.4.2274': attribute type 11 has an invalid length. [ 261.471231][T14372] netlink: 'syz.4.2274': attribute type 11 has an invalid length. [ 261.793279][T14388] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 261.982334][T14393] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 264.545820][T14380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.794838][T14438] netlink: 'syz.3.2288': attribute type 21 has an invalid length. [ 264.794863][T14438] __nla_validate_parse: 14 callbacks suppressed [ 264.794875][T14438] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2288'. [ 264.868623][T14441] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2292'. [ 265.214180][T14455] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 265.643272][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 265.643303][T14475] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2305'. [ 265.643319][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2305'. [ 265.646105][T14475] sch_fq: defrate 0 ignored. [ 265.706692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.707056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.707220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.707393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.707675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.778120][ T5618] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 265.778151][ T5618] Bluetooth: unknown link type 48 [ 265.778199][ T5618] Bluetooth: hci3: connection err: -111 [ 265.786765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.786848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.786939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.787113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.296077][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 266.296102][T14503] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2312'. [ 266.296145][T14503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2312'. [ 266.489682][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2313'. [ 266.655042][T14518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2317'. [ 266.746924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.909542][T14528] bond0: (slave syz_tun): Releasing backup interface [ 266.916519][T14528] bridge0: port 1(syz_tun) entered blocking state [ 266.932198][T14528] bridge0: port 1(syz_tun) entered disabled state [ 266.932396][T14528] syz_tun: entered allmulticast mode [ 266.934428][T14528] syz_tun: entered promiscuous mode [ 267.060515][T14531] block nbd0: Unsupported socket: should be TCP or UNIX. [ 267.488122][T14555] netlink: 'syz.3.2328': attribute type 9 has an invalid length. [ 267.620047][T14559] PKCS7: Unknown OID: [4] (bad) [ 267.620060][T14559] PKCS7: Only support pkcs7_signedData type [ 267.982670][T14588] syzkaller0: entered promiscuous mode [ 267.982691][T14588] syzkaller0: entered allmulticast mode [ 268.005002][T14593] team0: Caught tx_queue_len zero misconfig [ 268.083929][T14593] syzkaller0: entered promiscuous mode [ 268.083951][T14593] syzkaller0: entered allmulticast mode [ 268.639114][T14635] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 268.651856][T14640] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 269.063488][T14665] netlink: 'syz.6.2359': attribute type 3 has an invalid length. [ 269.651568][T14678] netlink: 'syz.6.2359': attribute type 1 has an invalid length. [ 269.889500][T14707] __nla_validate_parse: 14 callbacks suppressed [ 269.889520][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2366'. [ 269.890469][T14707] tunl0: Caught tx_queue_len zero misconfig [ 270.523222][T14746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2376'. [ 270.749103][ C1] net_ratelimit: 4 callbacks suppressed [ 270.749125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.952563][T14767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2383'. [ 270.961045][T14763] bond10: (slave bond_slave_0): Device is not our slave [ 270.961068][T14763] bond10: option active_slave: invalid value (bond_slave_0) [ 270.991003][T14763] bond10 (unregistering): Released all slaves [ 271.079790][T14762] bond10: (slave bond_slave_0): Device is not our slave [ 271.079813][T14762] bond10: option active_slave: invalid value (bond_slave_0) [ 271.106315][T14762] bond10 (unregistering): Released all slaves [ 271.130890][T14777] netlink: Invalid conntrack timeout [ 271.130920][T14777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.174095][T14781] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 271.225648][T14784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2386'. [ 271.451984][T14797] netlink: 'syz.6.2390': attribute type 1 has an invalid length. [ 271.509280][T14797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.677129][T14814] netlink: 'syz.3.2393': attribute type 17 has an invalid length. [ 271.677151][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 271.677178][T14814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2393'. [ 271.729307][T14813] netlink: 'syz.6.2395': attribute type 1 has an invalid length. [ 271.729328][T14813] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2395'. [ 271.729343][T14813] netlink: 'syz.6.2395': attribute type 1 has an invalid length. [ 271.786902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.059168][T14833] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2398'. [ 272.059196][T14833] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2398'. [ 272.059212][T14833] netlink: 'syz.6.2398': attribute type 5 has an invalid length. [ 272.059226][T14833] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2398'. [ 272.298907][T14853] netlink: NAT attribute has 5 unknown bytes [ 272.298908][T14854] netlink: NAT attribute has 5 unknown bytes [ 272.298940][T14854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.298940][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.501409][T14866] veth1_to_bond: Caught tx_queue_len zero misconfig [ 272.736141][T14878] netlink: 'syz.1.2411': attribute type 18 has an invalid length. [ 272.749512][T14879] bond3: option all_slaves_active: invalid value (179) [ 272.755869][T14879] bond3 (unregistering): Released all slaves [ 272.846880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.144527][T14915] openvswitch: netlink: Flow actions attr not present in new flow. [ 273.209957][T14920] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 273.338839][T14922] tipc: Enabling of bearer rejected, failed to enable media [ 273.734223][T14961] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.608619][T15012] netlink: 'syz.4.2451': attribute type 12 has an invalid length. [ 274.778804][T15031] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 274.875173][T15036] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 274.921258][T15034] __nla_validate_parse: 12 callbacks suppressed [ 274.921278][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2456'. [ 274.921297][T15034] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2456'. [ 274.984089][T15034] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 275.005317][T15034] bond3 (unregistering): Released all slaves [ 275.009045][T15040] netlink: 'syz.6.2456': attribute type 49 has an invalid length. [ 275.041154][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 275.541263][T15064] 8021q: adding VLAN 0 to HW filter on device bond9 [ 275.787045][ C1] net_ratelimit: 1 callbacks suppressed [ 275.787068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.931933][T15098] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2476'. [ 275.976280][T15094] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 276.020581][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2473'. [ 276.156447][T15109] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2481'. [ 276.156495][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2481'. [ 276.156510][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2481'. [ 276.472406][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2487'. [ 276.539034][T15131] sctp: [Deprecated]: syz.3.2488 (pid 15131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.539034][T15131] Use struct sctp_sack_info instead [ 276.793053][T15141] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 276.826947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.941132][T15149] netlink: 316 bytes leftover after parsing attributes in process `syz.4.2494'. [ 277.241377][T15175] validate_nla: 1 callbacks suppressed [ 277.243339][T15175] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 277.735930][T15200] Bluetooth: ISO socket layer initialized [ 277.770859][T15202] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 277.866835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.985585][T15212] gre3: entered promiscuous mode [ 278.211523][T15225] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 278.263601][T15227] netlink: 'syz.4.2521': attribute type 1 has an invalid length. [ 278.470178][T15242] netlink: 'syz.6.2525': attribute type 15 has an invalid length. [ 278.561858][T15242] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 278.580596][T15242] bond3 (unregistering): Released all slaves [ 278.750642][ T1999] block nbd0: Possible stuck request ffff888027225080: control (read@0,4096B). Runtime 90 seconds [ 278.848457][T15267] team0: No ports can be present during mode change [ 278.849086][T15264] bridge: RTM_NEWNEIGH with invalid ether address [ 278.851324][T15263] bridge: RTM_NEWNEIGH with invalid ether address [ 279.414492][T15303] syz_tun: left allmulticast mode [ 279.414519][T15303] syz_tun: left promiscuous mode [ 279.417250][T15303] bridge0: port 1(syz_tun) entered disabled state [ 279.432648][T15305] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.433095][T15306] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.451403][T15303] bond6: (slave bond0): Releasing active interface [ 279.457671][T15303] dummy0: left allmulticast mode [ 279.457768][T15303] dummy0: left promiscuous mode [ 279.458035][T15303] bridge0: port 3(dummy0) entered disabled state [ 279.483096][T15303] bridge_slave_1: left allmulticast mode [ 279.483115][T15303] bridge_slave_1: left promiscuous mode [ 279.483226][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.491053][T15306] netlink: 'syz.1.2542': attribute type 11 has an invalid length. [ 279.514333][T15303] bond9: (slave veth0_to_bond): Releasing active interface [ 279.529542][T15303] bond0: (slave bond_slave_0): Releasing backup