last executing test programs: 2m44.367494204s ago: executing program 32 (id=8413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1954}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa940}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe130}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431ac8f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3346}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x742f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf954}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35befeaf}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4564e1ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2868}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7707}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1710}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4166}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x124}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39a973a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4efa}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf367}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39859bcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x154dea05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x483ebc37}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22c57042}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e186789}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1adc}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ebdde4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaa4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f1ffa95}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 1m58.369803543s ago: executing program 5 (id=8898): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0xffffffffffffff6c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x7, 0x10, 0x1, {}, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "ad49e9f666b70aba"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x48080) sendto$inet6(0xffffffffffffffff, &(0x7f0000001580)="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", 0x1000, 0x8004, &(0x7f0000002580)={0xa, 0x4e23, 0xfffffffb, @remote, 0xd6e3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x20, 0x3ff, 0x4, {{0x3f, 0x4, 0x2, 0x9, 0xfc, 0x64, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @broadcast, {[@lsrr={0x83, 0x2b, 0xd5, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x4, [{@remote, 0x6}, {@loopback, 0x9}]}, @end, @timestamp_prespec={0x44, 0x54, 0x6b, 0x3, 0x5, [{@local, 0x3}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2}, {@local, 0x1d}, {@private=0xa010102, 0x8}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}, {@private=0xa010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @cipso={0x86, 0x14, 0x0, [{0x5, 0xe, "1760400ca95b20eeaabe6793"}]}, @timestamp_addr={0x44, 0x1c, 0x82, 0x1, 0x5, [{@local, 0x4}, {@multicast1, 0x8}, {@broadcast, 0xfffffff1}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x52, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @multicast1, @multicast1, @multicast2, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44110}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0xa4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) 1m58.196140624s ago: executing program 3 (id=8900): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe59, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x7, 0x0, 0xfff, 0x7fffffff}, {0x96, 0x2, 0x9, 0x7f, 0x80d8, 0x7}, 0x8, 0x9, 0x17eb}}]}}]}, 0x58}}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x33, &(0x7f0000001300)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5c34c5851bd40de2, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pi6 \x00'}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r9, 0x4}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xf}, [@map_val={0x18, 0xa, 0x2, 0x0, r5}]}, &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xb, 0x3, 0x12b}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r6, r7, r8, r9, r10], 0x0, 0x10, 0x5d2}, 0x94) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000000c0)) 1m57.926440986s ago: executing program 3 (id=8901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000080)=0x1b, 0x4) r1 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close(r1) 1m57.724286052s ago: executing program 3 (id=8903): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) (async) unshare(0x26020480) (async) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time_for_children\x00') (async) unshare(0x40080) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x41, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc084) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x2, 0xfe2, 0x40, @remote, @local, 0x20, 0x8001, 0xfffffffe, 0x5}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5c, r3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000200)=0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000000240)={0x20, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r7, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b", 0x7}], 0x1}}], 0x1, 0x22008805) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000100), 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) close(0x4) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async, rerun: 64) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x300) (async, rerun: 64) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000000)=0x3d, 0x4) (rerun: 64) 1m57.25213917s ago: executing program 5 (id=8906): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x8, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x81, 0x1}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$inet6_int(r2, 0x29, 0x6, &(0x7f0000000000), 0x4) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1m56.980703544s ago: executing program 5 (id=8908): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) (rerun: 32) 1m56.657913031s ago: executing program 3 (id=8915): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="100000001d14ffff28bd7000fedbdf25498b88b960ead3593da31ffbd2443b4d4c06e96e60aeb6580f96c1ab7064a1c0318fec834cdb68f525cd3827f2530f5115c2e9c84e030c4106f7eb57455b933ac8474f7d7c0d1f9e5366f19ee7d5f0e2d7576d9b2d62639cf1296bcdd2cac26187f5f22d4ecdc5fbbf2db2033ffb35a0d1738b8915ef31c4a7088675c8b980239103fe42b4a0ae0873023dd90b905010d43421eb190bf986120baf4ceec7eee9e1d546738584d218a9828710"], 0x10}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r5 = socket(0x3, 0x803, 0x7) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYRES8=r7, @ANYRESOCT=r3], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r8 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bind$alg(r8, &(0x7f0000000980)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25310000000500360201000000050035000600008005003300d8f24d2e030000000a0001007770616e"], 0x38}}, 0xc094) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket(0x10, 0x3, 0x0) write(r14, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r13, 0x12, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="ffff2abd7000fcdbdf2503", @ANYRES8=r12, @ANYBLOB="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"/374, @ANYRES16=r13], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20001800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, 0x0, 0x110) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) 1m56.18120914s ago: executing program 5 (id=8920): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @remote}}, 0x24) listen(r6, 0x5) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x0) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xc2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r6, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @remote}}, 0x24) (async) listen(r6, 0x5) (async) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x0) (async) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xc2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) (async) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) (async) 1m53.352896885s ago: executing program 5 (id=8933): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01082abd7000ffdb9f251200000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000500e40001"], 0x30}, 0x1, 0x0, 0x0, 0x4000855}, 0x20000010) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYRES8=r3], 0xfdef) setsockopt$sock_int(r5, 0x1, 0x52, &(0x7f0000000040)=0x40, 0xffffffffffffffe9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x2}, {0x10, 0xf}, {0x5, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e24}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x40d0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0xa8}}, 0x0) 1m53.298354818s ago: executing program 3 (id=8934): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @dev={0xfe, 0x80, '\x00', 0x4}, 0x0, 0x0, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) (async, rerun: 64) r2 = socket$unix(0x1, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1}, &(0x7f0000000b80), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1m52.688951818s ago: executing program 3 (id=8943): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a34040000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000008040480540001800a0001006c696d69740000004400028008000440000000010800044000"], 0x45c}, 0x1, 0x0, 0x0, 0x4004850}, 0x24044010) 1m52.494188676s ago: executing program 5 (id=8947): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0xb5}, 0x8) socketpair(0x22, 0x5, 0x9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e22, 0x4, @mcast2}, {0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1, {[0x5, 0xffffff7f, 0x6, 0x3, 0xff, 0x2d2a, 0x86, 0x81]}}, 0x5c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, 0x31011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r5, @in={{0x2, 0x4e21, @loopback}}, 0x8}, 0x90) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m46.229169879s ago: executing program 2 (id=9042): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e8000380080001"], 0x2dc}}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x4c, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xd}]}, @NFT_MSG_DELCHAIN={0xa4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2bab7e6a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f8211fe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x156f3233}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4392d37e}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75bffa94}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40e67240}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x6a, 0x8, "84f7c03ef5126306065c1d07dbea8507ea3afbd124bce46dab6447795a580e141b0a2271d2e167aac576603971fc1b2c5c09fdf1b8ec5ca43dd91dfc79157124ff940eecf992ef2ca1f3b9506bbbfbd8890b2ee72ff49a5d3ccc95ee629067dd76ccfc15b1c8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2a0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c14028036"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x52d35ce30131f272}) 1m46.03527801s ago: executing program 2 (id=9045): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010022bd7000fedbdf251e00000008000300", @ANYRES32=0x0, @ANYBLOB="1c002f800c000a0000000000000000000c0003800800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1m45.915506699s ago: executing program 2 (id=9048): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x7e8e27a6, 0x0, 0x6, 0xfffffffa, 0x6, 0xfffffffa, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) 1m45.750445986s ago: executing program 2 (id=9049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8008000200000000000600030001000000279e0536df3efc8dcaa2d19e523f5888"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r3, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}}], 0x2, 0x801) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1ec, 0x0, 0x3, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x8}, [@generic="a01c9720d3a889f7ce1cab18cefdbe895f1e199257e4d776bc2954496bec6dec6c7d70b2ad69d301a1c082cf8db1e020b839afe83a419e5090dbda", @nested={0x8, 0x12d, 0x0, 0x1, [@nested={0x4, 0xa4}]}, @typed={0xc, 0xed, 0x0, 0x0, @u64=0x9}, @typed={0x27, 0x15c, 0x0, 0x0, @binary="f60e4c7f8a102e5f02c9c9cb2d8475db2bead9639c6265e365f93962556c3cdcc8c6df"}, @generic="c446f240c85f5358b815053977c7380f739536adaee586a6f87156e3aa943be1e9f560971daefbeb502d586a9744aa7b41a96713", @nested={0xfd, 0x5d, 0x0, 0x1, [@nested={0x4, 0x96}, @typed={0x8, 0x158, 0x0, 0x0, @pid=r5}, @generic="0b6d8d2346b1e07cc83209370e3b627c3f0a39655ab26e44e3262be03a08cdcf4569bfb001f650b616e15cdc6f0600ab8c0d488844a5a1dabbfd8f7d6d552bd022158f5b279078b35bd680f889adb2a3852ce970c2f34d5430a4ede483e094b981290a3f1427", @generic="65e3a81a79caef6e9894295cd0c5b77d3d3476f4b250de35dd3c643295452580f45c75b5103d4dc41ce076800f5caf0fbfb6a03053a8f32bd9b98cf4be1f0f8a3e264601c82a4a350851a5fc4fb25b91ab995f177888bc86ead3c50dc848036ff2bdc285c38d0093707bde74c2ea14908d25f87504690598174d6fa9a502e2ed954567a740a7c0"]}, @generic="bc4fb801", @generic, @generic="5a129482327b2fe0e5cc86cc164877834a9cf2c86b3c24a7d39d27d7a5f0d1366c335beee7ba"]}, 0x1ec}}, 0x4000850) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = socket(0x15, 0x80005, 0x0) getsockopt(r6, 0x200000000114, 0x2711, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1m45.614020463s ago: executing program 2 (id=9051): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={r2, 0x4, 0xbb, "02a3f890c512f8aee1dfd4b22aa0f689063b4260f0a888e6574c0d735adb0b93ed3fb1c57802d8c410372fa402266df7d7de68614a5eed7a7a65800a26619c7ba0dde8d45b948d9e068743963ee4ea9b46b8e459bd9b957858f9dabfc9237311a4494716f1e6112e20aead7b8a83c956007e5a5354c523591f73bda053fb6afcdfeed75efc23ac0eec2be287d43da839da155357a43c382095d0ce45d8a27258940948185be146042dcc251e70da8fb4e46618b3c219572204c1f6"}, 0xc3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) 1m45.432552615s ago: executing program 2 (id=9054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x3}}, 0x18, &(0x7f0000000180)={0x0, 0xfffffde4}, 0x1, 0x0, 0x0, 0x400c050}, 0xee) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='#\'+^@\x00', 0x600000, &(0x7f0000000080)={@align=0x3, {0xf1, 0x6, 0x0, 0x5}}, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x9}) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, 0x30, 0x8, 0x70bd28, 0x25dfdbfc, {0x8}, [@typed={0xc, 0xa0, 0x0, 0x0, @u64=0xe}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@remote}, @generic="a352e3fea8aaa4deb43cfd4ce023248c9bfb9a14d5f47b430e8ed785cc3c983c34aff8acfc52f53b4e4966addbc33f458f7000d07ba7ad4058138d5d978a03296de97d055e658e899acd97", @generic="541847b9b62a99d3c18bdc6fddfca28f94589aa3f91d296deff9632a108f06f725997cb2b43c41d46a8fb263b6ed18cd2a0f3e0754e741c0b4c259b74f20969f244e1b3bb98cf7b405", @typed={0x4, 0xab}, @typed={0x8, 0x9b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m37.630747511s ago: executing program 33 (id=8943): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a34040000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000008040480540001800a0001006c696d69740000004400028008000440000000010800044000"], 0x45c}, 0x1, 0x0, 0x0, 0x4004850}, 0x24044010) 1m37.17698771s ago: executing program 34 (id=8947): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0xb5}, 0x8) socketpair(0x22, 0x5, 0x9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e22, 0x4, @mcast2}, {0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1, {[0x5, 0xffffff7f, 0x6, 0x3, 0xff, 0x2d2a, 0x86, 0x81]}}, 0x5c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, 0x31011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r5, @in={{0x2, 0x4e21, @loopback}}, 0x8}, 0x90) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m30.245708869s ago: executing program 35 (id=9054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x3}}, 0x18, &(0x7f0000000180)={0x0, 0xfffffde4}, 0x1, 0x0, 0x0, 0x400c050}, 0xee) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='#\'+^@\x00', 0x600000, &(0x7f0000000080)={@align=0x3, {0xf1, 0x6, 0x0, 0x5}}, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x9}) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, 0x30, 0x8, 0x70bd28, 0x25dfdbfc, {0x8}, [@typed={0xc, 0xa0, 0x0, 0x0, @u64=0xe}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@remote}, @generic="a352e3fea8aaa4deb43cfd4ce023248c9bfb9a14d5f47b430e8ed785cc3c983c34aff8acfc52f53b4e4966addbc33f458f7000d07ba7ad4058138d5d978a03296de97d055e658e899acd97", @generic="541847b9b62a99d3c18bdc6fddfca28f94589aa3f91d296deff9632a108f06f725997cb2b43c41d46a8fb263b6ed18cd2a0f3e0754e741c0b4c259b74f20969f244e1b3bb98cf7b405", @typed={0x4, 0xab}, @typed={0x8, 0x9b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m20.669445811s ago: executing program 0 (id=9208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@acquire={0x16c, 0x17, 0x1, 0x70bd25, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d4, 0x33}, 0x2, @in6=@remote, 0x3504, 0x4, 0x2, 0x6, 0x0, 0x1}]}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x4, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0xc801}, 0x10) 1m20.625948491s ago: executing program 0 (id=9209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) 1m20.556664462s ago: executing program 0 (id=9210): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000600)="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", 0x14c) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) r5 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000020000000000000000000000000850000008c0000009500000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r6 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES32, @ANYBLOB="0305000000000200080025000100000008002c00"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) tee(r2, r4, 0x8f5, 0x100000000000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010df02000000fbdbdf25000000003b900503e335e84a83ebdb620f32b9a82654ddd9c0cc1c1f3a76c047add22575c113e15c99a7294414b9bb6070b3f3c687c46f64d03dba119006ca833f74185a519a4446a7d973619146fdba6045d0e23f17298a0e70321beaa0282539fc01e25ac2f06efc06f179d71d7f67ec0780c0da55c7f862af2232dedba6bbfa8c1db8161e6e525fb09aef45ab0009bf84899c565d45083e67c1567aee0c212fba5c79014ccfba511fddbf6cd0d1953ae92ed2039e000b00"/208, @ANYRES32=r1, @ANYBLOB="01000000a4100000140012800b00010067656e6576650000040002801c001a8018000a8014000700fc0200"/56], 0x50}, 0x1, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xffffffffffffff81, 0x0, 0x41100, 0x0, '\x00', r1, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') (async) socket$netlink(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) write(r2, &(0x7f0000000600)="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", 0x14c) (async) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) (async) socket$inet6(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000020000000000000000000000000850000008c0000009500000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES32, @ANYBLOB="0305000000000200080025000100000008002c00"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) tee(r2, r4, 0x8f5, 0x100000000000000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010df02000000fbdbdf25000000003b900503e335e84a83ebdb620f32b9a82654ddd9c0cc1c1f3a76c047add22575c113e15c99a7294414b9bb6070b3f3c687c46f64d03dba119006ca833f74185a519a4446a7d973619146fdba6045d0e23f17298a0e70321beaa0282539fc01e25ac2f06efc06f179d71d7f67ec0780c0da55c7f862af2232dedba6bbfa8c1db8161e6e525fb09aef45ab0009bf84899c565d45083e67c1567aee0c212fba5c79014ccfba511fddbf6cd0d1953ae92ed2039e000b00"/208, @ANYRES32=r1, @ANYBLOB="01000000a4100000140012800b00010067656e6576650000040002801c001a8018000a8014000700fc0200"/56], 0x50}, 0x1, 0x2}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xffffffffffffff81, 0x0, 0x41100, 0x0, '\x00', r1, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) (async) 1m19.63387319s ago: executing program 0 (id=9219): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0xfff, 0x6, 0x3, 0x5, 0x1, 0x22, 0xf, "3e300fe06da423a1f8a2eae674703f04113e994a", "42f5f6a871a2a6b41544c7d259b8590242e555d4"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x0, 0x2}, @sack_perm, @window={0x3, 0x13c, 0xffff}, @sack_perm, @timestamp], 0x5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040074) 1m18.429343943s ago: executing program 0 (id=9226): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/126, 0x7e}], 0x4}, 0x17925b7e}, {{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/23, 0x17}], 0x2}, 0xb}, {{&(0x7f0000000780)=@l2tp6, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/172, 0xac}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f0000000900)=""/68, 0x44}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/54, 0x36}], 0x7, &(0x7f0000001b40)=""/188, 0xbc}, 0x8000}], 0x3, 0x40002101, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x4c}}, 0x0) 1m18.149999559s ago: executing program 0 (id=9230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001480)={&(0x7f0000000000)="853eb5ba072ba8d056c2032a5660036da8cd85c8baad18b965b67fbab2a309d26ca314cc8747c866f90648b4a6c04ae350e629fec6a54949d7162a1de65562e28cecf5a8c13ae26e4c441bbf94d79c1394eae9f031ea3ce57e4ffbb15f58a4357eed715ace08081ae3d5ba115872634793e40048aa47e1c1044e1d047c9bcb6034d304156bd1fb1d49d9f3a74652e3b0d60b84323de66a53460da6139b6abdf7cea9cb60dbb6719aa13001ff63883f60283d31834e189a50", &(0x7f0000000400)=""/4096, &(0x7f0000001400)="6c8394bcbf2e8109c6fa272e4f", &(0x7f0000001440)="dad3c4508a836c1ac69e7358945347f23abbe7ba23f9", 0xfffffff0, r1}, 0x38) 1m2.949704341s ago: executing program 36 (id=9230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001480)={&(0x7f0000000000)="853eb5ba072ba8d056c2032a5660036da8cd85c8baad18b965b67fbab2a309d26ca314cc8747c866f90648b4a6c04ae350e629fec6a54949d7162a1de65562e28cecf5a8c13ae26e4c441bbf94d79c1394eae9f031ea3ce57e4ffbb15f58a4357eed715ace08081ae3d5ba115872634793e40048aa47e1c1044e1d047c9bcb6034d304156bd1fb1d49d9f3a74652e3b0d60b84323de66a53460da6139b6abdf7cea9cb60dbb6719aa13001ff63883f60283d31834e189a50", &(0x7f0000000400)=""/4096, &(0x7f0000001400)="6c8394bcbf2e8109c6fa272e4f", &(0x7f0000001440)="dad3c4508a836c1ac69e7358945347f23abbe7ba23f9", 0xfffffff0, r1}, 0x38) 56.195572699s ago: executing program 7 (id=9414): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) 55.837187966s ago: executing program 7 (id=9416): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x90) socket(0x15, 0x5, 0x0) (async) getsockopt(r0, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x90) (async) 55.706339464s ago: executing program 7 (id=9418): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005600)={'veth1_to_hsr\x00', {0x2, 0x4e20, @multicast1}}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000500)=0xf3f, 0x4) write(0xca, &(0x7f0000000040)="04046e000200faff04001a0001", 0xd) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x800442d3, 0x200000f3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r5, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) 55.343707687s ago: executing program 7 (id=9421): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x20, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r3, &(0x7f0000000540)=""/249, 0xf9, 0x40010040, &(0x7f0000000640)={0xa, 0x4e21, 0x3e91b004, @mcast1, 0x6}, 0x1c) (async) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, "a3a439743b6fe7a8"}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) (async) socket(0x2, 0x6, 0x7f) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 54.888935687s ago: executing program 7 (id=9424): r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@rc={0x1f, @fixed}, &(0x7f0000000200)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r2, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 54.60756171s ago: executing program 7 (id=9427): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x4}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r3, 0x603}, 0x14}}, 0x0) 39.536977136s ago: executing program 37 (id=9427): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x4}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r3, 0x603}, 0x14}}, 0x0) 11.720295209s ago: executing program 4 (id=9672): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000ed792f0c89bd00200012800b00010062726964676500001004000000000000002e001000000010000000"], 0x40}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @rand_addr=' \x01\x00'}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0xc6e9f000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername(r6, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x80) sendto$inet6(r7, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r6, 0x100000000) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket(0x15, 0x5, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0) 10.448373389s ago: executing program 4 (id=9686): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[], 0x50}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x5c, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x48, 0x4, 0x0, 0x1, [@nested={0x41, 0x68, 0x0, 0x1, [@generic="55ed2c84fe33af6a667218e36e9cfb765f085c523587bd905079af759fa9f0859cb8fad5ac1771c3b2883b24c0e05959f7494d38d5ec48a6e03e446eac"]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x40) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @rand_addr=0x64010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0xb) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[], 0x50}}, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x5c, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x48, 0x4, 0x0, 0x1, [@nested={0x41, 0x68, 0x0, 0x1, [@generic="55ed2c84fe33af6a667218e36e9cfb765f085c523587bd905079af759fa9f0859cb8fad5ac1771c3b2883b24c0e05959f7494d38d5ec48a6e03e446eac"]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) (async) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x40) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @rand_addr=0x64010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) 9.393815106s ago: executing program 4 (id=9694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x20000018) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="000000000d800000", 0x8) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="000000000d800000", 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000100000008000b400000000024000480200001800e000100627974656f726465720000000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a000000"], 0xc0}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r8 = socket(0x2a, 0x2, 0x0) getpeername$inet6(r8, 0x0, 0x0) (async) getpeername$inet6(r8, 0x0, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, 0x0, 0x4) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0xffffffffffffffd9, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff8}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffff, 0x10}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 8.845886331s ago: executing program 1 (id=9701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r2, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000a80)=""/203, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2, 0x0, 0x4}, 0x50) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00', {0xfffffffd}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x4, 0x4, 0x75, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8, 0x8, 0x3}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100"/70], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x84, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000012}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @multicast2}, r5}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa3d0180c200000281003a000011fe01d744b459ae90250b625c78438155c7966d4cf07468dfa938f740406a9e7b41ecc0945daba3ead14c8dcd24d0ffc6e29a95198c6bd52e54"], 0x0) 8.615894963s ago: executing program 1 (id=9703): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="c4000000190000000000000081004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000800000000000000fbffffffffffffff0000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a07350010000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x2000, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc0, 0x100, @void}}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x0, @mcast1, @private1, 0x8, 0x0, 0x0, 0x2}}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="c4000000190000000000000081004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000800000000000000fbffffffffffffff0000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a07350010000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) (async) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x2000, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc0, 0x100, @void}}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x0, @mcast1, @private1, 0x8, 0x0, 0x0, 0x2}}) (async) 8.402343252s ago: executing program 6 (id=9705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000000)="3b97") ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)) r2 = socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_delroute={0x1c, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127dbfe786d6002b5fcc3eabe8a3e7974b558d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000100)=""/211, 0x41000, 0x36, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r5, r5, 0x7, 0x54, 0x0, @void, @value=r5}, 0x20) 8.336470845s ago: executing program 1 (id=9706): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) pread64(r4, &(0x7f0000000040)=""/103, 0x67, 0x7fffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/2771], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 8.058377592s ago: executing program 8 (id=9709): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001c00), 0x0, 0x40002101, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 8.053456071s ago: executing program 9 (id=9710): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) 7.846022883s ago: executing program 8 (id=9711): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000000c0)={0x73, r0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c00c0}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010073e60000000000000000000c0000000248fe2bdbab0ef7be0000fd04000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) 7.838534472s ago: executing program 6 (id=9712): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xfffffffd, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x2000000, 0x22ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xffffffffffffff58) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) socket$netlink(0x10, 0x3, 0x4) 7.77418978s ago: executing program 1 (id=9713): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="e5aa010000000000000001000000000095b14a3036ceae6a11519587fb59433bd27db794afbd59f3be6b21040ad405c5fb347d4a6e17caa4a70c4df351ae3159966846bcc9be139ce0e5a872137295ee9ca2b15d00fb3f3399d1c6adcd49fd88abdf5d4acda07beb20f529cfcda6972a635a6bfa05f2907c54be59ce8d28732ff06079024ea7d711fefdbede243664ea04b729f8c1ac98d8ba341afd6edd60cd1ff91746b585da1895a3047a9c524f7cc5559d702e0000af5052d4133e37b501e284f0886cabfe34cfc85c0044da1b8ed66fc718b9bbc22e"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 7.770044841s ago: executing program 9 (id=9714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x5, {0x2, 0x3, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000240)={0x7, 'veth1_to_batadv\x00'}) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000040)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r11, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r11, 0x4004743a, &(0x7f00000000c0)) write$ppp(r11, &(0x7f0000000180)='\x00\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x2}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 7.661180989s ago: executing program 8 (id=9715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a0028001c"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r4, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r6, 0x4, r1}, 0x10) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, 0x0, 0xfdef) 7.58886375s ago: executing program 1 (id=9716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r6], 0xc4}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000001180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newchain={0xce4, 0x64, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff4}, {0x7}, {0x2, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0xcb0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_POLICE={0xc88, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x5, 0x40, 0x10000, 0x2, 0x3, 0x80000000, 0x6, 0xc49de8c, 0x6, 0x2, 0x10, 0x3, 0x6519, 0x5, 0xd, 0x101, 0x6, 0x0, 0x9, 0x5, 0xb6, 0xe000000, 0x8, 0xfffffffb, 0xb, 0x50f, 0x4, 0x400000, 0x4, 0x5, 0x9, 0x9, 0x3, 0xffffffff, 0x6, 0x6, 0xc6f, 0x7a, 0x7, 0xe6, 0x7c3a, 0x10000, 0x11, 0x5, 0x7fff, 0xffffff7f, 0x5b, 0x0, 0x101, 0x9, 0x6, 0x7, 0x101, 0x5fb, 0x7, 0x8, 0x2e, 0xa, 0x3, 0x2, 0x0, 0x100, 0x6, 0x0, 0x0, 0xfffffff7, 0x9, 0x1, 0x4b5b, 0x7, 0x16127ac9, 0x5, 0x0, 0x7, 0xc, 0x400, 0x677216b4, 0x400, 0x8000, 0x7cc, 0xe, 0x7d8, 0x3, 0x10, 0x80, 0xe, 0x6, 0x3ff, 0x7f, 0x6d5, 0x8, 0x7, 0x8, 0x8, 0x9, 0x2, 0x37, 0x4, 0x8, 0x4, 0x0, 0x6, 0x14, 0x10000, 0x3, 0x5, 0x8, 0xd2, 0xa7d8, 0xe5b2, 0xc, 0x4, 0x5, 0x9, 0x5, 0xf, 0x5, 0x37f, 0x4, 0x331, 0x4815, 0xfffffff9, 0x4, 0x4, 0x4, 0x4, 0x9, 0x1, 0x7, 0x2, 0x1000, 0x817, 0x2, 0x1, 0xe40d, 0xb, 0x9, 0x9, 0x0, 0x8, 0xfff, 0x0, 0x7fc000, 0x6, 0xfffff800, 0x861, 0x401, 0x1000, 0x8, 0x8000, 0xffffffff, 0xe, 0x1, 0x6, 0x6, 0x7f, 0x7, 0xfff, 0xfffffffc, 0x1000, 0x9, 0x8, 0x3, 0x6, 0x800, 0x101, 0x0, 0x80000000, 0x7fff, 0x9, 0x7, 0x4, 0x0, 0x1, 0x6, 0x5, 0x4, 0x8d, 0x3a, 0x3, 0x7, 0x6, 0xffffffff, 0x5, 0xe0, 0x9, 0x74d1, 0x7fffffff, 0x7, 0x9, 0xfffffff0, 0x6, 0x10001, 0x3, 0x14, 0xe7bb, 0x400, 0x0, 0xef3, 0x1, 0x2, 0x4ef7, 0x9, 0x4, 0x9, 0x4, 0xfffeffff, 0x8, 0x7fff, 0x18, 0x4, 0x5, 0x0, 0x9, 0x2, 0x10, 0x6, 0x5, 0x3, 0x8, 0x4a0, 0x71c7b14f, 0x0, 0x6, 0x80000000, 0x8, 0x1, 0x4, 0xffffffff, 0x1, 0x9, 0x7dda, 0xfffffffe, 0x8, 0xf14, 0x9, 0x8, 0x6, 0x4, 0x5, 0x6, 0x6, 0x130, 0x2, 0x6, 0x1, 0x80000000, 0xe, 0x3790, 0x9, 0xffffffff, 0xe8, 0x9, 0x200]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x5, 0x7, {0x84, 0x1, 0x1, 0x7, 0x0, 0x800}, {0x5, 0xe5ab981f0b885640, 0x5, 0x8, 0x0, 0x3d}, 0xe7, 0x6, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x3, 0x3fff8, 0x0, 0x3, 0x9311, 0x4312, 0x9, 0x8, 0x8, 0x3, 0x83d, 0xd, 0x9, 0x40, 0x7c375a20, 0x6, 0x8, 0xeb92, 0x2, 0x2, 0x4, 0x3, 0x1541, 0x3, 0x5, 0x1, 0xfffff4c5, 0x5, 0x1, 0x800, 0x9, 0x3, 0x48000000, 0x1, 0x100, 0x5, 0x9, 0x56, 0x83, 0xf, 0x400, 0x7, 0xa8, 0x5, 0x56, 0x0, 0xc1, 0x9, 0xfff, 0x1, 0xb, 0x9, 0x5, 0x8, 0x4, 0x1, 0x200, 0x121, 0x7, 0xe, 0x7, 0xc0c7, 0xedbb, 0x2, 0x3, 0x0, 0xa, 0x6, 0x5, 0x9, 0x6, 0x4, 0x0, 0x9, 0x1, 0x4, 0x6, 0xffffe31b, 0x875, 0x5, 0x10, 0x8000, 0x3ff, 0x6, 0x4, 0x80000000, 0x99c0, 0x4101, 0x4c48, 0x4000, 0x80, 0x2, 0x512, 0x57, 0x4, 0x8, 0x3, 0x5, 0xe, 0x0, 0x5, 0x400, 0x31, 0x1, 0x0, 0x9, 0x313, 0xc, 0x80000001, 0x7, 0x7, 0x400, 0x1000, 0x1, 0x470, 0x2, 0xfffffffc, 0x5, 0x51b, 0x0, 0x6, 0x3, 0x5, 0x6, 0x6, 0x8, 0x200, 0x135, 0x5, 0x81, 0x9, 0x2, 0x1ff, 0x401, 0x1, 0x0, 0xffff3a0d, 0x4, 0x1, 0x2, 0x2, 0xffffffff, 0x9, 0x2, 0x813, 0x6, 0x7, 0x8, 0x9, 0x3180, 0x2, 0x100, 0x2, 0x7fffffff, 0x800, 0x6df, 0xfffffff7, 0x3e59, 0x80, 0xfffffc35, 0x4, 0x401, 0xa92, 0x5, 0x2, 0x3, 0x9, 0x4, 0x786a, 0x2, 0x9, 0x367, 0x2, 0x2, 0x4, 0x2, 0x8, 0x9, 0x9, 0x7, 0x4, 0x9, 0x280000, 0x0, 0x4, 0x5, 0x2b55, 0x0, 0x6, 0x10000, 0x101, 0x6, 0x6, 0x6, 0x7, 0xf, 0x9, 0xf, 0xea, 0x99, 0x1, 0xffbc, 0x200, 0x4, 0x57, 0x7f, 0x9, 0x86270, 0xc5a, 0x0, 0x3, 0x6, 0x3, 0x3, 0xa1, 0x9, 0x5e4d, 0x515d, 0x3, 0x5, 0x40, 0x1000, 0x6, 0xff, 0x7fff, 0x101, 0xfff, 0x0, 0x6, 0x4, 0x0, 0x80000000, 0x3, 0x40, 0x6, 0x1246, 0x5, 0x100, 0x7ff, 0x4800000, 0xda, 0x7ff, 0xfff, 0x9, 0x7fff, 0x5, 0x7b124d8b, 0x6, 0x1, 0x8, 0xfb8, 0x8, 0xfffffffc, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffb, 0x5, 0x2a, 0x2, 0x5, 0x9, 0x7fff, 0x80000000, 0x1, 0xa6, 0x7c, 0x40, 0x80, 0x1, 0x401, 0x0, 0x59b3, 0x9, 0x2, 0x4, 0xb, 0x2e, 0x4, 0x536, 0x5, 0xffff14c6, 0x7, 0x7, 0x8, 0xdfc, 0x9, 0x10, 0x2, 0x200, 0x8000, 0x2, 0x3, 0x7, 0xfffff000, 0x9, 0xe, 0x9, 0x6, 0x44be, 0x7f, 0x4, 0x9, 0x4, 0x1, 0x4, 0x0, 0x1699be76, 0x7, 0x2f8, 0x7fff, 0x9, 0x9, 0xb, 0x0, 0x2, 0x1, 0xe, 0x5, 0x5, 0x9, 0x5, 0x1000, 0xfffffffe, 0x2, 0x3, 0x8c, 0x65d, 0x1, 0x8, 0x7, 0x7ff, 0x8, 0x5, 0xa3, 0x0, 0x5, 0x4, 0xfffffc00, 0x6, 0x7, 0x1ff, 0x6, 0x6, 0x9, 0x0, 0x400, 0x1, 0x62d8, 0x2, 0x5, 0x3ff, 0x3, 0xd, 0x4, 0x8, 0x401, 0x9, 0x6, 0x3, 0x2, 0x8, 0xa8f, 0xd0fe, 0x9, 0x5, 0x4, 0x10, 0x9, 0xffff, 0x5, 0x3, 0x1, 0x4, 0x6, 0x4, 0x101, 0x3, 0x8, 0x5, 0x7, 0x1, 0x5, 0x6, 0x5, 0x6, 0xd, 0x1, 0x5900, 0x7ff, 0x1, 0xb, 0x0, 0x20000, 0x30, 0x1, 0x6, 0x9, 0xe8cd, 0x9, 0x9, 0x4, 0x86, 0x2, 0x27672fb4, 0x100, 0xcbb400, 0x7eaaece2, 0x2, 0xeb9a, 0xfff, 0x5, 0x113a, 0xfffffffa, 0xe, 0xfac, 0x6, 0x1000, 0x2, 0x0, 0x5, 0xb1, 0x9, 0xd106, 0x6, 0x4, 0x9, 0xffffff9e, 0x5, 0xba, 0x7, 0x7ff, 0x2773, 0x3, 0x1, 0x6, 0x3, 0x3684, 0x0, 0x6, 0x6, 0xf27d, 0x2, 0x0, 0x1, 0x5d9, 0x1ff, 0x8, 0xde0, 0x8, 0x9, 0x100, 0x100, 0x7, 0xffff0001, 0x1, 0x8, 0x9, 0x84, 0xc, 0x400, 0x4, 0x7fffffff, 0x2c4, 0x7, 0x1, 0x6, 0x8, 0x5, 0x5235, 0x4, 0x85150000, 0x7f, 0x32f, 0x5, 0x562a, 0x7ff, 0xfb, 0x3, 0x8, 0x10000, 0x3, 0x5, 0x45, 0x3, 0x81, 0x6, 0x80000000, 0x9, 0xdc, 0x3, 0x101, 0x78, 0xdb26f30b, 0x1, 0x10, 0x2, 0x8, 0x0, 0x14, 0x114c, 0x6997, 0x3, 0x80, 0xffff8001, 0x1, 0xf394, 0x10000, 0x7, 0xfff, 0xf0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4e4, 0x1, 0xffffffff, 0x2, 0xfffffff3, {0x4, 0x1, 0x6, 0x5, 0x8, 0xc48}, {0x14, 0x0, 0x0, 0x1, 0x9, 0xfff}, 0x200, 0x1, 0x4}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x800}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xfc}}]}, 0xce4}}, 0x0) 7.490810489s ago: executing program 6 (id=9717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) r2 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0xb5}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r5, 0x3, 0x20}, 0xc) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r6, 0x29, 0xc8, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x5, 0xf51, 0x8, 0x0, 0x0, [{{r1}, 0x56}, {{r0}, 0x4}, {{r1}, 0x2}, {{r1}, 0x401}, {{r0}, 0xe3}, {{r6}, 0x8}, {{r1}, 0xe}, {{r2}}]}) shutdown(r1, 0x1) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) 7.489775164s ago: executing program 4 (id=9718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa3b}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6", 0x27}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x3, 0x8, [0xb, 0x1, 0x8001, 0x8], &(0x7f0000000100)=[0x0]}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="1107fad41b1b59d836aabd58645a"], 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x4000) r7 = socket$inet(0x2, 0xa, 0x4) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 7.211812365s ago: executing program 8 (id=9719): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) ioctl$FIONCLEX(r0, 0x5450) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000100)=@deltfilter={0x8f4, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x8}, {0xfff2, 0x8}, {0x10, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x7225}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x824, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8b, 0x1000, 0x9, 0x2, 0x7, 0x0, 0xfbb4, 0xf5, 0x0, 0x9, 0x80000000, 0x84, 0x9, 0xb23a, 0xd694, 0xfffffffb, 0x400, 0x7, 0x0, 0x8, 0x9, 0x7fffffff, 0x8, 0x2817, 0x3, 0x5, 0x2, 0x1, 0x200, 0x7, 0x7fffffff, 0x10000000, 0x70, 0xef4, 0x0, 0x80, 0xff7a86b, 0x8904, 0x1, 0x3, 0xed5, 0x2, 0x6, 0x6, 0x6, 0x8, 0x5, 0x1579a06c, 0x4, 0x10001, 0x8, 0x401, 0x7, 0x4, 0x1, 0x40, 0x5, 0x7, 0x3, 0xfffffffa, 0xc, 0x0, 0xffff, 0x8, 0x2, 0x7, 0x480000, 0x9, 0x200, 0x10000, 0xfffffffd, 0x0, 0x9, 0x5, 0x8, 0x6, 0x3, 0x3, 0x40000000, 0xd800, 0x6, 0x0, 0x800, 0x3, 0x0, 0xd, 0x7, 0xba76, 0xfffffffc, 0x3ff, 0x1, 0x8, 0x4000, 0x5, 0x9, 0x3, 0x2, 0xffff86ae, 0x7fff, 0xffff, 0x4, 0x1, 0x9, 0x2fc8, 0x0, 0xd, 0x9, 0x2, 0x3, 0x4, 0x0, 0x3, 0xc23a, 0x0, 0x5, 0x4, 0x9, 0x8001, 0x40, 0x4, 0x93, 0x7fff, 0x8dc6, 0x5, 0x200, 0x9, 0x3, 0x4ea, 0x3, 0x7, 0x400, 0x5, 0x4, 0xff, 0x1, 0x4, 0x3, 0x7fffffff, 0x1000, 0x0, 0x1, 0x5, 0x5, 0x9, 0x6, 0x5, 0x5, 0xd9d, 0x7, 0x5, 0xf, 0x0, 0x0, 0x1, 0xffffffff, 0x7, 0x0, 0x6, 0x10000, 0x705, 0x66, 0xa, 0x0, 0x6, 0x5, 0x4, 0x4, 0x8, 0x4, 0xfffff5ad, 0x9, 0x6, 0x85, 0x6, 0x10001, 0xdf, 0x8000, 0x0, 0x9, 0x100, 0x5d2, 0x9, 0x663e, 0x9e0, 0xfffffff9, 0x3, 0x9, 0x9, 0x4c, 0x9, 0x7, 0x6, 0x9, 0x2, 0x6, 0xfff, 0x25df, 0x8, 0x8, 0x40, 0x6, 0x731c, 0xfffffff8, 0x7, 0x2, 0xffff, 0x114, 0x8, 0x7, 0x0, 0x3, 0x8, 0x81, 0xd1b, 0x7fff, 0x1, 0x0, 0x3, 0x5, 0x91, 0x4, 0x9, 0xffff7977, 0xf, 0x401, 0x4, 0xdb29, 0x3, 0xffffffff, 0x6, 0x8, 0x80000000, 0x0, 0xfffffffa, 0x4, 0x5, 0xfffffffd, 0x100, 0x8, 0x80000000, 0x0, 0x80000001, 0xfffffffc, 0x3, 0xffff, 0xfffffffa, 0x3, 0x101, 0x2, 0x7fffffff, 0x0, 0x8000, 0x2, 0x2, 0xfff, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x10, 0x5, 0x9, 0x6, 0x7fffffff, 0x1, 0x5101, 0xfffffe01, 0x4, 0x7, 0x7, 0x3305, 0xd424, 0x6, 0x9, 0xf7, 0x8000, 0x3, 0x7fffffff, 0x7, 0x6, 0x5, 0x2, 0x0, 0x9, 0x1, 0x2, 0x3, 0x7f, 0xf8d, 0xffffff87, 0x80000001, 0x94d4, 0x400, 0x7, 0x994, 0x3, 0x7, 0x4, 0x3, 0x88, 0x2, 0x9, 0x81, 0x5, 0x5, 0x7, 0x2, 0x0, 0x0, 0x8001, 0x8, 0x1000, 0x4, 0xffffffff, 0x6, 0x7, 0x2, 0xffffffff, 0x1, 0x3, 0x7, 0x401, 0x3, 0xfffffff9, 0xb7, 0xf, 0xf12, 0x5, 0x3ff, 0x9, 0x7, 0x642, 0x7, 0x7, 0xffff86bf, 0xff, 0x1, 0x5, 0x4, 0x6, 0x5, 0x3, 0x1, 0x3, 0x3, 0x80, 0x40, 0x101, 0x6, 0x89, 0x9, 0x2, 0x1, 0xec, 0x7, 0x0, 0x100, 0x8, 0x80, 0x3, 0x1, 0x10001, 0xea58, 0x0, 0x1, 0x2, 0x8, 0x7fffffff, 0x7ff, 0x7, 0x6, 0xfffffffb, 0x9, 0x2, 0x0, 0x7d, 0x531, 0x6, 0x7, 0x5, 0x8, 0xc, 0xfffffff9, 0x800, 0x7, 0x7, 0x5, 0x3e3c, 0x5, 0x3, 0x4, 0x7fffffff, 0xbf, 0x7, 0x30079955, 0x2, 0x8, 0xb, 0x7fff, 0x6, 0x1, 0x2, 0x10, 0x1, 0x3, 0x400, 0x80000001, 0x5, 0x1, 0x7, 0x9, 0xa, 0x8, 0x8, 0x6, 0x10000, 0x80, 0x7, 0xd59, 0x3, 0x7, 0x8, 0x4, 0x10000, 0x4, 0x7, 0x7, 0x0, 0x7, 0x7fffffff, 0x40, 0xe9d, 0x5, 0x7, 0x7, 0x0, 0x6, 0x8, 0x2, 0x7, 0x0, 0x4, 0x0, 0x8, 0xef9, 0xd058, 0x8, 0x4049, 0x4f3, 0x8, 0xfffffffa, 0xffff0000, 0x101, 0x7fff, 0x1, 0x7fffffff, 0x0, 0x2, 0x7, 0x0, 0x7, 0x7fffffff, 0x6, 0x4, 0x40, 0xa, 0x2, 0x3, 0x0, 0x9, 0x4, 0xa6, 0x9, 0x80, 0x7, 0xb9, 0xfffffffb, 0x5, 0x2, 0xa, 0x96e, 0x100, 0x401, 0x8, 0xe, 0x80000000, 0xda22, 0xb, 0x9, 0x8000, 0x9, 0x3, 0x6, 0x4, 0x8, 0x1, 0xfffffffd, 0x4, 0x6, 0x9c6, 0x7936, 0x7, 0x9, 0x4, 0x2, 0x9, 0x8, 0x6, 0x7, 0x6, 0x97, 0xf839, 0x7, 0x8]}]}, @TCA_U32_POLICE={0x1c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xffe0}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x63}, @TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0xa0000}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x8f4}}, 0x8000) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000f80)={&(0x7f0000000a80)=0x7fff, 0x9, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000f40)}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x10c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fb681f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x45d389bd}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8f5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6e000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40880}, 0x4010) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001200)=@req3={0x4cb, 0x1, 0x7, 0x6, 0x6, 0x2, 0x6}, 