interface [ 279.531691][T15303] bond0: (slave bond_slave_1): Releasing backup interface [ 279.552861][T15303] team0: Port device team_slave_0 removed [ 279.571020][T15303] team0: Port device team_slave_1 removed [ 279.573180][T15303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.573195][T15303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.593369][T15303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.593393][T15303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.604014][T15303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 279.658473][T15307] team0: Device xfrm0 is of different type [ 279.679163][T15308] tipc: Started in network mode [ 279.679193][T15308] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 279.679459][T15308] tipc: Enabled bearer , priority 0 [ 279.701056][T15318] netlink: 'syz.1.2543': attribute type 10 has an invalid length. [ 279.720994][T15310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 279.722641][T15311] team0: Device xfrm0 is of different type [ 279.727139][T15313] tipc: Enabling of bearer rejected, already enabled [ 279.767114][T15318] syzkaller1: entered promiscuous mode [ 279.767130][T15318] syzkaller1: entered allmulticast mode [ 279.994050][T15329] __nla_validate_parse: 13 callbacks suppressed [ 279.994071][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 280.015657][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 280.097918][T15323] tipc: New replicast peer: 172.20.20.187 [ 280.102882][T15323] tipc: Enabled bearer , priority 10 [ 280.165624][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2548'. [ 280.523656][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2557'. [ 280.630828][T15366] netlink: 'syz.1.2560': attribute type 23 has an invalid length. [ 280.827168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.938895][T15386] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 281.168800][T15399] team0: Device xfrm0 is of different type [ 281.217611][ T6112] tipc: Node number set to 11578026 [ 281.295436][T15403] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 281.383646][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'. [ 281.391379][T15414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.491250][T15418] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2573'. [ 281.687463][T15430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2576'. [ 281.866829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.906922][T15440] syzkaller0: entered promiscuous mode [ 281.906944][T15440] syzkaller0: entered allmulticast mode [ 281.939827][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.941891][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.946352][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.962748][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.976930][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.353640][T15461] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2588'. [ 282.365944][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'. [ 282.596194][T15470] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2589'. [ 282.596219][T15470] tc_dump_action: action bad kind [ 282.908316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.442714][T15525] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 283.747401][T15441] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.748249][T15441] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.748419][T15441] bridge_slave_0: entered allmulticast mode [ 283.754606][T15441] bridge_slave_0: entered promiscuous mode [ 283.783901][T15441] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.784067][T15441] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.784214][T15441] bridge_slave_1: entered allmulticast mode [ 283.786187][T15441] bridge_slave_1: entered promiscuous mode [ 283.821713][T15441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.824919][T15441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.894325][T15441] team0: Port device team_slave_0 added [ 283.894845][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.895192][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.895425][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.906194][T15441] team0: Port device team_slave_1 added [ 283.933048][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.933342][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.933613][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.933897][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.934155][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.934398][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 283.959077][T15556] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 284.029558][ T5616] Bluetooth: hci7: command tx timeout [ 284.172450][T15441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.172469][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.172497][T15441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.205265][T15441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.205285][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.205313][T15441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.374867][T15441] hsr_slave_0: entered promiscuous mode [ 284.382354][T15441] hsr_slave_1: entered promiscuous mode [ 284.389389][T15441] debugfs: 'hsr0' already exists in 'hsr' [ 284.389414][T15441] Cannot create hsr debugfs directory [ 284.437374][T15568] bond10: entered promiscuous mode [ 284.464030][T15568] macvlan2: entered promiscuous mode [ 284.464052][T15568] macvlan2: entered allmulticast mode [ 284.465057][T15568] bond10: (slave macvlan2): Opening slave failed [ 284.892206][T15603] bond0: (slave syz_tun): Releasing backup interface [ 284.919174][T15603] bridge_slave_0: left allmulticast mode [ 284.919201][T15603] bridge_slave_0: left promiscuous mode [ 284.919472][T15603] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.953787][T15603] bridge_slave_1: left allmulticast mode [ 284.953811][T15603] bridge_slave_1: left promiscuous mode [ 284.954006][T15603] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.990252][T15603] bond1: (slave veth0_to_bond): Releasing backup interface [ 285.009125][T15603] bond0: (slave bond_slave_0): Releasing backup interface [ 285.034863][T15603] bond0: (slave bond_slave_1): Releasing backup interface [ 285.062903][T15603] team0: Port device team_slave_0 removed [ 285.085759][T15603] team0: Port device team_slave_1 removed [ 285.095406][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.095431][T15603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.109402][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.109424][T15603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.115071][T15603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.134554][T15614] sctp: [Deprecated]: syz.3.2626 (pid 15614) Use of int in max_burst socket option. [ 285.134554][T15614] Use struct sctp_assoc_value instead [ 285.274988][T15609] bond11 (unregistering): Released all slaves [ 285.321470][T15610] tun0: tun_chr_ioctl cmd 1074025675 [ 285.321487][T15610] tun0: persist enabled [ 285.527520][T15623] ip_tables: iptables: counters copy to user failed while replacing table [ 285.564805][T15623] C: renamed from lo [ 285.571546][T15629] __nla_validate_parse: 6 callbacks suppressed [ 285.571565][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 285.571809][T15623] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.573711][T15623] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2629'. [ 285.584233][T15629] gtp1: entered promiscuous mode [ 285.584253][T15629] gtp1: entered allmulticast mode [ 285.591602][T15630] syzkaller0: entered promiscuous mode [ 285.591624][T15630] syzkaller0: entered allmulticast mode [ 285.770466][T15630] tipc: Enabled bearer , priority 0 [ 285.772109][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2635'. [ 285.804158][T15441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 285.827018][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.828233][T15441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.832132][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.833355][T15441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 285.868019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.910353][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.911656][T15441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 285.925756][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.107813][ T5616] Bluetooth: hci7: command tx timeout [ 286.184974][T15441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.222795][T15441] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.240771][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.240877][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.266141][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.266208][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.390352][T15628] tipc: Resetting bearer [ 286.459875][T15628] tipc: Disabling bearer [ 286.487639][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2639'. [ 286.563456][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2640'. [ 286.664315][T15664] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2640'. [ 286.671405][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 286.906929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.239727][T15698] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 287.241366][T15698] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2648'. [ 287.576471][T15441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.946817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.183524][T15441] veth0_vlan: entered promiscuous mode [ 288.186749][ T5616] Bluetooth: hci7: command tx timeout [ 288.224850][T15441] veth1_vlan: entered promiscuous mode [ 288.305515][T15441] veth0_macvtap: entered promiscuous mode [ 288.330526][T15441] veth1_macvtap: entered promiscuous mode [ 288.399169][T15441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.425174][T15441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.509074][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.509123][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.509157][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.509188][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.726393][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.726414][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.832280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.832302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.069985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.744869][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2681'. [ 289.954615][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2680'. [ 289.983328][T15827] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.107191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.718028][T15877] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 290.787517][T15882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 290.814833][T15883] validate_nla: 26 callbacks suppressed [ 290.814854][T15883] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 290.814867][T15883] __nla_validate_parse: 1 callbacks suppressed [ 290.814877][T15883] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2700'. [ 290.827212][T15881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.876454][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2702'. [ 290.876477][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2702'. [ 291.086999][T15891] x_tables: duplicate underflow at hook 1 [ 291.146815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.171833][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 291.191846][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 291.193211][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 291.204999][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 291.205602][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 291.379265][T15908] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2710'. [ 291.575373][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2712'. [ 291.581664][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2712'. [ 291.629471][ T52] Bluetooth: hci7: command 0x0405 tx timeout [ 291.719550][T15923] netlink: 'syz.4.2714': attribute type 10 has an invalid length. [ 291.762904][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2715'. [ 292.261008][ T5992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.261045][ T5992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.400064][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 292.425130][ T59] tipc: Subscription rejected, illegal request [ 292.503199][T15945] netlink: 'syz.7.2720': attribute type 2 has an invalid length. [ 292.710321][ T5992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.710356][ T5992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.858671][T15980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.995526][ T5992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.995561][ T5992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.148643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.312896][ T52] Bluetooth: hci8: command tx timeout [ 293.323720][ T5992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.323754][ T5992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.381279][T16003] xt_hashlimit: size too large, truncated to 1048576 [ 293.553560][T16005] syz_tun: entered allmulticast mode [ 293.582471][T16009] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.2727'. [ 293.582581][T16009] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 293.623410][T16009] 0ªX¹¦Dö»: entered allmulticast mode [ 293.685574][T16011] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2728'. [ 293.708107][ T52] Bluetooth: hci7: command 0x0405 tx timeout [ 294.066930][ T7787] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.069367][ T117] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.186869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.220651][ T5992] bridge_slave_1: left promiscuous mode [ 294.223538][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.244639][ T5992] bridge_slave_0: left allmulticast mode [ 294.244664][ T5992] bridge_slave_0: left promiscuous mode [ 294.247346][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.785306][ T5992] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 294.800357][ T5992] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 294.870261][ T5992] bond0 (unregistering): (slave 30): Releasing backup interface [ 294.875661][ T5992] : left allmulticast mode [ 294.887571][ T5992] bond0 (unregistering): Released all slaves [ 294.901192][ T5992] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 294.902228][ T5992] bond1 (unregistering): Released all slaves [ 294.943249][ T5992] bond2 (unregistering): Released all slaves [ 294.960074][ T13] smbdirect: ib_dev[syz1] removed [ 294.968940][ T5992] bond3 (unregistering): Released all slaves [ 295.013882][ T5992] bond4 (unregistering): Released all slaves [ 295.037552][ T5992] bond5 (unregistering): Released all slaves [ 295.059260][ T7788] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.059308][ T7788] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.062053][T16034] team0: Mode changed to "broadcast" [ 295.183913][ T6109] infiniband syz1: ib_query_port failed (-19) [ 295.227019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.389017][ T5616] Bluetooth: hci8: command tx timeout [ 295.504814][ T5992] ovs-dp0: left promiscuous mode [ 295.507960][T16063] nbd: must specify at least one socket [ 295.681927][ T5992] : left promiscuous mode [ 295.787834][ T5616] Bluetooth: hci7: command 0x0405 tx timeout [ 295.873642][ T5992] tipc: Left network mode [ 295.873697][T16083] __nla_validate_parse: 2 callbacks suppressed [ 295.873722][T16083] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2741'. [ 295.873739][T16083] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2741'. [ 296.547875][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 296.692919][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 296.920343][T16114] veth1_to_bond: entered allmulticast mode [ 297.041818][T15899] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.043957][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.044122][T15899] bridge_slave_0: entered allmulticast mode [ 297.048142][T15899] bridge_slave_0: entered promiscuous mode [ 297.054645][T16117] veth1_to_bond: left allmulticast mode [ 297.072876][T15899] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.072980][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.073211][T15899] bridge_slave_1: entered allmulticast mode [ 297.086297][T15899] bridge_slave_1: entered promiscuous mode [ 297.133208][T16122] x_tables: duplicate underflow at hook 3 [ 297.227984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.389742][T16131] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2752'. [ 297.476626][ T5616] Bluetooth: hci8: command tx timeout [ 297.512882][T15899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.743563][T15899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.859239][T15899] team0: Port device team_slave_0 added [ 297.864689][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 297.903424][T15899] team0: Port device team_slave_1 added [ 298.014526][T16161] netlink: 'syz.3.2756': attribute type 21 has an invalid length. [ 298.067769][T16164] netlink: 'syz.3.2756': attribute type 1 has an invalid length. [ 298.235784][T16171] netlink: 'syz.6.2757': attribute type 1 has an invalid length. [ 298.262462][T16164] bond11: entered promiscuous mode [ 298.266076][T16164] 8021q: adding VLAN 0 to HW filter on device bond11 [ 298.266860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.294024][T15899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.294041][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.294068][T15899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.330041][T15899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.330062][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.330090][T15899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.400142][T16161] bond11: (slave bridge5): making interface the new active one [ 298.400166][T16161] bridge5: entered promiscuous mode [ 298.401137][T16161] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 298.469787][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 298.469809][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'. [ 298.499976][T16171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.522439][ T5992] hsr_slave_0: left promiscuous mode [ 298.526323][ T5992] veth1_macvtap: left promiscuous mode [ 298.526433][ T5992] veth1_vlan: left promiscuous mode [ 298.544723][ T5992] veth0_vlan: left promiscuous mode [ 298.754649][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 298.779811][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 299.300382][T16195] IPVS: set_ctl: invalid protocol: 41 172.20.20.26:20004 [ 299.306922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.547271][ T5616] Bluetooth: hci8: command tx timeout [ 299.639495][T16199] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2764'. [ 299.642616][T16200] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2764'. [ 301.873833][T15899] hsr_slave_0: entered promiscuous mode [ 301.881008][T15899] hsr_slave_1: entered promiscuous mode [ 302.018410][T16212] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 302.054856][T16210] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 302.258607][T16215] bond1: entered promiscuous mode [ 302.393728][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 302.509784][T16211] bond2: entered promiscuous mode [ 302.584016][T16232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.871633][ T5992] IPVS: stop unused estimator thread 0... [ 302.885119][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 303.352465][T16286] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2777'. [ 303.364466][T16294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2779'. [ 303.383512][T15899] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.520707][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2780'. [ 303.573996][T15899] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.744647][T15899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.932870][T15899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.345302][T16344] netlink: 'syz.4.2789': attribute type 5 has an invalid length. [ 