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x68, r3, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7c41}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000013c0)={'batadv_slave_0\x00'}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xe4, 0xb, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4010}, 0x10000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=@gettaction={0x5c, 0x32, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44010}, 0x4044010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000001880)={&(0x7f0000001740), 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x8c, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x8c}}, 0x4004854) r7 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000018c0)={0x0, 0x2f, "45288937af07a0c5023831838a1539c936f48b6ac9a41e1f41a13da251f1025d20633d20edc545c6f9ac106b7df061"}, &(0x7f0000001900)=0x37) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000001940)=@assoc_value={r8, 0x6}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001980), &(0x7f0000001a00)=0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r7, 0x0, 0x25, 0xeb, &(0x7f0000001a40)="784cbb06c75edd45d13c1c8fa1ef46a5c03bcdddcd6cfde14c9eecf8b76b2d34cebf7fb6dd", &(0x7f0000001a80)=""/235, 0x0, 0x0, 0xb9, 0xf4, &(0x7f0000001b80)="162b3022dd149dec46be84c3b39baab340acbc2a31794eb75d3a28cf48f57da9aade270d6e40dc6de395055a78db02ac1036f66a6c58ed78cf23b541693e803b8ed96948833c5e2017a3c7d71e5514035a4178148f0cb67d5af330b52e3c45291a74f5d982923ffaa8995c72b535087cacbce664ca908643add2fa37e53a48865bb3588cc124f78d8fcfef93c2e365d8fc61e8f8b11ae4cbe210d5fbc1ca3ea5de41af7a49ee6cb5e5794257f1bf8462b5115c7b292515a615", &(0x7f0000001c40)="e8be1b407c1d87253c0c31d85dcbd5ba9a7b2e633016e75080ccff32bf1e633402935b9b92563569e984f37689eb36fad440d51d4d364ad63b96d676e93308c5ec499a0bd816261c32c32ad4552de85faaa443e445e97fb9b30f2caa265eb5cae9d39f4c3d68441ee36637318e42b472ee43d08b2a71fe40c36b4f3f33806d593c0f462423423a742be7e3c4b7fd4fe25c6435fc131c82bf6128776356186ae43f9ee9fcd2469f9910de73d57e2b3cdddf331f474a9f1f3501c6e60bce37d0ffc2e98c179b5ace4617cfe5c836d92d646b499a32025ab692d19ec9f24a333930247df8de2f5b20f716a54438573be99bf8019aa7", 0x1, 0x0, 0x2}, 0x50) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001dc0), 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003100)={0x11, 0x27, &(0x7f0000001e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa1ee}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @map_idx={0x18, 0x4c4629c6b14f31e9, 0x5, 0x0, 0x8}, @ldst={0x0, 0x3, 0x0, 0x1, 0xa, 0x10, 0xffffffffffffffff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x3}, @generic={0x7, 0x5, 0x9, 0xffff, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f40)='GPL\x00', 0x6, 0x1000, &(0x7f0000001f80)=""/4096, 0x41100, 0xf5523722bac8c5ea, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002f80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002fc0)={0x4, 0x2, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000003000)=[0x1, r0, 0xffffffffffffffff, 0x1], &(0x7f0000003040)=[{0x6856008a, 0x1, 0xc, 0xa}, {0x4, 0x2, 0x2, 0x7}, {0x0, 0x3, 0xd}, {0x3, 0x4, 0x3, 0xb}, {0x4, 0x3, 0x6, 0x3}, {0x2, 0x1}, {0x0, 0x1, 0xf, 0x4}, {0x5, 0x3, 0x0, 0x2}, {0x5, 0x3, 0x3, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000032c0)={@fallback=r6, 0x0, 0x1, 0x7, &(0x7f00000031c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000003200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003240)=[0x0, 0x0], &(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000003580)={0x13, 0x1d, &(0x7f0000003340)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x45}, @alu={0x4, 0x0, 0x6, 0xb, 0x1, 0x100, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @alu={0x7, 0x0, 0x5, 0x0, 0x4, 0xffffffffffffffb8, 0x8}, @call={0x85, 0x0, 0x0, 0x39}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000003440)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000003480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000034c0)={0x3, 0x6, 0xffff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000003500)=[{0x3, 0x5, 0x4, 0x4}, {0x5, 0x5, 0xa}, {0x5, 0x1, 0x3, 0x2}, {0x0, 0x4, 0x9, 0x3}, {0x0, 0x3, 0x6, 0xc}, {0x1, 0x5, 0x10, 0x7}, {0x4, 0x3, 0x3, 0x8}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@fallback=r5, r9, 0xa, 0x18, r10, @void, @value=r13, @void, @void, r12}, 0x20) sendmsg$AUDIT_DEL_RULE(r11, &(0x7f0000003b40)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003b00)={&(0x7f0000003680)={0x448, 0x3f4, 0x10, 0x70bd27, 0x25dfdbff, {0x4, 0x2, 0x1a, [0x8, 0x800, 0x0, 0x10, 0x0, 0xff, 0x6, 0xfffffff9, 0x8, 0x71, 0x0, 0xf4e, 0x4, 0xec, 0x0, 0x80, 0x0, 0x5, 0xa0000, 0x5, 0x8, 0x9, 0x2, 0x10000, 0x9, 0x7fffffff, 0x80000001, 0x0, 0x18, 0x458, 0x6, 0x4, 0x84, 0x1, 0x100, 0x7c7, 0x1000, 0x100, 0xfffffffc, 0x94, 0x3f5, 0x2, 0x1e, 0x2, 0x101, 0x6, 0x401, 0x9, 0xfffffff7, 0x0, 0x10001, 0x200, 0x3ff, 0x0, 0x3c5e, 0x9fc5, 0x9, 0x8, 0x40, 0x7, 0x3, 0xf, 0xab4, 0x270d], [0x1, 0x6, 0x6, 0x6, 0x0, 0xe, 0xad, 0x6, 0x5, 0x1e00, 0x81, 0xb2, 0x81, 0x80000001, 0x1, 0x40, 0x400, 0x8, 0xd90, 0x3, 0x3, 0xe000, 0x81, 0x100, 0xa2, 0x7, 0x4, 0xcc, 0x8, 0xe3, 0xffffffd0, 0x3, 0xe1, 0x2, 0x7, 0x4, 0x33, 0x101, 0x2, 0x47a5, 0x6, 0xfffffffa, 0x5, 0xd9, 0x3, 0x6, 0x80000001, 0xfffff800, 0x1, 0x1, 0xb, 0x1, 0xfffffff7, 0x9, 0x9573, 0x8, 0x9, 0x6, 0xf76, 0x4, 0x4, 0xfffff432, 0x6, 0x6], [0x18, 0x4, 0x8, 0x80000001, 0xac56, 0x5, 0x10001, 0x81, 0x5, 0xc73, 0x9, 0x4000000, 0xf, 0xe, 0x2, 0x3ff, 0x7, 0x3, 0x1, 0x3, 0x6, 0x3, 0x1, 0x5, 0x9f2, 0x1, 0x64a5, 0x6, 0x7, 0x7, 0x1, 0x81, 0xfffffffd, 0x3, 0x9, 0xfffffc00, 0x7, 0x5, 0xfffffff7, 0x7, 0x44, 0x1, 0x7fff, 0xffffffff, 0x6, 0xff, 0x6, 0xa, 0x0, 0x9, 0x1, 0x80000001, 0x80, 0x4, 0x2, 0x4, 0x5, 0x3ff0, 0x7fffffff, 0x9, 0x80000001, 0x1, 0x81, 0x9], [0x5, 0x8, 0x2, 0x2, 0x4, 0x0, 0x8001, 0xf, 0x6, 0x0, 0x7, 0xe0, 0x0, 0x9, 0x7, 0x5, 0x0, 0x8, 0x3, 0x5, 0x5, 0x8ca6, 0x4, 0x100, 0x1, 0x9, 0x0, 0x270b0e6a, 0x4ba, 0x1, 0xbca0, 0x422, 0x3, 0x4, 0xe7c, 0x7562b995, 0x6a, 0x1, 0x80, 0x6, 0x2, 0x1, 0x3ff, 0x0, 0x8, 0x81, 0x0, 0x7, 0x3, 0x7f, 0x5, 0x5, 0x1, 0x3, 0xff, 0x40, 0x5, 0x7f, 0x0, 0x5, 0x9ec, 0x6, 0x8, 0x401], 0x26, ['syzkaller\x00', 'hash:net,port\x00', '-\x00', 'skbedit\x00', ',-$\x00']}, ["", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x8000}, 0x4000c04) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x4c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 7.207145349s ago: executing program 9 (id=9720): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000530000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000060011d700000000"], 0x44}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x0, 0x3, 0x400000]}, &(0x7f0000000140)=0x44) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={0x20, r3, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0xf5, 0xcd, 0x4, 0x10, @empty, @local, 0x40, 0x40, 0x9, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 6.966465794s ago: executing program 6 (id=9721): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001c00), 0x0, 0x40002101, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 6.69497473s ago: executing program 9 (id=9722): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) 6.327492577s ago: executing program 8 (id=9723): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x10000000000000ab, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) splice(r5, 0x0, r6, &(0x7f00000002c0), 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x1d, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5e8}, @generic={0x1, 0x6, 0x4, 0x8, 0xf}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2f818865}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xe, 0x4, 0x5, 0xf70, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0xa, 0x88f8}, @void, @ipv4=@icmp={{0x6, 0x4, 0x3, 0x7, 0x55, 0x68, 0x0, 0x10, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, {[@end]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0xd, 0x4, 0x3, 0x3, 0x4, 0x66, 0x3, 0x3, 0x21, 0x4d, @private=0xa010100, @rand_addr=0x64010101, {[@cipso={0x86, 0x14, 0x0, [{0x0, 0x2}, {0x7, 0x6, '\b0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0x0, 0x0, {0xa, 0x4e24, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x32) 182.535633ms ago: executing program 8 (id=9728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x800}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close(0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) 1.62884ms ago: executing program 4 (id=9729): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @remote}, 0x10) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040074) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x3d, 0x0}, 0x9}], 0x400000000000383, 0x22, 0x0) 410.348µs ago: executing program 9 (id=9730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000480)="ea0f8dec8bc7df34357f41ffb7dc80c8f19c49def536fbf953c41d962b88c85e94f5ebdfb86e9f3209a2f4953029ae48db09d84f01de1021f94e095c9e4881f8ce0d6dc4c79248d89dc8b0065d743cd28d050de00316d29e9156bf8502f7ee1473fbe0578b70bc601ed41c2cc4f6dee4bbeaa2b86f185fea5828dc9bf25893a18fa48279d3daef4740e03bcf84c644222aefa5aa0df6fdd15a99bff32a505bfb7ae14b5923b1b00b636f0ea07e229713e96aee576471b795fac4975ac7f2066c0e492a483aa2df19f5f4751ba4237514d2f324c2f307", 0xd6) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440)=0x634, 0x4) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 0s ago: executing program 6 (id=9731): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="00990f3685aa6341", 0x8}], 0x1, 0x7, 0x3800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x200, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x541b, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="77e975707327c68d2c62b2"], 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101002, 0x0) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x0, 0x1, 0x2, r8, 0x9}, 0xc) kernel console output (not intermixed with test programs): 1093.934689][ T7579] netlink: zone id is out of range [ 1094.044130][ T7483] lo speed is unknown, defaulting to 1000 [ 1094.079533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.160908][ T5617] Bluetooth: hci2: command tx timeout [ 1094.164054][ T7490] hsr0 speed is unknown, defaulting to 1000 [ 1094.250751][ T7589] netlink: 81 bytes leftover after parsing attributes in process `syz.2.8585'. [ 1094.351042][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.351374][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.351564][ T7424] bridge_slave_0: entered allmulticast mode [ 1094.357070][ T7424] bridge_slave_0: entered promiscuous mode [ 1094.366744][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.366862][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.369870][ T7424] bridge_slave_1: entered allmulticast mode [ 1094.380012][ T7424] bridge_slave_1: entered promiscuous mode [ 1094.679749][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8589'. [ 1094.787895][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.804687][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.912685][ T7490] lo speed is unknown, defaulting to 1000 [ 1095.017015][ T7424] team0: Port device team_slave_0 added [ 1095.074818][ T7424] team0: Port device team_slave_1 added [ 1095.232564][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1095.232727][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1095.232972][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1095.233126][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1095.233266][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1095.381075][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.446749][ T7637] openvswitch: netlink: Flow key attr not present in new flow. [ 1095.513073][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.513093][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.513123][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.588917][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.588936][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.588967][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.218775][ T7424] hsr_slave_0: entered promiscuous mode [ 1096.227702][ T7424] hsr_slave_1: entered promiscuous mode [ 1096.240633][ T5617] Bluetooth: hci2: command tx timeout [ 1096.330172][ T7663] netlink: 'syz.3.8600': attribute type 9 has an invalid length. [ 1096.399603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.070633][ T7685] netlink: 'syz.3.8608': attribute type 9 has an invalid length. [ 1097.236377][ T7688] netlink: 'syz.3.8609': attribute type 1 has an invalid length. [ 1097.342738][ T7688] bond6: entered promiscuous mode [ 1097.346543][ T7688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1097.439470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.445461][ T7688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1097.468004][ T7688] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1097.468033][ T7688] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1097.542858][ T7688] bond6: (slave wireguard0): making interface the new active one [ 1097.542882][ T7688] wireguard0: entered promiscuous mode [ 1097.581482][ T7688] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 1097.740483][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.089004][ T7726] x_tables: duplicate underflow at hook 1 [ 1098.116433][ T7424] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1098.139478][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.140443][ T7424] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1098.170515][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.171592][ T7424] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1098.201415][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1098.202375][ T7424] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1098.234989][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1098.319668][ T5617] Bluetooth: hci2: command tx timeout [ 1098.413792][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.478890][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.521023][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.521106][ T7343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.577629][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.577740][ T7343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.665309][ T7748] __nla_validate_parse: 104 callbacks suppressed [ 1098.665329][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1098.667872][ T7753] dvmrp8: entered allmulticast mode [ 1098.695582][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8621'. [ 1098.731910][T31669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.748401][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1098.925661][ T7759] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8624'. [ 1098.942094][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8624'. [ 1098.948108][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8624'. [ 1099.387401][ T7784] tc_dump_action: action bad kind [ 1099.537983][ T7790] netlink: 'syz.4.8633': attribute type 1 has an invalid length. [ 1099.615901][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8633'. [ 1099.618256][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.669849][ T7792] netlink: 'syz.4.8633': attribute type 24 has an invalid length. [ 1099.759496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.974234][ T7815] netlink: 524 bytes leftover after parsing attributes in process `syz.3.8639'. [ 1100.054881][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8640'. [ 1100.054918][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8640'. [ 1100.527368][ T7424] veth0_vlan: entered promiscuous mode [ 1100.636907][ T7424] veth1_vlan: entered promiscuous mode [ 1100.668312][ T7855] syzkaller1: left allmulticast mode [ 1100.799502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.853297][ T7424] veth0_macvtap: entered promiscuous mode [ 1100.887778][ T7424] veth1_macvtap: entered promiscuous mode [ 1100.953252][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.993450][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.008439][ T7863] netlink: 'syz.4.8649': attribute type 1 has an invalid length. [ 1101.096088][ T7869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1101.180996][ T7343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.181823][ T7343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.181871][ T7343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.181913][ T7343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.502409][ T7351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.502452][ T7351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.645148][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.645171][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.721724][ T7898] tipc: Started in network mode [ 1101.721758][ T7898] tipc: Node identity 080211000001, cluster identity 4711 [ 1101.724655][ T7898] tipc: Enabled bearer , priority 0 [ 1102.091177][ T7351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.303379][ T7928] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1102.839841][T28986] tipc: Node number set to 134418688 [ 1103.119461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.160016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.174686][ T7924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1105.390953][ T7984] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1105.430528][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.481916][ T7986] netlink: 'syz.5.8677': attribute type 16 has an invalid length. [ 1105.481942][ T7986] __nla_validate_parse: 7 callbacks suppressed [ 1105.481956][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8677'. [ 1105.482571][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8677'. [ 1105.540024][ T7990] IPVS: ip_vs_add_dest(): tunnel port is zero [ 1105.555886][ T7991] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.565713][ T7991] netlink: 'syz.0.8678': attribute type 4 has an invalid length. [ 1105.641928][ T7993] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.682823][ T7991] netlink: 'syz.0.8678': attribute type 4 has an invalid length. [ 1105.765610][ T8003] netlink: 'syz.4.8682': attribute type 2 has an invalid length. [ 1105.765637][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8682'. [ 1105.874381][ T8004] team0 (unregistering): Port device team_slave_0 removed [ 1105.888002][ T8009] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 1105.898041][ T8004] team0 (unregistering): Port device team_slave_1 removed [ 1105.924564][ T8009] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 1105.927005][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8684'. [ 1105.936732][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8684'. [ 1106.078507][ T8011] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 1106.095318][ T8018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1106.158256][ T8024] xt_TCPMSS: Only works on TCP SYN packets [ 1106.159319][ T8025] xt_TCPMSS: Only works on TCP SYN packets [ 1106.421601][ T8030] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1106.479439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.520334][ T8041] syzkaller0: entered promiscuous mode [ 1106.520359][ T8041] syzkaller0: entered allmulticast mode [ 1106.597496][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8692'. [ 1107.054509][ T8074] netlink: Invalid conntrack helper [ 1107.054590][ T8074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.455191][ T8086] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8701'. [ 1107.455560][ T8086] netlink: 'syz.5.8701': attribute type 16 has an invalid length. [ 1107.458567][ T7352] IPVS: starting estimator thread 0... [ 1107.519413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.540036][ T8087] IPVS: using max 38 ests per chain, 91200 per kthread [ 1109.383586][ T8037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1109.647980][ T8096] netlink: 'syz.3.8703': attribute type 1 has an invalid length. [ 1109.741992][ T8096] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1109.801649][ T8106] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1109.988816][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8708'. [ 1110.216907][ T8121] netlink: 'syz.4.8710': attribute type 1 has an invalid length. [ 1110.385545][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8712'. [ 1110.409461][ T8127] batman_adv: batadv0: Adding interface: syzkaller0 [ 1110.409482][ T8127] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.409517][ T8127] batman_adv: batadv0: Interface activated: syzkaller0 [ 1110.417476][ T8126] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1110.488167][ T31] audit: type=1804 audit(1790279813.688:23): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8713" name="/newroot/485/cgroup.controllers" dev="tmpfs" ino=2497 res=1 errno=0 [ 1110.488405][ T31] audit: type=1800 audit(1790279813.688:24): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8713" name="cgroup.controllers" dev="tmpfs" ino=2497 res=0 errno=0 [ 1110.548821][ T8126] batman_adv: batadv0: Removing interface: syzkaller0 [ 1110.799619][ C1] net_ratelimit: 3 callbacks suppressed [ 1110.799643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.923430][ T8145] netlink: 'syz.5.8718': attribute type 11 has an invalid length. [ 1110.923456][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8718'. [ 1110.953212][ T8145] netlink: 'syz.5.8718': attribute type 11 has an invalid length. [ 1110.953235][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8718'. [ 