304.377694][T16352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.428954][T15899] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.447947][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.448840][T15899] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.454388][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.481925][T15899] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.512261][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.524030][T15899] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.550822][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.601943][T16367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.692391][T15899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.716069][T15899] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.731684][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.731743][ T7811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.766916][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.767012][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.224450][T16384] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 305.350404][ T50] IPVS: starting estimator thread 0... [ 305.374886][T16393] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 305.429613][T16398] netlink: 'syz.4.2801': attribute type 8 has an invalid length. [ 305.429636][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 305.455872][T16394] IPVS: using max 29 ests per chain, 69600 per kthread [ 305.468362][T16400] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2802'. [ 305.468387][T16400] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2802'. [ 305.489480][T16404] netlink: 'syz.4.2801': attribute type 8 has an invalid length. [ 305.489500][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 305.627357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.762507][T15899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.001822][T15899] veth0_vlan: entered promiscuous mode [ 306.063463][T15899] veth1_vlan: entered promiscuous mode [ 306.211351][T15899] veth0_macvtap: entered promiscuous mode [ 306.228478][T15899] veth1_macvtap: entered promiscuous mode [ 306.353090][T15899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.470901][T15899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.595121][ T5992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.603200][ T5992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.603535][ T5992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.667778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.678680][ T1088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.874907][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.874927][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.006337][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.006359][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.021435][T16471] syzkaller0: entered promiscuous mode [ 307.021456][T16471] syzkaller0: entered allmulticast mode [ 307.171710][T16481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2814'. [ 307.243571][T16477] can: request_module (can-proto-0) failed. [ 307.299867][T16477] can: request_module (can-proto-0) failed. [ 307.343883][T16487] syzkaller0: entered promiscuous mode [ 307.343907][T16487] syzkaller0: entered allmulticast mode [ 307.487511][ T13] IPVS: starting estimator thread 0... [ 307.565914][T16477] can: request_module (can-proto-0) failed. [ 307.586903][T16496] IPVS: using max 31 ests per chain, 74400 per kthread [ 307.692046][T16502] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2817'. [ 307.700161][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.707463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.724301][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.725799][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.732902][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.733450][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.805307][T16477] can: request_module (can-proto-0) failed. [ 307.892553][T16477] can: request_module (can-proto-0) failed. [ 308.166979][T16528] xt_hashlimit: size too large, truncated to 1048576 [ 308.789338][T16557] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2824'. [ 308.832537][ T1999] block nbd0: Possible stuck request ffff888027225080: control (read@0,4096B). Runtime 120 seconds [ 308.865135][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.865171][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 308.865198][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.973642][T16562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2827'. [ 309.010142][T16562] geneve2: entered promiscuous mode [ 309.099582][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.099613][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 309.099639][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.214937][T16581] macvtap0: entered allmulticast mode [ 309.214979][T16581] veth0_macvtap: entered allmulticast mode [ 309.261551][ T59] team0: Port device netdevsim1 removed [ 309.264851][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.264881][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 309.264905][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.425896][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.425930][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 309.425955][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.463652][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2832'. [ 309.592640][T16597] netlink: 'syz.7.2832': attribute type 7 has an invalid length. [ 309.730813][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2833'. [ 309.787750][ T52] Bluetooth: hci2: command tx timeout [ 309.826766][ T1088] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.837941][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'. [ 309.837962][T16606] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.929510][ T7811] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.024364][T16614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.218453][ T50] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.256063][ T59] batadv3: left allmulticast mode [ 310.256132][ T59] batadv3: left promiscuous mode [ 310.256355][ T59] bridge0: port 4(batadv3) entered disabled state [ 310.319191][T16624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.344430][ T59] bond0 (unregistering): Released all slaves [ 311.351614][ T59] bond1 (unregistering): Released all slaves [ 311.364129][ T59] bond2 (unregistering): Released all slaves [ 311.384241][ T59] bond3 (unregistering): (slave veth3): Releasing active interface [ 311.384270][ T59] batadv1: entered promiscuous mode [ 311.404233][ T59] bond3 (unregistering): (slave batadv1): Releasing active interface [ 311.404261][ T59] batadv1: left promiscuous mode [ 311.424694][ T59] bond3 (unregistering): Released all slaves [ 311.446286][ T59] bond4 (unregistering): Released all slaves [ 311.463177][ T59] bond5 (unregistering): (slave veth5): Releasing active interface [ 311.463206][ T59] batadv2: entered promiscuous mode [ 311.481797][ T59] bond5 (unregistering): (slave batadv2): Releasing active interface [ 311.481825][ T59] batadv2: left promiscuous mode [ 311.484160][ T59] bond5 (unregistering): Released all slaves [ 311.499846][ T59] bond6 (unregistering): Released all slaves [ 311.514254][ T59] bond7 (unregistering): Released all slaves [ 311.559308][ T59] bond8 (unregistering): Released all slaves [ 311.575599][ T59] bond9 (unregistering): Released all slaves [ 311.621734][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 311.867727][ T52] Bluetooth: hci2: command tx timeout [ 312.018554][ T59] tipc: Disabling bearer [ 312.072417][ T59] tipc: Disabling bearer [ 312.072577][ T59] tipc: Left network mode [ 312.265029][T16670] ip_tables: iptables: counters copy to user failed while replacing table [ 312.317189][T16507] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.317281][T16507] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.317433][T16507] bridge_slave_0: entered allmulticast mode [ 312.322490][T16507] bridge_slave_0: entered promiscuous mode [ 312.331729][T16507] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.331854][T16507] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.332001][T16507] bridge_slave_1: entered allmulticast mode [ 312.338956][T16507] bridge_slave_1: entered promiscuous mode [ 312.467914][ T50] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.712250][T16507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.731801][T16507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.860349][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2846'. [ 312.869706][T16690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2846'. [ 312.869730][T16690] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2846'. [ 312.872170][T16691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2846'. [ 312.872192][T16691] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2846'. [ 313.032667][T16507] team0: Port device team_slave_0 added [ 313.046130][T16507] team0: Port device team_slave_1 added [ 313.101780][T16713] block nbd6: not configured, cannot reconfigure [ 313.156360][T16715] netlink: 'syz.6.2855': attribute type 32 has an invalid length. [ 313.230937][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2854'. [ 313.343408][T16507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.343425][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.343452][T16507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.350386][T16507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.350402][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.350428][T16507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.664394][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 313.683300][T16507] hsr_slave_0: entered promiscuous mode [ 313.684319][T16507] hsr_slave_1: entered promiscuous mode [ 313.685038][T16507] debugfs: 'hsr0' already exists in 'hsr' [ 313.685056][T16507] Cannot create hsr debugfs directory [ 313.716012][T16736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.793050][T16737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.947831][ T52] Bluetooth: hci2: command tx timeout [ 314.141147][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2867'. [ 314.143598][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 314.161808][T16759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.402679][T16767] IPVS: length: 235 != 24 [ 314.684035][T16507] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.910925][T16821] sctp: [Deprecated]: syz.1.2874 (pid 16821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.910925][T16821] Use struct sctp_sack_info instead [ 315.054120][T16815] team_slave_0: entered allmulticast