1110.980543][T19281] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.980595][T19281] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.980634][T19281] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.980672][T19281] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.249132][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1111.273586][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1111.333413][ T8169] netlink: 'syz.5.8724': attribute type 21 has an invalid length. [ 1111.333434][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1111.337466][ T8169] netlink: 'syz.5.8724': attribute type 21 has an invalid length. [ 1111.337481][ T8170] netlink: 'syz.5.8724': attribute type 21 has an invalid length. [ 1111.337491][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1111.337499][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1111.399572][T19281] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1111.404412][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1111.404437][ T8170] netlink: 'syz.5.8724': attribute type 21 has an invalid length. [ 1111.404447][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1111.478879][ T8174] netlink: Conntrack attr has 1 unknown bytes [ 1111.478919][ T8174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1112.096896][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.265027][ T8194] x_tables: duplicate underflow at hook 1 [ 1112.500503][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8734'. [ 1112.500547][ T8204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1113.119457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.163713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.239013][ T8163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1114.656949][ T8277] x_tables: duplicate underflow at hook 1 [ 1114.657120][ T8275] x_tables: duplicate underflow at hook 1 [ 1114.835578][ T8287] xt_hashlimit: size too large, truncated to 1048576 [ 1115.238829][ T8309] netlink: 'syz.4.8754': attribute type 1 has an invalid length. [ 1115.238856][ T8309] netlink: 'syz.4.8754': attribute type 4 has an invalid length. [ 1115.330330][ T8314] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1115.431385][T19281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.518309][ T7348] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1115.541555][ T8323] xt_hashlimit: size too large, truncated to 1048576 [ 1115.668519][ T8330] netlink: 'syz.2.8760': attribute type 8 has an invalid length. [ 1115.831309][ T8336] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 1116.007147][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.076435][ T8352] __nla_validate_parse: 3 callbacks suppressed [ 1116.076457][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8765'. [ 1116.479790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.520018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.413198][ T8318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1118.514101][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8771'. [ 1118.801599][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.814068][ T8388] xt_hashlimit: size too large, truncated to 1048576 [ 1118.911477][ T8401] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1119.028018][ T8408] netlink: 'syz.5.8779': attribute type 3 has an invalid length. [ 1119.028046][ T8408] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8779'. [ 1119.095272][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8779'. [ 1119.095299][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8779'. [ 1119.280514][ T8416] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1119.437578][ T7337] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1119.507501][ T8421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.839841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.879444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.120244][ T7351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.364309][ T8419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1122.460751][ T8468] xt_esp: unknown flags DD [ 1122.698841][ T5617] block nbd7: Receive control failed (result -32) [ 1122.705827][ T53] block nbd8: Receive control failed (result -32) [ 1122.994511][ T8494] veth1_vlan: left promiscuous mode [ 1123.186010][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1123.196996][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1123.209548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.222616][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1123.227548][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1123.228192][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1123.275931][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8803'. [ 1123.299965][ T8499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8803'. [ 1123.299992][ T8499] openvswitch: netlink: Flow key attr not present in new flow. [ 1123.346406][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8803'. [ 1123.639815][ T7348] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1123.734739][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8807'. [ 1123.734786][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8807'. [ 1124.239622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.266630][ T8498] lo speed is unknown, defaulting to 1000 [ 1124.320924][T31669] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1124.465521][ T8498] hsr0 speed is unknown, defaulting to 1000 [ 1124.624903][ T8498] lo speed is unknown, defaulting to 1000 [ 1124.878866][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.879017][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.894824][ T8498] bridge_slave_0: entered allmulticast mode [ 1124.904516][ T8498] bridge_slave_0: entered promiscuous mode [ 1124.915465][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.915537][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.915888][ T8498] bridge_slave_1: entered allmulticast mode [ 1124.917375][ T8498] bridge_slave_1: entered promiscuous mode [ 1124.981436][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.984565][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.029914][ T8498] team0: Port device team_slave_0 added [ 1125.032445][ T8498] team0: Port device team_slave_1 added [ 1125.184384][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.184441][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.184465][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.186632][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.186649][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.186674][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.284770][ T53] Bluetooth: hci6: command tx timeout [ 1125.324939][ T8498] hsr_slave_0: entered promiscuous mode [ 1125.325964][ T8498] hsr_slave_1: entered promiscuous mode [ 1125.326552][ T8498] debugfs: 'hsr0' already exists in 'hsr' [ 1125.326575][ T8498] Cannot create hsr debugfs directory [ 1125.492439][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.506337][ T8512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1126.560356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.564479][ T8498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1126.633152][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.653285][ T8498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1126.682136][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.698757][ T8498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1126.731554][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.736917][ T8498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1126.763381][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.783926][ T8564] netlink: 'syz.5.8817': attribute type 1 has an invalid length. [ 1126.783950][ T8564] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8817'. [ 1127.084915][ T8583] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1127.106183][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.132354][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.142902][T31669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.143370][T31669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.187614][T31669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.187752][T31669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.312798][ T8588] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1127.360925][ T53] Bluetooth: hci6: command tx timeout [ 1127.599389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.756138][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8827'. [ 1128.115773][ T8634] netlink: 'syz.0.8832': attribute type 10 has an invalid length. [ 1128.267426][ T8642] netlink: 'syz.0.8834': attribute type 1 has an invalid length. [ 1128.485854][ T8649] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8835'. [ 1128.806640][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.896760][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.439972][ T53] Bluetooth: hci6: command tx timeout [ 1129.783705][ T8498] veth0_vlan: entered promiscuous mode [ 1129.808852][ T8498] veth1_vlan: entered promiscuous mode [ 1129.839440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.981622][ T8498] veth0_macvtap: entered promiscuous mode [ 1130.005897][ T8498] veth1_macvtap: entered promiscuous mode [ 1130.054324][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.086013][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.114665][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.210264][ T7337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.210319][ T7337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.210359][ T7337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.224596][ T7337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.494576][ T8736] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8856'. [ 1130.511502][ T7352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.511525][ T7352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.663925][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8858'. [ 1130.694173][T31665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.694196][T31665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.879742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.930149][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8862'. [ 1131.005889][ T8762] netlink: 'syz.2.8861': attribute type 1 has an invalid length. [ 1131.048331][ T8765] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8800'. [ 1131.099915][ T8772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8863'. [ 1131.181363][ T8762] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1131.263497][ T8762] Cannot find add_set index 65532 as target [ 1131.278680][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8861'. [ 1131.358804][ T8776] bond7: (slave geneve5): making interface the new active one [ 1131.382733][ T8776] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 1131.434207][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8868'. [ 1131.500251][ T8789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8868'. [ 1131.504418][ T8789] bridge5: port 1(erspan0) entered blocking state [ 1131.504573][ T8789] bridge5: port 1(erspan0) entered disabled state [ 1131.512114][ T8789] erspan0: entered allmulticast mode [ 1131.520499][ T53] Bluetooth: hci6: command tx timeout [ 1131.551268][ T8789] erspan0: left allmulticast mode [ 1131.672639][ T8793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8869'. [ 1132.034729][ T8805] netlink: 'syz.3.8873': attribute type 1 has an invalid length. [ 1132.129771][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.255103][ T8811] ip_tables: iptables: counters copy to user failed while replacing table [ 1132.484055][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069731800: rx timeout, send abort [ 1132.484477][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069731800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1133.199791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.425994][ T8829] netlink: 'syz.3.8878': attribute type 3 has an invalid length. [ 1133.426011][ T8829] netlink: 'syz.3.8878': attribute type 2 has an invalid length. [ 1134.239400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.265778][ T8780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1134.634135][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634164][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634179][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634194][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634209][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634224][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634239][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634253][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634266][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634280][ T8843] tc action pedit unable to extract header offset for header type (0x5) [ 1134.634307][ T8843] 0: reclassify loop, rule prio 0, protocol 800 [ 1134.758231][ T8850] __nla_validate_parse: 4 callbacks suppressed [ 1134.758255][ T8850] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8884'. [ 1134.877746][ T8855] netlink: 'syz.5.8886': attribute type 1 has an invalid length. [ 1134.877771][ T8855] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8886'. [ 1134.932689][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8886'. [ 1134.932719][ T8855] openvswitch: netlink: Flow key attr not present in new flow. [ 1134.988705][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8886'. [ 1135.065013][ T8861] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8888'. [ 1135.280834][ T8869] netlink: 'syz.4.8891': attribute type 4 has an invalid length. [ 1135.280858][ T8869] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8891'. [ 1135.442255][T19283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.467114][ T8874] netlink: 'syz.5.8893': attribute type 4 has an invalid length. [ 1135.467140][ T8874] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8893'. [ 1135.487468][ T8874] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1135.533226][ T8882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8896'. [ 1135.611691][ T8888] x_tables: duplicate underflow at hook 1 [ 1135.612548][ T8888] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8897'. [ 1135.710066][ T8892] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1135.965225][ T8904] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8900'. [ 1136.237727][ T8912] netlink: 'syz.4.8902': attribute type 1 has an invalid length. [ 1136.364882][ T8912] netlink: 'syz.4.8902': attribute type 1 has an invalid length. [ 1136.458254][ T8924] openvswitch: netlink: Flow key attr not present in new flow. [ 1136.482670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.508670][ T8912] netlink: 'syz.4.8902': attribute type 1 has an invalid length. [ 1136.594209][ T8912] netlink: 'syz.4.8902': attribute type 1 has an invalid length. [ 1137.519598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.721724][ T8991] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1138.250216][ T9026] openvswitch: netlink: IP tunnel TTL not specified. [ 1138.250240][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1138.254897][ T9026] openvswitch: netlink: IP tunnel TTL not specified. [ 1138.254933][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1138.363205][ T9030] team0: Port device team_slave_1 removed [ 1138.446259][ T9032] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 1138.750374][ T7351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.759494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.550917][ T8983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1140.762746][ T9041] __nla_validate_parse: 12 callbacks suppressed [ 1140.762772][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8932'. [ 1140.799602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.854729][ T9046] validate_nla: 7 callbacks suppressed [ 1140.854750][ T9046] netlink: 'syz.0.8936': attribute type 1 has an invalid length. [ 1140.854765][ T9046] netlink: 'syz.0.8936': attribute type 3 has an invalid length. [ 1140.854781][ T9046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8936'. [ 1140.855208][ T9046] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 1140.907547][ T9047] netlink: 'syz.5.8933': attribute type 49 has an invalid length. [ 1141.030275][ T9054] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8937'. [ 1141.071771][ T9054] veth0: entered promiscuous mode [ 1141.087010][ T9051] veth0: left promiscuous mode [ 1141.096581][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8933'. [ 1141.211180][ T9068] ip6tnl2: entered promiscuous mode [ 1141.211206][ T9068] ip6tnl2: entered allmulticast mode [ 1141.388629][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1141.402185][ T9080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1141.477914][ T9084] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1141.691243][ T9096] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1141.961783][ T9113] openvswitch: netlink: Multiple metadata blocks provided [ 1142.444574][ T9127] netlink: 'syz.0.8958': attribute type 1 has an invalid length. [ 1142.509471][ T9131] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8959'. [ 1143.099687][ T9162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.818016][ T9212] xt_hashlimit: size too large, truncated to 1048576 [ 1143.851551][ T9214] Bluetooth: hci0: unsupported parameter 5161 [ 1143.851577][ T9214] Bluetooth: hci0: unsupported parameter 8192 [ 1143.851592][ T9214] Bluetooth: hci0: unsupported parameter 5161 [ 1143.851607][ T9214] Bluetooth: hci0: unsupported parameter 8192 [ 1143.947972][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8988'. [ 1144.075213][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.121702][ T9218] bridge_slave_0 (unregistering): left allmulticast mode [ 1144.121733][ T9218] bridge_slave_0 (unregistering): left promiscuous mode [ 1144.121831][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.125129][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8991'. [ 1144.161368][ C1] net_ratelimit: 2 callbacks suppressed [ 1144.161392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.407445][ T9239] netlink: 'syz.2.8994': attribute type 4 has an invalid length. [ 1144.505808][ T9241] erspan0: entered promiscuous mode [ 1144.505834][ T9241] erspan0: entered allmulticast mode [ 1144.753099][ T9257] sock: sock_timestamping_bind_phc: sock not bind to device [ 1145.058354][ T9284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.143613][ T9287] IPv6: NLM_F_CREATE should be specified when creating new route [ 1145.390444][T19283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.020637][ T9320] __nla_validate_parse: 111 callbacks suppressed [ 1146.020663][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9013'. [ 1146.025171][ T9320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.102835][ T9326] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1146.150180][ T9322] sctp: [Deprecated]: syz.2.9014 (pid 9322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1146.150180][ T9322] Use struct sctp_sack_info instead [ 1146.150630][ T9322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.155848][ T9322] sctp: [Deprecated]: syz.2.9014 (pid 9322) Use of int in max_burst socket option. [ 1146.155848][ T9322] Use struct sctp_assoc_value instead [ 1146.399444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.582312][ T9357] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1146.900072][ T9376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1147.022627][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9032'. [ 1147.063382][ T9387] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1147.220201][ T9398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9034'. [ 1147.293612][ T9400] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9034'. [ 1147.439476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.813542][ T9428] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9041'. [ 1147.813709][ T7352] IPVS: starting estimator thread 0... [ 1147.844475][ T9430] netlink: 'syz.2.9042': attribute type 1 has an invalid length. [ 1147.844503][ T9430] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.9042'. [ 1147.899319][ T9431] IPVS: using max 25 ests per chain, 60000 per kthread [ 1147.914891][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9043'. [ 1148.057343][ T9445] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1148.313851][ T9456] sctp: [Deprecated]: syz.2.9049 (pid 9456) Use of int in max_burst socket option. [ 1148.313851][ T9456] Use struct sctp_assoc_value instead [ 1148.316062][ T9456] netlink: 472 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1148.574103][ T9465] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1148.709826][T19281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.880695][ T9481] bond0: Error: CAN devices cannot be enslaved [ 1148.901721][ T9483] netlink: 'syz.0.9059': attribute type 49 has an invalid length. [ 1149.526952][ T9523] veth0: entered promiscuous mode [ 1149.683476][ T9522] veth0: left promiscuous mode [ 1149.759909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.748136][ T9547] syzkaller0: entered promiscuous mode [ 1150.748156][ T9547] syzkaller0: entered allmulticast mode [ 1150.799789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.111385][ T9566] vlan1: entered promiscuous mode [ 1151.111579][ T9566] vlan1: entered allmulticast mode [ 1151.111597][ T9566] bridge0: entered allmulticast mode [ 1151.178067][ T9568] __nla_validate_parse: 3 callbacks suppressed [ 1151.178091][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9079'. [ 1151.589113][ T9583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1151.589133][ T9583] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.589409][ T9583] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.589464][ T9583] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.617185][ T9583] netlink: 'syz.4.9085': attribute type 5 has an invalid length. [ 1151.800064][ T9588] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 1151.891777][ T9590] ip_tables: iptables: counters copy to user failed while replacing table [ 1152.019880][T19283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.088646][ T9595] mac80211_hwsim hwsim98 ÿ: renamed from wlan1 (while UP) [ 1152.185800][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1152.186111][ T9604] veth0_to_bond: entered allmulticast mode [ 1153.039393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.730714][ T9639] netlink: 'syz.4.9102': attribute type 22 has an invalid length. [ 1153.730735][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9102'. [ 1153.762102][ T9639] netlink: 'syz.4.9102': attribute type 22 has an invalid length. [ 1153.762127][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9102'. [ 1153.762364][T31669] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.762602][T31669] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.762670][T31669] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.762709][T31669] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.866117][ T9644] ip_tables: iptables: counters copy to user failed while replacing table [ 1154.079483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.182133][ T9666] syzkaller0: entered promiscuous mode [ 1154.182156][ T9666] syzkaller0: entered allmulticast mode [ 1154.375288][ T9676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9111'. [ 1154.592858][ T9679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.661186][ T9679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.663552][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9112'. [ 1154.719723][ T9690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.788312][ T9698] tls_set_device_offload_rx: netdev not found [ 1155.349984][T19283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.966493][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9122'. [ 1155.966522][ T9713] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9122'. [ 1155.966574][ T9713] netlink: 'syz.4.9122': attribute type 5 has an invalid length. [ 1156.096934][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1156.115923][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1156.116920][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1156.138647][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1156.144504][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1156.322399][T31669] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1156.399399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.521560][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9126'. [ 1156.541931][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9126'. [ 1156.604456][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1156.622091][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1156.623528][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1156.626442][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1156.627104][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1156.908230][ T9746] ip_tables: iptables: counters copy to user failed while replacing table [ 1157.097900][ T9714] lo speed is unknown, defaulting to 1000 [ 1157.273759][ T9756] xt_hashlimit: size too large, truncated to 1048576 [ 1157.299894][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1157.307033][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1157.327497][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1157.340728][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1157.357490][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1157.406375][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9129'. [ 1157.431842][ T9758] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9129'. [ 1157.439823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.612229][ T9714] hsr0 speed is unknown, defaulting to 1000 [ 1157.616334][ T9733] lo speed is unknown, defaulting to 1000 [ 1158.056303][ T9714] lo speed is unknown, defaulting to 1000 [ 1158.242060][ T53] Bluetooth: hci3: command tx timeout [ 1158.245712][ T9733] hsr0 speed is unknown, defaulting to 1000 [ 1158.307528][ T9755] lo speed is unknown, defaulting to 1000 [ 1158.680792][ T9733] lo speed is unknown, defaulting to 1000 [ 1158.696031][T31669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.719328][ T53] Bluetooth: hci5: command tx timeout [ 1158.796849][ T9755] hsr0 speed is unknown, defaulting to 1000 [ 1158.848734][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.848943][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.849132][ T9714] bridge_slave_0: entered allmulticast mode [ 1158.855028][ T9714] bridge_slave_0: entered promiscuous mode [ 1158.867752][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.868225][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.871425][ T9714] bridge_slave_1: entered allmulticast mode [ 1158.877294][ T9714] bridge_slave_1: entered promiscuous mode [ 1158.986041][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.000874][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.093864][ T9714] team0: Port device team_slave_0 added [ 1159.107633][ T9714] team0: Port device team_slave_1 added [ 1159.184601][ T9755] lo speed is unknown, defaulting to 1000 [ 1159.200041][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.200062][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.200095][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.216394][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.216445][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.216504][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.417552][ T9789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1159.430190][ T9789] netlink: 'syz.4.9133': attribute type 1 has an invalid length. [ 1159.432476][ T9714] hsr_slave_0: entered promiscuous mode [ 1159.433809][ T9714] hsr_slave_1: entered promiscuous mode [ 1159.434686][ T9714] debugfs: 'hsr0' already exists in 'hsr' [ 1159.434706][ T9714] Cannot create hsr debugfs directory [ 1159.445943][ T53] Bluetooth: hci7: command tx timeout [ 1159.759600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.826667][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.826852][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.827002][ T9733] bridge_slave_0: entered allmulticast mode [ 1159.851896][ T9733] bridge_slave_0: entered promiscuous mode [ 1159.881325][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.881724][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.882209][ T9733] bridge_slave_1: entered allmulticast mode [ 1159.884210][ T9733] bridge_slave_1: entered promiscuous mode [ 1160.027341][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.057528][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.220357][ T9714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.220398][ T9714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.268095][ T9733] team0: Port device team_slave_0 added [ 1160.278360][ T9733] team0: Port device team_slave_1 added [ 1160.320585][ T53] Bluetooth: hci3: command tx timeout [ 1160.396345][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.396366][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.396392][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.531944][ T9714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.531985][ T9714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.764708][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.764729][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.764759][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.801579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.806586][ T53] Bluetooth: hci5: command tx timeout [ 1160.827506][ T9807] syzkaller1: entered promiscuous mode [ 1160.827576][ T9807] syzkaller1: entered allmulticast mode [ 1160.974816][ T9714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.974859][ T9714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.068109][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.068302][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.068450][ T9755] bridge_slave_0: entered allmulticast mode [ 1161.093506][ T9755] bridge_slave_0: entered promiscuous mode [ 1161.110167][ T9733] hsr_slave_0: entered promiscuous mode [ 1161.111421][ T9733] hsr_slave_1: entered promiscuous mode [ 1161.112271][ T9733] debugfs: 'hsr0' already exists in 'hsr' [ 1161.112292][ T9733] Cannot create hsr debugfs directory [ 1161.170324][ T9714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.170364][ T9714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.177765][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.178094][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.178285][ T9755] bridge_slave_1: entered allmulticast mode [ 1161.229708][ T9755] bridge_slave_1: entered promiscuous mode [ 1161.391404][ T9755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.402012][ T9755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.427879][ T9830] SET target dimension over the limit! [ 1161.512714][ T9755] team0: Port device team_slave_0 added [ 1161.516763][ T9755] team0: Port device team_slave_1 added [ 1161.519682][ T53] Bluetooth: hci7: command tx timeout [ 1161.618996][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.619014][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.619039][ T9755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.650356][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.650439][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.650515][ T9755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.796170][ T9755] hsr_slave_0: entered promiscuous mode [ 1161.797077][ T9755] hsr_slave_1: entered promiscuous mode [ 1161.797700][ T9755] debugfs: 'hsr0' already exists in 'hsr' [ 1161.797723][ T9755] Cannot create hsr debugfs directory [ 1161.884889][ T9714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1161.888188][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1161.925100][ T9714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1161.928841][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1161.961643][ T9714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1161.964992][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.033608][T31669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.058961][ T9714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1162.077032][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.249667][ T9733] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1162.253558][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1162.278518][ T9733] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1162.296359][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.318094][ T9733] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1162.336054][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.337003][ T9733] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1162.355436][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.400575][ T53] Bluetooth: hci3: command tx timeout [ 1162.580049][ T9755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1162.583535][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1162.605442][ T9755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1162.618674][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.631985][ T9755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1162.635320][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.658498][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.659090][ T9755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1162.681485][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.756913][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.782712][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.782800][ T7348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.821492][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.821568][ T7348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.847273][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.879970][ T53] Bluetooth: hci5: command tx timeout [ 1162.913019][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.933411][T19283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.933530][T19283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.967223][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.967298][ T7351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.031038][ T9755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.039463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.102698][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.134454][T19283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.134550][T19283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.176749][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.176866][ T7348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.605266][ T53] Bluetooth: hci7: command tx timeout [ 1163.921610][ T9886] netlink: 260 bytes leftover after parsing attributes in process `syz.4.9145'. [ 1164.079868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.123325][ T5617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1164.145327][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1164.148137][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1164.165140][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1164.167725][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1164.462498][ T9903] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1164.463205][ T9903] team0: Device ipvlan2 is already an upper device of the team interface [ 1164.485021][ T53] Bluetooth: hci3: command tx timeout [ 1164.547183][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.593560][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.733046][ T9714] veth0_vlan: entered promiscuous mode [ 1164.752115][ T9755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.779966][ T9714] veth1_vlan: entered promiscuous mode [ 1164.946982][ T9714] veth0_macvtap: entered promiscuous mode [ 1164.960899][ T53] Bluetooth: hci5: command tx timeout [ 1165.006468][ T9714] veth1_macvtap: entered promiscuous mode [ 1165.051755][ T9921] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9149'. [ 1165.107582][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.174045][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.221918][ T7340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.222317][ T7340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.222411][ T7340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.222448][ T7340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.338850][ T9893] lo speed is unknown, defaulting to 1000 [ 1165.391526][ T7340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.495688][T19281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.495711][T19281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.675732][T31669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.675757][T31669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.683557][ T53] Bluetooth: hci7: command tx timeout [ 1165.966516][ T9755] veth0_vlan: entered promiscuous mode [ 1166.038471][ T9893] hsr0 speed is unknown, defaulting to 1000 [ 1166.067337][ T9733] veth0_vlan: entered promiscuous mode [ 1166.085377][ T9755] veth1_vlan: entered promiscuous mode [ 1166.123865][ T9733] veth1_vlan: entered promiscuous mode [ 1166.180097][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9152'. [ 1166.239709][ T53] Bluetooth: hci8: command tx timeout [ 1166.338357][ T9755] veth0_macvtap: entered promiscuous mode [ 1166.364953][ T9733] veth0_macvtap: entered promiscuous mode [ 1166.375688][ T9755] veth1_macvtap: entered promiscuous mode [ 1166.378158][ T9893] lo speed is unknown, defaulting to 1000 [ 1166.400432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.426028][ T9733] veth1_macvtap: entered promiscuous mode [ 1166.582942][ T9951] netlink: 'syz.0.9155': attribute type 10 has an invalid length. [ 1166.594061][ T9951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.601833][ T9951] bond0: (slave team0): Enslaving as an active interface with an up link [ 1166.674740][ T9955] openvswitch: netlink: Flow actions attr not present in new flow. [ 1166.698075][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.732836][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.757858][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.836703][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.954868][T19281] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.955322][T19281] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.979700][ T7343] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.049604][T31669] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.170567][T19281] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.170759][T19281] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.231963][T19281] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.259957][T19281] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.413308][T19281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.413332][T19281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.439716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.664112][T31665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.664136][T31665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.811278][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.811438][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.811612][ T9893] bridge_slave_0: entered allmulticast mode [ 1167.814092][ T9893] bridge_slave_0: entered promiscuous mode [ 1167.867479][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.867503][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.876776][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.880131][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.881975][ T9893] bridge_slave_1: entered allmulticast mode [ 1167.906724][ T9893] bridge_slave_1: entered promiscuous mode [ 1167.994876][T31665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.994902][T31665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.037564][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.076638][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.158580][ T9893] team0: Port device team_slave_0 added [ 1168.180264][ T9893] team0: Port device team_slave_1 added [ 1168.236109][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.236129][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.236158][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.238442][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.238461][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.238490][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.326302][ T53] Bluetooth: hci8: command tx timeout [ 1168.484435][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.574276][ T9893] hsr_slave_0: entered promiscuous mode [ 1168.576001][ T9893] hsr_slave_1: entered promiscuous mode [ 1168.577132][ T9893] debugfs: 'hsr0' already exists in 'hsr' [ 1168.577156][ T9893] Cannot create hsr debugfs directory [ 1168.850022][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9167'. [ 1168.850059][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9167'. [ 1169.102273][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9170'. [ 1169.166696][T10026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1169.176986][T10026] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1169.489007][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9172'. [ 1169.520169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.568526][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9172'. [ 1169.620651][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9172'. [ 1169.874969][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9172'. [ 1169.894096][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9172'. [ 1170.305878][T10057] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1170.323301][T10057] bond2 (unregistering): Released all slaves [ 1170.399972][ T53] Bluetooth: hci8: command tx timeout [ 1170.452837][T10054] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1170.458373][T10054] bond2 (unregistering): Released all slaves [ 1170.559754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.581675][ T9893] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1170.596493][ T9893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1170.597585][ T9893] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1170.635850][ T9893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.637800][ T9893] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1170.663274][ T9893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1170.665055][ T9893] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1170.707417][ T9893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1170.805055][T10081] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1170.855230][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.881649][ T9893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.888125][T31669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.888220][T31669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.924519][T31669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.924629][T31669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.284288][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9184'. [ 1171.286638][T10088] ip6t_rt: address list match requested but addrnr is 0 [ 1171.732455][T10115] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.051319][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.154967][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.441085][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9196'. [ 1172.441117][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9196'. [ 1172.441333][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9196'. [ 1172.479850][ T53] Bluetooth: hci8: command tx timeout [ 1172.592531][T10153] netlink: 'syz.0.9197': attribute type 21 has an invalid length. [ 1172.705832][T10155] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1173.092149][ T9893] veth0_vlan: entered promiscuous mode [ 1173.119575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.153906][ T9893] veth1_vlan: entered promiscuous mode [ 1173.303104][ T9893] veth0_macvtap: entered promiscuous mode [ 1173.319307][ T9893] veth1_macvtap: entered promiscuous mode [ 1173.417162][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.464751][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.517335][T31665] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.811084][T10190] syzkaller1: entered promiscuous mode [ 1173.811112][T10190] syzkaller1: entered allmulticast mode [ 1173.813913][ T7352] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.851545][T31665] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.867173][T31665] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.159540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.204964][ T7352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.204989][ T7352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.277857][T31665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.277886][T31665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.454925][T10217] __nla_validate_parse: 8 callbacks suppressed [ 1174.454951][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9216'. [ 1174.508120][T10223] netlink: 'syz.6.9218': attribute type 1 has an invalid length. [ 1174.648233][T10237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1174.651196][T10237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1174.651315][T10237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1174.651419][T10237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1174.651536][T10237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1174.653275][T10237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1174.653393][T10237] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1174.671494][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9218'. [ 1174.671557][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9218'. [ 1174.747955][ T7352] IPVS: starting estimator thread 0... [ 1174.819892][T10223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1174.850458][T10242] IPVS: using max 24 ests per chain, 57600 per kthread [ 1174.963253][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9221'. [ 1175.023983][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9221'. [ 1175.402324][T10249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1175.888463][T10276] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9229'. [ 1175.888498][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9229'. [ 1175.888516][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9229'. [ 1176.108018][T10283] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9231'. [ 1176.586755][T10298] pimreg: entered allmulticast mode [ 1176.972662][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9242'. [ 1177.030094][T10311] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1177.447183][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.502555][T10332] rdma_rxe: rxe_newlink: failed to add lo [ 1177.516892][T10332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1177.519367][ C0] net_ratelimit: 29 callbacks suppressed [ 1177.519391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.731272][T10339] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1177.783877][T10338] x_tables: duplicate underflow at hook 1 [ 1178.042706][T10350] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1178.591010][T10371] bond3: entered promiscuous mode [ 1178.591126][T10371] bond3: entered allmulticast mode [ 1178.591502][T10371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1178.750921][T19281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.216632][T10390] netlink: 'syz.4.9270': attribute type 1 has an invalid length. [ 1179.333022][T10390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1179.357371][T10390] bond1: (slave bond2): making interface the new active one [ 1179.357945][T10390] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1179.470297][T10390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1179.556983][T10398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1179.585710][T10403] Bluetooth: hci1: too big key_count value 32778 [ 1179.587478][T10403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1179.759925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.560285][ T53] Bluetooth: hci8: command tx timeout [ 1180.799504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.945846][T10447] netlink: 'syz.7.9282': attribute type 2 has an invalid length. [ 1181.369871][T10451] macsec1: entered promiscuous mode [ 1181.635667][T10455] __nla_validate_parse: 10 callbacks suppressed [ 1181.635691][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9288'. [ 1181.635709][T10455] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9288'. [ 1181.750288][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9287'. [ 1182.112004][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.170633][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9295'. [ 1182.296194][T10477] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1182.397992][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9296'. [ 1182.605669][T10479] bond1: Invalid ad_actor_system MAC address. [ 1182.605695][T10479] bond1: option ad_actor_system: invalid value (1) [ 1182.655898][T10479] bond1 (unregistering): Released all slaves [ 1182.853814][T10493] syz_tun: entered allmulticast mode [ 1182.853997][T10496] wg2: entered allmulticast mode [ 1182.895563][T10491] syz_tun: left allmulticast mode [ 1183.119439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.378908][T10511] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1183.493012][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9304'. [ 1183.584657][T10522] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9306'. [ 1183.634980][T10516] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1183.655310][T10516] bond1 (unregistering): Released all slaves [ 1183.908099][T10532] syzkaller0: entered promiscuous mode [ 1183.908125][T10532] syzkaller0: entered allmulticast mode [ 1184.096388][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9309'. [ 1184.096420][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9309'. [ 1184.159385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.332702][T10546] bridge0: port 3(vlan2) entered blocking state [ 1184.332933][T10546] bridge0: port 3(vlan2) entered disabled state [ 1184.333087][T10546] vlan2: entered allmulticast mode [ 1184.333105][T10546] geneve0: entered allmulticast mode [ 1184.368362][T10546] vlan2: entered promiscuous mode [ 1184.368387][T10546] geneve0: entered promiscuous mode [ 1184.592671][T10552] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1184.594743][T10552] batman_adv: batadv0: Adding interface: gretap1 [ 1184.594763][T10552] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.594799][T10552] batman_adv: batadv0: Interface activated: gretap1 [ 1184.877579][T10562] netlink: 'syz.4.9317': attribute type 1 has an invalid length. [ 1184.904596][T10568] netlink: 'syz.6.9318': attribute type 1 has an invalid length. [ 1184.937927][T10574] netlink: 'syz.6.9318': attribute type 1 has an invalid length. [ 1184.938630][T10570] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9317'. [ 1185.046410][ T31] audit: type=1800 audit(1790279888.248:25): pid=10562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9317" name="memory.events" dev="tmpfs" ino=915 res=0 errno=0 [ 1185.521096][ T7343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.928822][T10603] xt_MASQUERADE: bad MAP_IPS. [ 1186.038237][T10609] ip_tables: iptables: counters copy to user failed while replacing table [ 1186.138737][T10615] bond0: Error: CAN devices cannot be enslaved [ 1186.559347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.677123][T10631] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1186.877241][T10647] __nla_validate_parse: 2 callbacks suppressed [ 1186.877258][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9344'. [ 1187.599425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.324198][T19292] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1188.830265][ T7343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.696759][T10638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1189.714692][T10645] netlink: 'syz.4.9344': attribute type 1 has an invalid length. [ 1189.714718][T10645] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9344'. [ 1189.840013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.980281][T10653] sctp: [Deprecated]: syz.6.9346 (pid 10653) Use of int in max_burst socket option deprecated. [ 1189.980281][T10653] Use struct sctp_assoc_value instead [ 1190.022959][T10654] ip6gre1: entered promiscuous mode [ 1190.022985][T10654] ip6gre1: entered allmulticast mode [ 1190.032641][T19292] IPVS: starting estimator thread 0... [ 1190.129575][T10655] IPVS: using max 25 ests per chain, 60000 per kthread [ 1190.390361][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9347'. [ 1190.585900][T10663] netlink: 'syz.8.9347': attribute type 12 has an invalid length. [ 1190.817777][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1190.838769][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1190.846099][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1190.872342][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1190.883807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.906879][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1190.967080][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1190.982547][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1191.000132][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1191.018620][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1191.037413][T10686] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1191.194468][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9362'. [ 1191.301943][T10704] vlan1: entered allmulticast mode [ 1191.301968][T10704] bond0: entered allmulticast mode [ 1191.301984][T10704] bond_slave_0: entered allmulticast mode [ 1191.302001][T10704] bond_slave_1: entered allmulticast mode [ 1191.340355][T10706] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9360'. [ 1191.454130][T10713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1191.640941][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1191.658662][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1191.666876][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1191.675162][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1191.675822][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1191.928637][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9365'. [ 1192.172888][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.445602][T10750] openvswitch: netlink: IP tunnel dst address not specified [ 1192.674224][T10721] lo speed is unknown, defaulting to 1000 [ 1193.199425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.723210][T10721] hsr0 speed is unknown, defaulting to 1000 [ 1193.744390][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.744825][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.745197][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.778578][ T53] Bluetooth: hci9: command tx timeout [ 1193.856224][T10783] net_ratelimit: 9 callbacks suppressed [ 1193.856249][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.856622][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.857022][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.857373][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.874885][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.875773][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.894559][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.934732][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 1194.013175][T10788] netlink: 'syz.4.9381': attribute type 1 has an invalid length. [ 1194.020472][T10791] netlink: 'syz.4.9381': attribute type 1 has an invalid length. [ 1194.239718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.365750][T10800] Bluetooth: hci0: unsupported parameter 5135 [ 1194.365776][T10800] Bluetooth: hci0: unsupported parameter 8192 [ 1194.365790][T10800] Bluetooth: hci0: unsupported parameter 5135 [ 1194.365805][T10800] Bluetooth: hci0: unsupported parameter 8192 [ 1194.434505][T10804] netlink: 'syz.4.9384': attribute type 3 has an invalid length. [ 1194.437175][T10806] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9385'. [ 1194.438512][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9385'. [ 1195.032830][T10721] lo speed is unknown, defaulting to 1000 [ 1195.094455][T10826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.371694][T10838] netlink: 124 bytes leftover after parsing attributes in process `syz.6.9392'. [ 1195.376464][T10834] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9395'. [ 1195.839476][ T53] Bluetooth: hci9: command tx timeout [ 1195.909055][T10849] netlink: 'syz.7.9399': attribute type 23 has an invalid length. [ 1196.264394][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9400'. [ 1196.349725][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9400'. [ 1196.524255][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.527447][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.529597][T10721] bridge_slave_0: entered allmulticast mode [ 1196.557497][T10721] bridge_slave_0: entered promiscuous mode [ 1196.572757][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.572867][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.579622][T10721] bridge_slave_1: entered allmulticast mode [ 1196.604260][T10721] bridge_slave_1: entered promiscuous mode [ 1196.653565][T10872] netlink: 256 bytes leftover after parsing attributes in process `syz.7.9403'. [ 1196.842656][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.864120][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.017731][T10721] team0: Port device team_slave_0 added [ 1197.146647][T10721] team0: Port device team_slave_1 added [ 1197.363544][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.363567][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.363667][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.367463][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.367481][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.367539][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.484252][T10900] tipc: Enabling of bearer rejected, failed to enable media [ 1197.617123][T10902] Bluetooth: hci0: unsupported parameter 5135 [ 1197.619136][T10902] Bluetooth: hci0: unsupported parameter 8192 [ 1197.637265][T10902] Bluetooth: hci0: unsupported parameter 5135 [ 1197.637288][T10902] Bluetooth: hci0: unsupported parameter 8192 [ 1197.934299][ T53] Bluetooth: hci9: command tx timeout [ 1198.332848][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9417'. [ 1198.395570][T10721] hsr_slave_0: entered promiscuous mode [ 1198.405951][T10721] hsr_slave_1: entered promiscuous mode [ 1198.406792][T10721] debugfs: 'hsr0' already exists in 'hsr' [ 1198.406813][T10721] Cannot create hsr debugfs directory [ 1198.572257][T31669] IPVS: starting estimator thread 0... [ 1198.671039][T10931] IPVS: using max 28 ests per chain, 67200 per kthread [ 1198.750808][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9421'. [ 1198.757002][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9421'. [ 1198.757037][T10935] netlink: 'syz.7.9421': attribute type 30 has an invalid length. [ 1198.757053][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9421'. [ 1198.881559][ T7352] net_ratelimit: 3 callbacks suppressed [ 1198.881582][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.783104][T10721] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1199.803209][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1199.804409][T10721] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1199.811924][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1199.817597][T10721] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1199.866215][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1199.877152][T10721] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1199.901223][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1199.929489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.000028][ T53] Bluetooth: hci9: command tx timeout [ 1200.035725][T10971] lo speed is unknown, defaulting to 1000 [ 1200.115982][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9429'. [ 1200.310731][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9430'. [ 1200.310756][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9430'. [ 1200.374624][T10974] netlink: 'syz.8.9430': attribute type 4 has an invalid length. [ 1200.374652][T10974] netlink: 152 bytes leftover after parsing attributes in process `syz.8.9430'. [ 1200.437204][T10976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.467149][T10976] bond1: (slave bond0): making interface the new active one [ 1200.468894][T10976] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1200.503715][T10974] .`: renamed from bond0 (while UP) [ 1200.578541][T10971] hsr0 speed is unknown, defaulting to 1000 [ 1200.616750][T10721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.618787][T10980] netlink: 576 bytes leftover after parsing attributes in process `syz.4.9432'. [ 1200.639660][ T53] Bluetooth: hci7: command tx timeout [ 1200.703963][T10721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.731395][T19292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.731507][T19292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.784227][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.784332][ T7348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.891879][T10982] netlink: 'syz.8.9433': attribute type 1 has an invalid length. [ 1200.891906][T10982] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.9433'. [ 1200.891937][T10982] netlink: 'syz.8.9433': attribute type 1 has an invalid length. [ 1200.959412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.074829][T10971] lo speed is unknown, defaulting to 1000 [ 1201.460401][T10990] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1201.463682][T10990] bond4 (unregistering): Released all slaves [ 1202.202437][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.543940][T11029] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1202.766438][T10721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.279584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.426401][T10721] veth0_vlan: entered promiscuous mode [ 1203.458418][T10721] veth1_vlan: entered promiscuous mode [ 1203.531642][T10721] veth0_macvtap: entered promiscuous mode [ 1203.538345][T11055] __nla_validate_parse: 3 callbacks suppressed [ 1203.538367][T11055] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9447'. [ 1203.538389][T11055] netlink: 10 bytes leftover after parsing attributes in process `syz.8.9447'. [ 1203.596902][T10721] veth1_macvtap: entered promiscuous mode [ 1203.677142][T11055] netlink: 10 bytes leftover after parsing attributes in process `syz.8.9447'. [ 1203.702182][T10721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.930572][T10721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.976678][T19292] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.977645][T19292] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.977689][T19292] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.977729][T19292] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.254401][ T9829] udevd[9829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1204.329619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.831887][T31669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.831912][T31669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.133884][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.133908][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.292493][T11110] netlink: 'syz.6.9453': attribute type 10 has an invalid length. [ 1205.554159][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.766351][T11110] team0: Port device dummy0 added [ 1206.121484][T11137] netlink: 'syz.8.9455': attribute type 6 has an invalid length. [ 1206.121509][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9455'. [ 1206.188825][T11139] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9359'. [ 1206.559442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.915014][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9462'. [ 1206.917762][T11171] netlink: 'syz.4.9461': attribute type 10 has an invalid length. [ 