mode [ 315.158990][T16507] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.293554][ T59] hsr_slave_0: left promiscuous mode [ 315.318778][ T59] veth1_macvtap: left promiscuous mode [ 315.318817][ T59] veth0_macvtap: left promiscuous mode [ 315.318916][ T59] veth1_vlan: left promiscuous mode [ 315.318942][ T59] veth0_vlan: left promiscuous mode [ 315.944387][T16507] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.026952][ T5616] Bluetooth: hci2: command tx timeout [ 316.079447][T16858] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 316.157651][T16507] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.185736][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'. [ 316.662328][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 316.662472][T16880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.962858][ T59] IPVS: stop unused estimator thread 0... [ 317.154954][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.377630][T16927] netlink: 'syz.1.2893': attribute type 5 has an invalid length. [ 317.555064][T16930] syzkaller0: entered promiscuous mode [ 317.555087][T16930] syzkaller0: entered allmulticast mode [ 317.577966][T16507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.618118][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.628917][T16507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.662903][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.666126][T16507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.695651][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.704730][T16507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.722812][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.012683][T16960] netlink: 'syz.7.2899': attribute type 4 has an invalid length. [ 318.012705][T16960] __nla_validate_parse: 6 callbacks suppressed [ 318.012717][T16960] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2899'. [ 318.094691][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 318.096308][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 318.097187][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 318.131529][T16969] hsr0: entered allmulticast mode [ 318.131554][T16969] hsr_slave_0: entered allmulticast mode [ 318.131573][T16969] hsr_slave_1: entered allmulticast mode [ 318.136273][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2903'. [ 318.141752][T16969] hsr_slave_0: left promiscuous mode [ 318.147787][T16969] hsr_slave_1: left promiscuous mode [ 318.168602][T16969] hsr0 (unregistering): left allmulticast mode [ 318.208312][T16507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.356076][T16507] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.372317][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.372420][ T7789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.390022][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.390142][ T7789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.703629][T16995] nbd: must specify at least one socket [ 318.998531][T17008] netlink: 'syz.7.2910': attribute type 11 has an invalid length. [ 318.998552][T17008] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2910'. [ 319.486214][T17039] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2915'. [ 319.486238][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 319.508227][T16507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.946104][T17060] netlink: del zone limit has 4 unknown bytes [ 319.954988][T17061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.955005][T17061] IPv6: NLM_F_CREATE should be set when creating new route [ 319.969699][T17061] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2921'. [ 320.224314][T17079] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 320.316073][T17090] netlink: 'syz.6.2931': attribute type 1 has an invalid length. [ 320.316094][T17090] netlink: 756 bytes leftover after parsing attributes in process `syz.6.2931'. [ 320.353965][T17090] syzkaller1: entered promiscuous mode [ 320.353989][T17090] syzkaller1: entered allmulticast mode [ 320.533367][T17098] dvmrp8: entered allmulticast mode [ 320.718771][T16507] veth0_vlan: entered promiscuous mode [ 320.743207][T16507] veth1_vlan: entered promiscuous mode [ 320.894279][T16507] veth0_macvtap: entered promiscuous mode [ 320.921799][T16507] veth1_macvtap: entered promiscuous mode [ 321.024924][T16507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.081312][T16507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.138056][ T7789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.205204][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.309845][ T7788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.310288][ T7788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.314345][ T7785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.314364][ T7785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.572459][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.572483][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.180090][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.203813][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.209000][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.225650][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.226277][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.286081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.916165][T17192] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.943220][T17192] bridge_slave_0 (unregistering): left allmulticast mode [ 322.943246][T17192] bridge_slave_0 (unregistering): left promiscuous mode [ 322.943382][T17192] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.286808][T17208] __nla_validate_parse: 8 callbacks suppressed [ 323.286827][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.287176][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.287425][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.287683][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.287936][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.288175][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.294683][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.294973][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.295228][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.295486][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 323.314807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.109369][T17248] team0: entered promiscuous mode [ 324.109394][T17248] team_slave_0: entered promiscuous mode [ 324.109594][T17248] team_slave_1: entered promiscuous mode [ 324.266898][ T52] Bluetooth: hci3: command tx timeout [ 324.347028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.444001][T17170] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.444081][T17170] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.444422][T17170] bridge_slave_0: entered allmulticast mode [ 324.449674][T17170] bridge_slave_0: entered promiscuous mode [ 324.455732][T17170] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.455822][T17170] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.461987][T17170] bridge_slave_1: entered allmulticast mode [ 324.470087][T17170] bridge_slave_1: entered promiscuous mode [ 324.548178][T17170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.560102][T17170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.633954][T17274] nftables ruleset with unbound set [ 324.679969][T17170] team0: Port device team_slave_0 added [ 324.690347][T17170] team0: Port device team_slave_1 added [ 324.771817][T17279] netlink: 'syz.1.2971': attribute type 1 has an invalid length. [ 324.879526][T17279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.880780][T17170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.880795][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.880823][T17170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.900094][T17280] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 324.932917][T17284] bridge1: entered promiscuous mode [ 324.951602][T17284] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 324.972928][T17170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.972946][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.972973][T17170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.221833][T17170] hsr_slave_0: entered promiscuous mode [ 325.222969][T17170] hsr_slave_1: entered promiscuous mode [ 325.223628][T17170] debugfs: 'hsr0' already exists in 'hsr' [ 325.223647][T17170] Cannot create hsr debugfs directory [ 325.589899][T17322] ip_tables: iptables: counters copy to user failed while replacing table [ 325.594268][T17170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.594304][T17170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.858715][T17170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.858751][T17170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.949893][T17170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.949916][T17170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.040800][T17170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.040822][T17170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.221996][T17339] netlink: 'syz.6.2988': attribute type 4 has an invalid length. [ 326.290900][T17170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.296401][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.298269][T17170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.302396][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.303478][T17170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.323417][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.326238][T17170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.357766][ T52] Bluetooth: hci3: command tx timeout [ 326.364882][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.542966][T17170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.580746][T17170] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.596402][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.596499][ T7789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.612009][T17359] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.615141][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.615201][ T7789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.920154][T17372] tipc: Started in network mode [ 326.920185][T17372] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 326.920322][T17372] tipc: Enabled bearer , priority 0 [ 