1207.104397][T11171] team0: Port device dummy0 added [ 1207.587934][T11201] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1207.599634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.789028][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1208.020585][T11220] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9470'. [ 1208.055335][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9466'. [ 1208.055542][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9466'. [ 1208.123860][T11214] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1208.787794][T11244] __nla_validate_parse: 2 callbacks suppressed [ 1208.787817][T11244] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9477'. [ 1208.835265][T11245] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9476'. [ 1208.904092][T11246] netlink: 'syz.9.9478': attribute type 19 has an invalid length. [ 1208.904117][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9478'. [ 1208.941592][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.034630][T11246] netlink: 'syz.9.9478': attribute type 19 has an invalid length. [ 1209.034656][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9478'. [ 1209.065573][ T7348] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1209.069015][ T7352] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1209.069062][ T7352] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1209.069101][ T7352] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1209.078288][T11239] netlink: 'syz.6.9475': attribute type 5 has an invalid length. [ 1209.768782][ T7343] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1209.999595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.444897][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9486'. [ 1210.526673][T11289] sctp: [Deprecated]: syz.6.9486 (pid 11289) Use of int in maxseg socket option. [ 1210.526673][T11289] Use struct sctp_assoc_value instead [ 1211.042888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.286071][ T7352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.406076][ T7352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.467597][ T7352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.533591][ T7352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.696187][ T7352] bridge_slave_1: left allmulticast mode [ 1211.696219][ T7352] bridge_slave_1: left promiscuous mode [ 1211.696385][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.720619][ T7352] bridge_slave_0: left allmulticast mode [ 1211.720661][ T7352] bridge_slave_0: left promiscuous mode [ 1211.720840][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.984953][ T7352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.988557][ T7352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.022089][ T7352] bond0 (unregistering): (slave team0): Releasing backup interface [ 1212.024853][ T7352] bond0 (unregistering): Released all slaves [ 1212.289785][ T7340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.626914][T11273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1212.952387][ T7352] hsr_slave_0: left promiscuous mode [ 1212.973391][ T7352] hsr_slave_1: left promiscuous mode [ 1212.974477][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.974499][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.992779][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1212.992856][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.020464][T11304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9488'. [ 1213.063865][ T7352] veth1_macvtap: left promiscuous mode [ 1213.063907][ T7352] veth0_macvtap: left promiscuous mode [ 1213.067162][ T7352] veth1_vlan: left promiscuous mode [ 1213.067260][ T7352] veth0_vlan: left promiscuous mode [ 1213.359651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.065523][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9499'. [ 1214.182546][ T7352] team0 (unregistering): Port device team_slave_1 removed [ 1214.213865][ T7352] team0 (unregistering): Port device team_slave_0 removed [ 1214.399377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.570899][T11361] ip_tables: iptables: counters copy to user failed while replacing table [ 1214.637987][T11300] batman_adv: batadv0: Adding interface: veth0 [ 1214.638008][T11300] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.638041][T11300] batman_adv: batadv0: Interface activated: veth0 [ 1214.645761][T11304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.645847][T11304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.696958][T11304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.696984][T11304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.698125][T11304] batman_adv: batadv0: Interface deactivated: gretap1 [ 1214.698145][T11304] batman_adv: batadv0: Removing interface: gretap1 [ 1214.742626][T11304] batman_adv: batadv0: Interface deactivated: veth0 [ 1214.742651][T11304] batman_adv: batadv0: Removing interface: veth0 [ 1214.806816][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1214.833496][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1214.836828][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1214.839014][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1214.870007][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1214.934978][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9503'. [ 1214.937721][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9503'. [ 1214.968299][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1215.082790][T11375] netlink: 277 bytes leftover after parsing attributes in process `syz.9.9504'. [ 1215.741493][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.877657][T11403] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9509'. [ 1215.971217][T11403] netlink: 'syz.6.9509': attribute type 21 has an invalid length. [ 1215.971243][T11403] netlink: 'syz.6.9509': attribute type 22 has an invalid length. [ 1215.971258][T11403] netlink: 'syz.6.9509': attribute type 23 has an invalid length. [ 1215.971272][T11403] netlink: 'syz.6.9509': attribute type 25 has an invalid length. [ 1215.971286][T11403] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9509'. [ 1216.093126][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9511'. [ 1216.765595][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1216.799386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.824507][T11448] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1216.828540][T11448] bond0 (unregistering): Released all slaves [ 1216.953776][T11362] lo speed is unknown, defaulting to 1000 [ 1216.960436][ T5617] Bluetooth: hci3: command tx timeout [ 1217.578947][T11362] hsr0 speed is unknown, defaulting to 1000 [ 1217.787209][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9521'. [ 1217.839440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.923997][T11477] macsec1: entered promiscuous mode [ 1217.924015][T11477] bridge0: entered promiscuous mode [ 1217.924136][T11477] macsec1: entered allmulticast mode [ 1217.924147][T11477] bridge0: entered allmulticast mode [ 1217.994158][T11477] bridge0: port 1(macsec1) entered blocking state [ 1217.994444][T11477] bridge0: port 1(macsec1) entered disabled state [ 1218.057326][T11477] bridge0: left allmulticast mode [ 1218.216650][ T7318] bridge0: left promiscuous mode [ 1218.322986][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1218.667801][T11509] netlink: 'syz.4.9525': attribute type 7 has an invalid length. [ 1218.668064][T11509] netlink: 'syz.4.9525': attribute type 7 has an invalid length. [ 1218.795195][T11362] lo speed is unknown, defaulting to 1000 [ 1219.040997][ T7351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.044271][ T5617] Bluetooth: hci3: command tx timeout [ 1219.805539][T11546] bond3 (unregistering): Released all slaves [ 1220.034466][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1220.079516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.325412][T19281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1220.416589][T11572] netlink: 3604 bytes leftover after parsing attributes in process `syz.6.9538'. [ 1220.612380][T11578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1220.651286][T11584] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1220.683215][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9540'. [ 1220.709090][T11362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.713550][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.713736][T11362] bridge_slave_0: entered allmulticast mode [ 1220.716068][T11362] bridge_slave_0: entered promiscuous mode [ 1220.744945][T11362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.757080][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.757273][T11362] bridge_slave_1: entered allmulticast mode [ 1220.786828][T11362] bridge_slave_1: entered promiscuous mode [ 1221.058327][T11587] ip_tables: iptables: counters copy to user failed while replacing table [ 1221.081797][T11362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.119592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.119934][ T53] Bluetooth: hci3: command tx timeout [ 1221.130486][T11362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.141454][T11595] netlink: 'syz.9.9543': attribute type 5 has an invalid length. [ 1221.141555][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9543'. [ 1221.362783][T11601] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9545'. [ 1221.389079][T11362] team0: Port device team_slave_0 added [ 1221.415452][T11602] netlink: 5 bytes leftover after parsing attributes in process `syz.6.9545'. [ 1221.428187][T11601] gretap0: entered promiscuous mode [ 1221.485062][T11362] team0: Port device team_slave_1 added [ 1221.485220][T11602] 0ªî{X¹¦: renamed from gretap0 [ 1221.527580][T11602] 0ªî{X¹¦: left promiscuous mode [ 1221.527607][T11602] 0ªî{X¹¦: entered allmulticast mode [ 1221.540691][T11602] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1221.619394][T11362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.619415][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.619443][T11362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.621906][T11362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.621923][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.621950][T11362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.901934][T11362] hsr_slave_0: entered promiscuous mode [ 1221.916220][T11362] hsr_slave_1: entered promiscuous mode [ 1221.919908][T11362] debugfs: 'hsr0' already exists in 'hsr' [ 1221.919935][T11362] Cannot create hsr debugfs directory [ 1221.943829][T11619] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9551'. [ 1222.255388][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.642945][T11362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.673267][T11645] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9558'. [ 1222.675634][T11645] 0ªî{X¹¦: entered promiscuous mode [ 1222.675669][T11645] 0ªî{X¹¦: left allmulticast mode [ 1222.726388][T11645] netlink: 'syz.6.9558': attribute type 10 has an invalid length. [ 1222.738986][T11645] netlink: 5 bytes leftover after parsing attributes in process `syz.6.9558'. [ 1222.739095][T11645] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 1222.770737][T11645] 1ªî{X¹¦: left promiscuous mode [ 1222.770763][T11645] 1ªî{X¹¦: entered allmulticast mode [ 1222.788252][T11645] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1222.930309][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9559'. [ 1222.956406][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9560'. [ 1223.007458][T11362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.219454][ T53] Bluetooth: hci3: command tx timeout [ 1223.262032][T11362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.289432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.586841][T11682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1223.586873][T11682] IPv6: NLM_F_CREATE should be set when creating new route [ 1223.615448][T11362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.826030][T11695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1224.319433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.441643][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.346672][T11779] __nla_validate_parse: 3 callbacks suppressed [ 1226.346690][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9583'. [ 1226.479375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.175020][T11704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1227.227795][T11362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1227.307308][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1227.308708][T11362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1227.339632][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1227.340687][T11362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1227.400181][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1227.401873][T11362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1227.431583][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1227.519575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.571869][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9585'. [ 1227.631450][T11362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.672525][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9587'. [ 1227.718292][T11362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.790932][T31669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.791042][T31669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.882554][T31669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.882666][T31669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.117180][T11813] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1228.147611][T11813] bond1 (unregistering): Released all slaves [ 1228.222612][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9591'. [ 1228.287064][T11824] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9592'. [ 1228.875362][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9597'. [ 1228.943613][T11849] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9599'. [ 1228.944165][T11849] netlink: NAT attribute has 1 unknown bytes [ 1228.944198][T11849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1228.946754][T11849] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9599'. [ 1228.947444][T11849] netlink: NAT attribute has 1 unknown bytes [ 1228.947476][T11849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.153386][T11854] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9598'. [ 1229.162080][T31669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.555853][T11872] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1229.917898][T11885] lo speed is unknown, defaulting to 1000 [ 1230.071021][T11362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.239570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.265484][T11362] veth0_vlan: entered promiscuous mode [ 1230.316273][T11362] veth1_vlan: entered promiscuous mode [ 1230.344838][T11905] netlink: 400 bytes leftover after parsing attributes in process `syz.8.9613'. [ 1230.567571][T11362] veth0_macvtap: entered promiscuous mode [ 1230.612172][T11362] veth1_macvtap: entered promiscuous mode [ 1230.697977][T11362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.739969][T11362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.958788][T11919] tbf_change: 23 callbacks suppressed [ 1230.958811][T11919] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1230.964916][T31665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.969831][T19292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.969968][T19292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.970069][T19292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.286566][T11911] bridge0: port 3(vlan2) entered blocking state [ 1231.286707][T11911] bridge0: port 3(vlan2) entered forwarding state [ 1231.289852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.333527][T11911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1231.414263][T11885] hsr0 speed is unknown, defaulting to 1000 [ 1232.261541][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1232.330510][T11936] __nla_validate_parse: 2 callbacks suppressed [ 1232.330533][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9620'. [ 1232.330560][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9620'. [ 1232.580955][ T7343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.600142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.639714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.687828][T19281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.689286][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1235.843068][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 1236.057252][T31669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.057276][T31669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.484257][T31665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.484281][T31665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.719443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.865724][T11885] lo speed is unknown, defaulting to 1000 [ 1236.968912][T11964] netlink: 11 bytes leftover after parsing attributes in process `syz.8.9624'. [ 1236.975895][T11965] netlink: 11 bytes leftover after parsing attributes in process `syz.8.9624'. [ 1237.266735][T11977] gre1: entered promiscuous mode [ 1237.760202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.811655][T11990] tipc: Enabling not permitted [ 1237.811692][T11990] tipc: Enabling of bearer rejected, failed to enable media [ 1238.394664][T12017] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1238.395728][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1238.396008][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9632'. [ 1238.453543][T12020] netlink: 516 bytes leftover after parsing attributes in process `syz.6.9633'. [ 1238.857607][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9635'. [ 1238.898310][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.108407][T12031] hsr_slave_1 (unregistering): left promiscuous mode [ 1239.167713][T12044] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9637'. [ 1239.207639][T12036] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1239.207726][T12036] gretap1: entered promiscuous mode [ 1239.207743][T12036] gretap1: entered allmulticast mode [ 1239.236640][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1239.236665][T12048] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1239.288014][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1239.383042][T19281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.584110][T12053] batman_adv: batadv0: Adding interface: veth0 [ 1239.584142][T12053] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.584175][T12053] batman_adv: batadv0: Interface activated: veth0 [ 1239.588932][T12053] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9640'. [ 1239.588957][T12053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.588978][T12053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.610020][T12053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.610114][T12053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.641707][T12053] batman_adv: batadv0: Interface deactivated: veth0 [ 1239.641731][T12053] batman_adv: batadv0: Removing interface: veth0 [ 1240.151720][T12079] netlink: 'syz.1.9646': attribute type 6 has an invalid length. [ 1240.155490][T12078] netlink: 'syz.1.9646': attribute type 6 has an invalid length. [ 1240.399406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.002669][T12114] ip_tables: iptables: counters copy to user failed while replacing table [ 1241.439957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.534218][T12132] bond0: option min_links: invalid value (18446744073709551614) [ 1241.534248][T12132] bond0: option min_links: allowed values 0 - 2147483647 [ 1241.562994][T12138] sctp: [Deprecated]: syz.4.9661 (pid 12138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1241.562994][T12138] Use struct sctp_sack_info instead [ 1241.567397][T12132] bond0 (unregistering): Released all slaves [ 1241.573935][T12138] sctp: [Deprecated]: syz.4.9661 (pid 12138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1241.573935][T12138] Use struct sctp_sack_info instead [ 1242.007421][T12153] hsr0: entered allmulticast mode [ 1242.007448][T12153] hsr_slave_0: entered allmulticast mode [ 1242.007469][T12153] hsr_slave_1: entered allmulticast mode [ 1242.151650][T12162] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9669'. [ 1242.285911][T12162] x_tables: duplicate underflow at hook 3 [ 1242.442364][T12170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1242.753802][T19292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.004527][T12199] openvswitch: netlink: Flow key attribute not present in set flow. [ 1243.028131][T12199] netlink: zone id is out of range [ 1243.028150][T12199] netlink: zone id is out of range [ 1243.028160][T12199] netlink: zone id is out of range [ 1243.028169][T12199] netlink: zone id is out of range [ 1243.028178][T12199] netlink: zone id is out of range [ 1243.028187][T12199] netlink: zone id is out of range [ 1243.028203][T12199] netlink: zone id is out of range [ 1243.028212][T12199] netlink: zone id is out of range [ 1243.028222][T12199] netlink: zone id is out of range [ 1243.175362][T12204] batman_adv: batadv0: Adding interface: veth0 [ 1243.175377][T12204] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.175402][T12204] batman_adv: batadv0: Interface activated: veth0 [ 