326.927594][T17373] tipc: Enabling of bearer rejected, already enabled [ 326.937875][T17372] netlink: Invalid conntrack helper [ 326.937903][T17372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.391401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.865643][T17429] netlink: 'syz.7.3011': attribute type 8 has an invalid length. [ 327.901943][T17429] netlink: 'syz.7.3011': attribute type 8 has an invalid length. [ 327.922938][T17170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.051345][T13728] tipc: Node number set to 11578026 [ 328.205113][T17170] veth0_vlan: entered promiscuous mode [ 328.241849][T17170] veth1_vlan: entered promiscuous mode [ 328.313375][T17170] veth0_macvtap: entered promiscuous mode [ 328.328816][T17170] veth1_macvtap: entered promiscuous mode [ 328.359341][T17170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.394953][T17170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.429051][ T1121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.429808][ T1121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.431702][ T52] Bluetooth: hci3: command tx timeout [ 328.431705][ T1121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.431874][ T1121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.783461][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.783492][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.842397][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.842430][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.996492][T17467] netlink: 'syz.7.3019': attribute type 6 has an invalid length. [ 329.304699][ T52] Bluetooth: hci6: unexpected event 0x3b length: 9 < 10 [ 329.335901][T17488] x_tables: duplicate underflow at hook 1 [ 329.350327][T17489] x_tables: duplicate underflow at hook 1 [ 329.403888][T17495] __nla_validate_parse: 20 callbacks suppressed [ 329.403910][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 329.470804][ T5618] Bluetooth: hci5: command 0x0c3a tx timeout [ 329.804102][T17509] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3031'. [ 329.857075][T17517] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 329.885211][T17517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3032'. [ 330.206274][T17519] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.3034'. [ 330.206299][T17519] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 330.234327][T17524] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 330.322511][ T1121] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.357218][ T7788] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.357370][ T7788] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.357453][ T7788] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.506659][ T5616] Bluetooth: hci3: command tx timeout [ 330.723329][T17537] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3041'. [ 331.065985][T17551] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3046'. [ 331.066012][T17551] openvswitch: netlink: Message has 512 unknown bytes. [ 331.074395][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 331.141960][T17554] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3043'. [ 331.255362][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3046'. [ 331.255389][T17557] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3046'. [ 331.255435][T17557] netlink: 'syz.6.3046': attribute type 5 has an invalid length. [ 331.295826][T17555] 0ªX¹¦Dö»: entered promiscuous mode [ 331.480168][T17550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.562228][T17550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.712439][T17615] syzkaller1: entered promiscuous mode [ 332.712612][T17615] syzkaller1: entered allmulticast mode [ 333.097631][T17632] sctp: [Deprecated]: syz.1.3068 (pid 17632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.097631][T17632] Use struct sctp_sack_info instead [ 333.583281][T17647] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 333.633399][T17651] openvswitch: netlink: Duplicate key (type 6). [ 334.012536][T17665] ip_tables: iptables: counters copy to user failed while replacing table [ 334.552933][T17687] netlink: 'syz.4.3087': attribute type 1 has an invalid length. [ 334.621643][T17691] __nla_validate_parse: 8 callbacks suppressed [ 334.621662][T17691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3087'. [ 334.716108][T17687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.162225][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 335.332683][T17713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3092'. [ 335.351586][T17725] netlink: Unknown conntrack attr (0) [ 335.351622][T17725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.444308][T17731] netlink: 420 bytes leftover after parsing attributes in process `syz.6.3095'. [ 335.845954][T17737] syzkaller0: entered promiscuous mode [ 335.846127][T17737] syzkaller0: entered allmulticast mode [ 335.887840][T17752] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 335.987333][T17755] SET target dimension over the limit! [ 336.494128][T17740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.914069][ T1999] block nbd0: Possible stuck request ffff888027225080: control (read@0,4096B). Runtime 150 seconds [ 339.252865][T17769] batman_adv: batadv0: Adding interface: macvtap1 [ 339.252884][T17769] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.252913][T17769] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 339.586112][T17792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3112'. [ 339.610423][T17792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3112'. [ 339.637630][T17780] syzkaller0: entered promiscuous mode [ 339.637654][T17780] syzkaller0: entered allmulticast mode [ 339.914599][T17802] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 340.079793][ T7813] IPVS: starting estimator thread 0... [ 340.173511][T17810] IPVS: using max 33 ests per chain, 79200 per kthread [ 340.392371][T17812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3121'. [ 344.011826][T17834] netlink: 'syz.4.3123': attribute type 21 has an invalid length. [ 344.011916][T17834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3123'. [ 344.166443][T17846] netlink: 'syz.3.3128': attribute type 30 has an invalid length. [ 344.470857][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'. [ 344.487653][T16810] dummy0: entered promiscuous mode [ 344.496574][T17853] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3129'. [ 344.647699][T17869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3134'. [ 344.648547][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 344.648572][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3134'. [ 344.650268][T17869] netlink: 'syz.4.3134': attribute type 2 has an invalid length. [ 344.650285][T17869] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3134'. [ 344.650855][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3134'. [ 344.828067][ T5618] Bluetooth: hci6: command 0x0406 tx timeout [ 344.941220][T17877] syzkaller0: entered promiscuous mode [ 344.941244][T17877] syzkaller0: entered allmulticast mode [ 344.997545][T17877] simple: /dev/video#_3 [ 344.997563][T17877] simple: /dev/video#_6 [ 344.997574][T17877] simple: /dev/video#_9 [ 344.997583][T17877] simple: /dev/video#_12 [ 344.997593][T17877] simple: /dev/video#_15 [ 344.997601][T17877] simple: /dev/video#_18 [ 344.997610][T17877] simple: /dev/video#_21 [ 344.997619][T17877] simple: /dev/video#_24 [ 344.997629][T17877] simple: /dev/video#_27 [ 344.997639][T17877] simple: /dev/video#_30 [ 344.997650][T17877] simple: /dev/video#_33 [ 344.997659][T17877] simple: /dev/video#_36 [ 344.997670][T17877] simple: /dev/video#_39 [ 344.997679][T17877] simple: /dev/video#_42 [ 344.997689][T17877] simple: /dev/video#_45 [ 344.997699][T17877] simple: /dev/video#_48 [ 344.997709][T17877] simple: /dev/video#_51 [ 344.997719][T17877] simple: /dev/video#_54 [ 344.997729][T17877] simple: /dev/video#_57 [ 344.997739][T17877] simple: /dev/video#_60 [ 344.997749][T17877] simple: /dev/video#_63 [ 344.997758][T17877] simple: /dev/video#_66 [ 344.997769][T17877] simple: /dev/video#_69 [ 344.997778][T17877] simple: /dev/video#_72 [ 344.999275][T17877] simple: /dev/video#_75 [ 344.999291][T17877] simple: /dev/video#_78 [ 344.999301][T17877] simple: /dev/video#_81 [ 344.999311][T17877] simple: /dev/video#_84 [ 344.999321][T17877] simple: /dev/video#_87 [ 344.999331][T17877] simple: /dev/video#_90 [ 344.999341][T17877] simple: /dev/video#_93 [ 344.999359][T17877] simple: /dev/video#_96 [ 344.999370][T17877] TC_ACT_REPEAT abuse ? [ 345.661552][T17852] Set syz1 is full, maxelem 6117 reached [ 345.764648][T17898] netlink: 'syz.4.3144': attribute type 7 has an invalid length. [ 345.764669][T17898] netlink: 'syz.4.3144': attribute type 5 has an invalid length. [ 345.764682][T17898] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3144'. [ 345.802878][T17899] netlink: 'syz.1.3141': attribute type 5 has an invalid length. [ 345.818164][T17898] sctp: [Deprecated]: syz.4.3144 (pid 17898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.818164][T17898] Use struct sctp_sack_info instead [ 345.904568][T17901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3145'. [ 346.414613][T17918] syzkaller0: entered promiscuous mode [ 346.414802][T17918] syzkaller0: entered allmulticast mode [ 346.749217][T17932] v: renamed from veth0_vlan (while UP) [ 346.874432][T17931] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 346.874583][T17931] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 347.292677][T17949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3158'. [ 347.297574][T17952] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 347.886475][T17963] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 347.962357][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 347.965410][T17965] netlink: 'syz.3.3164': attribute type 16 has an invalid length. [ 347.965442][T17965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 347.965467][T17965] veth0_macvtap: entered allmulticast mode [ 348.051779][T17967] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3165'. [ 348.117401][T17967] netlink: 'syz.7.3165': attribute type 1 has an invalid length. [ 348.473664][T17972] bond1 (unregistering): Released all slaves [ 348.583344][T17981] gtp0: entered promiscuous mode [ 348.583365][T17981] gtp0: entered allmulticast mode [ 348.809705][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3172'. [ 348.955345][T17995] can: request_module (can-proto-0) failed. [ 349.273172][T18011] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3176'. [ 349.428437][T18017] netlink: 872 bytes leftover after parsing attributes in process `syz.3.3178'. [ 349.513896][T18019] xt_hl: Unknown Hop Limit match mode: 206 [ 349.568656][T18022] netlink: 'syz.6.3180': attribute type 1 has an invalid length. [ 349.943727][T18022] bond5: option mode: invalid value (7) [ 349.960617][T18022] bond5 (unregistering): Released all slaves [ 350.118296][T18023] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3177'. [ 350.334024][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.864068][T18058] ip_tables: iptables: counters copy to user failed while replacing table [ 351.784750][T18088] netlink: 'syz.6.3194': attribute type 12 has an invalid length. [ 351.835775][T18089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 351.835802][T18089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.835820][T18089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.856249][T18089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.856272][T18089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.994838][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3195'. [ 351.994874][T18092] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3195'. [ 352.045519][T18092] gretap0: entered promiscuous mode [ 352.045542][T18092] gretap0: entered allmulticast mode [ 352.124791][T18094] netlink: 'syz.3.3196': attribute type 8 has an invalid length. [ 352.124815][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 352.506928][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3201'. [ 352.506958][T18104] block nbd1: Unsupported socket: should be TCP or UNIX. [ 352.521932][T18108] netlink: 'syz.4.3202': attribute type 30 has an invalid length. [ 352.570576][T18108] bond3: option arp_missed_max: invalid value (0) [ 352.570599][T18108] bond3: option arp_missed_max: allowed values 1 - 255 [ 352.576296][T18108] bond3 (unregistering): Released all slaves [ 352.623389][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3202'. [ 352.950912][T18130] ip_tables: iptables: counters copy to user failed while replacing table [ 353.354294][T18140] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3208'. [ 353.895822][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 354.345721][T18171] netlink: 'syz.6.3217': attribute type 1 has an invalid length. [ 354.417580][T18176] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3219'. [ 354.495506][T18171] bond5: entered promiscuous mode [ 354.501473][T18171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 354.577613][T18177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 354.577974][T18177] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 354.577993][T18177] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 354.606061][T18181] netlink: 'syz.6.3217': attribute type 1 has an invalid length. [ 354.643039][T18177] bond5: (slave ip6gre1): making interface the new active one [ 354.643063][T18177] ip6gre1: entered promiscuous mode [ 354.665626][T18177] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 354.670701][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3217'. [ 354.911689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.164511][T18202] netlink: 'syz.6.3224': attribute type 2 has an invalid length. [ 355.618843][T18214] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 355.702083][T18214] bond3: entered promiscuous mode [ 355.704082][T18214] bond3: entered allmulticast mode [ 355.706087][T18214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.946922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.087354][T18230] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 356.564088][T18237] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 356.862801][T18247] __nla_validate_parse: 4 callbacks suppressed [ 356.862823][T18247] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3238'. [ 356.987090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.180990][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181028][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181053][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181089][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181114][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181138][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181163][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181187][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.181212][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x1 [ 357.181237][ T6117] hid-generic 0005:0B57:0006.0002: unknown main item tag 0x0 [ 357.189922][T18263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.256084][T18266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.345231][T18269] netlink: 4384 bytes leftover after parsing attributes in process `syz.6.3242'. [ 357.468202][ T32] INFO: task syz.0.1565:11713 blocked for more than 143 seconds. [ 357.468223][ T32] Not tainted syzkaller #0 [ 357.468232][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.468239][ T32] task:syz.0.1565 state:D stack:26016 pid:11713 tgid:11712 ppid:5613 task_flags:0x400140 flags:0x00080002 [ 357.468290][ T32] Call Trace: [ 357.468301][ T32] [ 357.468311][ T32] __schedule+0x17db/0x58f0 [ 357.468358][ T32] ? __pfx___schedule+0x10/0x10 [ 357.468386][ T32] ? schedule+0x90/0x2b0 [ 357.468409][ T32] schedule+0x164/0x2b0 [ 357.468432][ T32] schedule_preempt_disabled+0x13/0x30 [ 357.468453][ T32] __mutex_lock+0x7c1/0x1550 [ 357.468481][ T32] ? __mutex_lock+0x5d4/0x1550 [ 357.468538][ T32] ? nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 357.468563][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 357.468589][ T32] ? net_generic+0x1e/0x240 [ 357.468605][ T32] ? net_generic+0x1e/0x240 [ 357.468627][ T32] nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 357.468655][ T32] ? rcu_is_watching+0x16/0xb0 [ 357.468676][ T32] ? trace_kmalloc+0x2a/0xf0 [ 357.468694][ T32] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 357.468714][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 357.468731][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 357.468746][ T32] ? netlink_dump+0x1e7/0xee0 [ 357.468760][ T32] ? netlink_dump+0x1e7/0xee0 [ 357.468783][ T32] genl_dumpit+0x10b/0x1b0 [ 357.468810][ T32] netlink_dump+0x711/0xee0 [ 357.468836][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 357.468865][ T32] ? genl_start+0x497/0x6d0 [ 357.468891][ T32] __netlink_dump_start+0x589/0x7b0 [ 357.468913][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 357.468954][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 357.468983][ T32] ? __pfx_genl_start+0x10/0x10 [ 357.469004][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 357.469033][ T32] ? __pfx_genl_done+0x10/0x10 [ 357.469059][ T32] ? bpf_lsm_capable+0x9/0x20 [ 357.469077][ T32] ? security_capable+0x7e/0x2c0 [ 357.469106][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 357.469130][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.469149][ T32] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 357.469176][ T32] ? __asan_memcpy+0x40/0x70 [ 357.469194][ T32] ? __skb_clone+0x5c/0x6c0 [ 357.469227][ T32] netlink_rcv_skb+0x226/0x4a0 [ 357.469247][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.469266][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.469293][ T32] ? down_read+0x2be/0x330 [ 357.469322][ T32] genl_rcv+0x28/0x40 [ 357.469340][ T32] netlink_unicast+0x7bd/0x940 [ 357.469377][ T32] netlink_sendmsg+0x813/0xb40 [ 357.469403][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.469430][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 357.469456][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.469473][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 357.473215][ T32] ____sys_sendmsg+0x54e/0x850 [ 357.473259][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.473295][ T32] ? import_iovec+0x73/0xa0 [ 357.473323][ T32] ___sys_sendmsg+0x2a5/0x360 [ 357.473350][ T32] ? __lock_acquire+0x747/0x2de0 [ 357.473375][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.473402][ T32] ? futex_wake+0x51b/0x5f0 [ 357.473454][ T32] ? __fget_files+0x2a/0x420 [ 357.473481][ T32] ? __fget_files+0x3a2/0x420 [ 357.473519][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 357.473547][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.473591][ T32] do_syscall_64+0x166/0x520 [ 357.473616][ T32] ? trace_irq_disable+0x3b/0x140 [ 357.473637][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.473658][ T32] ? clear_bhb_loop+0x70/0xc0 [ 357.473683][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.485229][ T32] RIP: 0033:0x7f971879e199 [ 357.485256][ T32] RSP: 002b:00007f9719747028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.485277][ T32] RAX: ffffffffffffffda RBX: 00007f9718a25fa0 RCX: 00007f971879e199 [ 357.485292][ T32] RDX: 000000000404c000 RSI: 0000200000000180 RDI: 0000000000000005 [ 357.485305][ T32] RBP: 00007f97188358e0 R08: 0000000000000000 R09: 0000000000000000 [ 357.485318][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.485331][ T32] R13: 00007f9718a26038 R14: 00007f9718a25fa0 R15: 00007ffe858a4b78 [ 357.485363][ T32] [ 357.485463][ T32] [ 357.485463][ T32] Showing all locks held in the system: [ 357.485473][ T32] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 357.485487][ T32] #0: ffff8880b8628298 (hrtimer_bases.lock){-.-.}-{2:2}, at: gate_timer_func+0x2b/0x450 [ 357.485549][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 357.485563][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 357.485617][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 357.485631][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 357.485679][ T32] locks held by kworker/u8:2/37: 2, on CPU#1: [ 357.485692][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.485747][ T32] #1: ffffc90000ad7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.485824][ T32] locks held by klogd/4973: 1, last CPU#0: [ 357.485838][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 357.485888][ T32] locks held by getty/5370: 2, on CPU#0: [ 357.485901][ T32] #0: ffff888035cfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 357.485947][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 357.486002][ T32] locks held by kworker/0:26/6117: 5, on CPU#0: [ 357.486023][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.486076][ T32] #1: ffffc9000743fc40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.486130][ T32] #2: ffff8880670d1a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 357.486177][ T32] #3: ffffffff900807e8 (minors_rwsem){+.