1243.201335][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.201448][T12204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.241861][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.241887][T12204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.245351][T12204] batman_adv: batadv0: Interface deactivated: veth0 [ 1243.245373][T12204] batman_adv: batadv0: Removing interface: veth0 [ 1243.477343][T12211] __nla_validate_parse: 2 callbacks suppressed [ 1243.477367][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9683'. [ 1244.111539][T12234] syzkaller1: entered promiscuous mode [ 1244.111564][T12234] syzkaller1: entered allmulticast mode [ 1244.118964][T12234] syzkaller1: left promiscuous mode [ 1244.118988][T12234] syzkaller1: left allmulticast mode [ 1244.733109][T12260] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9695'. [ 1244.866274][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9696'. [ 1244.953271][T12268] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1245.236289][T12272] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9699'. [ 1245.304709][T12280] vxcan0: tx address claim with dlc 1 [ 1245.334106][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9701'. [ 1245.344886][T12284] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1245.622305][T12289] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9704'. [ 1245.838068][T12310] netlink: 'syz.8.9707': attribute type 2 has an invalid length. [ 1246.085890][ T5617] Bluetooth: hci6: command 0x0406 tx timeout [ 1246.380094][T12325] tipc: Can't bind to reserved service type 2 [ 1246.616567][T12327] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9715'. [ 1246.790191][T12333] tipc: Started in network mode [ 1246.790226][T12333] tipc: Node identity aa1a51590022, cluster identity 4711 [ 1246.822675][T12333] tipc: Enabled bearer , priority 0 [ 1247.302422][T12333] syzkaller0: entered promiscuous mode [ 1247.302449][T12333] syzkaller0: entered allmulticast mode [ 1247.303165][T12333] tipc: Resetting bearer [ 1247.785509][ T7351] tipc: Resetting bearer [ 1247.788353][T12335] tipc: Resetting bearer [ 1247.863544][T12350] netlink: 'syz.8.9723': attribute type 1 has an invalid length. [ 1248.031290][T12353] Cannot find add_set index 0 as target [ 1248.239379][ C1] net_ratelimit: 5 callbacks suppressed [ 1248.239407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.500202][ T7351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.560442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.602401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.415500][ T7340] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1253.022917][T19292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.368612][T12335] tipc: Disabling bearer [ 1253.396857][T12329] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1253.677109][T30436] tipc: Node number set to 2855817561 [ 1254.079363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.218713][T12372] netlink: 'syz.6.9731': attribute type 1 has an invalid length. [ 1254.228795][T12371] veth0: entered promiscuous mode [ 1254.244766][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1254.491908][T12386] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1254.491969][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1254.491986][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1254.607666][T12392] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1254.607737][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1254.607755][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1254.714628][T12396] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9734'. [ 1254.714680][T12396] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9734'. [ 1254.942564][T12367] veth0: left promiscuous mode [ 1255.119433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.548527][T12414] siw: device registration error -23 [ 1256.481017][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.519617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.559665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.781820][T19292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.799498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.839389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.082342][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.159509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.199547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.390253][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.439845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.479560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.692353][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.719413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.759418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.992228][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.999450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.039906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.313598][T31669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.359690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.399685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.612997][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.639358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.679397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.921103][T12419] Bluetooth: hci7: command 0x0406 tx timeout [ 1281.921203][T12419] Bluetooth: hci5: command 0x0406 tx timeout [ 1282.991204][T19292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.999449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.321797][T31669] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1284.960533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.039398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.241005][T31669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.279509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.319473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.601166][ T7343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.639894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.362323][ T32] INFO: task syz.3.8943:9082 blocked for more than 143 seconds. [ 1291.362354][ T32] Not tainted syzkaller #0 [ 1291.362368][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1291.362380][ T32] task:syz.3.8943 state:D stack:27200 pid:9082 tgid:9081 ppid:31934 task_flags:0x400140 flags:0x00080002 [ 1291.362451][ T32] Call Trace: [ 1291.362460][ T32] ** replaying previous printk message ** [ 1291.362460][ T32] [ 1291.362476][ T32] __schedule+0x17db/0x58f0 [ 1291.362620][ T32] ? __pfx___schedule+0x10/0x10 [ 1291.362659][ T32] ? schedule+0x90/0x2b0 [ 1291.362691][ T32] schedule+0x164/0x2b0 [ 1291.362721][ T32] schedule_preempt_disabled+0x13/0x30 [ 1291.362756][ T32] __mutex_lock+0x7c1/0x1550 [ 1291.362793][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1291.362828][ T32] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1291.362898][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1291.362938][ T32] ? net_generic+0x1e/0x240 [ 1291.362966][ T32] ? net_generic+0x1e/0x240 [ 1291.363001][ T32] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1291.363040][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1291.363079][ T32] ? rcu_is_watching+0x16/0xb0 [ 1291.363117][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1291.363146][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1291.363174][ T32] ? __nla_parse+0x40/0x60 [ 1291.363242][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1291.363328][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1291.363369][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1291.363409][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1291.363455][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1291.363478][ T32] ? security_capable+0x7e/0x2c0 [ 1291.363540][ T32] genl_rcv_msg+0x614/0x7a0 [ 1291.364021][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1291.364053][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1291.364103][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1291.364180][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1291.364213][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1291.364269][ T32] ? down_read+0x2be/0x330 [ 1291.364333][ T32] genl_rcv+0x28/0x40 [ 1291.364360][ T32] netlink_unicast+0x7bd/0x940 [ 1291.364409][ T32] netlink_sendmsg+0x813/0xb40 [ 1291.364458][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.364507][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1291.364563][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.364599][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1291.364652][ T32] ____sys_sendmsg+0x54e/0x850 [ 1291.364693][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1291.364737][ T32] ? import_iovec+0x73/0xa0 [ 1291.364803][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1291.364835][ T32] ? __lock_acquire+0x747/0x2de0 [ 1291.364867][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1291.364905][ T32] ? futex_wait+0x2a2/0x390 [ 1291.364978][ T32] ? __fget_files+0x2a/0x420 [ 1291.365010][ T32] ? __fget_files+0x3a2/0x420 [ 1291.365057][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1291.365095][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1291.365166][ T32] do_syscall_64+0x166/0x520 [ 1291.365246][ T32] ? trace_irq_disable+0x3b/0x140 [ 1291.365271][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.365297][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1291.365327][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.365353][ T32] RIP: 0033:0x7f326239e159 [ 1291.365376][ T32] RSP: 002b:00007f32631f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.365403][ T32] RAX: ffffffffffffffda RBX: 00007f3262625fa0 RCX: 00007f326239e159 [ 1291.365422][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1291.365438][ T32] RBP: 00007f326243506b R08: 0000000000000000 R09: 0000000000000000 [ 1291.365454][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.365470][ T32] R13: 00007f3262626038 R14: 00007f3262625fa0 R15: 00007ffcaf9822b8 [ 1291.365510][ T32] [ 1291.365522][ T32] INFO: task syz.5.8947:9090 blocked for more than 143 seconds. [ 1291.365541][ T32] Not tainted syzkaller #0 [ 1291.365553][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1291.365564][ T32] task:syz.5.8947 state:D stack:25400 pid:9090 tgid:9089 ppid:7424 task_flags:0x400140 flags:0x00080002 [ 1291.365630][ T32] Call Trace: [ 1291.365639][ T32] [ 1291.365655][ T32] __schedule+0x17db/0x58f0 [ 1291.365716][ T32] ? __pfx___schedule+0x10/0x10 [ 1291.365754][ T32] ? schedule+0x90/0x2b0 [ 1291.365786][ T32] schedule+0x164/0x2b0 [ 1291.365816][ T32] schedule_preempt_disabled+0x13/0x30 [ 1291.365843][ T32] __mutex_lock+0x7c1/0x1550 [ 1291.365879][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1291.365913][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1291.365949][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1291.365989][ T32] ? net_generic+0x1e/0x240 [ 1291.366017][ T32] ? net_generic+0x1e/0x240 [ 1291.366051][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1291.366082][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 1291.366121][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 1291.366152][ T32] ? do_syscall_64+0x166/0x520 [ 1291.366181][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.366209][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1291.366256][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 1291.366308][ T32] ? rcu_is_watching+0x16/0xb0 [ 1291.366339][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1291.366366][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1291.366394][ T32] ? __nla_parse+0x40/0x60 [ 1291.366430][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1291.366460][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1291.366500][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1291.366539][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1291.366586][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1291.366608][ T32] ? security_capable+0x7e/0x2c0 [ 1291.366645][ T32] genl_rcv_msg+0x614/0x7a0 [ 1291.366682][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1291.366711][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1291.366761][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1291.366798][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1291.366830][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1291.366885][ T32] ? down_read+0x2be/0x330 [ 1291.366922][ T32] genl_rcv+0x28/0x40 [ 1291.366948][ T32] netlink_unicast+0x7bd/0x940 [ 1291.366995][ T32] netlink_sendmsg+0x813/0xb40 [ 1291.367044][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.367092][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1291.367128][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.367165][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1291.367194][ T32] ____sys_sendmsg+0x54e/0x850 [ 1291.367240][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1291.367284][ T32] ? import_iovec+0x73/0xa0 [ 1291.367320][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1291.367351][ T32] ? __lock_acquire+0x747/0x2de0 [ 1291.367382][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1291.367425][ T32] ? futex_wake+0x51b/0x5f0 [ 1291.367495][ T32] ? __fget_files+0x2a/0x420 [ 1291.367527][ T32] ? __fget_files+0x3a2/0x420 [ 1291.367573][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1291.367610][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1291.367669][ T32] do_syscall_64+0x166/0x520 [ 1291.367698][ T32] ? trace_irq_disable+0x3b/0x140 [ 1291.367722][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.367747][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1291.367778][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.367802][ T32] RIP: 0033:0x7f39cbd9e159 [ 1291.367823][ T32] RSP: 002b:00007f39ccc8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.367847][ T32] RAX: ffffffffffffffda RBX: 00007f39cc025fa0 RCX: 00007f39cbd9e159 [ 1291.367866][ T32] RDX: 0000000004008090 RSI: 0000200000000040 RDI: 0000000000000004 [ 1291.367883][ T32] RBP: 00007f39cbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 1291.367899][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.367914][ T32] R13: 00007f39cc026038 R14: 00007f39cc025fa0 R15: 00007ffcf616c978 [ 1291.367954][ T32] [ 1291.368021][ T32] [ 1291.368021][ T32] Showing all locks held in the system: [ 1291.368036][ T32] locks held by ksoftirqd/1/24: 1, last CPU#1: [ 1291.368054][ T32] #0: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_interrupt+0xfd/0xaa0 [ 1291.368131][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1291.368149][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1291.368232][ T32] locks held by getty/5375: 2, on CPU#1: [ 1291.368249][ T32] #0: ffff8880349250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1291.368376][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1291.368469][ T32] locks held by syz.1.8413/6938: 2, on CPU#0: [ 1291.368486][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1291.368545][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1291.368642][ T32] locks held by syz.3.8943/9082: 2, on CPU#0: [ 1291.368660][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1291.368720][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1291.368783][ T32] locks held by syz.5.8947/9090: 2, on CPU#0: [ 1291.368802][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1291.368865][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1291.368932][ T32] locks held by syz.2.9054/9467: 2, on CPU#1: [ 1291.368951][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1291.369012][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1291.369621][ T32] locks held by syz.7.9427/10959: 3, on CPU#1: [ 1291.369641][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1291.369703][ T32] #1: ffff88802a46c6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1291.369772][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 1291.369841][ T32] [ 1291.369848][ T32] ============================================= [ 1291.369848][ T32] [ 1291.369867][ T32] NMI backtrace for cpu 0 [ 1291.369885][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1291.369911][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1291.369925][ T32] Call Trace: [ 1291.369934][ T32] [ 1291.369945][ T32] dump_stack_lvl+0xe8/0x150 [ 1291.369980][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1291.370078][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1291.370157][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1291.370200][ T32] sys_info+0x135/0x170 [ 1291.370232][ T32] watchdog+0xfd7/0x1030 [ 1291.370265][ T32] ? watchdog+0x1c7/0x1030 [ 1291.370298][ T32] kthread+0x38b/0x480 [ 1291.370323][ T32] ? __pfx_watchdog+0x10/0x10 [ 1291.370345][ T32] ? __pfx_kthread+0x10/0x10 [ 1291.370370][ T32] ret_from_fork+0x514/0xb70 [ 1291.370397][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1291.370421][ T32] ? __switch_to+0xc89/0x1420 [ 1291.370457][ T32] ? __pfx_kthread+0x10/0x10 [ 1291.370483][ T32] ret_from_fork_asm+0x1a/0x30 [ 1291.370537][ T32] [ 1291.370547][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1291.370636][ C1] NMI backtrace for cpu 1 [ 1291.370651][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 1291.370673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1291.370685][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1291.370713][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 a6 ba a6 03 66 0f 1f 44 00 [ 1291.370730][ C1] RSP: 0018:ffffc900001e7ab0 EFLAGS: 00000046 [ 1291.370749][ C1] RAX: 0000000000081914 RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 1291.370765][ C1] RDX: 0000000000000000 RSI: 0000000000081914 RDI: 0000000000000838 [ 1291.370777][ C1] RBP: ffffc900001e7b70 R08: 0000000000000100 R09: 0000000000000001 [ 1291.370790][ C1] R10: 0000000000000003 R11: ffffffff81754510 R12: 0000000000081914 [ 1291.370804][ C1] R13: dffffc0000000000 R14: 0000000010003402 R15: 0000000000000020 [ 1291.370818][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 1291.370834][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1291.370848][ C1] CR2: 000055854c3c5608 CR3: 00000000395d6000 CR4: 00000000003526f0 [ 1291.370866][ C1] Call Trace: [ 1291.370873][ C1] [ 1291.370881][ C1] lapic_next_event+0x11/0x20 [ 1291.370902][ C1] clockevents_program_event+0x385/0x630 [ 1291.370931][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1291.370961][ C1] ? tick_program_event+0x8f/0x120 [ 1291.370982][ C1] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 1291.371013][ C1] irqentry_exit+0x8d3/0x910 [ 1291.371036][ C1] ? trace_irq_disable+0x3b/0x140 [ 1291.371059][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1291.371080][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1291.371121][ C1] Code: f7 e8 2d 48 bb f5 f7 c3 00 02 00 00 74 05 e8 90 92 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 55 ac f5 65 48 8b 05 0c 91 ac 07 48 85 c0 74 18 5b 41 5e e9 [ 1291.371137][ C1] RSP: 0018:ffffc900001e7cc8 EFLAGS: 00000206 [ 1291.371154][ C1] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000101 [ 1291.371167][ C1] RDX: 0000000000000000 RSI: ffffffff8e414078 RDI: 0000000000000001 [ 1291.371180][ C1] RBP: 0000000000000004 R08: ffffffff907a447f R09: 1ffffffff20f488f [ 1291.371193][ C1] R10: dffffc0000000000 R11: fffffbfff20f4890 R12: 0000000000000009 [ 1291.371207][ C1] R13: 0000000000000008 R14: ffff8880b8728280 R15: 0000000000000100 [ 1291.371232][ C1] handle_softirqs+0x226/0x860 [ 1291.371260][ C1] ? run_ksoftirqd+0x36/0x60 [ 1291.371292][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1291.371319][ C1] run_ksoftirqd+0x36/0x60 [ 1291.371346][ C1] smpboot_thread_fn+0x565/0xa70 [ 1291.371375][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1291.371407][ C1] kthread+0x38b/0x480 [ 1291.371426][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1291.371452][ C1] ? __pfx_kthread+0x10/0x10 [ 1291.371471][ C1] ret_from_fork+0x514/0xb70 [ 1291.371491][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1291.371508][ C1] ? __switch_to+0xc89/0x1420 [ 1291.371536][ C1] ? __pfx_kthread+0x10/0x10 [ 1291.371555][ C1] ret_from_fork_asm+0x1a/0x30 [ 1291.371593][ C1] [ 1291.420233][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1292.778574][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1292.787715][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1292.797795][ T32] Call Trace: [ 1292.801113][ T32] [ 1292.804079][ T32] vpanic+0x56d/0xa60 [ 1292.808152][ T32] ? __pfx___schedule+0x10/0x10 [ 1292.813049][ T32] ? __pfx_vpanic+0x10/0x10 [ 1292.817616][ T32] panic+0xc5/0xd0 [ 1292.821371][ T32] ? __pfx_panic+0x10/0x10 [ 1292.825815][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1292.831300][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1292.836703][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1292.842886][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1292.849089][ T32] watchdog+0x1030/0x1030 [ 1292.853466][ T32] ? watchdog+0x1c7/0x1030 [ 1292.857933][ T32] kthread+0x38b/0x480 [ 1292.862053][ T32] ? __pfx_watchdog+0x10/0x10 [ 1292.866771][ T32] ? __pfx_kthread+0x10/0x10 [ 1292.871408][ T32] ret_from_fork+0x514/0xb70 [ 1292.876070][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1292.881222][ T32] ? __switch_to+0xc89/0x1420 [ 1292.885981][ T32] ? __pfx_kthread+0x10/0x10 [ 1292.890601][ T32] ret_from_fork_asm+0x1a/0x30 [ 1292.895427][ T32] [ 1292.898636][ T32] Kernel Offset: disabled [ 1292.902976][ T32] Rebooting in 86400 seconds..