+.}-{4:4}, at: hidraw_connect+0x7a/0x420 [ 357.486225][ T32] #4: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 357.486274][ T32] locks held by kworker/u8:26/7801: 3, last CPU#1: [ 357.486288][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.486341][ T32] #1: ffffc9000e007c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.486410][ T32] #2: ffff888055c51258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 357.486470][ T32] locks held by kworker/u8:33/7810: 2, on CPU#1: [ 357.486484][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.531722][ T32] #1: ffffc9000d95fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.531794][ T32] locks held by kworker/u8:36/7813: 5, last CPU#0: [ 357.531810][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.531864][ T32] #1: ffffc9000ba27c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.531917][ T32] #2: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 357.531967][ T32] #3: ffffffff8ee38bc0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 357.532025][ T32] #4: ffffffff8ebff720 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 357.532083][ T32] locks held by kworker/u8:38/7815: 5, last CPU#0: [ 357.532097][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.532149][ T32] #1: ffffc9000ba07c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 357.532201][ T32] #2: ffffffff90246408 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 357.532254][ T32] #3: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 357.532307][ T32] #4: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 357.532361][ T32] locks held by syz.2.977/9510: 2, on CPU#1: [ 357.532376][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.532425][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 357.532479][ T32] locks held by udevd/10938: 1, on CPU#1: [ 357.532492][ T32] #0: ffff888027192350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 357.532539][ T32] locks held by syz.0.1565/11713: 3, on CPU#0: [ 357.532553][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.532603][ T32] #1: ffff8880337786e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 357.532649][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 357.532708][ T32] locks held by syz.5.2316/14516: 2, on CPU#1: [ 357.532723][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.532772][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 357.532829][ T32] locks held by syz-executor/16507: 1, last CPU#1: [ 357.532859][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sock_update_netprioidx+0x50/0x3a0 [ 357.532917][ T32] locks held by syz-executor/17170: 2, last CPU#0: [ 357.532932][ T32] #0: ffff8880323ae2e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 357.532987][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 357.533046][ T32] locks held by syz.1.3239/18243: 1, last CPU#0: [ 357.533061][ T32] #0: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 357.533118][ T32] locks held by modprobe/18273: 1, last CPU#0: [ 357.533132][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 357.634563][ T32] [ 357.634574][ T32] ============================================= [ 357.634574][ T32] [ 357.634590][ T32] NMI backtrace for cpu 0 [ 357.634608][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 357.634629][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 357.634645][ T32] Call Trace: [ 357.634653][ T32] [ 357.634661][ T32] dump_stack_lvl+0xe8/0x150 [ 357.634691][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 357.634715][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 357.634748][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 357.634772][ T32] sys_info+0x135/0x170 [ 357.634789][ T32] watchdog+0xfd7/0x1030 [ 357.634815][ T32] ? watchdog+0x1c7/0x1030 [ 357.634839][ T32] kthread+0x38b/0x480 [ 357.634857][ T32] ? __pfx_watchdog+0x10/0x10 [ 357.634873][ T32] ? __pfx_kthread+0x10/0x10 [ 357.634890][ T32] ret_from_fork+0x514/0xb70 [ 357.634910][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 357.634928][ T32] ? __switch_to+0xc89/0x1420 [ 357.634955][ T32] ? __pfx_kthread+0x10/0x10 [ 357.634975][ T32] ret_from_fork_asm+0x1a/0x30 [ 357.635014][ T32] [ 357.635023][ T32] Sending NMI from CPU 0 to CPUs 1: [ 357.635057][ C1] NMI backtrace for cpu 1 [ 357.635069][ C1] CPU: 1 UID: 0 PID: 7797 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 357.635091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 357.635103][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 357.635125][ C1] RIP: 0010:__lock_acquire+0x582/0x2de0 [ 357.635146][ C1] Code: 78 0b 00 00 00 0f 84 e7 04 00 00 41 3b 9e a0 0b 00 00 0f 8d f3 00 00 00 4c 63 fb 4b 8d 04 bf 49 8d 1c c6 48 81 c3 d0 0b 00 00 1d 44 89 e0 49 ff c7 49 63 8e a0 0b 00 00 48 83 c3 28 41 89 c4 [ 357.635162][ C1] RSP: 0018:ffffc90002fc67e0 EFLAGS: 00000082 [ 357.635177][ C1] RAX: 0000000000000000 RBX: ffff88807c9eab10 RCX: 00000000ffffffff [ 357.635190][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 2b00000000000000 [ 357.635203][ C1] RBP: ffff88807c9eab68 R08: ffffffff8177f1df R09: 0000000000000000 [ 357.635215][ C1] R10: ffffc90002fc6ac8 R11: fffff520005f8d65 R12: ffffffffffffff05 [ 357.635229][ C1] R13: 0000000000000000 R14: ffff88807c9e9f40 R15: 0000000000000000 [ 357.635240][ C1] FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 357.635256][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.635269][ C1] CR2: 0000564ff8fb0008 CR3: 0000000050fb4000 CR4: 00000000003526f0 [ 357.635285][ C1] Call Trace: [ 357.635291][ C1] [ 357.635301][ C1] ? lock_acquire+0x115/0x350 [ 357.635324][ C1] ? unwind_next_frame+0x8f/0x2550 [ 357.635347][ C1] lock_acquire+0x115/0x350 [ 357.635364][ C1] ? unwind_next_frame+0x8f/0x2550 [ 357.635386][ C1] ? unwind_next_frame+0x8f/0x2550 [ 357.635407][ C1] ? __unwind_start+0xed/0x660 [ 357.635427][ C1] ? unwind_next_frame+0x8f/0x2550 [ 357.635447][ C1] unwind_next_frame+0xac/0x2550 [ 357.635466][ C1] ? unwind_next_frame+0x8f/0x2550 [ 357.635486][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 357.635512][ C1] ? get_stack_info_noinstr+0x19/0x130 [ 357.635534][ C1] __unwind_start+0x514/0x660 [ 357.635556][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 357.635575][ C1] arch_stack_walk+0xe3/0x150 [ 357.635597][ C1] ? __unwind_start+0xed/0x660 [ 357.635618][ C1] stack_trace_save+0xa9/0x100 [ 357.635635][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 357.635657][ C1] kasan_save_track+0x3e/0x80 [ 357.635699][ C1] __kasan_kmalloc+0x93/0xb0 [ 357.635720][ C1] __kmalloc_noprof+0x36b/0x720 [ 357.635738][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 357.635755][ C1] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 357.635782][ C1] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 357.635812][ C1] cfg80211_inform_single_bss_data+0x990/0x1be0 [ 357.635843][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 357.635881][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x48f0 [ 357.635900][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 357.635929][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 357.635967][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 357.636015][ C1] ? __lock_acquire+0x747/0x2de0 [ 357.636039][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 357.636070][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 357.636099][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 357.636127][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 357.636154][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 357.636177][ C1] ? sta_info_get+0x4f/0x300 [ 357.636207][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 357.636234][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 357.636269][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 357.636292][ C1] ? __lock_acquire+0x747/0x2de0 [ 357.636311][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 357.636338][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 357.636364][ C1] ? __lock_acquire+0x747/0x2de0 [ 357.636384][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 357.636409][ C1] ? kcov_remote_start+0x9c/0x7e0 [ 357.636430][ C1] ? kcov_remote_start+0x1a6/0x7e0 [ 357.636451][ C1] ieee80211_iface_work+0x78a/0x1010 [ 357.636481][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 357.636500][ C1] ? process_scheduled_works+0x97a/0x1630 [ 357.636523][ C1] process_scheduled_works+0xc3d/0x1630 [ 357.636553][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.636578][ C1] ? assign_work+0x3cf/0x5d0 [ 357.636601][ C1] worker_thread+0xa47/0xfb0 [ 357.636630][ C1] kthread+0x38b/0x480 [ 357.636648][ C1] ? __pfx_worker_thread+0x10/0x10 [ 357.636670][ C1] ? __pfx_kthread+0x10/0x10 [ 357.636687][ C1] ret_from_fork+0x514/0xb70 [ 357.636705][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 357.636721][ C1] ? __switch_to+0xc89/0x1420 [ 357.636745][ C1] ? __pfx_kthread+0x10/0x10 [ 357.636767][ C1] ret_from_fork_asm+0x1a/0x30 [ 357.636799][ C1] [ 357.881943][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 359.076068][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 359.085173][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.095220][ T32] Call Trace: [ 359.098490][ T32] [ 359.101416][ T32] vpanic+0x56d/0xa60 [ 359.105398][ T32] ? __pfx___schedule+0x10/0x10 [ 359.110245][ T32] ? __pfx_vpanic+0x10/0x10 [ 359.114750][ T32] panic+0xc5/0xd0 [ 359.118467][ T32] ? __pfx_panic+0x10/0x10 [ 359.122877][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 359.128328][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 359.133705][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 359.139857][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 359.146180][ T32] watchdog+0x1030/0x1030 [ 359.150516][ T32] ? watchdog+0x1c7/0x1030 [ 359.154936][ T32] kthread+0x38b/0x480 [ 359.158996][ T32] ? __pfx_watchdog+0x10/0x10 [ 359.163663][ T32] ? __pfx_kthread+0x10/0x10 [ 359.168248][ T32] ret_from_fork+0x514/0xb70 [ 359.172835][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 359.177938][ T32] ? __switch_to+0xc89/0x1420 [ 359.182609][ T32] ? __pfx_kthread+0x10/0x10 [ 359.187187][ T32] ret_from_fork_asm+0x1a/0x30 [ 359.191962][ T32] [ 359.195138][ T32] Kernel Offset: disabled [ 359.199457][ T32] Rebooting in 86400 seconds..